Rujukan Laman

Privacy Policy – How We Handle Your Information

We collect, store and process personal data only as far as it's needed to run your account, verify withdrawals and keep the platform secure.

Account verificationWithdrawal checksCookie consentData retentionYour access rights
won668 Privacy Policy – How We Handle Your Information
CONTACT PATHS

How to Reach Us About Privacy Questions

If you want to review the data we hold, correct an error, request deletion or ask how we process your information, contact us through any of the channels below. Our support team will respond within two business days and guide you through the steps.

Team online

Live chat

Open the chat window in the bottom-right corner of any page and choose 'Privacy & Data' from the topic menu. An agent will join within a few minutes and can look up your records or forward your request to the data-protection team if specialist review is needed.

Email support

Send your privacy question or data request to [email protected] with your registered email address in the 'From' field so we can verify your identity. Include 'Privacy Request' in the subject line and describe what you need – data access, correction or deletion. We'll reply within 48 hours with next steps.

Account settings

Log in and visit Account → Privacy Centre to download a copy of your personal data, update marketing preferences or request account deletion. Most actions take effect immediately; deletion requests are reviewed within five business days and you'll receive email confirmation once complete.

HOW WE PROTECT YOUR DATA

Security Measures and Your Control Over Information

We encrypt personal data at rest and in transit using industry-standard TLS and AES-256. Access to customer records is restricted to authorised staff who need it to process withdrawals, investigate disputes or…

Data encryption

All sensitive fields – payment references, identity documents, phone numbers – are stored encrypted with keys rotated every 90 days. When you deposit via Touch 'n Go, GrabPay, Boost or FPX, transaction details travel over encrypted channels and we never store full card numbers or CVV codes.

Cookie policy

We use essential cookies to maintain your login session, functional cookies to remember language and layout preferences, and analytics cookies to measure page performance. You can block non-essential cookies in Account → Privacy Centre without losing access to core features; blocking essential cookies will log you out.

Account security

Two-factor authentication is optional but recommended. Enable it in Account → Security and we'll send a one-time code to your phone whenever you log in from a new device or IP address. Password resets require email confirmation and suspicious login attempts trigger automatic temporary locks.

Data retention

Active account records are kept for as long as your account remains open. When you request account deletion we close it immediately and erase personal data within 30 days, except where local law requires us to retain transaction logs for audit purposes – typically five years from the last transaction.

Access requests

You have the right to request a copy of all personal data we hold. Log in and go to Account → Privacy Centre → Download My Data; we'll generate a JSON file containing your profile, transaction history and support tickets within 24 hours and send a download link to your registered email.

Correction and deletion

If any detail is wrong – name spelling, phone number, email address – update it directly in Account Settings or contact support if the field is locked. To delete your account and all associated data, submit a deletion request in Privacy Centre; we'll confirm your identity, close the account and erase records within the retention period.

Common Questions About Your Data and Rights

Below are answers to the questions we hear most often about how we handle personal information, what rights you have and how to exercise them.

We ask for your full name, email address, phone number, date of birth and payment method details – Touch 'n Go, GrabPay, Boost or FPX account references. This information verifies your identity, processes deposits and withdrawals, and meets local legal requirements.

When you request account deletion we close it immediately and erase personal details within 30 days. Transaction records and compliance logs are retained for five years from your last transaction as required by local law, then permanently deleted.

Yes. Log in and visit Account → Privacy Centre → Download My Data. We'll generate a JSON file containing your profile, transaction history, support tickets and cookie preferences, then email a secure download link within 24 hours.

We never sell your data or share it for marketing. Payment processors – Touch 'n Go, GrabPay, Boost, FPX – receive only the details needed to clear deposits and withdrawals. We may disclose records if required by local law or court order.

Log in and go to Account → Privacy Centre → Marketing Preferences, then uncheck 'Promotional Emails'. Changes take effect immediately and you'll still receive transactional messages – deposit confirmations, withdrawal notices and security alerts – because those are account-related, not marketing.

Essential cookies maintain your login session; functional cookies remember language and layout choices; analytics cookies measure page performance. You can block functional and analytics cookies in Privacy Centre without losing core features, but blocking essential cookies will log you out.

Update most fields directly in Account Settings. If a field is locked – usually name or date of birth – contact support with proof of the correct information. To delete your account, submit a deletion request in Privacy Centre; we'll verify your identity and erase all data within 30 days.