WinBest Privacy Policy

WinBest ("we", "us", "our", or "Platform") operates the online casino and sports betting services accessible at winbest.cam. This Privacy Policy ("Policy") describes how WinBest collects, processes, stores, shares, and protects the personal data of individuals ("User", "you", or "your") who access or register an account on the Platform.

This Policy applies to all personal data collected through the WinBest website, account registration forms, payment processes, customer support communications, and any other interaction with the WinBest Platform. It should be read alongside our Terms & Conditions and our Responsible Gambling guidelines, both of which are incorporated into our overall user agreement by reference.

By registering an Account or continuing to use the WinBest Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you must refrain from creating an Account or cease use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Controller" — WinBest, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, email address, identification number, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Subject" — the individual natural person to whom the personal data relates; in the context of this Platform, this refers to you as a registered User.
• "Third Party" — any natural person or legal entity other than the User and WinBest, including payment processors, KYC verification providers, game-content licensors, and regulatory bodies.
• "Cookies" — small text files placed on a User's device by the WinBest website for purposes including session management, security, and platform analytics.
• "KYC" — Know Your Customer verification procedures, including identity and address checks required before WinBest processes any withdrawal request.

WinBest collects personal data through several channels. The categories of data collected, along with their collection context, are summarised below:

WinBest does not intentionally collect sensitive personal data such as health records, religious beliefs, or political opinions except where specifically required by applicable law or regulatory obligation.

WinBest uses personal data collected from Users for the following defined purposes:

1. Account Management: To create, administer, and maintain your WinBest Account, including authentication, Account settings, and transaction history.
2. Identity Verification (KYC): To verify your age (21+), identity, and residential address as required by applicable anti-money-laundering and responsible-gambling obligations before processing withdrawals.
3. Payment Processing: To facilitate deposits and withdrawals through approved Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks (BTC / USDT).
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other forms of financial crime or platform abuse.
5. Responsible Gambling Compliance: To monitor gameplay patterns, enforce self-exclusion requests, apply deposit limits, and identify potential problem-gambling behaviour in accordance with our responsible gambling obligations.
6. Customer Support: To respond to your enquiries, complaints, and support requests efficiently and accurately.
7. Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities, including financial-intelligence and gaming-regulation bodies.
8. Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving the Platform's functionality, navigation, and user experience. This analysis does not involve decisions made solely on the basis of individual profiling.
9. Communications: To send you transactional communications, including Account verification emails, payment confirmations, and security alerts. Where you have provided consent, WinBest may also send you promotional communications regarding offers and new features. You may withdraw consent for promotional communications at any time.

WinBest processes personal data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are:

• Contractual Necessity: Processing required to enter into or perform our contractual obligations with you as a registered User — including Account creation, payment processing, and game services.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money-laundering legislation, KYC regulations, and responsible-gambling mandates.
• Legitimate Interests: Processing for fraud prevention, Platform security, abuse detection, and aggregated analytics, provided such interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, informed consent — in particular, for the sending of marketing or promotional communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

WinBest does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties in the following circumstances only:

1. Payment Service Providers: Financial institutions and eWallet providers (including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, and Boost) that process deposits and withdrawals on your behalf. These parties receive only the data necessary to complete the relevant transaction.
2. KYC and Identity Verification Partners: Accredited third-party identity verification service providers engaged by WinBest to carry out age and identity checks. These providers are bound by strict data-processing agreements and may not use your data for any purpose beyond that verification.
3. Gaming Content Providers: Licensed game studios and sports-data suppliers whose products are made available on the WinBest Platform. Data shared is typically limited to session identifiers and does not include full identity information.
4. Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, WinBest may disclose personal data to competent authorities. WinBest will endeavour to notify you of any such disclosure to the extent permitted by law.
5. Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by WinBest who are contractually obligated to maintain the confidentiality of any personal data they access.

WinBest uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies deployed are as follows:

WinBest does not deploy third-party advertising cookies or tracking pixels. You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform. Instructions for managing cookies are available in your browser's help documentation.

