This Privacy Policy explains how wondawin collects, uses, stores, and protects the personal information of players and visitors across Malaysia. We are committed to transparency about how your data is handled and what rights you hold over it.
Our Privacy Commitments
These highlights summarise our approach. Please read the full policy below for complete detail.
wondawin does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Your data is used only to operate your Account and comply with our legal obligations.
All personal data held by wondawin is stored on secured servers with industry-standard encryption. Data in transit between your device and our platform is protected by 256-bit SSL โ the same standard used by major financial institutions.
You have the right to access, correct, and request deletion of your personal data held by wondawin, subject to applicable legal and regulatory retention requirements. Submit a data request via our 24/7 support team.
wondawin uses cookies strictly for platform functionality, security, and to improve your experience. We do not use tracking cookies to build advertising profiles or share browsing data with advertising networks.
wondawin's data practices comply with applicable data protection regulations and our international gaming authority licence requirements โ including player fund segregation, KYC data handling, and AML record retention obligations.
We will notify registered wondawin players of material changes to this Privacy Policy via the email address or mobile number associated with their Account. You will not be surprised by silent policy changes that affect how your data is used.
This Privacy Policy is issued by the operator of the wondawin platform, accessible at wondawin.win ("wondawin", "we", "us", "our"). wondawin is an online casino and sports betting platform that operates under an international gaming authority licence, offering its services primarily to players in Malaysia and other eligible jurisdictions.
As the data controller for personal information collected through the wondawin platform, we are responsible for determining how and why your personal data is processed. For any privacy-related enquiries, please contact our support team using the details provided in Section 15 of this Policy.
When you create a wondawin Account, we collect the following information: your full legal name, date of birth, residential address, email address, Malaysian mobile number, and the username and password you select. This information is required to create and administer your Account.
To comply with our licensing obligations and to verify that you are 21 years of age or older, wondawin requires identity documentation before processing your first withdrawal. This includes a copy of your MyKad or valid passport, and may include a selfie photograph or proof of address document such as a recent utility bill or bank statement issued to your registered address in Malaysia.
wondawin collects information about your deposit and withdrawal transactions, including payment method details (e-wallet account identifiers, bank account identifiers used for FPX), transaction amounts, timestamps, and transaction reference numbers. wondawin does not store full card numbers or banking credentials; payment processing is handled by our contracted payment service providers.
We collect data about how you use the wondawin platform, including: games played, bets placed, betting history, session duration, login timestamps, pages visited, search queries within the platform, and bonus activity. This data is used to operate your Account, detect fraud, and improve the platform.
When you access the wondawin platform, our systems automatically collect certain technical information: your IP address, device type (phone model, operating system version), browser type and version, screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and platform optimisation.
If you contact wondawin via live chat, email, or any other communication channel, we retain records of that correspondence, including the content of messages and timestamps. This data is used to resolve your query, train our support team, and maintain records for dispute resolution purposes.
wondawin collects your personal data through the following means:
wondawin uses personal data collected from Malaysian players and other users for the following purposes:
wondawin processes your personal data on the following legal bases:
wondawin does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients in the circumstances described:
We engage third-party service providers who process personal data on our behalf under contractual data processing agreements. These include: payment service providers (Touch n Go eWallet, Boost, Maybank/CIMB/Public Bank FPX processing partners), identity verification services, cloud hosting and infrastructure providers, customer support platform providers, and fraud detection services.
wondawin may disclose personal data to our licensing authority, financial intelligence units, law enforcement agencies, or other regulatory bodies where required by applicable law or where we have a good-faith belief that disclosure is necessary to comply with a legal obligation, protect the rights or safety of wondawin, its players, or the public, or to prevent or investigate suspected illegal activity including fraud and money laundering.
In the event of a merger, acquisition, or transfer of the wondawin business or its assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. We will notify registered players of any such transfer affecting their personal data.
wondawin's operations involve the transfer of personal data to countries outside Malaysia, including to the jurisdiction in which our licensing authority is based and where our server infrastructure is located. Where personal data is transferred internationally, wondawin ensures that appropriate safeguards are in place, including contractual protections with data recipients that are equivalent to those required under applicable data protection law.
By registering a wondawin Account, you acknowledge and consent to the transfer of your personal data for the purposes described in this Policy.
wondawin retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. Specific retention periods include:
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with wondawin's data destruction procedures.
wondawin uses cookies and similar tracking technologies for the following purposes: maintaining your login session (session cookies), remembering your platform preferences such as language and display settings, detecting and preventing fraudulent access, and analysing aggregate platform usage to improve performance.
You may control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the wondawin Platform, including the ability to stay logged in to your Account.
Subject to applicable law and our regulatory retention obligations, you have the following rights in respect of your personal data held by wondawin:
To exercise any of these rights, contact wondawin via live chat or the support email listed in Section 15. We will respond to verified data requests within 30 days.
wondawin implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:
In the event of a data breach that poses a risk to your rights, wondawin will notify affected players and relevant regulatory authorities in accordance with applicable legal requirements.
The wondawin Platform is strictly for individuals aged 21 and above. wondawin does not knowingly collect personal data from any person under the age of 21. Age verification is enforced through the KYC process as a condition of withdrawal access.
If wondawin becomes aware that personal data has been collected from a person under 21, the associated Account will be immediately suspended, all data relating to that Account will be securely deleted, and any transactions processed through the Account will be investigated and reversed where possible.
If you have reason to believe that a minor has accessed or registered on the wondawin Platform, please contact us immediately using the details in Section 15.
The wondawin Platform may contain links to third-party websites or services โ for example, links to our licensed payment partners' own information pages. wondawin is not responsible for the privacy practices of third-party websites and this Privacy Policy does not apply to any site outside of the wondawin Platform. We encourage you to review the privacy policy of any third-party site you visit.
wondawin reserves the right to update this Privacy Policy at any time. Where changes are material โ that is, where they affect the legal basis for processing, the categories of data collected, or the rights available to you โ we will notify registered players via the email address or mobile number associated with their Account, with a minimum of 14 days' notice before the revised policy takes effect.
The "Last updated" date at the top of this Policy reflects the date on which the most recent revisions were made. We encourage you to review this Policy periodically to stay informed about how wondawin handles your personal data.
Continued use of the wondawin Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by wondawin, please contact our support team through the following channels:
Our support team communicates in Malaysian English and is available around the clock. Data-related requests will be acknowledged within 5 business days and resolved within 30 days of receipt, subject to identity verification.
wondawin is built on trust. Explore our platform knowing your personal data is secure, handled transparently, and never sold. Ready to get started? Access your wondawin account or explore what's inside.
21+ only ยท Play responsibly ยท International gaming authority licensed