wyn8 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") applies to all personal data processed by the operator of the wyn8 Platform, accessible at wyn8.win ("wyn8", "we", "us", or "the Company"), in connection with the registration, operation, and management of Member accounts and the provision of online gaming and sports betting services.

This Policy is incorporated by reference into the wyn8 Terms & Conditions. By registering a wyn8 account or using any wyn8 service, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as described in this Policy.

wyn8 acts as the data controller in respect of personal data collected directly through the Platform. Where wyn8 engages third-party processors (see Section 6), those parties act as data processors under contractual data processing agreements that impose equivalent data protection obligations.

2. Data We Collect

The categories of personal data that wyn8 collects and processes in connection with Platform use are set out in the table below:

wyn8 does not collect sensitive personal data such as biometric data, medical records, or racial/ethnic origin data, except where identity documents submitted during KYC incidentally contain such information. Such data is processed solely for identity verification purposes and is not used for any other purpose.

3. How We Collect Your Data

3.1 Data You Provide Directly

wyn8 collects personal data that you actively provide when: (a) completing the account registration form; (b) submitting KYC verification documents; (c) making deposits or withdrawal requests; (d) contacting customer support via live chat, email, or WhatsApp; or (e) updating your account settings or preferences.

3.2 Data Collected Automatically

When you access the wyn8 Platform, certain technical and usage data is collected automatically through server logs, session cookies, and analytics tools. This includes your IP address, device identifiers, browser fingerprint, and detailed records of your activity on the Platform. This automatic collection begins at the moment you visit any page on wyn8.win and continues throughout your session.

3.3 Data from Third Parties

wyn8 may receive personal data about you from third-party sources in limited circumstances, including: (a) payment processors who confirm transaction status and flag potential fraud; (b) identity verification service providers who cross-reference submitted documents against authoritative databases; and (c) fraud prevention networks that share data on known bad actors across member platforms.

4. How We Use Your Personal Data

wyn8 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your Member account, authenticating your wyn8 login sessions, and processing account updates.
• Service delivery: Enabling access to all games, live casino, sportsbook markets, and other Platform features you are entitled to use.
• Payment processing: Processing deposits and withdrawals via your selected payment methods, including Touch n Go eWallet, Boost, FPX, and USDT, in Malaysian Ringgit or equivalent.
• KYC compliance: Verifying your identity and age as required under wyn8's gaming licence obligations and anti-money laundering (AML) requirements.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and enforcing deposit limits, self-exclusion, or cooling-off periods you have set or that wyn8 determines are appropriate.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeover attempts, bonus abuse, and other prohibited conduct.
• Customer support: Responding to enquiries, resolving disputes, and maintaining support records.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Members who have not opted out of such communications. You may opt out at any time via your account notification settings.
• Legal compliance: Fulfilling obligations under applicable gaming regulations, AML legislation, tax reporting requirements, and any other legal obligations to which wyn8 is subject.
• Platform improvement: Analysing aggregated and anonymised usage data to improve game selection, platform performance, and user experience.

5. Legal Basis for Processing

wyn8 processes personal data on the following legal bases:

• Contract performance: Processing necessary to perform the contract between wyn8 and the Member (account operation, payment processing, service delivery).
• Legal obligation: Processing required to comply with gaming licence conditions, AML/KYC regulatory obligations, and applicable law.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming purposes, where such interests are not overridden by Member rights.
• Consent: Processing for direct marketing communications, where consent has been obtained and may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

6.1 Service Providers

wyn8 shares personal data with carefully selected third-party service providers who assist in delivering Platform services. These include payment processors (eWallet operators, FPX gateway providers, cryptocurrency payment facilitators), identity verification providers, game software suppliers, cloud hosting infrastructure providers, and customer support platform operators. All such providers are bound by contractual data processing agreements that prohibit use of your data for any purpose other than delivering the specified service to wyn8.

6.2 Regulatory Disclosure

wyn8 may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required by applicable law, licence condition, or valid legal process. wyn8 will not notify Members of such disclosures where doing so is prohibited by law or would compromise a regulatory investigation.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of wyn8's assets, Member personal data may be transferred to the acquiring entity as part of the transaction. Affected Members will be notified of any such transfer and any material change to data processing practices that results from it.

6.4 No Data Sales

wyn8 does not sell, rent, or trade Member personal data to third parties for their own marketing or commercial purposes under any circumstances.