WinBest retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to the retention periods set out below or as otherwise required by applicable law:

• Account and Identity Data: Retained for the duration of your Account relationship with WinBest, and for a minimum of five (5) years following Account closure, in accordance with applicable anti-money-laundering record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) to seven (7) years following each transaction, as required by applicable financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of submission or Account closure, whichever is later.
• Customer Support Records: Retained for up to three (3) years following the resolution of each support interaction, or longer where relevant to an ongoing dispute or regulatory inquiry.
• Technical and Usage Data: Retained in anonymised or aggregated form for up to twelve (12) months for Platform analytics purposes.
• Marketing Consent Records: Retained until you withdraw consent and for a further period of two (2) years thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with WinBest's internal data disposal procedures.

WinBest implements a layered approach to information security, combining technical, administrative, and physical controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the WinBest Platform is encrypted in transit using TLS 1.2 or higher.
• Hashed Password Storage: Account passwords are stored exclusively in hashed form using industry-standard algorithms. WinBest staff cannot retrieve or view your password in plain text.
• Two-Factor Authentication: WinBest may offer or require two-factor authentication (2FA) as an additional layer of Account security, particularly for withdrawal requests.
• Access Controls: Personal data is accessible only to WinBest personnel and authorised service providers who have a documented need to access it for legitimate operational or compliance purposes. All access is logged and auditable.
• Security Monitoring: WinBest's systems are subject to ongoing security monitoring to detect and respond to intrusion attempts, unusual access patterns, and potential data breaches.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, WinBest will take prompt remedial action and notify affected Users and, where required, relevant regulatory authorities, within the timeframes mandated by applicable law.

WinBest may process or store your personal data on servers located outside Malaysia. Where personal data is transferred to service providers in other jurisdictions — including KYC verification partners, gaming content providers, or cloud infrastructure operators — WinBest takes steps to ensure that adequate data-protection safeguards are in place before the transfer occurs.

Such safeguards may include data-processing agreements that incorporate standard contractual clauses, adherence by the recipient to recognised data-protection frameworks, or other transfer mechanisms appropriate to the circumstances. Where you interact with the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location in Malaysia, your data may be transmitted to and processed in one or more of these external jurisdictions.

By using the WinBest Platform, you acknowledge and consent to these cross-border transfers occurring in the manner described above and subject to the safeguards outlined in this Policy.

Subject to applicable law, you have the following rights in respect of the personal data that WinBest holds about you:

1. Right of Access: You may request a copy of the personal data WinBest holds about you, together with information about how it is being used. WinBest will respond to verified access requests within 30 days.
2. Right to Rectification: You may request correction of any personal data that is inaccurate, incomplete, or out of date. For basic Account details, you may update certain information directly through your Account settings.
3. Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that WinBest may be required to retain certain data for legal or regulatory compliance purposes even following an erasure request.
4. Right to Restriction: You may request that WinBest restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
5. Right to Data Portability: Where WinBest processes your personal data on the basis of contract or consent, you may request that the data be provided to you in a structured, commonly used machine-readable format.
6. Right to Object: You may object to the processing of your personal data where WinBest relies on legitimate interests as its legal basis. WinBest will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
7. Withdrawal of Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact WinBest at [email protected]. WinBest may require you to verify your identity before processing a data request, to protect against fraudulent or unauthorised requests.

The WinBest Platform is strictly intended for adults aged 21 years and above. WinBest does not knowingly collect personal data from individuals under the age of 21. All Account registrations include an age-declaration step, and WinBest carries out KYC age-verification checks before processing any withdrawal request.

If WinBest becomes aware that personal data has been collected from a person under the age of 21, it will take prompt steps to delete that data and close the relevant Account. Any bets placed or deposits made by an underage individual may be voided and refunded at WinBest's discretion.

WinBest reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform features, or data-processing practices. The "Last Updated" date at the top of this page will be revised each time a material change is made.

Where changes are material — for example, where a new category of data is being collected, or where data is being shared with a new category of third party — WinBest will notify registered Users via the email address associated with their Account or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the WinBest Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and contact WinBest to request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data-subject rights, please contact the WinBest data team using the details below:

WinBest aims to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days. Where a request is particularly complex or numerous, WinBest may extend this period by up to a further 60 days, in which case you will be informed of the extension and the reasons for it.

For responsible-gambling related requests — including self-exclusion, deposit limits, or cooling-off periods — please visit our Responsible Gambling page or contact support directly. These requests are treated with priority and will be actioned as quickly as possible.