Privacy Policy

This Privacy Policy ("Policy") is issued by win4u ("win4u", "we", "us", "the Platform", "the Operator") and applies to all personal data collected, processed, and stored in connection with your use of the win4u website at https://win4u.cam and all associated services (collectively, "the Service").

win4u is an online entertainment platform offering casino games, sports betting, live dealer tables, and related gambling products to eligible players, principally in Malaysia. We operate with a deep respect for the privacy of every player who entrusts us with their personal information, and we are committed to handling that information transparently, lawfully, and securely.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement between you and win4u. By registering a win4u account or continuing to use the Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — win4u, being the entity that determines the purposes and means of processing personal data collected through the Service.
• "Data Processor" — any third party that processes personal data on behalf of win4u pursuant to a written data processing agreement.
• "KYC Data" — identity and age verification documents (such as a Malaysian MyKad, passport, or driving licence) collected for the purpose of Know Your Customer compliance.
• "Transaction Data" — records of all deposits, withdrawals, wagers, bonus credits, and refunds associated with a Player's account.
• "Device Data" — technical information about the device used to access the Service, including IP address, browser type, operating system, and device identifiers.
• "Cookie" — a small text file placed on your device by the win4u website for the purposes described in Section 06.

win4u collects personal data through three primary channels: information you provide directly, information generated through your use of the Service, and information received from third-party service providers (such as payment processors and identity verification services). The categories of data collected are set out in the table below.

win4u does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly required by law or to fulfil responsible gambling obligations (for example, self-exclusion records maintained under our Responsible Gambling Policy).

win4u processes personal data only where a valid legal basis exists. The primary purposes for which we process your data, together with the corresponding legal basis, are set out below.

• Account Management and Service Delivery: To create and maintain your win4u account, verify your identity and age (KYC), process deposits and withdrawals in MYR via supported Malaysian payment methods (including Maybank2u, CIMB Clicks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Public Bank, and Hong Leong Connect), and provide access to the full game library. Legal basis: Performance of contract.
• Regulatory and Legal Compliance: To meet our obligations under applicable anti-money laundering (AML) laws, counter-terrorism financing (CTF) requirements, and responsible gambling regulations — including maintaining records of player activity, processing self-exclusion requests, and reporting suspicious transactions to relevant authorities. Legal basis: Legal obligation.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent account activity, bonus abuse, identity theft, chargeback fraud, and other prohibited conduct described in our Terms & Conditions. Legal basis: Legitimate interests.
• Responsible Gambling: To monitor gaming behaviour for patterns indicative of problem gambling, to enforce deposit limits, loss limits, and self-exclusion elections, and to facilitate access to responsible gambling support. Legal basis: Legal obligation and legitimate interests.
• Customer Support: To respond to enquiries, resolve disputes, process complaints, and maintain records of all communications for quality assurance and audit purposes. Legal basis: Performance of contract and legitimate interests.
• Marketing Communications: To send promotional offers, bonus notifications, game launch announcements, and personalised recommendations — but only where you have provided explicit consent or where permitted under applicable law. You may withdraw consent or opt out at any time via your account settings or by contacting support. Legal basis: Consent.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving platform performance, game selection, user experience, and the overall quality of the Service. Legal basis: Legitimate interests.

win4u does not sell, rent, or trade your personal data to third parties for commercial purposes. Data may be shared with third parties only in the circumstances described below, and subject to appropriate contractual safeguards in every case.

• Payment Service Providers: Financial data is shared with regulated payment processors (such as FPX operators, DuitNow settlement networks, and e-wallet providers including Touch 'n Go eWallet, Boost, and GrabPay) strictly to the extent necessary to process your transactions.
• Identity Verification Providers: KYC documents and identity data are shared with licensed identity verification service providers for the sole purpose of verifying your age and identity in compliance with applicable regulations.
• Fraud Detection and AML Service Providers: Transaction data and device data may be shared with specialist fraud detection and AML screening providers to protect the integrity of the platform.
• Regulatory and Law Enforcement Authorities: win4u is legally required to disclose certain information to competent regulatory authorities and law enforcement agencies upon lawful request. All such disclosures are made in strict compliance with applicable law.
• Technology and Infrastructure Providers: Data may be processed by win4u's cloud hosting, database management, and IT security service providers, all of whom are contractually bound to process data only on win4u's written instructions and to maintain appropriate technical and organisational security measures.
• Group Companies: Data may be shared within the win4u corporate group for internal administrative purposes, subject to the same data protection standards described in this Policy.

