Privacy Policy win25 —
Your Data, Responsibility We

Win25 collects your personal information through several transparent and responsible methods. All data collection is carried out on the basis of the minimum necessity principle — we only collect information that is genuinely required to deliver high-quality services to you.

The information we collect can be divided into three main categories:

For the KYC (Know Your Customer) verification process, we may request a copy of a valid identity document such as a national ID, passport or driving licence, along with proof of current address such as a utility bill or bank statement. This process is an international industry standard designed to protect both you and the platform from misuse.

Win25 uses collected personal information solely for lawful and defined purposes. We will not use your data for any purpose other than those stated here without first obtaining your consent.

• Identity Verification: Verifying your identity during registration and throughout the KYC process to ensure account security and legal compliance.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions between you and win25 accurately and securely.
• Service Communications: Sending important notifications relating to your account, transactions, promotions and policy updates via email or SMS.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, account breaches and other security threats.
• Legal Compliance: Meeting legal obligations including reporting to relevant authorities when required by law.
• Product Improvement: Analysing usage patterns in aggregate and anonymised form to improve products, interfaces and the overall platform experience.
• Customer Support: Enabling our support team to assist you more efficiently and effectively when you contact us.

Win25 will not use your data to make automated decisions that significantly affect your rights without human oversight. Any major decisions such as account suspension will be reviewed by a qualified team before being carried out.

Your data security is win25's top priority. We continuously invest in the latest security infrastructure to keep your information safe at all times. Our servers are hosted in certified data centers that comply with ISO 27001 and PCI-DSS standards.

The technical security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and win25 servers is protected with military-grade encryption.
• Data-at-Rest Encryption: Data stored in our databases is encrypted using AES-256, ensuring it remains unreadable even in the event of a physical breach.
• Two-Factor Authentication (2FA): 2FA is available for all member accounts and mandatory for administrative accounts.
• Real-Time Monitoring: The threat detection system operates 24/7 to identify and respond to suspicious activity in real time.
• Regular Security Testing: Independent security audits and penetration testing are conducted regularly by qualified third parties.
• Strict Access Control: Access to sensitive data is strictly controlled under the principle of least privilege — only staff who genuinely require access are granted permission.

Data Retention Period: win25 retains your personal data for as long as necessary to fulfil the purpose of collection and meet legal obligations. Generally, transaction records are retained for seven (7) years for financial compliance purposes, while active account data is retained for as long as your account remains active. Following account closure, data not required by law will be deleted within 90 days.

Win25 does not sell, rent or trade your personal information to any third party for marketing or commercial purposes. Data sharing occurs only under limited circumstances and with strict controls in place.

Third parties that may receive your data under certain circumstances:

• Payment Providers: Financial institutions, DuitNow and FPX providers, and crypto payment processors required to complete your transactions. They are bound by strict confidentiality agreements.
• Game Providers: Gaming software companies that operate games on the win25 platform may receive a unique identifier (not your real name) for game record purposes.
• Technology Service Providers: Hosting providers, CDN and cybersecurity services that help us operate the platform on a technical level.
• Legal Authorities: Information will be disclosed to government authorities, law enforcement bodies or regulatory agencies when required by law or a valid court order.
• Fraud Prevention: Data may be shared with industry fraud prevention networks to protect the platform and all members from fraudulent activity.

All third parties that receive your data are required to sign a data processing agreement specifying strict usage limits and security standards that must be observed. win25 conducts regular reviews of third-party vendors to ensure ongoing compliance.

Win25 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They allow our platform to remember your preferences and deliver a more personalised experience.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect platform functionality, including the ability to log in and carry out transactions. For guidance on managing cookies in your browser, please refer to your browser's help section.

Win25 respects your rights as the owner of your personal data. We ensure you have meaningful control over your personal information. Below are the rights you hold and how to exercise them:

Win25 has a firm commitment to child protection. Our platform is exclusively for individuals aged 18 and above only. We do not intentionally collect, store, or process any personal information relating to minors.

• All registration applications go through a strict age verification process. An identity document showing date of birth is required to confirm age eligibility.
• If win25 discovers that personal data of an individual under the age of 18 has been inadvertently collected, that data will be deleted immediately and the associated account will be terminated.
• Parents or guardians who suspect their child has registered on the win25 platform without permission are advised to contact our support team immediately via live chat.

Win25 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements or new technologies we adopt. We are committed to informing you of any significant changes.

• The "Last Updated" date at the top of this page will be updated whenever changes are made.
• For significant changes that materially affect your rights, win25 will send a notification to your registered email at least 14 days before the changes take effect.
• Your continued use of the win25 platform after the effective date of any changes constitutes your acceptance of the revised policy.
• Previous versions of the Privacy Policy are kept in our archive and can be requested through the support team.

We recommend checking this page regularly — at least once every three (3) months — to stay informed about how we protect your personal information.

If you have any questions, concerns or complaints regarding this Privacy Policy or how win25 handles your personal data, our team is available to assist you at any time.

• Live Chat: The fastest way to get help — available 24/7 directly within your win25 platform.
• Support Email: [email protected] — we aim to respond within 24 hours on business days.
• FAQ Section: Visit FAQ page us for instant answers to the most frequently asked questions.

For official requests relating to data subject rights (Section 6), please clearly state the type of request, your full name and the registered email address of your win25 account when contacting our team. This allows us to process your request more quickly and accurately.