winrm7 Privacy Policy

1. Introduction

winrm7.app ("winrm7", "we", "us", "our") is committed to protecting the personal data of its members and website visitors. This Privacy Policy describes how winrm7 collects, processes, stores, and shares personal data in connection with your use of the winrm7 website, mobile applications, and associated services (collectively, the "Platform").

This Policy applies to all individuals who access or use the winrm7 Platform, including registered members, prospective members browsing the site, and any other individuals whose data is processed by winrm7 in connection with its operations. It should be read together with winrm7's Terms and Conditions and Responsible Gaming Policy, both of which are published on this website.

winrm7 operates its Platform under international gaming authority licensing standards. As part of that framework, winrm7 is required to implement data protection measures that are consistent with international best practice, including those applicable to Malaysian personal data protection principles under the Personal Data Protection Act 2010 (PDPA).

2. Personal Data We Collect

winrm7 collects personal data through several means, including information you provide directly, information collected automatically during your use of the Platform, and information received from third parties such as payment processors and identity verification services.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and preferred username collected at account registration.
• Identity verification (KYC) documents: Government-issued photo identification (MyKad, passport, or driving licence), proof of residential address, and, where required, source of funds documentation.
• Payment information: Payment method details necessary to process deposits and withdrawals, including e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow reference details, FPX bank account references, and other Malaysian banking credentials as required. winrm7 does not store full banking credentials; payment processing is handled by our licensed payment processor partners.
• Communications data: Records of communications between you and winrm7 customer support, including Live Chat transcripts, email correspondence, and feedback submissions.
• Responsible gaming data: Deposit limits, session limits, self-exclusion elections, and other responsible gaming preferences you set on your account.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, betting and gaming activity, session duration, click-through paths, search queries within the Platform, and feature interaction patterns.
• Transaction data: Deposit and withdrawal history, bonus claims, wagering activity, and account balance movements.
• Location data: Approximate geolocation derived from your IP address, used for jurisdiction compliance verification. winrm7 does not collect precise GPS location data.
• Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies as described in Section 7 of this Policy.

2.3 Data Received from Third Parties

winrm7 may receive personal data about you from the following third-party sources in the course of providing its services:

• Identity verification and KYC service providers engaged to verify the authenticity of documents submitted by members.
• Payment processors and financial institutions, including confirmation of payment method ownership and fraud screening outputs.
• Game providers, where game session and outcome data is shared between the provider's platform and winrm7's account management system.
• Fraud prevention and anti-money laundering screening services, including politically exposed person (PEP) and sanctions list databases.

3. How We Use Your Personal Data

winrm7 processes your personal data for the following purposes:

3.1 Account Management and Service Delivery

To create and maintain your winrm7 account, verify your identity, process deposits and withdrawals in MYR, deliver the gaming and betting services you request, provide customer support, and send you service-related communications (account confirmations, security alerts, transaction notifications).

3.2 Regulatory Compliance

To fulfil winrm7's obligations under its licensing framework, including Know Your Customer (KYC) verification, Anti-Money Laundering (AML) screening, age verification (21+), responsible gaming monitoring, and the production of records required for regulatory audit and reporting.

3.3 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and other conduct that breaches winrm7's Terms and Conditions or applicable law. This includes automated monitoring of account activity patterns and, where necessary, manual review by winrm7's compliance team.

3.4 Platform Improvement

To analyse aggregated usage data for the purpose of improving the Platform's features, performance, game selection, and user experience. This analysis is conducted on anonymised or pseudonymised datasets wherever technically practicable.

3.5 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may withdraw this consent at any time by updating your communication preferences in your winrm7 account settings or by contacting support.

4. Legal Basis for Processing

winrm7 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you as a winrm7 member — account creation, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with our licensing obligations, KYC/AML requirements, age verification, and regulatory reporting duties.
• Legitimate interests: Processing conducted in pursuit of winrm7's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing of personal data for marketing communications and non-essential cookies, where your freely given consent has been obtained and can be withdrawn at any time.

