Privacy Policy winrm8 — Our Commitment to Protecting Your Data

1Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes how winrm8 ("We", "Platform") collects, uses, discloses, stores and protects your personal information when you use the winrm8.pro website, our mobile app and all related services.

This Policy applies to all users who interact with the winrm8 platform, including website visitors, individuals who register an account, active members and former members whose data is still retained in accordance with legal requirements. By using the winrm8 platform, you agree to the data protection practices set out in this Policy.

This Policy should be read together with Terms and Conditions winrm8, which forms part of the overall agreement between you and us. In the event of any conflict between this Policy and the Terms and Conditions, this Privacy Policy shall take precedence in matters relating to personal data protection.

2Types of Personal Data We Collect

Winrm8 only collects data that is strictly necessary to deliver a safe, high-quality service. The following are the categories of data we collect:

2.1 Identity Data

• Full name as per official identification document
• Malaysia Identity Card number (MyKad) or passport number
• Date of birth and gender
• Photo of identity document (for KYC process)
• Selfie or facial photo (if requested for additional verification)

2.2 Contact Data

• Active Malaysia phone number
• Email address
• Current residential address (if required for verification)

2.3 Financial Data

• Bank account number or registered bank name for withdrawal
• Associated e-Wallet account number (TNG, Boost, GrabPay)
• Deposit and withdrawal transaction records
• Wagering and gaming activity history

2.4 Technical & Usage Data

• Device IP address at login
• Device type, operating system and web browser version
• Access time and session duration logs
• Cookie data and session identifiers
• Pages visited and actions taken within the platform

3How We Collect Your Data

Winrm8 collects your personal data through the following methods:

3.1 Directly from You

Data is collected directly when you register a new account, complete the identity verification (KYC) process, make a deposit or withdrawal, contact our customer support team, or fill in any form on the platform.

3.2 Automatically

When you browse the winrm8 website or use the winrm8 app, our systems automatically collect technical data such as IP address, device type, log records and cookie data. This automatic collection is essential for account security and detection of suspicious activity.

3.3 From Trusted Third Parties

In some cases, we receive additional information from third-party identity verification service providers used in our KYC process, as well as from payment providers during the processing of your financial transactions. All such third parties are bound by strict confidentiality agreements with winrm8.

4How We Use Your Personal Data

Winrm8 uses your personal data only for legitimate and necessary purposes. The table below outlines the primary purposes for which your data is used:

5Data Sharing and Disclosure

Winrm8 does not sell, rent or trade your personal data. However, we may share data in limited circumstances as follows:

5.1 Trusted Service Providers

We share necessary data with third-party service providers who assist us in operating the platform, including payment processing providers (FPX, DuitNow, TNG), KYC verification platforms, cloud infrastructure providers and analytics services. All such parties are bound by strict data processing agreements and may only use your data for purposes authorised by us.

5.2 Legal Requirements

Winrm8 may disclose your data to law enforcement agencies, regulatory bodies or courts when required by applicable Malaysian law, a valid court order, or where such disclosure is necessary to protect the rights, property or safety of winrm8, our members or the public.

5.3 Business Transfer

In the event of an acquisition, merger or sale of winrm8's business assets, users' personal data may be transferred to the receiving entity as part of that business transaction. We will notify you before your data becomes subject to a different privacy policy.

6Data Security Measures

Winrm8 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• Data encryption in transit — all communications between your device and our servers use the TLS 1.3 protocol with AES-256 encryption.
• Data encryption at rest — sensitive data such as banking information and KYC documents is stored in encrypted format on our servers.
• Multi-layered access control — only authorised personnel with a legitimate business need may access user data, and all access is recorded in an audit log.
• Two-factor authentication (2FA) — all internal staff accounts with access to user data are required to use 2FA.
• Regular security audits — the winrm8 platform undergoes regular penetration testing and security audits conducted by independent security experts.
• Real-time threat monitoring — our automated monitoring system detects and responds to suspicious activity around the clock.

7Data Retention Period

Winrm8 retains your personal data for as long as necessary to fulfil the purposes set out in this Policy, meet legal obligations or resolve any disputes:

• Active account data — retained for as long as your account remains active and at least 5 years after account closure for anti-money laundering compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial reporting and taxation.
• Customer support communication logs — retained for 3 years from the date of last interaction.
• Technical data and access logs — retained for 12 months for security and fraud detection purposes.
• KYC Documents — retained for the duration the account is active and a minimum of 5 years after account closure.

Once the retention period expires, data will be securely deleted or anonymised in accordance with winrm8's internal procedures.

8Your Rights Regarding Personal Data

As a winrm8 user subject to Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our data protection team via Live Chat on the platform or email us at [email protected]. We will verify your identity before processing any data request.

9Cookies, Tracking and Similar Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the winrm8 website. Cookies help us recognise you on future visits, save your preferences and improve your overall user experience.

9.2 Types of Cookies We Use

• Essential Cookies — required for the platform to function properly, including login session management and security. These cookies cannot be disabled.
• Performance Cookies — collects anonymous information about how you use the platform to help us improve our services.
• Functional Cookies — stores your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies — helps us understand platform usage patterns for continuous improvement purposes.

9.3 Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the winrm8 platform. For a complete guide to managing cookies in your browser, please refer to your browser's documentation.

10Cross-Border Data Transfer

Your personal data is primarily stored and processed on servers located in the Asia region. In some circumstances, data may be processed by third-party service providers operating in other countries. When this occurs, winrm8 ensures that such data transfers are protected by appropriate safeguards, including standard data processing agreements and vendor security assessments.

Winrm8 only works with service providers that comply with data protection standards equivalent to or higher than Malaysia's PDPA. You may contact us for more information about the data transfer mechanisms we use.

11Minor Protection

The winrm8 platform is for individuals aged 18 and above only. We do not intentionally collect or process personal data from minors. If we discover that a child's personal data has been collected without our knowledge, we will immediately delete that data and close the associated account.

If you become aware that a minor has registered an account on the winrm8 platform, please notify us immediately via customer support so that prompt action can be taken.

12Contacting Us About Privacy

If you have any questions, concerns or complaints regarding how we handle your personal data, or if you wish to exercise any of your data protection rights, please contact us via:

• Live Chat — available 24/7 on the winrm8 platform for immediate assistance
• Data Protection Email — [email protected] (response within 3 working days)

We are committed to addressing all complaints seriously and taking appropriate action within a reasonable timeframe. If you are not satisfied with our response, you have the right to refer your complaint to the Malaysia Personal Data Protection Department or the relevant regulatory authority.

Winrm8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Any material changes will be communicated to you via in-platform notification or email at least 14 days before they take effect. Your continued use of the winrm8 platform after the effective date of any changes constitutes your acceptance of the updated Policy.