Privacy Policy wondawin

Wondawin takes seriously the trust you place in us when you register and use the platform. This Privacy Policy explains how wondawin ("we", "the platform") collects, processes, stores, and protects your personal data as a registered user or visitor to our website at https://wondawin.pro.

This policy applies to all individuals who:

• Visiting the wondawin website as either a guest or registered user.
• Registering and holding an active account on the wondawin platform.
• Using the wondawin mobile app on an Android or iOS device.
• Contacting the wondawin customer support team through any channel.

If you have any questions about how we handle your personal data after reading this policy, please contact our Data Privacy Officer using the details provided at the end of this document.

Wondawin collects your personal data through various means depending on the nature of your interaction with our platform. The following are the categories of data we collect:

Data You Provide Directly:

• Full name as stated on your identification document.
• Date of birth and demographic information for age verification purposes.
• Active email address and mobile phone number.
• Current residential address for KYC compliance.
• Copies of identification documents (MyKad) and supporting documents required for identity verification.
• Bank account details and payment method information for processing deposits and withdrawals.

Automatically Collected Data:

• Your IP address, device type, operating system, and browser version.
• In-platform activity data including game history, betting, and transaction records.
• General location information based on IP address (not precise GPS location).
• Cookie data and website tracking technologies to enhance the user experience.
• Access logs and session duration records on the platform.

Wondawin uses your personal data only for lawful and legitimate purposes. We do not process your data for any purpose beyond those stated below, except with your explicit consent:

• Account Management: Creating, verifying and managing your user account, including the required KYC process.
• Transaction Processing: Processing deposits, withdrawals and any financial transactions you make on the platform securely and accurately.
• Platform Security: Detecting and preventing fraud, hacking, money laundering and other illegal activities that could harm the platform and other users.
• Customer Support: Providing assistance and resolving complaints or enquiries you submit to the wondawin support team.
• Legal Compliance: Meeting compliance and reporting obligations to the relevant Malaysian authorities as required by law.
• Service Improvements: Analyzing usage patterns in aggregate (not individually) to improve the functionality and experience of the wondawin platform.
• Marketing Communications: Sending promotional information, bonuses and the latest offers — only to users who have consented to receive such communications.

Wondawin does not sell or disclose your personal data to third parties for their own commercial purposes. However, there are certain situations where we may need to share your data with trusted parties:

• Payment Service Providers: Required transaction information is shared with licensed payment processors such as FPX, DuitNow, and e-wallet providers to process your transactions securely.
• Identity Verification Providers: KYC data is shared with trusted third-party identity verification services to ensure the accuracy and validity of user identities.
• Game Software Providers: Required account information is shared with integrated game platform providers to give you seamless access to games.
• Authorities and Regulatory Bodies: wondawin will disclose your data to authorities, regulatory bodies, or law enforcement agencies when required by law or a valid court order.
• Auditors and Professional Advisors: Legal advisors, accountants and auditors bound by strict professional confidentiality obligations.

All third parties receiving data from wondawin are bound by data protection agreements and are required to process your data in accordance with security standards equivalent to those of wondawin.

Wondawin continuously invests in security infrastructure to protect your personal data from both internal and external threats. Key security measures we have implemented include:

• Data Encryption: All sensitive data is encrypted using AES-256 encryption standards, both in transit and at rest on our servers.
• Strict Access Controls: The principle of least privilege applies — staff may only access data necessary to carry out their specific duties.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular Penetration Testing: Security audits and penetration testing are conducted regularly by independent security experts to identify and address any vulnerabilities.
• Two-Factor Authentication: Two-factor authentication (2FA) is available and encouraged for all wondawin user accounts as an added layer of security.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. You also play an important role in keeping your account safe by using a strong password and never sharing your login credentials with anyone.

Wondawin does not retain your personal data longer than necessary for the purpose it was collected. Our retention periods are based on legitimate business needs and legal obligations:

• Active Account Data: Retained for the duration your account is active and for a defined period after account closure for compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• KYC & Identity Verification Data: Retained for the period specified by applicable regulatory requirements, typically no less than 5 years after account closure.
• Support Communication Logs: Retained for 2 years for quality control purposes and resolution of any disputes that may arise.
• Marketing Data: Retained until you withdraw consent or your account is terminated.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by wondawin:

To exercise any of the rights above, please contact the wondawin Data Privacy Officer by email at [email protected]. We will process your request within 21 business days. Please note that certain rights may be subject to applicable legal limitations.

Wondawin uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login, session management and security. They cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform so we can make meaningful improvements.
• Functional Cookies: Saving your preferences such as language, display settings and game preferences to deliver a more personalised experience.
• Analytics Cookies: Used to analyse traffic and usage patterns in aggregate for the purpose of improving the platform.

You may manage or block non-essential cookies through your browser settings. However, blocking certain cookies may affect the functionality and experience on the wondawin platform. Continued use of our platform after the cookie notice is displayed constitutes your consent to the use of essential cookies.

The wondawin platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that a child's personal data has been collected without the knowledge of a parent or legal guardian, we will immediately take the following steps:

• Deleting the relevant data from all our systems as soon as possible.
• Terminating the associated account without prior notice.
• Reporting the incident to the relevant authorities where required.

If you are a parent or guardian and believe your child has registered an account on wondawin, please contact us immediately at [email protected] so that we may take the appropriate action.

Wondawin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform service improvements.

When we make significant changes to this policy, we will:

• Updating the "Effective Date" at the top of this document.
• Posting a clear notice on the wondawin platform at least 7 days before changes take effect.
• Sending a notification to the email address registered to your account for highly significant changes.

If you have any questions, concerns, or wish to exercise your personal data rights, the wondawin privacy team is ready to assist you.

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon within the wondawin platform
• Response Time: All privacy inquiries are responded to within 5 business days; data rights requests within 21 business days.

For formal complaints that cannot be resolved through our internal channels, you have the right to submit a complaint to Malaysia Personal Data Protection Department under the Ministry of Communications and Digital.