When you sign up and play at Wintomic, the platform collects personal details – your name, contact information, payment data, and activity on the site – to verify your identity, process transactions, and keep your account secure. That information is used only for operating the service, meeting legal obligations under Malaysian regulations, and improving your experience; it's protected through encryption and access controls, and Wintomic does not sell your data to third parties.
Under Malaysia's Personal Data Protection Act, you have the right to access, correct, or request deletion of your personal information, and you can withdraw consent for certain uses at any time by contacting support. This policy explains exactly what data is collected, why it's necessary, how long it's kept, and the steps you can take to manage your privacy while using the platform.
Information We Collect
When you use Wintomic, we gather personal data to operate the platform, process transactions, and meet our legal obligations. Collection happens at four points: during registration, every time you deposit or withdraw funds, continuously as you navigate the site, and whenever you contact support. Each category serves a distinct purpose – identity verification, transaction auditing, fraud prevention, and service improvement – and each is subject to the retention periods and security measures described later in this policy.
Account Information
Creating an account requires your full name, date of birth, email address, phone number, residential address, and country of residence. You'll also choose a username and password, which we encrypt.
To verify your identity and comply with regulatory standards, we request government-issued identification and proof of address during registration. For larger transactions or when anti-money-laundering rules require it, we may ask for documentation showing the source of your funds.
Why we need it: This information establishes your account, confirms you meet legal age requirements, and helps us prevent fraud and unauthorized access.
Payment and Transaction Data
Every financial interaction generates a record that allows us to process payments accurately and maintain regulatory compliance.
We capture:
- The last four digits of payment cards or e-wallet account identifiers
- Transaction amounts, dates, and status updates for deposits and withdrawals
- Betting history and wagering activity
- Bonus claims and usage records
This data helps us resolve payment disputes, detect irregular patterns that might indicate fraud or money laundering, and provide the transaction audits required by financial regulators. We retain these records for the duration mandated by law, which typically extends several years beyond account closure.
Technical and Usage Data
The platform automatically logs technical information each time you visit: your IP address and approximate geolocation, device type and operating system, browser version, and session duration.
We track which pages you visit, which games you play, and how you interact with features across the site. Cookies and similar identifiers recognize your device on return visits. This data helps us:
- Secure your account by flagging login attempts from unusual locations or devices
- Detect unauthorized access patterns
- Optimize site performance by identifying slow-loading pages or confusing features
You can manage cookie preferences through your browser settings, though disabling certain tracking technologies may limit some platform features.
Communication Records
We maintain copies of every interaction you have with our support team, including live chat transcripts, email correspondence, and support ticket histories. We also record your marketing preferences and consent choices, along with any responsible gaming interactions such as deposit limit requests or self-exclusion submissions.
These records ensure we respond to your needs consistently over time, honor the contact preferences you've set, and demonstrate compliance with your responsible gaming choices. They provide a clear audit trail if disputes occur and help us improve service quality by identifying common issues.
How We Use Your Data
Wintomic collects personal information to operate the platform securely and deliver the services you've signed up for. The table below organizes these uses by purpose, showing what data supports each function and why that collection is necessary. Transparency around data use helps you understand exactly how your information protects your account, meets legal obligations, and enables the features you rely on.
| Purpose | Data used | Why it matters |
|---|---|---|
| Identity verification | Name, DOB, address, ID docs | Confirms age, residency, prevents fraud |
| Payment processing | Card, e-wallet, transaction history | Enables deposits, resolves disputes |
| Security & fraud prevention | Login, IP, device, gameplay data | Detects unauthorized access |
| Regulatory compliance | Activity logs, transactions, ID records | Required by licensing authorities |
| Customer support | Account, transaction, correspondence | Resolves issues, verifies identity |
| Marketing | Email, activity (if opted in) | Tailors offers; withdraw anytime |
Cookies and Tracking
Three types of tracking technology keep Wintomic running: essential cookies handle login sessions and transaction security, analytics cookies measure site performance and flag technical issues, while marketing cookies personalize bonus offers and track campaign reach. Essential cookies cannot be disabled – without them, the platform cannot maintain your login state or process deposits and withdrawals securely. Analytics and marketing cookies remain optional.
The cookie-preference panel appears on your first visit, or you can revisit it anytime via the "Cookie Preferences" link in the site footer. Blocking non-essential cookies preserves full account access but limits how effectively the system tailors recommendations or diagnoses issues you report to support.
