Wintomic is committed to protecting your personal data. This Privacy Policy explains what information we collect from players across Malaysia, how we use it, who we share it with, and what rights you hold over your own data.
Six core commitments that define how Wintomic handles your personal information.
All data transmitted between your device and the Wintomic platform is protected by 256-bit SSL/TLS encryption — the same standard used by Malaysian banks like Maybank and CIMB.
Wintomic does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data exists to serve your gaming experience — nothing else.
We collect only the information required for account management, identity verification (KYC), payment processing, and platform security. We do not collect data beyond operational necessity.
You retain the right to access, correct, port, or delete your personal data at any time. Submit a request via live chat or email and we will respond within 30 calendar days.
Our data practices are designed with Malaysian players in mind, handling all payment data from Touch 'n Go eWallet, DuitNow, FPX, and major local banks under recognised security standards.
Wintomic uses cookies solely for platform functionality, session management, and aggregate analytics. No third-party advertising cookies are deployed without your knowledge.
This Privacy Policy ("Policy") is published by Wintomic ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at wintomic.cam. This Policy governs how Wintomic collects, processes, stores, shares, and protects personal information relating to all registered players and visitors ("Player", "User", "you", "your") who access or interact with our platform.
Wintomic primarily serves players located throughout Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. As such, our data practices are designed to handle personal and financial data — including information transmitted through Malaysian payment systems such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and the online banking portals of Maybank, CIMB, Public Bank, and Hong Leong — with the highest standards of security and discretion.
By registering an account with Wintomic or otherwise accessing our services, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.
For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, government ID number, payment details, and IP address. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Controller" | Wintomic, as the entity that determines the purposes and means of processing personal data collected through the platform. |
| "Processor" | Any third-party service provider that processes personal data on behalf of and under the instructions of Wintomic. |
| "KYC Data" | Identity and address verification documents submitted by a Player for the purpose of satisfying Wintomic's Know Your Customer obligations prior to withdrawal processing. |
| "Cookies" | Small text files placed on a Player's device by the Wintomic platform for session management, functionality, and aggregate usage analytics. |
| "Sensitive Data" | A subset of personal data that includes government-issued identification numbers, financial account details, and selfie/biometric verification images submitted for KYC purposes. |
Wintomic collects the following categories of personal data, limited to what is operationally necessary for providing and securing our services:
3.1 Registration Data. When you create a Wintomic account, we collect your full legal name, email address, mobile phone number, date of birth, and preferred currency (MYR). This information is required to establish your account identity and to confirm age eligibility (21+).
3.2 KYC and Verification Data. Prior to processing withdrawals, we are required to collect government-issued photo identification (Malaysian MyKad, Driver's Licence, or Passport), a proof of address document (utility bill or bank statement dated within three months), and a selfie photograph of you holding your ID document. This data is classified as Sensitive Data and subject to the highest level of internal access controls.
3.3 Financial Transaction Data. We record details of deposits and withdrawal transactions, including the payment method used (e.g., Touch 'n Go eWallet account reference, Maybank or CIMB bank account last four digits, DuitNow ID, FPX transaction reference), amounts in MYR, timestamps, and transaction outcome status. We do not store full bank account numbers or complete card details on our servers.
3.4 Gameplay and Betting Data. We collect records of games played, bet amounts, game outcomes, sports markets wagered (including EPL and Liga Super Malaysia markets), session durations, and responsible gambling tool settings. This data is used for account management, dispute resolution, and responsible gambling monitoring.
3.5 Technical and Device Data. We automatically collect IP address, browser type and version, operating system, device model, screen resolution, language preferences, referring URL, and session activity logs when you access the platform.
3.6 Communications Data. If you contact our support team via live chat or email, we retain records of those communications including the date, content, and resolution status for quality assurance and audit purposes.
Wintomic collects personal data through the following channels:
Wintomic processes your personal data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, email address, phone number |
| Identity verification (KYC) | Government ID, proof of address, selfie photograph |
| Payment processing (deposits & withdrawals in MYR) | Financial transaction data, payment method references |
| Fraud prevention and anti-money laundering (AML) | KYC data, financial data, IP address, device data |
| Responsible gambling monitoring | Gameplay data, session duration, deposit frequency |
| Customer support and dispute resolution | Communications data, account data, transaction records |
| Platform security and technical operations | Device data, IP address, session logs |
| Aggregate analytics and platform improvement | Anonymised gameplay data, anonymised session data |
| Regulatory compliance and audit | All categories of data retained as required by applicable regulations |
Wintomic does not use personal data for profiling, targeted advertising, or the sale of data to third-party marketers. Any use of your data beyond the purposes listed above will require your explicit prior consent.
