Privacy Policy — winrm
At winrm, protecting the personal data of our players is a fundamental responsibility, not a compliance formality. This Privacy Policy explains precisely what information we collect, the purposes for which it is used, how it is stored and secured, and the rights available to you as a data subject. We encourage all winrm users — whether in Kuala Lumpur, Penang, Johor Bahru, or anywhere across Malaysia — to read this document carefully before registering an account.
How winrm Protects Your Privacy
Secure Data Storage
All personal data is stored on encrypted servers with restricted access controls. Data at rest is protected by AES-256 encryption and access is limited to authorised personnel with a legitimate operational need.
No Data Sales to Third Parties
winrm does not sell, rent, or trade your personal information with any external party for commercial purposes. Data is shared only with service providers necessary for platform operation, and only under strict contractual obligations.
Your Rights Are Enforceable
As a winrm user, you hold clear rights over your personal data — including the right to access, correct, delete, or restrict its processing. All rights requests are handled within 30 days of receipt.
Industry-Standard Encryption
All data transmitted between your browser or device and the winrm platform is protected by 256-bit SSL/TLS encryption, preventing interception by unauthorised third parties during transmission.
Marketing Opt-Out Available
Marketing communications are sent only where consent has been provided. You may withdraw consent and opt out of all marketing communications at any time through your account settings or by contacting our support team.
Defined Retention Periods
winrm retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Data is securely deleted or anonymised upon expiry of the retention period.
Introduction
This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") is issued by winrm (hereinafter referred to as "winrm", "the Company", "we", "us", or "our") and applies to all personal data collected through the winrm platform, website, and associated services accessible athttps://winrm.cam.
winrm is committed to processing personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation. This Policy describes the categories of personal data we collect, the purposes for which that data is processed, the lawful bases relied upon, the circumstances in which data may be shared with third parties, and the rights available to you as a data subject.
By registering an account on the winrm platform, making a deposit, or otherwise accessing any service we provide, you acknowledge that you have read and understood this Policy. This Policy should be read in conjunction with our Terms and Conditions, which govern your use of the platform more broadly.
winrm reserves the right to update this Policy from time to time. Where material changes are made, we will notify registered users by email or via a prominent on-platform notice. The effective date displayed at the top of this document reflects the date of the most recent revision.
Definitions
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction. |
| "Data Subject" | The natural person to whom the personal data relates — in this context, a winrm registered user or platform visitor. |
| "Controller" | winrm, as the entity that determines the purposes and means of processing personal data collected through the platform. |
| "Processor" | A third party engaged by winrm to process personal data on its behalf, subject to binding data processing agreements. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and age verification process required for account registration and withdrawal processing on winrm. |
Categories of Personal Data We Collect
winrm collects personal data that is necessary for the lawful operation of the platform, fulfilment of regulatory obligations, and delivery of a safe and functional user experience. The categories of personal data collected include:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., MyKad number), copies of identity documents. |
| Contact Data | Email address, telephone number, residential address including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya), postcode, and state. |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), FX and DuitNow transaction references, cryptocurrency wallet addresses, deposit and withdrawal history, account balance. |
| Transaction Data | Details of bets placed, games played, stakes wagered, winings received, bonus activity, and payment method usage on the winrm platform. |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, session duration, referring URL, and access timestamps. |
| Usage Data | Pages visited, features accessed, navigation paths, game preferences, support interactions, and in-platform communication logs. |
| Communications Data | Records of live chat sessions, email correspondence, and support tickets submitted to the winrm customer support team. |
| Marketing Preferences | Your consent status for receiving promotional communications and your expressed preferences regarding marketing content and channels. |
winrm does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless specifically required to fulfil a responsible gambling obligation (e.g., self-exclusion requests linked to gambling-related harm) and only with your explicit consent.
How We Collect Personal Data
winrm collects personal data through the following channels and mechanisms:
- Direct Submission: Data you provide voluntarily during account registration, KYC document upload, deposit and withdrawal forms, support requests, bonus applications, and survey responses.
- Automated Technical Collection: Technical and usage data collected automatically when you access the winrm platform, via cookies, web beacons, server logs, and similar tracking technologies. See Section 11 for details on our use of cookies.
- Payment Processors: Transactional data received from payment service providers including Malaysian e-wallet operators, FPX bank partners, and cryptocurrency network data where applicable.
- Identity Verification Partners: Data received from third-party KYC and identity verification service providers engaged to confirm your identity and age eligibility in accordance with our obligations under applicable law.
