Privacy Policy

// SECTION_01

1. Introduction

win125 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the win125 platform at win125.co. This Privacy Policy describes our data handling practices in connection with the provision of online casino, sportsbook, and gaming services to players in Malaysia and other permitted jurisdictions.

This Privacy Policy applies to all personal data collected through the win125 website, account registration process, gaming and wagering activity, customer support interactions, payment processing, and any marketing communications you receive from win125. By registering for or using the win125 platform, you acknowledge that you have read and understood this Privacy Policy.

win125 operates under an international gaming authority licence framework, which imposes mandatory obligations regarding the collection, processing, and protection of player personal data. This Privacy Policy reflects those obligations alongside applicable data protection principles.

// SECTION_02

2. Personal Data We Collect

win125 collects personal data in the following categories depending on the nature of your interaction with the Platform:

win125 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where expressly required for responsible gaming purposes (such as self-exclusion records) or as mandated by the gaming authority licence framework.

// SECTION_03

3. How win125 Uses Your Personal Data

win125 uses collected personal data for the following purposes:

• Account creation and management — to register your win125 account, verify your identity, maintain account records, and fulfil contractual obligations as set out in the Terms & Conditions.
• Payment processing — to process deposits and withdrawals via your nominated payment method (including Touch 'n Go eWallet, Boost, DuitNow, Maybank2u, CIMB Clicks), and to maintain accurate financial records.
• Regulatory and legal compliance — to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, gaming authority licence conditions, and applicable Malaysian and international law.
• Responsible gaming — to monitor gaming patterns, apply player-set limits, enforce self-exclusion, and fulfil responsible gaming obligations under the licence framework.
• Platform security and fraud prevention — to detect and investigate suspicious account activity, bonus abuse, money laundering, and other fraudulent conduct.
• Customer support — to respond to queries, resolve disputes, and provide technical assistance.
• Service improvement — to analyse usage patterns, conduct A/B testing, and improve the win125 platform experience.
• Direct marketing — to send promotional communications about win125 offers, new games, and events, where you have provided consent or where we have a legitimate interest to do so.

win125 will not use your personal data for any purpose that is incompatible with the purposes described above without notifying you and, where required, obtaining your consent.

// SECTION_04

4. Legal Basis for Processing

win125 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our contractual obligations to you as a registered win125 member, including account operation and payment processing.
• Legal obligation — processing required to comply with applicable law, gaming authority requirements, AML regulations, and KYC obligations.
• Legitimate interests — processing carried out for fraud prevention, platform security, and service improvement where our legitimate interests are not overridden by your rights and interests.
• Consent — processing for direct marketing communications, where applicable. You may withdraw consent at any time by contacting win125 support or using the unsubscribe option in any marketing communication.

// SECTION_05

5. Data Sharing and Disclosure

win125 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. win125 may share your personal data with the following categories of recipients in connection with the purposes described in this Privacy Policy:

• Game providers and technology partners — certified game studios and platform technology providers who supply games and infrastructure services to win125, subject to data processing agreements.
• Payment service providers — financial institutions, eWallet operators (including Touch 'n Go, Boost), FPX, and other payment infrastructure providers necessary to process your transactions.
• KYC and identity verification providers — third-party identity verification services used to confirm your identity in compliance with AML/KYC obligations.
• Regulatory and licensing authorities — the international gaming authority under whose licence win125 operates, and any other competent regulatory body where required by law or licence condition.
• Law enforcement — where required by a valid court order, subpoena, or applicable law, win125 may disclose personal data to law enforcement or government authorities.

All third parties with whom win125 shares personal data are contractually required to process such data only for the specified purpose and in accordance with applicable data protection standards.

// SECTION_06

6. Cookies and Tracking Technologies

The win125 platform uses cookies and similar tracking technologies to operate the site, maintain session state, detect fraud, and improve user experience. The following categories of cookies are used:

• Strictly necessary cookies — essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Performance cookies — collect anonymised data about how visitors use the Platform, used to improve site performance and navigation.
• Functional cookies — remember your preferences such as language, currency display, and game settings.
• Analytics cookies — used to analyse aggregated traffic patterns and session data to guide platform improvements. Data collected is anonymised where possible.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the win125 platform.

// SECTION_07

7. Data Retention

win125 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. Specific retention periods are as follows:

• Account and identity data — retained for the duration of your active win125 account and for a minimum of five (5) years following account closure, as required by AML and gaming authority regulations.
• Financial transaction records — retained for a minimum of seven (7) years in compliance with financial recordkeeping obligations.
• Gaming history — retained for the duration of your account and a minimum of three (3) years post-closure.
• Marketing consent records — retained until consent is withdrawn plus three (3) years for audit purposes.
• Customer support communications — retained for three (3) years from the date of last interaction.

After applicable retention periods expire, personal data is securely deleted or anonymised.

// SECTION_08

8. Data Security

win125 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the win125 platform
• Encryption at rest for sensitive personal and financial data stored on win125 servers
• One-way cryptographic hashing for account passwords — win125 staff cannot view your password in plaintext
• Role-based access controls limiting internal data access to authorised personnel only
• Regular security audits, penetration testing, and vulnerability assessments
• Incident response procedures for detection and notification of any data breach

While win125 takes all reasonable steps to protect your data, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, win125 will notify affected members and the relevant authority without undue delay, as required by applicable law.

// SECTION_09

9. Your Privacy Rights

Subject to applicable law and the conditions of the win125 gaming authority licence, you have the following rights in respect of your personal data held by win125:

• Right of access — you may request a copy of the personal data win125 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data, subject to win125's legal retention obligations.
• Right to restriction — you may request that win125 restrict the processing of your data in certain circumstances.
• Right to data portability — you may request a machine-readable copy of personal data you have provided to win125.
• Right to object — you may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact win125 customer support via live chat or at [email protected]. win125 will respond to valid requests within thirty (30) days. In some cases, we may require identity verification before processing a request.

// SECTION_10

10. Minors and Age Restrictions

The win125 platform is strictly intended for adults aged 21 and above. win125 does not knowingly collect personal data from individuals under the age of 21. If win125 becomes aware that personal data has been collected from a person under the minimum age threshold, that data will be deleted immediately and the associated account will be closed without delay.

If you believe a minor has registered or provided personal data to win125, please contact our support team immediately so that the matter can be investigated and resolved.

// SECTION_11

11. Changes to This Privacy Policy

win125 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. Where a material change is made, win125 will notify registered members via the email address on file or via a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. Your continued use of the win125 platform following any update constitutes acceptance of the revised Privacy Policy.

// SECTION_12

12. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data win125 holds about you, please contact our Data Privacy team through any of the following channels:

• 24/7 Live Chat on the win125 Platform
• Email: [email protected]

win125 aims to respond to all privacy-related enquiries within five (5) business days. For complex or sensitive requests, a response will be provided within thirty (30) calendar days in accordance with applicable data protection obligations.