At wintoto, your privacy is more than a legal obligation — it is a genuine commitment. We are transparent about the data we collect, why we need it, and how we protect it. Read this policy to understand your rights as a wintoto member.
All data transmitted between your device and wintoto's servers is protected by industry-standard 256-bit SSL encryption — the same standard used by Malaysia's leading financial institutions.
Wintoto has never and will never sell, rent, or share members' personal data with any third party for marketing purposes without explicit user consent.
Wintoto's Privacy Policy is designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the law governing how the personal data of Malaysians is processed.
As a wintoto member, you have the right to access all personal data we hold about you, request corrections to any inaccurate information, and, in certain circumstances, request that your data be deleted.
Wintoto uses cookies to enhance your experience. You can manage your cookie preferences at any time through your browser settings without affecting the platform's core functionality.
If you have any questions about your data privacy at wintoto, our data protection team is available 24/7 via live chat, email, or Telegram.
This Privacy Policy explains in detail how Wintoto ("we", "platform") collect, process, store, and protect your personal information when you use our services at wintoto.im. This document is drafted in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia. By registering for or using the wintoto platform, you confirm that you have read and understood this Privacy Policy.
Wintoto is a Malaysian online entertainment platform offering Sports Betting, Live Casino, slots, table games, lottery, and a range of other digital entertainment services. In the course of providing these services, we need to collect and process certain personal data from our users.
This Privacy Policy applies to all individuals who access or use the wintoto platform, including:
This policy does not apply to third-party websites or services that may be linked from the wintoto platform. We encourage you to read the privacy policy of each platform you visit separately.
Wintoto collects data that you provide directly to us when interacting with the platform, including:
| Data Category | Example Information | Purpose of Collection |
|---|---|---|
| Identity Data | Full name, identity card number, date of birth | Identity verification (KYC), AML compliance |
| Contact Data | Phone number, email address, residential address | Account communications, deposit/withdrawal verification |
| Financial Data | Bank account number, digital wallet details (TNG, GrabPay, DuitNow) | Processing deposits and withdrawals |
| Account Data | Username, password (encrypted), login history | Account management, security |
| Game Data | Betting history, game types played, deposits & withdrawals | Processing of winnings, responsible gaming |
Wintoto also automatically collects certain data when you use our platform:
Note: wintoto does not collect your precise location data (GPS). The location we record is based solely on your IP address, which provides a general area estimate rather than the exact coordinates of your device.
Wintoto uses your personal data only for legitimate and necessary purposes. Here are the key ways we use the information we collect:
wintoto's Data Minimisation Principle: We only collect data that is strictly necessary for the stated purposes. Data will not be processed for any other purpose without prior notice and your consent.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), wintoto processes your personal data on the following legal bases:
Wintoto respects your privacy and does not share your personal data broadly. We only share data under the following limited circumstances:
Wintoto works with trusted third-party service providers that help us operate our platform, including:
All such providers are bound by strict confidentiality agreements and may only use your data for the specific service purposes designated by wintoto.
Wintoto may disclose your data to the relevant authorities when required under Malaysian law, including in response to court orders, criminal investigations, or directives from regulatory bodies.
The wintoto Guarantee: We have never and will never sell members' personal data to advertisers, data brokers, or any third party for commercial gain. This is wintoto's absolute commitment to all our Malaysian members.
Wintoto retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian law. The following are our data retention guidelines:
Once the retention period expires and there is no further legal requirement, your data will be securely deleted or anonymised from wintoto's systems.
Wintoto takes the security of our users' data seriously. The following technical and organisational measures are in place to protect your data:
Shared Responsibility: While wintoto takes all reasonable steps to protect your data, account security also depends on your own actions. Always use a strong password, never share your login credentials, and enable two-factor authentication for maximum protection.
Cookies are small text files stored on your device when you visit the wintoto platform. They help us recognise you as a returning user, remember your preferences, and improve your overall experience.
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or your experience on the wintoto platform.
For information on how to manage cookies in popular browsers (Chrome, Firefox, Safari, Edge), please refer to your respective browser's help section.
As a wintoto user covered under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:
You have the right to request a copy of all personal data wintoto holds about you. Requests will be processed within 21 working days.
If any of your personal data held by wintoto is inaccurate or out of date, you have the right to request a correction at no charge.
Under certain circumstances, you may request that your personal data be deleted from wintoto's systems, subject to our legal obligations.
You may request that wintoto restrict how we process your data in certain situations, such as while a data dispute is under investigation.
You may object to the processing of your personal data for direct marketing purposes at any time, without needing to provide any justification.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider, where applicable.
To exercise any of the rights above, please contact the wintoto data protection team at privacy@wintoto.im. We will respond within 21 business days from the date your request is received.
The wintoto platform is exclusively for adults aged 18 years of age and above. wintoto does not knowingly collect, store, or process any personal data from individuals who are underage.
If you discover that a minor has registered an account on wintoto without authorisation, please contact us immediately at support@wintoto.im. We will take immediate action to investigate, close the account in question, and delete all associated data.
Responsibilities of Parents & Guardians: wintoto strongly encourages all parents and guardians to monitor their children's online activity and use appropriate parental control software to prevent unauthorised access to gambling websites.
Wintoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Malaysian legal requirements, or technological developments. When material amendments are made:
Your continued use of the wintoto platform after any amendments take effect will be deemed as your acceptance of the updated policy. You are encouraged to review this page periodically.
If you have any questions or concerns, or wish to exercise your privacy rights, please contact the wintoto data protection team through the following channels:
We are committed to responding to all privacy-related enquiries within 5 business days. For formal requests under the PDPA, such as data access or deletion, please include proof of identity (a copy of your ID card) with your submission for verification purposes.
If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia through their official portal. wintoto will cooperate fully with any JPDP investigations.
We take your privacy seriously. Register a wintoto account today and enjoy a safe, fair, and exciting Sports Betting, Live Casino, slots & Lottery experience alongside more than 500,000 members across Malaysia.