Privacy Policy winrm7 — Member Data Protection

1. Introduction & Scope of This Policy

Clause 1.0

This Privacy Policy ("Policy") describes how winrm7 ("Platform", "we") collects, processes, stores and protects your personal information when you use the winrm7.pro website and all related services. This Policy applies to all registered members, website visitors and anyone who interacts with our platform.

By registering an account or using the winrm7 platform, you agree to the collection and use of data as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to close your account and delete your data.

2. Information We Collect

Clause 2.0

Winrm7 collects personal information in several ways depending on how you interact with our platform. The following are the categories of data we collect and their purposes:

2.1 Account Registration Information

When you register a winrm7 account, we collect:

• Full name as shown on your identity document
• Active phone number (for OTP verification and support communications)
• A valid and active email address
• Date of birth (for age verification — you must be 18 years of age or older)
• Preferred username and encrypted password

2.2 Identity Verification Information (KYC)

As a platform that adheres to industry standards, winrm7 requires identity verification (KYC — Know Your Customer) before any withdrawal is processed. The information we collect for this purpose includes:

• A valid copy of MyKad or passport
• Selfie holding your identity document
• Proof of current address such as a utility bill or bank statement (not older than 3 months)
• Bank account or eWallet details for withdrawal purposes

All KYC documents are stored in encrypted systems and are only accessible by the winrm7 compliance team, who have undergone strict data security training. These documents are not shared with third parties except as required by applicable Malaysian law.

2.3 Financial Transaction Information

To ensure financial security and compliance, we record your transaction details including deposit and withdrawal amounts, payment methods used (FPX, Touch 'n Go, GrabPay, MAE, Boost or USDT), the timestamp of each transaction, and win and wagering records. This transaction data is required for internal auditing, legal compliance and fraud detection purposes.

2.4 Technical & Usage Data

When you browse the winrm7 platform, our systems automatically record certain technical information, including:

• Your device's IP address
• Web browser type and version
• Device type (smartphone, tablet, laptop)
• Operating system in use
• Pages visited and session duration
• Cookies and session identifiers

This technical data is used to troubleshoot issues, improve platform performance and identify suspicious activity.

Data Category	Purpose of Collection	Retention Period
Registration Information	Identity verification, secure login	Duration of active account + 5 years
KYC Documents	Legal compliance, withdrawal verification	Duration of active account + 7 years
Transaction Records	Financial auditing, fraud detection	7 years (legal requirement)
Technical Data	Security, platform improvements	90 active days
Session Cookies	User experience, auto login	Until logout or 30 days

3. How We Use Your Information

Clause 3.0

Winrm7 uses your personal data solely for legitimate and necessary purposes in operating the platform's services. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and maintaining your member account securely
• Transaction Processing: Processing deposits, withdrawals, and bonus payments accurately and securely
• Legal Compliance: Meeting reporting obligations under PDPA, the Anti-Money Laundering Act (AMLA), and related financial regulations
• Fraud Prevention: Identifying and blocking suspicious activity, system abuse, and unauthorised access attempts
• Customer Support: Providing accurate and personalised assistance when you contact our support team
• Platform Communications: Sending important notifications related to your account, promotions, and platform updates
• Service Improvement: Analysing usage patterns (in aggregated, anonymised form) to improve the user experience

4. Sharing Information with Third Parties

Clause 4.0

Winrm7 does not sell or disclose members' personal information to third parties for marketing or commercial gain. However, there are limited situations where we need to share your data with certain parties:

4.1 Trusted Service Providers

We work with trusted third-party service providers to operate the platform, including payment processors supporting FPX and eWallet transactions, server infrastructure and cybersecurity providers, and identity verification providers for the KYC process. All providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.

4.2 Legal Requirements

Winrm7 may be required to disclose certain information to the relevant authorities pursuant to a court order, warrant, or lawful directive from a law enforcement agency. In such situations, we will disclose only the minimum information required within the scope of that order.

5. Cookies & Tracking Technologies

Clause 5.0

Winrm7 uses cookies and similar tracking technologies to enhance user experience and maintain session security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use the platform (e.g. most frequently visited pages) to help us improve our services. All data in these cookies is anonymised.
• Functional Cookies: Remembering your preferences such as language, display format, and account settings so your experience is more convenient on your next visit.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect certain platform functions.

6. Data Security

Clause 6.0

Winrm7 invests seriously in security infrastructure to protect members' personal data. The security measures we have implemented include:

• 256-bit SSL Encryption: All data communications between the platform and your device are fully encrypted
• Layered Access Control: Only authorised staff with a clear operational need may access member data
• 24/7 Monitoring: Our security system monitors unusual activity around the clock and proactively responds to any threats
• Periodic Security Assessments: Security audits are conducted regularly by independent parties to identify and patch any vulnerabilities.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of account protection.
• Hashed Password Storage: Member passwords are never stored in plain text — all passwords go through a cryptographic hashing process before being saved

While we take all reasonable steps to protect your data, no digital system can be guaranteed 100% secure. We therefore encourage members to also take precautions such as using strong passwords, avoiding unsecured public Wi-Fi networks, and ensuring their devices are free from malware.

7. Your Rights as a Member

Clause 7.0

As a winrm7 member, you have the following rights regarding your personal data in accordance with Malaysia's PDPA:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request an immediate correction
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to Restrict Processing: Under certain circumstances, you may request that we restrict the processing of your data while an investigation or dispute is being resolved.
• Right to Object: You may object to the use of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your data in a machine-readable format for transfer to another platform.

To submit any request relating to the rights above, please contact the winrm7 support team via email at [email protected] or via Live Chat on the platform. Requests will be verified and processed within 7 business days.

8. Cross-Border Data Transfers

Clause 8.0

In the course of its operations, winrm7 may process or store members' personal data on servers located outside Malaysia. Where such data transfers occur, winrm7 ensures that:

• The destination country or region has a level of data protection equivalent to or stricter than Malaysia's PDPA
• A valid and binding data transfer agreement exists between winrm7 and the data recipient
• Technical safeguards such as end-to-end encryption are applied throughout the data transfer process

9. Children's Privacy

Clause 9.0

The winrm7 platform is intended exclusively for individuals who are of age 18 years and above. We do not intentionally collect, store or process any personal information from minors. Should we discover that a child's data has been collected without our knowledge, immediate action will be taken to delete that data and close the account in question.

If you are a parent or guardian and discover that your minor child has registered a winrm7 account, please contact us immediately at [email protected] and we will respond within 24 hours.

10. Changes to This Privacy Policy

Clause 10.0

Winrm7 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to members via their registered email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page always reflects the currently effective version of the Policy. You are advised to review this page periodically. Continued use of the platform after any changes take effect constitutes acceptance of the revised Policy.

11. Contact Us Regarding Privacy

Clause 11.0

If you have any questions, concerns, or complaints regarding how winrm7 handles your personal data, we encourage you to reach out to us directly. Our Data Protection Officer (DPO) team is ready to assist:

• Email: [email protected]
• Live Chat: Available on the winrm7 platform, 24 hours a day, 7 days a week
• WhatsApp: Via the official support number listed on the platform

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex complaints requiring in-depth investigation, we will provide a realistic resolution timeframe in our initial response to you.