- Fraud Prevention Services: Data received from third-party fraud detection and anti-money laundering (AML) screening services engaged to protect the integrity of the winrm platform and comply with regulatory requirements.
Legal Basis for Processing
winrm processes your personal data one or more of the following lawful bases, depending on the category of data and the specific processing activity concerned:
- Contractual Necessity: Processing necessary for the performance of the contract between you and winrm — including account management, payment processing, and the delivery of gaming services.
- Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC obligations, anti-money laundering (AML) legislation, and age verification requirements.
- Legitimate Interests: Processing necessary for winrm's legitimate interests in operating a secure, fraud-free platform — including fraud prevention, platform security, analytics, and system performance monitoring — where these interests are not overridden by your rights and freedoms.
- Consent: Processing carried out solely on the basis of your freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Purposes of Data Processing
winrm processes personal data for the following specific purposes:
- Account Registration and Management: To create, maintain, and administer your winrm player account, including the processing of login credentials and account settings.
- KYC and Age Verification: To verify your identity, date of birth, and eligibility to use the platform, in compliance with regulatory obligations and our strict21+ age policy.
- Payment Processing: To process deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and supported cryptocurrencies.
- Fraud Prevention and AML Compliance: To detect and prevent fraudulent activity, money laundering, and other financial crimes, and to fulfil our obligations under applicable anti-money laundering legislation.
- Responsible Gambling: To monitor gambling activity and implement responsible gambling tools including deposit limits, loss limits, session controls, and self-exclusion where appropriate.
- Customer Support: To respond to your queries, complaints, and support requests through live chat, WhatsApp, and email channels in English, Bahasa Melayu, and Mandarin Chinese.
- Platform Improvement and Analytics: To analyse usage patterns, improve platform functionality, and enhance the user experience for Malaysian players.
- Marketing Communications: To send promotional offers, bonus notifications, and relevant gaming content to users who have provided consent to receive such communications. You may opt out at any time.
- Legal and Regulatory Compliance: To fulfil record-keeping, reporting, and disclosure obligations under applicable law.
Data Sharing & Disclosure
winrm does not sell, rent, or trade your personal data to any third party. Personal data is shared with external parties only in the following limited circumstances:
- Service Providers (Processors): Third-party companies engaged to provide services on behalf of winrm, including payment processing partners, KYC verification providers, IT infrastructure and hosting providers, fraud detection services, and customer support platforms. All processors are bound by contractual obligations to process data only as directed by winrm and to maintain appropriate security standards.
- Regulatory and Legal Authorities: Where required by applicable law, court order, or regulatory directive, winrm may disclose personal data to government authorities, law enforcement agencies, financial regulators, or other competent bodies.
- AML and Fraud Investigation: Where winrm reasonably suspects that an account is being used for money laundering, terrorist financing, or other unlawful activity, we may share relevant data with appropriate investigative authorities without prior notice to the data subject, as permitted or required by law.
- Business Transfers: In the event of a corporate restructuring, acquisition, or sale of assets involving winrm, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.
Where personal data is shared with service providers outside of Malaysia, winrm takes appropriate steps to ensure that adequate safeguards are in place to protect your data in accordance with applicable data protection standards. See Section 8 for further information on international transfers.
International Data Transfers
Some of the service providers engaged by winrm may be located in jurisdictions outside Malaysia. Where personal data is transferred to or processed in a country that may not offer an equivalent level of data protection to that available in Malaysia, winrm ensures that appropriate safeguards are implemented.
Such safeguards may include, but are not limited to, contractual clauses binding the recipient to process data in accordance with standards equivalent to those observed by winrm, or the use of processors located in jurisdictions recognised as providing adequate data protection.
By using the winrm platform and creating an account, you acknowledge that your personal data may be processed in this manner in connection with the delivery of our services. If you have concerns about specific international transfers of your data, you may raise these with our support team.
Data Retention Periods
winrm retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and Identity Data | For the duration of the account relationship, and for a minimum of 5 years following account closure, in compliance with AML and regulatory requirements. |
| Transaction and Financial Data | Minimum 7 years from the date of the relevant transaction, as required under applicable financial record-keeping obligations. |
| KYC Documents | Minimum 5 years following account closure, or as required by applicable AML legislation. |
| Customer Support Records | 3 years from the date of the last interaction, unless a complaint or legal dispute requires longer retention. |
| Technical and Usage Data | Up to 24 months from the date of collection, unless required longer for security investigation purposes. |
| Marketing Consent Records | For the duration of the consent, and for 2 years following withdrawal of consent or account closure (whichever is earlier) as evidence of compliance. |
Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in accordance with winrm's data destruction procedures.