7. Cookies & Tracking Technologies

wyn8 uses cookies and similar tracking technologies (session tokens, local storage, pixel tags) on the Platform for the following purposes:

• Strictly necessary cookies: Required for wyn8 login session management, security token verification, and core Platform functionality. Cannot be disabled without breaking Platform operation.
• Performance cookies: Collect anonymised data on how Members use the Platform — most visited pages, error rates, loading times — to enable continuous performance improvement.
• Functional cookies: Remember your preferences such as language selection, preferred game category, and responsible gaming settings between sessions.
• Analytics cookies: Provide aggregated and anonymised traffic and engagement data to wyn8's internal analytics team for Platform development decisions.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to log in and use core Platform features. Blocking other cookie categories will not affect your ability to play games but may affect personalisation features.

8. Data Retention

wyn8 retains personal data for the following periods, or longer where required by applicable law or regulatory obligation:

• Account and identity data: For the duration of the Member relationship and for a minimum of 5 years following account closure, as required under standard AML record-keeping obligations.
• Transaction and gaming records: Minimum 5 years from the date of each transaction, consistent with financial record-keeping requirements.
• KYC documents: Minimum 5 years from the date of verification, or longer if required by the applicable licensing authority.
• Customer support communications: 3 years from the date of the communication, or longer where related to an open dispute or regulatory matter.
• Technical and usage data: 13 months from collection for analytics purposes; session-specific technical data deleted within 90 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

9. Data Security

wyn8 implements technical and organisational security measures commensurate with the sensitivity of the personal data processed. These measures include:

• TLS 1.3 encryption for all data transmitted between your browser and wyn8 servers
• AES-256 encryption for sensitive data at rest in wyn8 databases
• Bcrypt password hashing with per-account salt values — wyn8 staff cannot see your password
• Role-based access controls limiting staff access to personal data to the minimum necessary for their job function
• Regular penetration testing and vulnerability assessments of Platform infrastructure
• Real-time intrusion detection and security event monitoring
• Mandatory security training for all staff with access to Member data

Despite these measures, no online platform can guarantee absolute security. Members are encouraged to protect their own accounts by using strong, unique passwords, enabling two-factor authentication, and promptly reporting any suspected unauthorised account access to wyn8 support.

10. Your Data Rights

Subject to applicable law and the conditions described in this Policy, Members hold the following rights in respect of their personal data processed by wyn8:

• Right of access: Request a copy of the personal data wyn8 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to wyn8's legal retention obligations (data required for AML compliance cannot be deleted before the applicable retention period expires).
• Right to restriction: Request that wyn8 limits the processing of your data in certain circumstances.
• Right to data portability: Request a machine-readable export of personal data you have provided to wyn8.
• Right to object: Object to processing based on legitimate interests, including direct marketing. Objection to marketing will be actioned immediately; objection to other legitimate interests processing will be assessed on its merits.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), withdraw consent at any time via your account notification settings or by contacting support.

To exercise any of these rights, contact wyn8 support via live chat at wyn8.win or via email at [email protected] (plain text — not a clickable link). wyn8 will respond to all verified data rights requests within 30 days of receipt.

11. International Data Transfers

wyn8 is an internationally operating platform and your personal data may be processed on servers located outside Malaysia. Where personal data is transferred to a country that does not provide a level of data protection equivalent to Malaysia's Personal Data Protection Act 2010 (PDPA), wyn8 implements appropriate safeguards, including contractual data protection clauses with receiving entities, to ensure your data receives adequate protection regardless of where it is processed.

12. Children's Privacy

The wyn8 Platform is strictly for adults aged 21 and above. wyn8 does not knowingly collect personal data from persons under 21 years of age. If wyn8 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted and the associated account will be closed immediately. Parents or guardians who have reason to believe a minor has registered a wyn8 account should contact support immediately via live chat.

13. Changes to This Policy

wyn8 reserves the right to update this Privacy Policy at any time. The "Last updated" date at the top of this page reflects the effective date of the most recent revision. Where a change is material — for example, a new category of data collection or a new third-party sharing arrangement — wyn8 will notify registered Members via the email address on their account prior to the change taking effect. Continued use of the Platform following notification constitutes acceptance of the revised Policy.

14. Contact Us

For all privacy-related enquiries, data rights requests, or concerns about wyn8's handling of your personal data, please contact the wyn8 Data & Privacy team through the following channels:

• Live Chat: Available 24/7 on every page of wyn8.win (fastest response — typically 3–5 minutes)
• Email: [email protected] (displayed as plain text only)

wyn8 commits to acknowledging all privacy enquiries within 5 business days and to providing a substantive response within 30 days. For complex data rights requests, the response period may be extended by a further 60 days with prior notice.