1Introduction
Welcome to wondawin's Privacy Policy. This document is part of our commitment to operating with full transparency and integrity in all aspects of handling our members' personal data.
Wondawin ("we", "Platform") operates as an online sports betting and casino platform serving members in Malaysia. In providing these services, we collect and process certain personal data necessary to deliver a safe, fair and high-quality gaming experience.
This Privacy Policy applies to all registered members, website visitors, wondawin mobile app users, and any individual who interacts with our platform in any capacity. By using our services, you agree to the practices described in this policy.
We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). Should any material changes occur in how we process your data, we will notify you in advance via email or an in-platform notification before the changes take effect.
2Personal Data We Collect
Wondawin only collects data that is genuinely necessary to provide our services safely and effectively. We do not collect excessive or irrelevant data beyond the scope of our services.
| Data Category | Examples of Information | Collection Method |
|---|---|---|
| Identity Data | Full name, IC/passport number, date of birth, gender | Registration form, KYC process |
| Contact Data | Email address, phone number, residential address | Account registration, profile updates |
| Financial Data | Bank account number, account holder name, transaction records | Deposit and withdrawal process |
| Technical Data | IP address, device type, web browser, operating system | Automatically logged during platform use |
| Behavioural Data | Betting history, favourite games, session time | In-platform activity |
| Communication Data | Support chat records, emails, feedback | Interactions with the support team |
We may also receive your data from trusted third-party sources such as identity verification providers and fraud prevention agencies, solely for verification and security purposes.
3How We Use Your Data
Every piece of data we collect has a clear and legitimate purpose. wondawin processes your personal data on the following legal bases:
- Contract performance: Process account registration, deposits, withdrawals, and all financial transactions you carry out.
- Legal obligation: Comply with KYC, anti-money laundering (AML), and regulatory reporting requirements as mandated by law.
- Legal basis: Detect and prevent fraud, safeguard platform security, and improve our service quality based on usage patterns.
- Consent: Send marketing communications, personalized promotional offers, and platform updates — only to members who have given explicit consent.
More specifically, your data is used to: verify your identity during registration and withdrawals; process all financial transactions securely; detect suspicious activity or fraud; provide responsive customer support; analyze and improve the platform's user experience; and keep you informed about relevant promotions and special offers.
Our Commitment: Your data is never used for automated decisions that negatively affect you without human review. If we need to take action on your account, our team will review your case individually.
4Data Sharing with Third Parties
Wondawin does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties in order to provide our services:
- Payment service providers: To process your deposits and withdrawals through a secure and trusted payment gateway.
- KYC service providers: Third-party identity verification providers that help us verify member identities securely and efficiently.
- Game software providers: Casino and sports game providers who require minimal data to deliver a seamless gaming experience.
- Cloud services and infrastructure: Hosting and data storage providers that store your information in an encrypted, secure environment.
- Legal authorities: When required by Malaysian law, court order, or a competent enforcement authority.
All third parties we work with are bound by strict data protection agreements and are only permitted to process your data for specified purposes. We ensure all partners comply with data protection standards equal to or higher than our own.
5Data Security
Your data security is an absolute priority for wondawin. We implement multiple layers of technical and operational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction:
- 256-bit SSL encryption: All data transmitted between your device and our servers is encrypted using the latest TLS protocols, making it unreadable to any party attempting to intercept it.
- Data-at-rest encryption: Sensitive data such as bank account numbers and identity information is encrypted when stored in our database.
- Strict access controls: Only authorised staff with a legitimate business need may access member personal data, with every access recorded in an audit log.
- 24/7 security monitoring: Our real-time threat monitoring system automatically detects and responds to any suspicious activity.
- Regular penetration testing: We conduct regular security testing by independent third-party experts to identify and address any vulnerabilities before they can be exploited.
- Secure data backup: Your data is regularly backed up to a secure, separate location to ensure rapid recovery in the event of an unexpected incident.
While we take all reasonable precautions, no system can guarantee 100% absolute security. We therefore encourage you to take precautions on your end as well, such as using a strong password, enabling two-factor authentication and not sharing your login credentials.
6Cookies & Tracking Technologies
Wondawin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.
Types of cookies we use:
- Essential cookies: Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled.
- Performance cookies: Collect information on how you use our platform to help us identify and resolve technical issues and improve performance.
- Functional cookies: Remember your preferences and settings such as preferred language, currency, and game settings to deliver a more personalized experience.
- Analytics cookies: Help us understand aggregated, anonymized usage patterns for ongoing product improvement.
You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and your experience on our platform.
7Your Privacy Rights
As a wondawin member, you have important rights regarding your personal data under Malaysia's PDPA 2010. We respect and facilitate the exercise of all these rights:
Right to Access
Request a copy of all personal data we hold about you at any time.
Right to Rectification
Update or correct inaccurate or incomplete personal data via your account settings.
Right to Erasure
Request deletion of your personal data, subject to applicable legal obligations.
Right to Data Portability
Receive your personal data in a machine-readable format for transfer to another platform.
Right to Restriction of Processing
Request that we restrict the processing of your data in certain situations permitted by law.
Right to Object
Object to the processing of your data for direct marketing purposes at any time, with no penalty.
To exercise any of the above rights, you may contact our privacy team via Live Chat within the platform or through our support email. We will process your request within 30 business days. In complex cases, this period may be extended up to 60 days with prior notice to you.
8Children's Data Protection
Wondawin takes the protection of minors from exposure to betting platforms very seriously. Our platform is strictly for individuals aged 18 and above, and we do not knowingly collect personal data from children.
If we find that we have collected data from individuals under the age of 18, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child has registered on our platform are requested to contact us immediately so that appropriate action can be taken without delay.
9Cross-Border Data Transfers
In the course of our global operations, your personal data may be transferred to and stored on servers located outside Malaysia. wondawin ensures that any such data transfer is carried out with adequate safeguards:
- Data transfer agreements that comply with protection standards equivalent to or higher than Malaysia's PDPA.
- Use of approved standard contractual clauses for international data transfers.
- Periodic assessments of data protection standards in recipient countries.
- Full encryption of all data in transit across borders.
We only work with cloud and infrastructure service providers that have a strong track record in data protection compliance and hold recognised international security certifications.
Note: In the event of a data breach that affects your rights and freedoms, wondawin will notify you within 72 hours of becoming aware of the incident, in line with industry best practices.
10Privacy Policy Amendments
Wondawin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements or other operational reasons. The "Updated" date at the top of this document indicates when this policy was last reviewed.
For material changes — such as changes to the types of data collected, new processing purposes or data sharing with new parties — we will provide clearer notice via email or in-platform notification at least 14 days before the changes take effect.
Continued use of the wondawin platform after any amendments are published constitutes your acceptance of the updated Privacy Policy. If you disagree with the amendments, you have the right to close your account and request deletion of your data before the effective date.
11Contact Us
If you have any questions, concerns or complaints regarding your privacy and personal data protection, you are welcome to contact us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week directly within the wondawin platform for the fastest response.
- Email: [email protected] — for enquiries requiring documentation or detailed clarification.
- FAQ: Visit page FAQ us for instant answers to frequently asked questions about privacy.
We are committed to responding to all privacy-related enquiries within 5 business days. For cases involving formal data rights requests, our response period is within 30 business days as required under PDPA 2010.
Your Trust, Our Responsibility: Privacy is not just a written policy at wondawin. It is a core value that guides every decision we make regarding the management of your data. Thank you for trusting us.