Third-Party Analytics and Ads
Third-party analytics providers receive anonymized usage data – page views, click events, device type – to measure traffic patterns and session behavior. Your account balance, betting history, and payment details stay private; they never flow to these partners.
Ad networks use similar data to serve targeted promotions when you browse other sites. If you block third-party cookies at the browser level, ad-network tracking stops entirely, though first-party analytics tied to the Wintomic domain will still log basic visit counts.
Preference changes: Any change you make in the cookie-preference panel takes effect immediately and syncs across all devices where you're logged into the same account.
Data Security Measures
Wintomic employs multiple layers of technical and organizational safeguards to protect your personal information. All data transmitted between your device and the platform uses industry-standard TLS encryption, which secures information during login, deposits, withdrawals, and gameplay.
Personal and financial data stored on servers is encrypted at rest, adding a second layer of protection even in the unlikely event of unauthorized physical access to storage systems. Access to user data within the organization follows strict internal controls. Only personnel whose roles require it – such as compliance officers reviewing account verification documents or support staff resolving specific queries – can view personal information, and all access is logged and audited regularly.
Payment Data
Payment processing data is handled through secure third-party processors that maintain PCI DSS compliance, limiting the amount of sensitive financial information stored on the platform's own infrastructure. The platform continuously monitors for suspicious activity, applies security updates promptly, and maintains an incident response plan. If unusual activity is detected on your account or if a security incident affecting user data were to occur, Wintomic will notify affected users and relevant authorities in line with data protection regulations.
Your Side of Account Security
On your end, account security starts with password requirements: the platform enforces minimum complexity standards and encourages unique passwords not reused from other sites. Two-factor authentication is available and recommended, adding an extra verification step during login that significantly reduces the risk of unauthorized access even if someone else learns your password.
You can enable this feature in your account security settings. You can further protect your account by keeping your login credentials private, logging out on shared devices, and reporting any suspicious emails claiming to be from the platform to the support team.
Sharing Data with Third Parties
Wintomic shares personal information with selected external parties to deliver its services and meet regulatory obligations. The table below sets out each category of recipient, the data shared, and the specific purpose behind that disclosure.
| Third-party category | Data shared | Purpose |
|---|---|---|
| Payment processors | Name, email, amount, method | Process deposits/withdrawals |
| ID verification services | Name, DOB, ID number, address | Confirm identity, prevent fraud |
| Marketing partners | Email, communication preferences | Deliver offers you opted into |
| Legal authorities | Data relevant to the request | Comply with Malaysian law |
Payment processors and verification providers work under their own privacy policies and contractual confidentiality obligations. Wintomic does not permit these partners to use your data for unrelated purposes. Marketing partners receive only what is necessary to send the campaigns you have consented to, and you can withdraw that consent at any time through your account settings or by contacting support.
Disclosure to legal authorities happens only when required by law or formal request – Wintomic does not share data with government agencies voluntarily. The platform will notify you of any such request whenever legally possible.
New recipients: This list represents the current scope of data sharing. If new categories of recipient become necessary, the privacy policy will be updated and you will be notified through your registered email address.
Your Rights Under Malaysian Law
Malaysia's Personal Data Protection Act (PDPA) grants you enforceable rights over the information Wintomic holds about you. You can control how your data is used, correct mistakes, and make informed decisions about what the platform keeps.
| Right | What you can do | How to do it |
|---|---|---|
| Access your data | Get a copy of what we hold | Contact support, 21-day turnaround |
| Correct information | Fix wrong or outdated details | Update in account, or ask support |
| Request deletion | Delete account and data | Contact support with your request |
| Withdraw marketing consent | Stop promo emails/SMS | Unsubscribe link or account settings |
| Data portability | Get your data in portable format | Contact support |
Data Retention and Deletion
Wintomic retains personal information for specific periods determined by operational needs and legal obligations. Account data remains on our systems while your account is active and for a reasonable period afterward to support any outstanding queries or obligations. We don't keep your information indefinitely when we no longer need it for the purposes it was collected.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account information | Active account + query period | Account management |
| Transaction records | Financial compliance period | Legal obligations |
| Marketing consent | Until withdrawn | Communication preferences |
| Support correspondence | Operational review period | Service improvement |
When you withdraw marketing consent, we delete or anonymize that data promptly. Transaction and compliance records may need to be retained longer under financial regulations, even after you stop using the site. For more information about how these obligations interact with your rights, see our Terms and Conditions.
