win4u Privacy Policy – How We Collect, Use and Protect Your Data

1.1 win4u (referred to in this Policy as "win4u", "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://win4u.vu. win4u is licensed under international gaming authority regulations and is the data controller responsible for the personal information collected through the win4u Platform.

1.2 For the purposes of this Privacy Policy, "Platform" means the win4u website, its mobile browser interface, and all services accessible therein including sportsbook, live casino, slots, and customer account management functions.

1.3 win4u serves players primarily in Malaysia and processes personal data in compliance with its licensing obligations and applicable international data protection standards. This Policy is available in English. In the event of any conflict between translated versions and this English version, this English version shall prevail.

2.1 win4u collects the following categories of personal data from players and Platform visitors:

Identity Data:

• Full legal name as it appears on government-issued identification;
• Date of birth;
• National identification number (MyKad number for Malaysian nationals) or passport number for non-nationals, collected during KYC verification;
• Photographs or scanned copies of identity documents submitted for KYC purposes.

Contact Data:

• Email address (used for account communications and, where consented, marketing);
• Mobile telephone number (used for two-factor authentication and account security alerts).

Financial Data:

• Payment method details sufficient to process deposits and withdrawals, including e-wallet identifiers (Touch n Go eWallet, Boost, GrabPay) and bank account details for bank transfer transactions;
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references;
• Account Balance at any given time.

Technical & Usage Data:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Session duration, pages visited, game titles accessed, and bet history;
• Login timestamps and device identifiers.

Communications Data: Records of communications between you and win4u support staff via live chat, email, or any other channel.

3.1 Directly from you: Data you provide during account registration (name, email, date of birth, phone number); data you provide during the KYC process (identity documents); data generated by your transactions (deposits, withdrawals, bets); data you provide when contacting support.

3.2 Automatically through Platform use: Technical data is collected automatically when you access the win4u Platform, including IP address, device identifiers, browser data, session data, and clickstream information, using cookies and similar tracking technologies as described in Section 7.

3.3 From third parties: win4u may receive identity verification data from third-party KYC service providers engaged to assist in verifying player identity documents. win4u may also receive fraud-indicator data from payment processors and anti-fraud service providers.

4.1 win4u processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and maintain your Account, process bets, and facilitate deposits and withdrawals in accordance with the win4u Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and other obligations imposed by win4u's international gaming authority license.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. Consent may be withdrawn at any time.

5.1 win4u uses collected personal data for the following purposes:

• To create, verify, and maintain your win4u Account;
• To process deposits and withdrawals and maintain accurate transaction records;
• To settle bets and casino game outcomes and maintain betting history;
• To verify your identity for KYC compliance purposes;
• To detect, investigate, and prevent fraudulent activity, money laundering, and breaches of the Terms & Conditions;
• To send transactional communications including account confirmations, security alerts, and transaction receipts to your registered email address;
• To send promotional and marketing communications where you have provided consent;
• To respond to your support enquiries and resolve disputes;
• To analyse Platform usage patterns for product development and service improvement purposes;
• To comply with regulatory reporting obligations under win4u's international gaming authority license.

5.2 win4u does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human review.

6.1 win4u does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Service providers: Third-party vendors who provide services to win4u including payment processing, identity verification, fraud detection, cloud hosting, and analytics. All such providers are contractually bound to process data only on win4u's instructions and to implement appropriate security measures.
• Regulatory and licensing authorities: win4u's international gaming authority licensing body and other competent regulatory authorities, where disclosure is required by law or as a condition of maintaining our license.
• Law enforcement: Government agencies, law enforcement bodies, or courts where win4u is legally compelled to disclose data by subpoena, court order, or equivalent legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

6.2 Where data is shared with service providers based outside Malaysia or the licensing jurisdiction, win4u implements appropriate safeguards including data processing agreements with standard contractual clauses or equivalent protections.

7.1 win4u uses cookies and similar technologies (web beacons, local storage) on the Platform to provide functionality, maintain session state, and analyse usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing identifiers. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game display preferences. Disabling these may reduce Platform functionality.
• Analytics cookies: Collect anonymised data about how players navigate the Platform to help win4u improve the user experience. Used with your consent.
• Marketing cookies: Used to track the effectiveness of promotional campaigns and personalise relevant offers to consenting players. Used with your consent.

7.2 You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to use parts of the Platform. Consent to non-essential cookies may be withdrawn at any time by adjusting your browser settings or the cookie preference panel on the Platform.

