Personal Data Protection

Wondawin Privacy Policy — Member Personal Data Protection

At Wondawin, your privacy is more than a legal obligation — it is our sincere commitment. This document transparently explains how we collect, use, store, and protect your personal information every time you use our platform.

Updated: 1 January 2026

Our Privacy Commitment

Wondawin does not sell, lend, or share your personal data with third parties for marketing purposes without your consent.

256-bit SSL PDPA Compliant Zero Sharing Data Security

Wondawin's Six Pillars of Privacy Protection

Here's how we ensure your personal data stays secure and in your control.

Military-Grade Encryption

All data transmitted between your device and wondawin's servers is encrypted using 256-bit SSL — the same security standard used by leading commercial banks in Malaysia. No third party can intercept your information.

No Data Selling

Wondawin has never and will never sell your personal information to advertisers, data brokers, or any other third party. Your data belongs to you — we only use it for purposes you have explicitly consented to.

Data Control in Your Hands

As a wondawin member, you have the right to access, correct, or delete your personal data at any time. Contact our support team and we will process your request within 14 business days.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls, intrusion detection systems, and regular backups. Only authorised staff may access your information, and every access is logged for audit purposes.

Malaysia PDPA Compliance

Wondawin fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect and process your personal data only where a valid legal basis exists, and we inform you transparently about the purposes for which it is used.

Immediate Breach Notification

In the event of any security incident involving your data, wondawin is committed to notifying you within 72 hours and taking immediate steps to contain the situation and protect your interests.

1 Personal Information We Collect

To provide a safe gaming platform service and meet regulatory requirements, wondawin collects certain categories of personal information from our members. We only collect what is strictly necessary — nothing more.

Data Category Example Information Requirements
Identity Full name, date of birth, identification card number Required (KYC)
Contact Email address, mobile phone number Required
Financial Bank account details, transaction records Required (Payment)
Technical IP address, device type, web browser Automatic
Usage Game records, betting habits Automatic

We do not collect sensitive information such as biometric data, medical records, or political views. Any financial data you provide is used solely for payment processing purposes.

2 How We Collect Your Information

Wondawin collects your personal information through several different channels. It is important for you to understand these channels so you know when and how your data is collected.

  • Account Registration: When you register as a new Wondawin member, you provide us directly with basic information such as your name, email, and phone number.
  • KYC Process: During identity verification, you will be required to submit identification documents such as a copy of your identification card or passport and a recent bank statement.
  • Financial Transactions: Every time you make a deposit or withdrawal, your transaction details are automatically recorded by our system.
  • Platform Usage: Our system automatically records technical data such as your IP address, device type, and gaming activity during your session.
  • Support Communications: When you contact our customer support team, those conversations may be recorded for training and service improvement purposes.
  • Cookies and Tracking Technologies: The wondawin website uses cookies and similar technologies to improve the user experience and analyze usage patterns.

We do not purchase or obtain your personal data from third-party sources without your knowledge and consent.

3 Purposes for Using Your Personal Data

Wondawin uses collected personal information solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

  • To manage your member account and provide access to the gaming platform.
  • To process deposits, withdrawals, and all financial transactions securely and efficiently.
  • To conduct KYC checks and Anti-Money Laundering (AML) compliance as required by law.
  • To detect and prevent fraud, suspicious account activity, and unauthorized use of the platform.
  • To provide effective customer support when you contact us.
  • To send important account-related communications such as transaction confirmations, security notices, and policy updates.
  • To send promotional information and special offers — only if you have given your consent to receive them.
  • To improve and develop the wondawin platform based on usage pattern analysis.
  • To fulfill reporting obligations to the relevant regulatory authorities.

You may withdraw consent to receive marketing communications at any time by contacting our support team. Withdrawing this consent will not affect your core account services.