5. Data Sharing and Disclosure

winrm7 does not sell your personal data to third parties. We share personal data only in the circumstances described below:

5.1 Service Providers and Partners

winrm7 shares personal data with carefully selected third-party service providers who process data on our behalf strictly for the purposes described in this Policy. These include: payment processors (for deposit and withdrawal handling); identity verification and KYC providers; game technology providers (game session data necessary to operate the games you play); customer support platform providers; fraud prevention and AML screening services; and cloud infrastructure providers hosting the Platform.

All third-party processors engaged by winrm7 are subject to data processing agreements that require them to process personal data only on winrm7's documented instructions, implement appropriate security measures, and comply with applicable data protection law.

5.2 Regulatory and Law Enforcement Disclosure

winrm7 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or the requirements of our licensing framework. Such disclosures will be made only to the extent required and winrm7 will take reasonable steps to inform you where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of winrm7's business assets, personal data held by winrm7 may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and of any material change to the applicable privacy terms.

6. Data Retention

winrm7 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including the satisfaction of legal, regulatory, accounting, and reporting requirements.

For active member accounts, personal data is retained for the duration of the membership and for a minimum period of five (5) years following account closure, in accordance with AML record-keeping requirements under our licensing framework. KYC documentation is retained for a minimum of five years from the date of the most recent transaction on the account.

Marketing preference data is retained until consent is withdrawn. Communication records with customer support are retained for a period of three years from the date of the relevant interaction. Anonymised analytics data derived from usage patterns may be retained indefinitely for platform improvement purposes.

7. Cookies and Tracking Technologies

winrm7 uses cookies and similar tracking technologies on its Platform. Cookies are small text files placed on your device that allow the Platform to recognise your browser, maintain your session, and collect usage data. winrm7 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login state, and security features. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect aggregated data about how members use the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve the Platform.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limit selections.
• Marketing cookies: Used where you have consented to receive targeted communications. These cookies track activity across sessions to allow winrm7 to present relevant bonus and promotional information.

You can manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the Platform.

8. Data Security

winrm7 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and winrm7's servers.
• At-rest encryption of personal data stored in winrm7's database infrastructure.
• Access controls limiting winrm7 staff access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication available for all member accounts and mandatory for winrm7 internal administrative access.
• Incident response procedures for detecting, reporting, and remediating data security incidents.

Notwithstanding these measures, no data transmission over the internet and no data storage system can be guaranteed to be 100% secure. If you have reason to believe your winrm7 account has been compromised, contact support immediately via Live Chat.

9. Your Data Rights

Subject to applicable law and the limitations described below, you have the following rights in respect of your personal data held by winrm7:

• Right of access: The right to obtain confirmation of whether winrm7 holds personal data about you and to receive a copy of that data.
• Right to rectification: The right to require winrm7 to correct inaccurate personal data held about you without undue delay.
• Right to erasure: The right to request deletion of your personal data in circumstances where retention is no longer necessary or lawful. This right is subject to winrm7's regulatory retention obligations, which may require us to retain certain data notwithstanding a deletion request.
• Right to restriction of processing: The right to request that winrm7 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: The right to receive personal data you have provided to winrm7 in a structured, commonly used, machine-readable format, where processing is based on consent or contractual necessity.
• Right to object: The right to object to processing of your personal data based on winrm7's legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact winrm7 at [email protected]. winrm7 will respond to valid requests within 30 days. Identity verification may be required before a request is actioned. Requests that are manifestly unfounded or excessive may be refused or subject to a reasonable administrative fee.

10. Children's Privacy

winrm7 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of winrm7's KYC process. If winrm7 becomes aware that personal data has been collected from an individual under 21, that data will be deleted and the associated account suspended immediately.

If you are a parent or guardian and believe a minor has registered on winrm7, please contact support at [email protected] immediately so that appropriate action can be taken.

11. Changes to This Privacy Policy

winrm7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, winrm7 will notify registered members via email and by posting a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this Policy. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

12. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or winrm7's data processing practices, please contact our data protection team:

winrm7 Data Protection
Email: [email protected]
Please include "Privacy" in your subject line to ensure your query is directed to the correct team. We aim to respond to all data-related enquiries within 5 business days.