Wintomic processes your personal data on the following legal bases:
Wintomic does not sell your personal data. We share your data only with the categories of third parties described below and only to the extent strictly necessary for the purposes identified:
Wintomic retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with Wintomic's data destruction procedures.
Wintomic implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:
Notwithstanding the foregoing, no data transmission over the internet or electronic storage system is guaranteed to be 100% secure. Players are encouraged to use strong, unique passwords for their Wintomic accounts and to enable any available two-factor authentication features.
The Wintomic platform uses cookies and similar tracking technologies (collectively "Cookies") to provide a functional, personalised, and secure gaming experience. The categories of Cookies deployed are as follows:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication state, security tokens, and fraud prevention. These Cookies are essential for the platform to function and cannot be disabled. | Session / up to 24 hours |
| Functional | Remembering your language preferences, game settings, responsible gambling tool configurations, and last-selected payment method. | Up to 90 days |
| Analytics | Aggregate, anonymised data on pages visited, features used, and session patterns to help Wintomic improve platform performance. No personally identifiable information is included. | Up to 12 months |
Wintomic does not deploy third-party advertising or cross-site tracking Cookies. You may control Cookie preferences through your browser settings. Please note that disabling Strictly Necessary Cookies may prevent you from logging in or using core platform features.
As a Wintomic player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Data Support team via live chat or at [email protected]. Wintomic will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days.
Request a copy of all personal data we hold about you, including the categories of data, processing purposes, and any third parties with whom it has been shared.
Request correction of any inaccurate or incomplete personal data held about you. We will process corrections promptly and notify relevant processors.
Request deletion of your personal data where processing is no longer necessary, subject to Wintomic's legal retention obligations under applicable AML and regulatory frameworks.
Request that we restrict processing of your personal data while a rectification or objection request is being reviewed. Restricted data may still be stored but not actively processed.
Request a structured, machine-readable copy of the personal data you provided to Wintomic directly (e.g., registration data, transaction history) for transfer to another service.
Object to processing carried out on the basis of Wintomic's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
The Wintomic platform may contain references to or integrations with third-party payment services and game software providers. These include Malaysian payment platforms such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and the FPX gateway connecting to Maybank, CIMB, Public Bank, RHB, and Hong Leong. While Wintomic takes reasonable steps to ensure all integrated processors meet adequate data protection standards, we are not responsible for the privacy practices of third-party services accessed outside the Wintomic platform environment.
Any data transmitted directly between your device and a third-party payment or banking application (for example, within the Touch 'n Go eWallet app during a deposit transaction) is subject to that third party's own privacy policy. Wintomic only receives the transaction confirmation data necessary to credit your account balance.
Wintomic is strictly a platform for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the registration and KYC process, and Wintomic reserves the right to request documentary proof of age at any point during a Player's use of the platform.
In the event that Wintomic discovers that personal data has been collected from a person below the age of 21, we will promptly take the following steps: immediately suspend the relevant account, delete all personal data associated with that account from our systems (subject to any regulatory retention obligations), and void any balance or bonus credits held in that account.
If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account with Wintomic, please contact us immediately at [email protected] or via our 24/7 live chat service.
Wintomic reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable data protection requirements, our operational practices, or the range of services offered. When material changes are made to this Policy, we will notify registered Players via the email address on record or through a prominent notice displayed on the platform.
The date of the most recent revision is indicated in the "Last Updated" field at the top of this document. We encourage Players to review this Policy periodically to stay informed of how Wintomic protects their personal information. Continued use of the platform following any amendment to this Policy constitutes acceptance of the revised terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Wintomic, please reach out to our Data Support team through any of the following channels:
We are committed to handling all privacy-related enquiries with professionalism and discretion. All requests are acknowledged within five (5) business days and resolved within thirty (30) calendar days, in line with the timelines set out in Section 11 of this Policy.
We protect your personal information with the same care we put into building a great gaming experience. Join 280,000+ Malaysian players who trust Wintomic. For players aged 21 and above only.