4 Data Sharing With Third Parties

Wondawin does not sell or lease your personal data to any third party. However, in the following limited situations, we may need to share your information:

  • Payment Service Providers: Transaction information is shared with licensed payment processors such as FPX, DuitNow, and e-wallet providers to facilitate the processing of your transactions.
  • Game Providers: Limited game data is shared with our gaming platform providers for technical purposes and dispute resolution.
  • Legal Authorities: We will disclose required information when compelled to do so by court order, legal investigation, or direction from a relevant authority.
  • IT Service Providers: Companies that help us manage our technical infrastructure, cybersecurity, and system support — all bound by strict confidentiality agreements.

Every third party we work with is required to meet data security standards equal to or higher than our own. We do not permit them to use your data for any purpose other than what has been specified.

5 Data Security Measures

Protecting your personal information is wondawin's highest priority. We continuously invest in the latest security infrastructure to keep your data safe at all times.

  • 256-bit SSL encryption for all data transmitted between your device and our servers.
  • Encryption of data at rest for all personal information stored in our databases.
  • Two-factor authentication (2FA) available for all member accounts.
  • 24/7 security monitoring with automated intrusion detection systems.
  • Role-based access control — only staff who need to know can access specific data.
  • Regular penetration testing by registered independent security specialists.
  • Regular data backups with tested disaster recovery procedures.

While we take all reasonable precautions, no system is 100% breach-proof. We encourage you to practice good security habits as well — use a strong, unique password for your wondawin account.

6 Data Retention Period

Wondawin retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal and regulatory obligations.

  • Active Account Data: Retained for the duration of your active membership at Wondawin.
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's financial legal requirements.
  • KYC Data: Retained for 5 years after account closure to meet AML compliance requirements.
  • Technical Logs: Typically deleted after 90 days unless required for an ongoing security investigation.
  • Inactive Account: Inactive account data older than 3 years will be anonymised or deleted in accordance with our procedures.

When your data is no longer needed, we will delete or anonymise it using secure, irreversible methods.

7 Cookies and Tracking Technologies

The wondawin website uses cookies and similar tracking technologies to enhance your experience and help us understand how the platform is used. Below are the types of cookies we use:

  • Essential Cookies: Required for core website functions such as login sessions and security. These cookies cannot be disabled.
  • Functional Cookies: To remember your preferences such as language and display settings, personalizing your experience.
  • Analytics Cookies: Helps us understand which pages are visited most frequently and how users interact with our platform, for the purpose of continuous improvement.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the Wondawin platform.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

Right of Access

You have the right to request a copy of all personal data that Wondawin holds about you. We will provide this information within 14 business days of receiving your request.

Right to Rectification

If any personal data we hold about you is inaccurate or outdated, you have the right to request that we correct it without undue delay.

Right to Erasure

You may request the deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose or when you withdraw your consent. This right is subject to our legal retention obligations.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, and we are required to comply with that objection immediately.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transfer it to another operator if desired, to the extent technically feasible.

To exercise any of these rights, please contact the wondawin customer support team. We will verify your identity before processing any request relating to your personal data.

9 Links to Third-Party Websites

The wondawin platform may occasionally contain links to third-party websites or services. Please note that our privacy policy does not apply to those external websites.

Wondawin is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit, especially if you share any personal information there.

Game providers integrated into the wondawin platform operate under their own licenses and privacy policies. However, we only work with providers that comply with international data security standards.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this privacy policy or how Wondawin handles your personal data, our team is ready to assist you.

You can reach us via:

  • Live chat on the wondawin platform — response within 5 minutes during operating hours.
  • Support email: [email protected] — response within 1 business day.
  • Our FAQ section at FAQ page for answers to frequently asked questions.

Wondawin also reserves the right to amend this privacy policy from time to time to reflect changes in our practices or legal requirements. Any significant amendments will be communicated to you via email or an in-platform notice before taking effect.

Your privacy is our priority. Thank you for trusting wondawin as your gaming platform of choice — your trust drives us to continually raise our data security standards.

Your Data Is Safe. Now It's Time to Play.

Wondawin takes your privacy seriously so you can focus on enjoying the best gaming experience. Register today and discover the casino platform trusted by hundreds of thousands of members across Malaysia.

Bahasa Melayu