Closing Your Account and Deleting Data
If you want to close your account and request data deletion, contact our support team through the channels listed in our contact section. We'll guide you through the closure process and confirm what happens to your information.
Most account data is deleted after closure, but some records – particularly financial transactions and compliance documentation – may be archived in restricted systems to meet legal requirements. Archived data is not used for operational purposes and is held only as long as regulations require.
Copy of your data: You can request a copy of the personal information we hold about you at any time before deletion. Once data is permanently deleted, we cannot retrieve it, so make sure you have everything you need before finalizing account closure. Questions about what data you can access or how long specific records are kept are covered in the FAQ below, or reach out directly if you need clarification on your individual situation.
Policy Updates
Wintomic may update this privacy policy when legal requirements change or when we adjust how we handle your data. If we make significant changes, we'll let you know in advance.
You'll see a notification banner on your account dashboard the next time you log in, highlighting what's changed and linking to the updated policy. For major amendments that affect how we collect or use your personal information, we'll also email you at least 14 days before the new version takes effect.
Minor Updates and Disagreement
Minor updates – like clarifying existing sections or correcting contact details – may go live without prior notice. The effective date at the top of this page always reflects the latest revision.
We recommend checking back after you receive a change notification so you stay up to date on how your information is protected. If you'd like to see an older version of the policy, just ask our support team and we'll provide it.
If you disagree: If you disagree with any changes, you can close your account before the new terms take effect. Continuing to use Wintomic after an update goes live means you accept the revised policy. For questions about policy changes or to request a previous version, contact our support team.
Contact for Privacy Inquiries
If you have questions about how Wintomic handles your personal data, want to exercise any of the rights described in this policy, or need to raise a privacy concern, the site provides a dedicated support channel for these requests.
You can reach the privacy team by submitting a ticket through the Help Centre on the Wintomic platform – select "Privacy & Data Protection" as the category so your inquiry routes to the right team rather than general support. For formal data access, correction, or deletion requests, include enough detail to verify your identity (typically your registered email address and account username) so the team can process the request securely.
Postal Requests
If you prefer to send a written request by post, you can mail it to the registered office address listed in the Terms & Conditions – mark the envelope "Privacy Inquiry" to ensure it reaches the data protection team.
Postal requests naturally take longer to process than online tickets, but the team will acknowledge receipt and provide an estimated response timeline.
Response Times and Escalation
Straightforward privacy questions are usually answered within a few business days, though complex requests like full data exports or multi-account investigations require more time to complete. If your request involves clarifying how a specific piece of data was collected or used, include as much context as you can (dates, transaction IDs, the feature you were using) so the team can trace it efficiently.
If you're not satisfied with the initial response or believe your concern wasn't fully addressed, you can ask for the matter to be escalated to a senior member of the compliance team.
Data protection authority: You also have the right to lodge a complaint with your local data protection authority if you feel the site hasn't handled your data in line with applicable privacy law – the support team can provide guidance on that process if needed.
Frequently Asked Questions
Can I opt out of marketing communications?
Yes – every promotional email includes an unsubscribe link at the bottom, and you can opt out immediately through that. You can also adjust your communication preferences in your account settings or contact support to remove yourself from all marketing lists. Opting out will stop promotional messages, but you'll still receive essential account notifications like security alerts, transaction confirmations, and important policy updates.
How can I delete my personal data from Wintomic?
You can request account closure and data deletion by contacting support. The platform will verify your identity before processing the request. Some information may be retained where legally required – transaction records, for example, must be kept for regulatory and tax purposes even after account closure. You'll receive confirmation once the deletion process is complete.
How long does Wintomic keep my information?
Account and transaction data are retained for as long as your account remains active, and for a period after closure as required by financial regulations – typically several years for transaction records and identity verification documents. Marketing data is kept until you withdraw consent or the account is closed. Technical logs and session data are usually deleted within a shorter timeframe unless needed for fraud investigation or legal compliance.
Does Wintomic share my data with third parties?
Wintomic shares data only when necessary for service delivery – payment processors handle transactions, identity verification providers assist with KYC compliance, and technology partners support platform operation. These third parties are contractually bound to protect your information and use it only for their specified role. The platform does not sell your data to advertisers or unrelated companies, and sharing with regulators or law enforcement occurs only when legally required.