1. Introduction
Wondawin ("we", "Platform" or "wondawin") is fully committed to protecting the privacy of every user who uses our services. This Privacy Policy explains in detail how we collect, use, disclose, transfer and store your information when you access the wondawin website, mobile app or any related services.
We believe transparency is the foundation of trust. As such, we have nothing to hide about how we handle your data. Every detail in this document is written in plain language so you know exactly what happens with your personal information.
This Privacy Policy applies to all WondaWin users, including registered members, website visitors, and users of our mobile app. By continuing to use the WondaWin platform following any amendments to this policy, you are deemed to have accepted the updated terms.
2. Information We Collect
Wondawin collects your personal information through several means — directly from you during registration, automatically as you use the platform, and in certain cases from trusted third-party sources. The following are the categories of information we collect:
2.1 Information You Provide Directly
- Identity information: Full name, identification card number, date of birth, and gender.
- Contact information: Email address, phone number, and residential address.
- Account information: Username, password (stored in encrypted hashed form), and security questions.
- Financial information: Bank account details, e-wallet numbers, and records of deposit and withdrawal transactions.
- Verification documents: Copies of identification card, passport, bank statement, or other KYC documents submitted during the identity verification process.
2.2 Information Collected Automatically
- Device data: Device type, operating system, phone model, and unique device identifier.
- Network data: IP address, browser type, internet service provider (ISP), and approximate location based on IP.
- Usage data: Pages visited, session duration, games played, login frequency, and interaction patterns with the platform.
- Cookie data: Information collected through cookies and tracking technologies, as further explained in Section 6.
Note: We do not store credit or debit card numbers directly. All card payments are processed through a PCI-DSS certified payment gateway, ensuring your sensitive financial data never touches our servers directly.
3. How We Use Your Data
Every piece of information we collect is used for clear and legitimate purposes. wondawin uses your personal data for the following purposes:
| Purpose of Use | Description |
|---|---|
| Account Management | Creating, maintaining, and protecting your user account. |
| Transaction Processing | Processing deposits, withdrawals, and all financial transactions securely. |
| Identity Verification (KYC) | Verifying your identity to comply with anti-money laundering legal requirements. |
| Customer Support | Helping resolve your inquiries, complaints, and technical issues promptly. |
| Platform Security | Detecting and preventing fraud, suspicious activity, and unauthorized access. |
| Service Improvement | Analysing usage patterns to improve the user experience and platform performance. |
| Marketing Communications | Sending promotions, offers, and the latest updates (only if you have agreed to receive them). |
| Legal Compliance | Meeting legal and regulatory obligations applicable in Malaysia. |
4. Information Sharing
Wondawin does not sell, rent or trade your personal information to any third party for their own commercial purposes. However, in certain situations, we may need to share your information with the following parties:
- Technical service providers: Companies that help us operate the platform, including cloud infrastructure providers, payment processors, and gaming software providers — all bound by strict confidentiality agreements.
- Regulatory authorities: When required by law, court order, or direction from a competent government authority.
- Identity verification partners: Third-party services that help us conduct KYC checks and document verification securely.
- Analytics providers: Anonymous analytics tools that help us understand platform usage patterns without revealing your personal identity.
In all of the above circumstances, we ensure that parties receiving your information are bound by data protection obligations equivalent to or higher than our own standards.
5. Data Storage & Security
5.1 Where Your Data Is Stored
Your personal data is stored on secure servers located in data centres that comply with international security standards. All data is stored in encrypted form using AES-256 encryption, the highest security standard in the industry.
5.2 Retention Period
We retain your personal information for as long as your account is active or as necessary to provide services to you. Once an account is closed, we may retain certain records for the minimum period required by Malaysian law, typically between 5 and 7 years, for audit and legal compliance purposes.
5.3 Security Measures
- 256-bit SSL encryption for all data communications between users and the server.
- Multi-layer firewall and intrusion detection system (IDS) active 24/7.
- Strict internal access controls — only authorized personnel with a legitimate need can access user data.
- Regular security audits by independent third parties to identify and patch any vulnerabilities.
- Two-factor authentication (2FA) for access to internal data management systems.
Shared Responsibility: While we take all reasonable steps to protect your data, account security also depends on you. Please ensure your password is strong and not shared with anyone. Never log in to wondawin over an unsecured public Wi-Fi network.
6. Cookies & Tracking Technologies
Wondawin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our site.
Types of Cookies We Use
- Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
- Performance cookies: Collecting anonymous information about how you use our website to help us improve our services.
- Functional cookies: Remembering your preferences such as language, display settings, and login details for your convenience.
- Marketing cookies: Used to display relevant promotional content. You may choose to opt out of this type of cookie.
You can manage or delete cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of the WondaWin platform.
7. Your Rights as a User
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policies, you have the following rights regarding your personal data:
Right to Access
You may request a copy of the personal data we hold about you at any time.
Right to Rectification
You may request the correction of any inaccurate or incomplete information.
Right to Erasure
You may request deletion of your personal data subject to applicable legal obligations.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You may request your data in a machine-readable format for transfer to another platform.
Right to Restriction of Processing
You may request a restriction on the processing of your data under certain circumstances as defined by law.
To exercise any of the above rights, please contact the wondawin support team via email or live chat. We will process your request within 14 business days.
8. Children's Data Protection
Wondawin is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18. If we discover that information from an underage user has been collected without our knowledge, that data will be deleted immediately and the account in question will be closed.
If you believe a minor has registered on our platform, please contact us immediately so we can take the appropriate action.
9. Links to Third-Party Sites
The wondawin platform may contain links to third-party websites or services, including game providers and payment partners. This Privacy Policy applies solely to the wondawin platform. We are not responsible for the privacy practices of third-party websites and encourage you to read their own privacy policies before interacting with those platforms.
10. Amendments to the Privacy Policy
Wondawin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technological requirements or legal obligations. When changes are made, we will update the "Last updated" date at the top of this document.
For significant changes, we will notify you via in-platform notification or your registered email at least 7 days before the changes take effect. Continued use of the platform after the amendment date constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or wish to exercise your privacy rights, the WondaWin team is ready to assist you. We are committed to addressing every privacy-related query seriously and within a reasonable timeframe.
Privacy email: [email protected] — Our data protection team will respond to your enquiry within 3 to 5 business days. For urgent matters, use the in-platform live chat for a faster response.