8.1 win4u retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Account and identity data: Retained for the duration of the Account and for a period of five (5) years following permanent account closure, in compliance with AML regulatory retention requirements.
• Transaction records: Retained for five (5) years from the date of the transaction in compliance with financial record-keeping obligations under win4u's licensing framework.
• Support communications: Retained for three (3) years from the date of the communication, or for the duration of any unresolved dispute.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, then anonymised for aggregate analysis purposes.
• Marketing consent records: Retained until consent is withdrawn and for a period of two (2) years thereafter as evidence of consent.

8.2 After applicable retention periods expire, personal data is securely deleted or irreversibly anonymised. win4u conducts periodic data audits to ensure retention schedules are observed.

9.1 win4u implements technical and organisational security measures commensurate with the sensitivity of personal data processed, including:

• TLS 1.3 encryption for all data in transit between the Platform and users' devices;
• AES-256 encryption for sensitive data stored at rest;
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication required for all administrative access to systems holding personal data;
• Incident response procedures for detecting, containing, and reporting data security incidents in accordance with regulatory requirements.

9.2 In the event of a personal data breach that poses a risk to affected individuals, win4u will notify the relevant regulatory authority within the timeframe required by applicable regulations and will communicate with affected players as appropriate.

9.3 Notwithstanding win4u's security measures, no internet transmission or electronic storage system is completely secure. Players are responsible for maintaining the security of their own Account credentials.

10.1 Subject to applicable law and regulatory restrictions, you have the following rights in respect of your personal data held by win4u:

• Right of access: You may request a copy of the personal data win4u holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For account profile data, many corrections can be made directly via your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to restriction: You may request that win4u restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10.2 To exercise any of the above rights, contact the win4u data team via the support live chat on the Platform or by email to [email protected]. win4u will respond within 30 calendar days of receiving a verifiable request. Requests may require identity verification before they can be fulfilled.

10.3 If you are not satisfied with win4u's response to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

11.1 win4u does not knowingly collect personal data from persons under the age of 21. The win4u Platform is strictly for adults aged 21 and above. Accounts found to belong to persons under 21 will be closed immediately and any associated personal data deleted, subject to any legally required retention obligations.

11.2 If you believe that a minor has registered an Account on the win4u Platform, please notify us immediately via the support live chat so that the account can be reviewed and action taken without delay.

12.1 win4u's infrastructure and some of its third-party service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, win4u implements appropriate safeguards to ensure an equivalent level of protection, including:

• Data processing agreements incorporating standard contractual clauses or equivalent protections approved by the relevant regulatory authority;
• Limiting international transfers to jurisdictions with adequate data protection frameworks or those covered by win4u's contractual safeguards;
• Regular review of third-party data processors to ensure ongoing compliance with contractual data protection obligations.

12.2 Further information about the specific safeguards applied to international transfers of your personal data is available upon written request to the win4u data team.

13.1 win4u will only send promotional emails, bonus notifications, and other marketing communications to players who have provided explicit consent to receive them. Consent is requested during registration and can be updated at any time via your account notification settings or by contacting support.

13.2 Transactional communications — including account security alerts, deposit confirmations, withdrawal notifications, and bet settlement results — are sent as a necessary part of the service and do not require separate marketing consent.

13.3 To opt out of marketing communications at any time, update your notification preferences in account settings or contact the win4u support team. Opt-out requests are processed within five (5) business days.

13.4 Players who are subject to a self-exclusion period will not receive any promotional communications during the exclusion period. win4u suppresses marketing communications to self-excluded accounts immediately upon self-exclusion taking effect.

14.1 win4u may update this Privacy Policy from time to time to reflect changes in our data processing practices, service offerings, or applicable regulations. The "Last Updated" date at the top of this page will be revised accordingly.

14.2 Where changes are material, win4u will notify registered players by email to their registered address or via a prominent notice on the Platform before the revised Policy takes effect. Continued use of the Platform after notification constitutes acceptance of the revised Policy.

14.3 We encourage you to review this Privacy Policy periodically. The current version is always available at https://win4u.vu/privacy-policy.

15.1 If you have questions, concerns, or requests relating to this Privacy Policy or win4u's handling of your personal data, please contact us via:

• Live chat: Available 24/7 via the win4u Platform support function.
• Email: [email protected] — please include "Privacy Request" in the subject line.

15.2 win4u aims to respond to all privacy-related enquiries within ten (10) business days and to resolve formal data rights requests within thirty (30) calendar days of receiving a verifiable request.

15.3 If you are not satisfied with win4u's handling of your personal data or our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction, or to the dispute resolution mechanism provided by win4u's international gaming authority licensing body.