This page summarises how we handle the personal data you give us when you open and use a Wintomic account. It covers what we collect, why we need it, who we share it with, how long we hold it and what you can ask us to do with it. Our full Privacy Policy is available in the information centre of the platform, and this summary follows the same rules.
Our processing of personal data belonging to players in Malaysia is handled in line with the principles of the Personal Data Protection Act. We also operate under a Curaçao gaming licence, which brings its own obligations on identity checks, record keeping and the prevention of underage and fraudulent play.
What personal data we collect
Most of the data we hold comes directly from you. At registration we ask for your full name, date of birth, country of residence, e-mail address and a mobile number, together with the account currency you choose and the password you set. Payment details are added when you fund your account, and a promo code if you have one.
A second group of data appears when we verify an account. Our KYC rules allow us to request a passport, national identity card or driving licence, proof of address in the form of a utility bill or bank statement issued within the last three months, proof that a payment method belongs to you, and, where necessary, evidence of the source of your funds. A request may also include a selfie holding your document or a short video verification. These checks always run at your first withdrawal request, and again once total deposits pass USD 10,000 or the equivalent.
We also record the data your use of the account creates: deposits, withdrawals, bets, bonus activations, logins, support conversations and the technical details of the device and connection you use. Those records are what make Bet history, Transaction history and the balance in your profile possible, and they are also how we see that one person is not running two accounts or masking a location with a VPN, proxy or TOR connection.
Why we use it
Every category above has a purpose tied to running a licensed gambling account. Identity and contact data let us create the account, confirm your age and reach you about it. Payment and transaction data let us credit deposits, process withdrawals to a method in your own name and keep the financial records a licence requires. Verification documents let us meet anti-money-laundering and age-verification duties. Gameplay data lets us apply bonus and tournament conditions, and lets our responsible gaming team notice high-risk patterns and contact you with suggested measures.
We rely on the contract between us to operate your account, on our legal and regulatory duties for verification and record keeping, on our legitimate interest in preventing fraud and abuse, and on your consent where you have opted in to marketing messages or push notifications. Consent can be withdrawn at any time without affecting the rest of your account, and you can see how all of these pieces fit together across our casino and sportsbook on our main information hub.
| Detail | Wintomic |
|---|---|
| Account data collected | Full name, date of birth, country of residence, e-mail, mobile number, payment details |
| Verification documents | Passport, national ID or driving licence; proof of address; proof of payment method ownership; source of funds where needed |
| Age of a proof of address | Issued within the last three months |
| Time to answer a KYC request | 30 days, after which the account may be suspended or closed |
| Minimum age | 18+ |
| Privacy contact | [email protected] |
| Support channels | 24/7 live chat through Support and e-mail |
How we protect it
Access to player data inside our organisation is limited to the teams that need it: payments, verification, fraud prevention, responsible gaming and support. Documents you upload for verification are handled by our verification staff for that purpose only. Our support agents will never ask you for your password, and you should never send it to anyone who does.
Your own habits matter as much as ours. Use a password of at least eight characters that you do not use elsewhere, keep your verified mobile number and e-mail current so that recovery works, and close the session when you finish on a shared device.
Keep in mind
Deposits and withdrawals are only accepted on payment methods registered in your own name, so the name on your account must match the name on your card, bank account or wallet.
Sharing and international transfer
We do not sell personal data. We do share it where operating the account requires it: with the payment providers who move your money, with the gaming studios and platform services that deliver the games and tournaments you take part in, with identity and anti-fraud providers used during verification, and with our regulator, auditors or law enforcement where a lawful request or our licence obliges us to respond.
Those partners are not all based in Malaysia, so your data may be processed abroad. When that happens we require the recipient to protect it under terms equivalent to our own and to use it only for the purpose we gave it to them for. Fees and currency conversion applied by a payment provider are a matter between you and that provider, and so is the data they hold under their own policy.
Retention and your rights
While your account is open we keep the data needed to run it. After closure we continue to hold identity, transaction and verification records for as long as our gaming licence, financial rules and anti-money-laundering obligations require, and then stop using them for anything else. An account with no login or transaction for 12 months may be closed, and a self-exclusion record is kept so that the exclusion cannot be bypassed before it ends.
You can ask us to show you the personal data we hold, to correct anything inaccurate, to delete data we no longer have a reason to keep, to restrict or object to a particular use, or to stop sending you marketing. Where a decision about your account has been reached automatically, for example a flag raised by our fraud or responsible gaming monitoring, you can ask for a person to review it and explain the outcome. Some requests have limits: we cannot erase verification or transaction records we are required to retain, and we cannot release an account from self-exclusion on request.
To use any of these rights, or to ask anything about this policy, write to [email protected] from the e-mail address registered on your account, or open a chat through Support. We may need to confirm your identity before acting on a request about your data, which protects you as much as it protects us.
Wintomic is for adults aged 18 and over. We do not knowingly collect data about anyone under that age, and an account found to belong to a minor is closed.