winmur Privacy Policy for Malaysian Users

Introduction and Scope

This Privacy Policy describes the practices that apply when an individual visits winmur, creates or uses an account, reviews casino and sports content, makes a transaction, communicates with support or uses another winmur feature. It covers information supplied directly by users and information generated through website activity.

By using winmur, you acknowledge that personal information may be processed as described in this policy. Where consent is required for a particular activity, winmur may request it separately. Refusing optional processing will not ordinarily affect essential account functions, although declining information required for security or verification may limit access to relevant services.

Information winmur May Collect

Depending on the way you use the website, winmur may process the following categories:

• Identity and profile information, including name, date of birth, nationality, username and account preferences;
• Contact details, including email address, residential address and any phone number voluntarily supplied for account purposes;
• Verification records, including identification documents, proof of address, payment ownership evidence and the outcome of age or identity checks;
• Financial and transaction data, including MYR deposits, withdrawals, bonus activity, payment method details and transaction references;
• Participation records, including casino activity, sports selections, accepted odds, account balances, limits and responsible gambling actions;
• Technical information, including IP address, browser type, operating system, device identifiers, language, access times and diagnostic records;
• Communications sent to winmur support and records of how an enquiry was managed.

How Information Is Collected

winmur may receive information directly when you enter account details, request support, set a limit, complete verification or use a payment feature. Information may also be generated automatically when you browse winmur, open a page, interact with a feature or encounter a technical error.

Transaction information may be received from payment and banking channels used for DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, cards or transfers involving Maybank, CIMB, Public Bank and Hong Leong Bank. Such records help winmur reconcile deposits, investigate failed transfers and review withdrawal ownership. Only information reasonably relevant to these functions should be processed.

Purposes of Data Processing

winmur may use personal information to:

• Create, administer, authenticate and protect user accounts;
• Confirm that a user is aged 21 or above and eligible to use relevant features;
• Process MYR deposits, withdrawals, adjustments and payment investigations;
• Display casino activity, live football markets and sports account history;
• Detect fraud, collusion, duplicate accounts, bonus abuse and security threats;
• Provide assistance and respond to account, payment or technical enquiries;
• Apply deposit limits, cooling-off periods and self-exclusion instructions;
• Maintain business records and address complaints or disputes;
• Improve winmur performance, navigation, accessibility and content relevance;
• Send permitted operational or promotional communications.

Processing may be necessary to provide a requested service, protect legitimate security interests, comply with applicable requirements or act on consent where consent is the appropriate basis.

Payments and Account Verification

winmur may require identity, age, address or payment verification before a withdrawal is completed or when account activity requires additional review. Documents must be genuine and belong to the account holder. Users should provide only the pages or details requested by winmur and should conceal unrelated information where instructed.

Payment records may include the method, amount, currency, status, date and transaction reference. winmur does not require users to disclose a card PIN, online banking password or one-time authentication code. Users should never disclose such credentials to anyone claiming to represent winmur.

Cryptocurrency transactions may create public blockchain records outside the direct control of winmur. Those records can include wallet addresses, amounts and confirmation times. Users should consider the transparent nature of blockchain systems before choosing BTC, ETH, USDT or LTC.

Cookies and Technical Information

winmur may use cookies and similar storage technologies to maintain sessions, remember preferences, support security and understand website performance. Essential cookies may be required for sign-in, navigation, transaction protection and fraud prevention. Optional technologies may be controlled where a suitable preference option is available.

Technical records help winmur identify unusual sign-in attempts, resolve display problems and understand whether pages work correctly across devices commonly used in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam. Aggregate statistics may be created where individual users are no longer reasonably identifiable.

Disclosure of Information

winmur does not treat personal information as a product for sale. Information may, however, be shared with service providers supporting secure hosting, payment processing, identity verification, fraud prevention, customer assistance and technical operations. Providers should receive only the information reasonably required for their assigned task.

winmur may also preserve or disclose information where reasonably necessary to address a legal request, protect users, investigate prohibited conduct, enforce applicable terms or defend a legitimate claim. If a business reorganisation affects responsibility for personal information, appropriate confidentiality and continuity measures should apply.

International Data Handling

Certain technical or operational providers may process information outside Malaysia. Where an international transfer occurs, winmur seeks to use suitable contractual, organisational or technical safeguards appropriate to the information and processing risk.

Privacy laws differ between jurisdictions. A transfer does not remove the protections and limitations described in this policy. winmur expects service providers to follow agreed security requirements and use information only for authorised purposes.

Information Security

winmur applies proportionate controls intended to protect personal information. Measures may include access restrictions, authentication procedures, encryption in appropriate contexts, activity logging, staff confidentiality obligations and review of unusual account events.

No online system can guarantee absolute security. Users contribute to protection by selecting a strong password, keeping credentials private, signing out on shared devices and promptly reporting suspected unauthorised access. winmur may temporarily restrict an account while a security concern is investigated.

Data Retention

winmur retains personal information for as long as reasonably necessary to provide services, complete payment reviews, maintain account security, resolve disputes and satisfy applicable record-keeping requirements. Retention periods may differ according to the type of information and the reason it was collected.

Closing an account does not require immediate deletion of every record. winmur may retain limited identity, transaction, exclusion, fraud-prevention or dispute records when there is a legitimate reason to do so. When information is no longer required, it may be securely deleted, anonymised or placed beyond routine operational use.

User Rights and Requests

Subject to applicable conditions and lawful exceptions, users may ask winmur for access to personal information, correction of inaccurate details, deletion of eligible records, restriction of certain processing or information about how data is used. Users may also withdraw consent where processing depends on consent.

winmur may request reasonable identity confirmation before acting on a privacy request. This protects account information from disclosure to an unauthorised person. A request may be limited or declined where disclosure would affect another person's rights, compromise security, conflict with an applicable obligation or prevent the preservation of a valid legal claim.

Responsible Gambling and Age Protection

winmur may process deposit limits, session limits, cooling-off requests, self-exclusion status and related communications to support responsible participation. Such records may remain restricted after account closure where retention is necessary to maintain an exclusion or prevent attempts to bypass a player-protection measure.

winmur casino-style services are intended for eligible adults aged 21 and above. If information indicates that an account may belong to an underage person, access may be suspended while the matter is reviewed. Parents and guardians should secure devices and avoid saving account credentials where younger household members can access them.

Communications and Preferences

winmur may send service communications concerning account security, payment status, changes to material terms, responsible gambling controls or support requests. These operational messages may be necessary even where a user has declined promotional content.

Promotional preferences may be changed through available account controls or by contacting winmur. A request to stop marketing may take a reasonable period to apply, and a limited suppression record may be retained to ensure the preference remains effective.

Policy Changes and Contact Us

winmur may revise this Privacy Policy when services, security practices, operational requirements or relevant standards change. The effective date will be updated when a revised version is published. Material changes may also be highlighted through appropriate website or account notices.

Questions, correction requests or privacy concerns may be directed to the winmur website email: [email protected]. This address is displayed as plain text and is not a clickable link. Please describe the request clearly, but do not include passwords, banking credentials or unnecessary sensitive information.