wintoto Privacy Policy

1. Introduction

Welcome to wintoto. We operate the website located at https://wintoto.lat (the "Platform"), which provides online casino games, sports betting, and related entertainment services primarily to users based in Malaysia. wintoto is committed to protecting and respecting your privacy.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by wintoto. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

By registering an account, accessing, or using any part of the wintoto Platform, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy is to be read alongside our Terms & Conditions and Responsible Gaming guidelines, which together govern your use of wintoto.

2. Data We Collect

wintoto collects personal data from you through different means — primarily when you register an account, use our services, or contact our support team. The categories of personal data we may collect include:

• Identity Data: Full name, username, date of birth, nationality, and a copy of a government-issued identification document (e.g., Malaysian MyKad or passport) for identity verification and KYC (Know Your Customer) compliance purposes.
• Contact Data: Email address, telephone number, and residential address in Malaysia (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or other states).
• Financial Data: Bank account details, e-wallet identifiers (such as Touch n Go eWallet or Boost), and transaction history related to deposits, withdrawals, and bonus claims processed in Malaysian Ringgit (MYR/RM).
• Technical Data: IP address, browser type and version, device type and identifiers, operating system, time zone settings, and pages visited on the Platform.
• Usage Data: Information about how you use the Platform, including games played, bets placed, session durations, and interaction with promotions.
• Communications Data: Records of any correspondence you send to us, including live chat transcripts, emails, and support tickets.
• Verification Data: Results of identity verification checks, responsible gaming self-assessments, and any self-exclusion requests made through the Platform.

We do not collect any special categories of sensitive personal data (such as health information, racial or ethnic origin, or political opinions) unless you voluntarily provide such information in the context of a responsible gaming self-assessment or similar tool.

3. How We Use Your Data

wintoto uses your personal data for the following purposes, each of which is supported by a lawful basis under applicable data protection legislation:

1. Account Registration & Management: To create and maintain your wintoto account, verify your identity in compliance with anti-money laundering (AML) regulations, and ensure you meet the minimum age requirement of 21 years old.
2. Service Delivery: To provide you with access to our casino games, sportsbook, live betting, slots, and all other services available on the Platform.
3. Payment Processing: To process deposits and withdrawals via Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, and supported cryptocurrency methods (BTC, ETH, USDT).
4. Regulatory Compliance: To meet our legal and regulatory obligations, including KYC checks, AML procedures, fraud prevention, and reporting requirements imposed by applicable law.
5. Responsible Gaming: To monitor gameplay patterns, enforce responsible gaming limits, and support self-exclusion requests in accordance with our Responsible Gaming policy.
6. Customer Support: To respond to your enquiries, complaints, and support requests through our 24/7 multilingual support channels.
7. Marketing Communications: To send you promotional offers, welcome bonus details, and personalised recommendations — but only where you have given your explicit consent to receive such communications. You may opt out at any time.
8. Platform Improvement: To analyse usage trends, troubleshoot technical issues, and improve the overall performance and user experience of wintoto.
9. Security: To detect, investigate, and prevent fraudulent transactions, cheating, unauthorised access, and other illegal or harmful activities on the Platform.

4. Data Sharing & Disclosure

wintoto does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We may, however, share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: Banks and e-wallet providers (e.g., Maybank, CIMB, Touch n Go eWallet) necessary to process your financial transactions.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist in verifying your identity and screening against sanctions lists.
• Technology Partners: Cloud hosting providers, data analytics tools, and security service providers who help us operate and maintain the Platform securely.
• Game Suppliers: Software providers whose games are offered on the wintoto Platform, to the limited extent necessary for gameplay functionality and fairness auditing.
• Legal & Regulatory Authorities: Law enforcement agencies, regulatory bodies, or courts where we are legally required or permitted to disclose your data — for example, in response to a valid court order, subpoena, or to comply with applicable Malaysian law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred as part of that transaction. We will notify affected users in advance where practically possible.

Where we engage third-party processors, we ensure they are bound by contractual obligations to handle your data only as instructed by wintoto, and with security standards equivalent to our own.

5. Cookies & Tracking Technologies

wintoto uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on the Platform. Cookies are small text files stored on your device when you visit our site.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that keep you logged in and security cookies that prevent cross-site request forgery. You cannot opt out of these.
• Performance & Analytics Cookies: These help us understand how visitors interact with the Platform — which pages are most visited, where users drop off, and how long sessions last. This data is aggregated and anonymised.
• Functionality Cookies: These remember your preferences (e.g., language, currency display in MYR) to provide a more personalised experience on return visits.
• Targeting & Marketing Cookies: Used to deliver relevant promotional content. These are only activated with your consent and can be withdrawn at any time.

You can control and manage cookies through your browser settings. Note that disabling certain cookies may affect the functionality of some Platform features. For full details on managing cookies in common browsers (Chrome, Safari, Firefox, Edge), refer to your browser's help documentation.

6. Data Retention

wintoto retains your personal data for as long as your account remains active, and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in line with AML and financial regulatory requirements.
• Transaction records are retained for a minimum of seven (7) years for financial auditing and legal compliance purposes.
• Customer support communications are retained for two (2) years from the date of the last interaction.
• Marketing consent records are retained for as long as you remain subscribed, and for three (3) years after you opt out, as evidence of consent management.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

7. Security Measures

wintoto implements robust technical and organisational security measures to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure, or access. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data, including financial information and identity documents, at rest on our servers.
• Role-based access controls ensuring that only authorised wintoto personnel can access personal data, strictly on a need-to-know basis.
• Regular independent penetration testing and security audits of our Platform infrastructure.
• Automated fraud detection systems that monitor transaction patterns and flag suspicious activity in real time.
• Multi-factor authentication (MFA) options available for all wintoto user accounts.

While we take all reasonable steps to protect your data, no method of internet transmission or electronic storage is completely secure. We encourage you to use a strong, unique password for your wintoto account and to enable MFA where available.

8. Your Rights

As a user of wintoto, you have the following rights in relation to your personal data, which you may exercise at any time by contacting us at the email address provided in Section 11:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data, subject to our legal obligations to retain certain data as described in Section 6.
• Right to Restriction of Processing: You may request that we limit the way we use your personal data in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid requests within thirty (30) calendar days. In complex cases, we may extend this period by a further two months, and we will notify you accordingly.

9. Minors and Age Restriction

The wintoto Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. As part of our registration and KYC process, we verify the age and identity of all users before granting access to any real-money gaming or betting features.

If you are a parent or guardian and believe that a minor under your care has provided personal data to wintoto without your consent, please contact us immediately at the email address in Section 11. We will promptly investigate and, where confirmed, delete the data and close the account in question.

We take our responsible gaming obligations seriously. Visit our Responsible Gaming page for more information on the tools and resources available to protect vulnerable users.

10. Changes to This Privacy Policy

wintoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify registered users of any material changes by:

• Posting a notice on the wintoto Platform homepage or within your account dashboard; and/or
• Sending an email notification to the address registered with your wintoto account.

The "Last Updated" date at the top of this page will always reflect when the most recent changes were made. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of changes constitutes your acceptance of the updated Policy.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wintoto handles your personal data, please do not hesitate to reach out to our dedicated Privacy & Data Protection team:

Email: [email protected]
Response Time: We aim to respond to all privacy-related enquiries within 5 business days.
Support Hours: Our customer support team is available 24/7 via live chat on the Platform.

Please include your registered account username and a brief description of your request when contacting us, so we can assist you as efficiently as possible.