Your privacy is our priority. This policy clearly explains how winner21 collects, processes, stores, and protects your personal data as a platform member in Malaysia.
This winner21 Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the winner21 platform, you consent to the processing of your personal data as described in this document. You may contact us at any time with privacy-related enquiries.
Winner21 ("we", "platform", or "winner21") values the privacy of every member using our services in Malaysia. This Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal information when you access or use the winner21.my platform.
This document applies to all users of the winner21 platform, including registered members, website visitors, and anyone who interacts with our services — whether through the website, mobile app, or any other communication channel provided by winner21.
By registering a winner21 account, making a deposit, placing a bet, or simply browsing our website, you acknowledge that you have read and understood this privacy policy. If you disagree with any part of this policy, please stop using the winner21 platform and contact us to close your account.
We are committed to ensuring your personal data is handled responsibly, securely, and in accordance with applicable Malaysian law, particularly Personal Data Protection Act 2010 (PDPA).
Winner21 collects various types of personal data depending on how you interact with our platform. This data is collected directly from you or automatically through your use of the platform.
Data you provide directly:
Automatically collected data:
Winner21 does not store full credit or debit card details. All financial transactions are processed through secure payment gateways such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, all of which comply with international security standards.
| Data Category | Data Type | Primary Purpose |
|---|---|---|
| Identity | Name, IC number, date of birth | Identity verification (KYC), legal compliance |
| Contact | Email address, phone number | Communications, notifications, customer support |
| Financial | Bank details, e-wallet | Processing deposits and withdrawals |
| Technical | IP address, device, access logs | Security, fraud detection, analytics |
| Transactions | Betting history, deposits | Services, responsible gaming, audits |
Winner21 uses collected personal data solely for legitimate, clearly stated purposes. We will not use your data for any other purpose without first obtaining your consent.
The primary purposes for which winner21 uses your personal data are:
Winner21 will not use your personal data for third-party marketing purposes without your explicit consent. You may withdraw your marketing consent at any time through your account settings or by contacting our support team.
Winner21 respects your privacy and does not sell members' personal data to any third party for commercial purposes. However, there are specific circumstances in which winner21 may need to share your data with the following parties:
All third parties working with winner21 are required to uphold data protection standards equivalent to or exceeding Malaysia's PDPA requirements. We are not responsible for the privacy practices of third parties operating outside winner21's control.
All data-sharing arrangements with third parties are governed by non-disclosure agreements (NDAs) and strict data processing terms to ensure your data is handled securely.
Winner21 continually invests in security infrastructure to keep your personal data safe at all times. We employ multiple layers of technical and operational protection to safeguard the integrity of our members' data.
Key security measures implemented by winner21 include:
While we implement comprehensive protections, no system can guarantee absolute security. In the event of a data breach that affects your rights or freedoms, winner21 will notify you within a reasonable timeframe in accordance with Malaysia's PDPA requirements.
Winner21 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit winner21.my.
Types of cookies used by winner21:
You can manage or disable cookies through your web browser settings at any time. Please note that disabling essential cookies may affect the functionality of the winner21 platform.
Winner21 uses session cookies that expire when you close your browser, and persistent cookies that remain for a set period. All persistent cookies have a defined expiry date and will not be stored indefinitely.
As a winner21 member residing in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). winner21 is committed to making it easy for you to exercise these rights.
You have the right to request a copy of the personal data we hold about you at any time.
You may request winner21 to correct any personal data that is inaccurate or out of date.
You may withdraw your consent to marketing or specific data processing at any time.
You may object to the processing of your data for certain purposes, including direct marketing.
Once your account is closed, you may request deletion of your personal data, subject to applicable legal obligations.
You may request your data in a structured, machine-readable format.
To exercise any of the rights above, please submit a written request to support@winner21.my with the subject line "PDPA Rights Request". winner21 will process your request within 21 calendar days as stipulated by Malaysia's PDPA.
Winner21 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Active account data | For the duration of active account | Service delivery |
| Financial transaction records | 7 years after transaction | AMLA, LHDN Malaysia |
| KYC documents | 5 years after account closure | PDPA, AMLA Malaysia |
| Communication logs | 2 years | Dispute resolution |
| Analytics data | 26 months (aggregated) | Service improvement |
| Marketing data | Until consent is withdrawn | Member consent |
Once the retention period has ended, winner21 will securely delete or anonymise your personal data using methods that meet industry standards.
The winner21 platform may contain links to third-party websites or services. winner21's Privacy Policy does not apply to those external sites or services. We are not responsible for the privacy practices or content of any third-party websites.
We recommend reading the privacy policy of every website you visit. The presence of a link on the winner21 platform does not imply our endorsement or approval of that site's privacy practices.
Payment providers including Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay maintain their own privacy policies. When you make a payment through their platforms, your data is subject to the respective provider's privacy policy.
Winner21 is a betting platform exclusively for adult users aged 18 years and above. We do not knowingly collect, store, or process personal data of individuals under the age of 18.
All winner21 account registrations require age verification through the KYC process. Should we discover that personal data of a minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that data and close the associated account.
If you believe a minor in your care has registered for or used the winner21 platform, please contact us immediately at support@winner21.my and we will address the matter with the highest priority.
Winner21 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new Malaysian legal requirements, or improvements in how we protect member privacy.
When significant amendments are made to this Privacy Policy, winner21 will:
Your continued use of the winner21 platform after any amendment takes effect will be considered acceptance of the updated Privacy Policy. If you do not agree, you have the right to close your account and request deletion of your personal data.
If you have any questions, concerns, or requests regarding winner21's Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist.
Support@winner21.my — Subject: "PDPA Privacy Inquiry"
Click the chat icon in the bottom-right corner of the winner21 platform for an immediate response.
PDPA requests are processed within 21 days. General inquiries are responded to within 12 hours.
We do more than simply comply with the law — we genuinely believe that strong privacy is the foundation of trust between winner21 and every one of our members in Malaysia.
All data transmitted between your device and winner21's servers is encrypted using 256-bit SSL technology — the same standard used by major Malaysian banks such as Maybank and CIMB.
Winner21 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). All collection, storage, and use of members' personal data is carried out in accordance with applicable local legislation.
Winner21 members have full control over their privacy settings directly from within their account. You can manage communication preferences, cookie settings, and data permissions with ease — no need to contact support.
Winner21 has never sold and will never sell member personal data to advertisers or third-party data brokers. Your data is used solely to enhance your experience on the winner21 platform.
All winner21 deposit and withdrawal transactions are processed through recognised Malaysian payment gateways including DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, all compliant with PCI-DSS standards.
Winner21 conducts comprehensive security audits every quarter by independent cybersecurity firms. Audit findings help us identify and address any vulnerabilities before they become issues.