Security Measures
winrm implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- Encryption in Transit: All data transmitted between your device and the winrm platform is protected by industry-standard 256-bit SSL/TLS encryption.
- Encryption at Rest: Sensitive personal data stored on winrm's servers is encrypted using AES-256 encryption.
- Access Controls: Access to personal data is restricted to authorised personnel who have a legitimate operational need. Access is governed by role-based permissions and subject to regular review.
- Two-Factor Authentication: winrm provides two-factor authentication for account access, and encourages all users to enable this feature to protect their accounts.
- Penetration Testing and Security Audits: The winrm platform undergoes periodic security assessments conducted by qualified independent security professionals.
- Incident Response: winrm maintains documented procedures for responding to data security incidents, including assessment, containment, notification, and remediation.
While winrm takes all reasonable steps to protect your personal data, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your account credentials and for notifying winrm immediately if you suspect unauthorised access to your account.
Cookies & Tracking Technologies
winrm uses cookies and similar tracking technologies on its platform to enhance user experience, maintain session state, conduct analytics, and support security functions. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential cookies required for the platform to function correctly, including session management, authentication, and security features. These cannot be disabled without impairing platform functionality.
- Performance and Analytics Cookies: Cookies used to collect aggregated, anonymised data about how users navigate the winrm platform, enabling us to identify areas for improvement and optimise the user experience for Malaysian players.
- Functionality Cookies: Cookies that remember your preferences and settings — such as language selection and notification preferences — to personalise your experience on subsequent visits.
- Marketing Cookies: Cookies used to deliver relevant promotional content to users who have consented to receive marketing communications. These cookies may track your browsing activity across sessions to assess campaign effectiveness.
You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the winrm platform. A full cookie management interface is accessible via the platform settings menu.
Your Data Rights
As a data subject, you hold the following rights in relation to your personal data processed by winrm. These rights may be exercised by submitting a written request to our support team. winrm will respond to all verified rights requests within 30 days of receipt.
To exercise any of these rights, please contact the winrm support team via live chat or at the email address listed in Section 16. winrm may require you to verify your identity before processing a rights request. Where a request is refused, we will provide written reasons and inform you of your right to escalate the matter.
Minors & Age Policy
The winrm platform is strictly restricted to individuals aged21 years and above. winrm does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the KYC process, and accounts found to be held by individuals below the minimum age will be suspended immediately with all balances forfeited.
If you are a parent or guardian and believe that a person under 21 has created a winrm account or provided personal data to the platform, please contact our support team immediately. winrm will take prompt action to delete the account and any associated personal data upon receipt of a verified report.
21+ Only. Access to the winrm platform is exclusively for players aged 21 and above. This policy is enforced without exception across all games, betting products, and promotional activities.
Third-Party Services & External Links
The winrm platform may contain references to or integrations with third-party service providers — including payment processors such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks including Maybank, CIMB, Public Bank, and Hong Leong Bank. When you interact with these payment services, your data is processed by those providers in accordance with their own privacy policies.
winrm is not responsible for the privacy practices of third-party service providers. We recommend that you review the privacy notices of any third-party services you use in connection with your winrm account. winrm selects its service providers carefully and requires all processors to maintain data protection standards consistent with our own commitments.
Policy Amendments
winrm reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory guidance. Where amendments are material in nature, we will provide advance notice to registered users via email or a prominent on-platform notification prior to the changes taking effect.
The "Effective Date" displayed at the top of this document will be updated to reflect the date of the most recent revision. Users are encouraged to review this Policy periodically to remain informed of how their data is being processed. Continued use of the winrm platform following any amendment constitutes acceptance of the revised Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy — including requests to exercise your data rights as described in Section 12 — please contact the winrm Data Protection team through any of the following channels:
All privacy-related enquiries and rights requests will be acknowledged within 5 business days and resolved within 30 days of receipt. We are committed to handling your data responsibly and to providing transparent, timely responses to all enquiries received by Malaysian users and all others within our platform's reach.
Your Privacy, Our Responsibility🔐
If you have questions about how winrm handles your data, our support team is available24/7. Or explore our full policy documentation to understand your rights as a Malaysian player.