This Privacy Policy explains how winngo collects, uses, stores, and protects the personal information of Members and visitors accessing our Platform. We take your privacy seriously and are committed to handling your data responsibly and transparently.
This Privacy Policy is issued by winngo ("we", "us", "our"), the operator of the online sportsbook and casino Platform accessible at winngo.asia. It sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed. It applies to all current and former Members, prospective Members who interact with our Platform, and visitors to the winngo.asia website.
By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data, you should not create an account or use the Platform. This Privacy Policy should be read alongside our Terms & Conditions.
We are committed to compliance with applicable data protection laws. Malaysian Members are advised that their personal data is processed in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) to the extent applicable.
winngo collects the following categories of personal data, depending on your interaction with the Platform:
| Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad or passport number, selfie/photo for KYC | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Registration |
| Financial Data | Bank account details, e-wallet identifiers (Touch n Go, Boost), transaction history, deposit and withdrawal records | Deposit / withdrawal requests |
| Technical Data | IP address, browser type and version, device fingerprint, operating system, session timestamps | Automatically on Platform use |
| Usage Data | Betting history, casino gaming activity, pages visited, search queries within Platform, odds viewed | Automatically on Platform use |
| Communications Data | Live chat transcripts, support emails, feedback submitted | Customer support interactions |
| Preference Data | Marketing opt-in status, language preferences, responsible gaming limit settings | Account settings & Platform use |
We do not intentionally collect sensitive personal data beyond what is required for age verification and AML/KYC compliance. We do not collect biometric data beyond photographic ID for identity matching purposes.
We collect personal data through the following means:
Where data protection law requires us to identify a legal basis for processing personal data, we rely on the following:
winngo uses your personal data for the following purposes:
To create and administer your winngo account; to process deposits and withdrawals; to settle bets and gaming activity; to provide live chat and email customer support; and to communicate important account-related information such as security alerts, policy updates, and transaction confirmations.
To verify your identity and age (21+ requirement is strictly enforced); to comply with AML and Know Your Customer (KYC) obligations; to screen against sanctions and watchlists as required by our licensing authority; and to detect and prevent fraud, account abuse, and money laundering.
To monitor betting and gaming patterns for signs of problem gambling behaviour; to administer deposit limits, session timers, and self-exclusion requests; and to provide responsible gaming notifications and support resources where warranted.
To analyse usage patterns and improve Platform features; to conduct A/B testing of new features; to monitor Platform performance and uptime; and to understand which sports markets, games, and features are most used by Malaysian Members.
To send promotional offers, bonus notifications, and sports betting updates where you have opted in to marketing communications. We do not sell your personal data to third parties for their own marketing purposes.
winngo does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:
All third-party service providers who process personal data on our behalf are contractually bound to process such data only for the specified purposes and to maintain appropriate technical and organisational security measures.
winngo operates globally and some of your personal data may be transferred to, stored in, or processed in countries outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place consistent with applicable data protection law — including contractual data transfer agreements, adequacy decisions, or equivalent mechanisms. By using the Platform, you consent to the international transfer of your personal data for the purposes set out in this Privacy Policy.
We retain personal data for as long as your winngo account is active and for a minimum period of five (5) years following account closure, in order to satisfy AML record-keeping obligations, resolve disputes, enforce our Terms & Conditions, and respond to regulatory requests. Certain categories of data — particularly financial transaction records and KYC verification documents — may be retained for longer periods where required by law.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. You may request earlier deletion of certain categories of data (see Your Rights below), subject to our legal obligations to retain it.
winngo uses cookies and similar tracking technologies on the Platform. The following cookie categories are used:
You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Continued use of the Platform after being informed of cookie use constitutes consent to the use of non-essential cookies.
Subject to applicable law and our legal obligations, you have the following rights in respect of your personal data held by winngo:
To exercise any of these rights, contact the winngo Data Protection team at the email address listed in the footer. We will respond within 30 days. We may need to verify your identity before processing your request.
The winngo Platform is strictly for persons aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an under-21 individual, that account will be immediately closed, the data deleted, and any balance forfeited in accordance with our Terms & Conditions. If you believe a minor has registered an account, please notify us immediately via the contact details in the footer.
winngo implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include: TLS/SSL encryption for all data in transit; encryption of sensitive data at rest; access controls limiting data access to authorised personnel only; regular security audits and penetration testing; and incident response procedures for data breach detection and notification.
While we take all reasonable precautions, no method of transmission over the internet is 100% secure. You are responsible for keeping your login credentials confidential. If you suspect your account has been compromised, contact support immediately via the live chat in your member dashboard.
winngo may use your gaming activity data — including bet frequency, session duration, deposit patterns, and loss chasing indicators — to identify signs of potential problem gambling behaviour. Where such patterns are detected, winngo may contact you with responsible gaming resources, apply temporary play restrictions, or in serious cases, enforce a mandatory cooling-off period. This processing is conducted under our legitimate interest in promoting responsible gambling and complying with our licensing obligations.
Your responsible gaming preferences — including any deposit limits or self-exclusion period you have set — are stored securely and cannot be altered retroactively. See the Responsible Gaming page for full details of available tools.
We may update this Privacy Policy from time to time to reflect changes in law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered Members by email or in-Platform notification at least seven (7) days before the effective date. The updated Privacy Policy will always be accessible at winngo.asia/privacy-policy. Continued use of the Platform after the effective date of any change constitutes your acceptance of the revised Privacy Policy.
For any questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact the winngo Data Protection team via the support email address displayed in the footer of this page. All data protection queries are handled separately from general customer support and are treated with appropriate confidentiality.
If you are not satisfied with our response to a data protection complaint, you may have the right to lodge a complaint with your local data protection authority. Malaysian users may refer complaints to the Department of Personal Data Protection Malaysia (JPDP) in accordance with the Personal Data Protection Act 2010.
Six pillars of our commitment to keeping your personal data safe and handled responsibly.
Every connection to the winngo Platform — login, deposit, betting, live chat — is protected by TLS encryption. Your data in transit is never exposed in plain text.
winngo does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used only for operating your account and keeping the Platform secure.
Our data handling practices are aligned with Malaysia's Personal Data Protection Act 2010. Malaysian Members can exercise their statutory rights over their personal data at any time.
You can request deletion of your personal data when winngo no longer has a legal basis to retain it. Deletion requests are processed within 30 days, subject to AML retention obligations.
Responsible gaming settings — deposit limits, self-exclusion periods, session timers — are stored separately with heightened access controls and cannot be retroactively altered.
All marketing communications from winngo require your explicit consent. You can withdraw consent and stop receiving offers instantly through your account preferences — no waiting period.
Create your winngo account knowing exactly how your data is used and protected. Deposit via Touch n Go eWallet, bet on the EPL or Malaysia Super League, and manage your privacy settings directly from your dashboard. No surprises.
21+ only. Please review our Terms & Conditions and Responsible Gaming policy before registering.