Privacy Policy — wyn8 Platform

This Privacy Policy ("Policy") is published by wyn8 ("we", "us", "our", or "the Platform"), the operator of the online gaming and sports betting platform accessible at https://wyn8.cam. This Policy describes how wyn8 collects, uses, stores, discloses, and otherwise processes personal data relating to persons who access or use the Platform ("you", "your", or "Player").

wyn8 takes its obligations regarding data privacy seriously. This Policy has been prepared to be transparent, accessible, and written in plain terms so that every Malaysian player — whether accessing the Platform from Kuala Lumpur, Penang, Shah Alam, Petaling Jaya, or Johor Bahru — clearly understands how their personal information is handled.

By registering an Account on wyn8 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are published on this website.

For the purposes of this Policy, the following terms carry the meanings set out below:

wyn8 collects Personal Data across several categories. The specific data collected depends on the nature of your interaction with the Platform. The following table summarises the categories of Personal Data wyn8 may collect and process:

wyn8 does not intentionally collect Special Categories of Personal Data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless this is strictly required for a specific legal or regulatory obligation and appropriate safeguards are in place.

wyn8 collects Personal Data through the following means:

• Direct Provision: Data you provide directly when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting the support team, or responding to a promotional offer.
• Automated Technologies: Technical and Usage Data collected automatically when you access the Platform, including IP address logging, cookie tracking, and session analytics from the Platform's backend systems.
• Payment Providers: Transaction confirmation data received from Malaysian payment processors including FPX gateway providers, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, and Hong Leong Bank when processing your deposits and withdrawals.
• KYC and Verification Partners: Identity verification results and age confirmation data received from authorised third-party KYC service providers engaged by wyn8 to fulfil its verification obligations.
• Fraud Prevention and AML Systems: Data generated by wyn8's internal risk management and anti-money laundering systems when monitoring account activity for compliance purposes.
• Referral Programme: Where another wyn8 player refers you to the Platform, limited information about the referral relationship (e.g., referral code used) is recorded. No detailed personal data about you is shared with the referring player.

wyn8 processes your Personal Data for the following clearly defined purposes. We do not process Personal Data for any purpose that is incompatible with those listed below without prior notice and, where required, your consent:

• Account Registration and Management: To create, verify, maintain, and administer your wyn8 Account, including processing login credentials and authentication events.
• Identity and Age Verification (KYC): To verify that you meet the 21+ age requirement and to confirm your identity in compliance with our anti-money laundering obligations and platform eligibility rules.
• Payment Processing: To process MYR deposits and withdrawals via your chosen Malaysian payment method, to maintain accurate financial records, and to reconcile transactions with payment providers.
• Gaming and Betting Services: To deliver the core Platform services — including sportsbook, live casino, slots, lottery, and other game categories — and to settle bets, award winnings, and apply bonus credits accurately.
• Customer Support: To respond to your enquiries, process complaints, and provide multilingual support in English, Bahasa Melayu, and Mandarin Chinese through live chat, WhatsApp, and email channels.
• Responsible Gambling: To apply player protection tools including deposit limits, self-exclusion, reality checks, and cool-off periods in connection with your Account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account compromise, money laundering, and other illegal conduct on the Platform.
• Platform Improvement: To analyse usage patterns and behavioural data in order to improve Platform features, performance, and user experience.
• Legal and Regulatory Compliance: To fulfil obligations under applicable law, including responding to lawful requests from regulatory authorities and law enforcement agencies.
• Marketing Communications: To send promotional offers, bonus notifications, and relevant Platform updates to Players who have opted in to receive such communications. Marketing communications may be withdrawn at any time by updating your Account communication preferences.

wyn8 processes Personal Data only where a lawful basis exists for doing so. The applicable lawful bases are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between wyn8 and you — specifically, the account agreement established when you register — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC verification, anti-money laundering monitoring, and responding to lawful requests from authorities.
• Legitimate Interest: Processing carried out in pursuit of wyn8's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud prevention, Platform security, internal analytics, and responsible gambling monitoring.
• Consent: Where wyn8 relies on your consent as the lawful basis — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

wyn8 does not sell your Personal Data. We do not share your Personal Data with third-party advertisers or data brokers. Personal Data may be shared only in the following limited and controlled circumstances:

