won99a is committed to protecting the personal data of every Malaysian member. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you hold over your information.
Summary for Malaysian Members: won99a collects personal data necessary to operate a safe and compliant gaming platform — including identity information for KYC, payment data, and gaming activity records. We do not sell your personal data to third parties. We retain data only as long as required by law or operational necessity. You have the right to access, correct, and request deletion of your personal data. This policy is aligned with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable international data protection standards.
1.1 This Privacy Policy ("Policy") describes how won99a ("we," "us," "our," or "the Platform") collects, processes, stores, and discloses personal data relating to individuals who access or use the won99a Platform, available at won99a.org ("Members," "Users," or "you").
1.2 This Policy applies to all won99a Members, including those who have registered an account, those who browse the Platform without registering, and individuals who contact won99a's customer support services. By registering for or using any won99a service, you consent to the collection and processing of your personal data as described in this Policy.
1.3 won99a is committed to handling all personal data responsibly, transparently, and in a manner consistent with the Personal Data Protection Act 2010 (PDPA) of Malaysia, the platform's licensing jurisdiction's applicable data protection laws, and internationally recognised privacy standards. This Policy may be updated periodically; the date of the most recent revision is displayed at the top of this document.
won99a collects the following categories of personal data, dependent on your level of engagement with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / passport number, photograph | Registration & KYC |
| Contact Data | Email address, phone number, residential address | Registration |
| Financial Data | Bank account details, Touch 'n Go / Boost account identifiers, FPX transaction references, deposit and withdrawal history | First transaction & ongoing |
| Gaming Activity Data | Bets placed, games played, wagering amounts, win/loss records, session duration | Ongoing use |
| Technical Data | IP address, device type, browser type and version, operating system, session tokens | Every visit |
| Usage Data | Pages visited, links clicked, features used, time spent on the Platform | Every visit |
| Communications Data | Live chat transcripts, email correspondence, WhatsApp messages with support | When you contact support |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, session time preferences | When settings are applied |
won99a does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where such data is incidentally included in KYC documentation and is necessary solely for identity verification purposes.
won99a collects personal data through the following channels:
won99a processes personal data for the following purposes:
won99a relies on the following legal bases when processing your personal data:
6.1 won99a does not sell, rent, or trade your personal data to any third party for commercial purposes.
6.2 won99a may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:
6.3 All third-party service providers engaged by won99a are required to implement appropriate technical and organisational security measures and are contractually prohibited from using personal data for any purpose other than the specific service they provide to won99a.
won99a operates with infrastructure and service partners that may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to Malaysian law, won99a ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with internationally recognised standards. Members may request information about the safeguards applied to international transfers of their data by contacting support.
8.1 won99a retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal obligations:
8.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised. Anonymised aggregate data may be retained indefinitely for statistical and business improvement purposes.
9.1 won99a uses cookies and similar tracking technologies (including web beacons and session tokens) to operate the Platform, maintain login sessions, detect fraud, and analyse usage patterns.
9.2 The following types of cookies are used on the Platform:
9.3 You may control non-essential cookie preferences through the cookie preference centre accessible from the Platform footer. Disabling analytical or marketing cookies will not prevent you from using the Platform's core functions.
Subject to applicable exemptions under the PDPA and won99a's regulatory obligations, you have the following rights with respect to your personal data held by won99a:
To exercise any of the above rights, contact won99a's data protection team via email at [email protected] or through the 24/7 live chat facility. Requests will be acknowledged within 3 business days and fulfilled within 30 days, subject to identity verification.
won99a implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
No online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to Member rights, won99a will notify affected Members and relevant regulatory authorities in accordance with applicable breach notification obligations.
The won99a Platform is strictly intended for use by individuals aged 21 years and above. won99a does not knowingly collect personal data from individuals under 21 years of age. If won99a becomes aware that personal data has been collected from an individual below the minimum age requirement, the account will be immediately closed and all associated data will be deleted in accordance with our data retention procedures. Parents or guardians who believe their child has registered on the Platform should contact won99a's support team immediately.
won99a reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform operations. Material changes will be communicated to Members via Platform notification or email to the registered address at least 14 days before taking effect. The date of the most recent revision is displayed at the top of this document. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the changes.
For any enquiries relating to this Privacy Policy, to exercise your data subject rights, or to raise a concern about how won99a handles your personal data, please contact us through the following channels:
won99a's support team serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and nationwide in English. We aim to acknowledge all data protection enquiries within 3 business days and to provide a full response within 30 calendar days of the date of receipt.
Six core commitments that govern how won99a handles every Malaysian member's personal data.
All data transmitted between your device and won99a is encrypted end-to-end using 256-bit SSL/TLS — the same standard used by Malaysia's major banks. Your credentials and financial data are never exposed in transit.
won99a does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data is used solely to operate and improve the won99a Platform for your benefit.
won99a's data handling practices are aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data we need, retain it only as long as required, and handle it with appropriate security measures throughout.
Access, correct, or request deletion of your data at any time. Won99a acknowledges all data subject requests within 3 business days and fulfils them within 30 days, subject only to legal retention obligations.
won99a collects only what is necessary for account operation, KYC compliance, payment processing, and responsible gaming. We do not harvest additional personal data beyond what serves a clear, stated purpose.
In the event of a personal data breach posing risk to members, won99a commits to notifying affected Members and relevant authorities promptly, in line with applicable breach notification obligations.
Knowing your personal data is protected is just one more reason why hundreds of thousands of Malaysian players trust won99a. Join the Platform and experience secure, fair gaming today.
🔞 Strictly 21+ only · Play responsibly · won99a.org