The win4u website uses cookies and similar tracking technologies to operate core platform functions, improve user experience, and — with your consent — to analyse usage patterns and serve relevant content. The categories of cookies we use are described below.

• Strictly Necessary Cookies: These cookies are essential for the operation of the win4u platform. They enable functions such as user authentication, session management, security token validation, and load balancing. These cookies cannot be disabled without impairing the functionality of the Service.
• Functional Cookies: These cookies remember your preferences — such as language settings, currency display (MYR), and preferred game lobby view — to provide a more personalised and convenient experience on return visits.
• Analytics Cookies: With your consent, win4u uses analytics technologies to collect aggregated, anonymised data about how players navigate the platform. This data is used solely to improve the user interface, game availability, and overall Service quality. No individual player is identified in analytics reporting.
• Security and Fraud Prevention Cookies: These cookies help win4u detect unusual access patterns, bot activity, and potential fraud — protecting both the platform and individual player accounts.

You can manage or withdraw cookie consent at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the win4u platform. win4u does not use third-party advertising or cross-site tracking cookies.

win4u implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the win4u platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Two-Factor Authentication (2FA): Players are strongly encouraged — and in certain circumstances required — to enable 2FA to protect their account against unauthorised access.
• Data Encryption at Rest: Sensitive personal data (including KYC documents and financial records) is encrypted at rest using AES-256 encryption on win4u's servers.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All win4u staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Intrusion Detection and Monitoring: win4u's infrastructure is monitored continuously for security anomalies, and regular penetration testing is conducted by independent security professionals.
• Incident Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, win4u will notify affected individuals and relevant authorities within the timeframes prescribed by applicable law.

win4u retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The principal retention periods applicable to each category of data are set out below.

• Account and Identity Data: Retained for the duration of your active account and for a period of five (5) years following account closure, to comply with AML record-keeping obligations and to facilitate the resolution of any outstanding disputes.
• Transaction and Financial Data: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
• KYC Documents: Retained for five (5) years following account closure or the date of the most recent verification, whichever is later.
• Self-Exclusion and Responsible Gambling Records: Retained for the duration of any applicable exclusion period plus five (5) years thereafter, to prevent re-registration by excluded players.
• Communication and Support Records: Retained for three (3) years from the date of the last communication, or longer where relevant to an ongoing dispute or investigation.
• Marketing Preference Data: Retained until you withdraw consent or opt out, plus a short additional period to process the opt-out request and update suppression lists.

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for analytical and reporting purposes.

As a data subject, you hold the following rights in relation to the personal data that win4u holds about you. To exercise any of these rights, please contact us using the details set out in Section 13. win4u will respond to all valid requests within 30 calendar days, or notify you if additional time is required for complex or multiple requests.

win4u's Service is strictly intended for adults aged 21 years and above. win4u does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

All accounts are subject to age verification through our KYC process. Any account found to belong to an individual under the age of 21 will be immediately suspended, all activity voided, and any remaining balance returned to the deposit source. Associated personal data will be deleted in accordance with applicable legal requirements.

Some of win4u's third-party service providers (including cloud infrastructure, fraud detection, and identity verification providers) may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, win4u will implement appropriate safeguards — such as standard contractual clauses, binding corporate rules, or other recognised transfer mechanisms — to ensure that your data receives a comparable level of protection to that afforded under Malaysian personal data protection principles.

win4u will not transfer your personal data to any jurisdiction designated as presenting an unacceptable risk for data subjects, without first obtaining your explicit consent or implementing enhanced contractual safeguards approved by the relevant competent authority.

win4u may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Service. The date of the most recent revision is displayed at the top of this document.

Where amendments are material — for example, a change in the categories of data collected, a new sharing arrangement with a third party, or a change to your rights — win4u will notify registered players by email at least 14 calendar days before the changes take effect. Non-material amendments (including typographical corrections and minor clarifications) take effect immediately upon publication.

Your continued use of the Service after the effective date of any material amendment constitutes your acceptance of the revised Policy. If you do not agree with any amendment, please contact us to discuss your options or to close your account in accordance with our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the way win4u processes your personal data — including requests to exercise any of the data rights described in Section 09 — please contact our Data Protection team through the following channel:

If you are not satisfied with win4u's response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. win4u will cooperate fully with any such regulatory process.