• Payment Processors: Necessary financial data is shared with Malaysian payment providers — including FPX gateway operators, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, and Hong Leong Bank — solely for the purpose of processing your MYR transactions. These providers act as independent Data Controllers in respect of their own payment processing operations.
• KYC Verification Providers: Identity and age verification data is transmitted to our authorised third-party KYC partners for the purpose of conducting age and identity checks. These providers are bound by strict confidentiality and data processing agreements.
• Fraud Prevention and AML Partners: Transaction and behavioural data may be shared with authorised fraud prevention or anti-money laundering service providers to detect and prevent illegal activity on the Platform.
• Regulatory and Law Enforcement Authorities: wyn8 may disclose Personal Data to competent regulatory bodies or law enforcement agencies where required to do so by law, court order, or binding regulatory direction.
• Professional Advisors: Legal counsel, accountants, and other professional advisors retained by wyn8 may access Personal Data on a confidential and need-to-know basis in connection with their advisory services.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of wyn8's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations being maintained.

wyn8 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with standard anti-money laundering record-keeping obligations.
• Transaction and Betting Records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial record-keeping regulations.
• KYC Documentation: Identity and age verification documents are retained for the same period as Account and Identity Data, or longer if required by applicable regulatory obligations.
• Customer Support Records: Communication records, including live chat logs and email correspondence, are retained for a minimum of two (2) years from the date of the last interaction.
• Marketing Preferences: Records of marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with applicable marketing regulations.
• Technical and Usage Data: Anonymised or aggregated analytical data may be retained indefinitely, provided it can no longer be associated with an identifiable individual.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with wyn8's internal data lifecycle management procedures.

wyn8 implements a range of technical, organisational, and procedural security measures to protect Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• Encryption: All Personal Data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS protocols. Stored Personal Data and financial records are encrypted at rest using industry-standard symmetric encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based access controls, and all access is logged and subject to audit.
• Two-Factor Authentication: wyn8 offers two-factor authentication (2FA) to all Players as an additional layer of Account security. Players are encouraged to activate 2FA from within their Account settings.
• Intrusion Detection: The Platform is monitored continuously by automated intrusion detection and prevention systems designed to identify and neutralise security threats in real time.
• Staff Training: wyn8 staff who handle Personal Data are trained in data protection principles and are bound by confidentiality obligations as a condition of their engagement.
• Incident Response: In the event of a confirmed data breach that poses a risk to the rights of affected Players, wyn8 will take appropriate remedial action and notify affected individuals in accordance with applicable data breach notification obligations.

wyn8 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small data file stored on your device by your browser. The following categories of cookies are used by wyn8:

wyn8 does not use third-party advertising cookies or behavioural profiling cookies. Your browser settings allow you to manage, block, or delete cookies. Note that disabling strictly necessary cookies will affect your ability to use the Platform. Please consult your browser's help documentation for instructions on managing cookie preferences.

Subject to applicable law, you hold the following rights in relation to Personal Data that wyn8 holds about you. To exercise any of these rights, please contact our Data Support team using the details in Section 15. We will respond to all valid requests within 30 calendar days of receipt.

wyn8 is an adult entertainment platform strictly restricted to persons aged 21 years and above. We do not knowingly collect, process, or store Personal Data belonging to any person under the age of 21.

Age verification is conducted as part of the KYC process for all registered Accounts. Any Account found to have been registered by a person under the age of 21, or where verification of age cannot be completed satisfactorily, will be immediately suspended. All Funds associated with such an Account will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and have reason to believe that a person under your care has registered an Account on wyn8, please contact our support team immediately at [email protected]. We will investigate promptly, suspend the Account, and provide guidance on next steps.

The wyn8 Platform may, from time to time, reference third-party services — such as payment providers, support applications, or responsible gambling information resources — in the context of providing Platform features or player support. wyn8 does not control the privacy practices of these third-party entities and is not responsible for their data handling.

When you interact with a third-party service — for example, when you authenticate a payment through your DuitNow or Touch 'n Go eWallet application — you are subject to that provider's own privacy policy and terms of service. wyn8 encourages you to review the privacy policies of any third-party services you access in connection with your use of the Platform.

wyn8 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.

• Where changes are material — such as the introduction of a new processing purpose or a change to how data is shared — wyn8 will provide advance notice to registered Players via platform notification or email no less than seven (7) days prior to the change taking effect.
• Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgment of the updated terms.
• If you do not agree with any amendment to this Policy, you should cease using the Platform and may request Account closure by contacting our support team.

Prior versions of this Policy are available upon written request to the support team, subject to a reasonable processing period.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as set out in Section 11, or have a concern about how wyn8 handles your Personal Data, please contact our support team through any of the following channels. All privacy-related enquiries are handled by our dedicated data support team.

For formal data rights requests, please email us with the subject line "Data Rights Request — [Your Username]". We may ask you to verify your identity before processing the request. We will acknowledge receipt within 48 hours and provide a full response within 30 calendar days.