Data Protection

Privacy Policy
wimmy — Your Data We Care

Your privacy is not merely a legal obligation to wimmy — it is a moral responsibility we take seriously. Read this document to understand what data we collect, how it is used, and your rights as a user.

Last updated: 1 January 2026
Policy Summary: wimmy collects only the minimum data required, does not sell your information to advertisers, protects all data with high-grade encryption, and gives you full control over your personal information.

1. Types of Information We Collect

Wimmy collects your personal information solely for defined purposes necessary to deliver a safe and quality service. The following are the categories of data collected:

Data Category Example Information Primary Purpose
Identity Information Full name, IC number, date of birth KYC verification & account security
Contact Information Email address, phone number Communication & 2FA verification
Financial Data Payment methods, transaction records Deposit & withdrawal processing
Technical Data IP address, device type, browser Security & fraud detection
Usage Data Game history, platform activity Service enhancement

We do not collect data irrelevant to the provision of our services. Sensitive information such as full credit card details is not stored in wimmy's systems — it is processed directly through recognised and certified third-party payment gateways.

wimmy practices a "minimum collection" principle — we only collect what is strictly necessary to provide you with a safe and reliable service.

2. How We Use Your Data

Every piece of information collected by wimmy is used for a specific and legitimate purpose. We do not use your data for any purpose outside the scope stated below:

  • Account management — to create, verify, and securely maintain your account
  • Transaction processing — to process deposits, withdrawals, and all financial transactions on the platform
  • Identity verification (KYC) — to comply with anti-money laundering requirements and verify that users are aged 18 and above
  • Fraud prevention — to detect and block suspicious or unauthorised activity in order to protect all users
  • Service communications — to send important notifications related to your account, transactions, and security
  • Platform improvements — to analyse usage patterns and improve the user experience
  • Legal compliance — to fulfil legal obligations applicable in Malaysia

Wimmy not use your data to sell profiles to third-party advertisers, use data for marketing purposes without your consent, or share your gaming activity with external parties without a legal requirement.

3. Data Storage & Security Measures

The security of your data is a core technical priority at wimmy. We invest in industry-standard security infrastructure to ensure your information is always protected.

  • 256-bit SSL encryption for all communications between your device and wimmy servers
  • Password storage in hashed format using the bcrypt algorithm — no one at wimmy can view your original password
  • Isolated database with strict access controls — only authorised staff with an operational need may access user data
  • Regular data backups with full encryption to ensure service continuity
  • 24/7 system monitoring to detect unauthorised access attempts or security anomalies
  • Regular security audits by internal security teams and independent third-party auditors

Your personal data is retained for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Upon account closure, data will be deleted or anonymised in accordance with our data retention policy, unless required for legal obligations.

In the event of any security incident affecting your data, wimmy will notify you within 72 hours in line with industry best practices.

4. Data Sharing with Third Parties

Wimmy does not sell, rent, or share your personal data with third parties for marketing or commercial purposes. However, there are limited situations where data sharing is necessary:

  • Payment gateway providers — financial data required to process transactions is shared with recognised payment providers such as FPX and e-wallet providers
  • Technical service providers — companies that assist in operating the platform, such as cloud server providers and performance analytics services
  • Regulatory bodies and law enforcement authorities — when required by court order or a lawful request from Malaysian authorities
  • Identity verification service providers — for KYC and anti-money laundering requirements

All third parties that receive wimmy user data are bound by strict confidentiality agreements and are required to use that data only for permitted purposes. We do not control third-party privacy policies but select partners who adhere to high security standards.

wimmy has never and will never sell user data to advertising or marketing companies under any circumstances.

5. Cookies, Sessions & Tracking Technologies

Wimmy uses cookies and similar technologies to enhance the user experience and ensure platform security. The following are the types of cookies used:

  • Session Cookies (Required) — required to maintain your login session and ensure session security. Automatically deleted when you close your browser.
  • Preference Cookies — to store user preferences such as language selection and theme display for your convenience.
  • Analytics Cookies — to collect anonymised usage data that helps us understand how users interact with the platform for improvement purposes.
  • Security Cookies — helps identify trusted devices and detect unauthorised login attempts.

You can manage or block cookies through your browser settings. However, blocking essential cookies may affect platform functionality — particularly login and session security. We recommend allowing essential cookies for the best wimmy experience.

6. Your Rights as a User

As a wimmy member, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010:

7. Protection of Children's Data

Wimmy is a platform exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data from children or minors.

Should we discover that data belonging to a minor has been collected without our knowledge — for example through registration using false information — that data will be deleted immediately and the account in question will be closed without notice.

If you believe that your child or an underage family member has registered at wimmy, please contact our support team immediately. We will take prompt action to resolve the matter.

8. Amendments to This Privacy Policy

Wimmy reserves the right to update or modify this Privacy Policy from time to time in line with changes in legislation, technology, or our operational practices. Any material amendments will be communicated to users via:

  • In-platform notifications when you log in
  • Email to the address registered with your account
  • Update the "Last updated" date at the top of this document

Continued use of the wimmy platform after any amendments take effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we manage your data.

9. Contact Us About Privacy

If you have any questions, concerns, or requests regarding your personal data at wimmy, our team is ready to assist. You can reach us via:

  • Live Chat 24/7 — the fastest method, available directly within the wimmy platform
  • Email: [email protected] — for written requests requiring an official record

For requests relating to data access rights, correction or deletion, please include the following in your request: full name, wimmy account number, request type and a copy of your identification document for verification purposes. We will process your request within 14 business days.

All privacy-related requests are handled with full confidentiality. Information you provide for the purpose of a privacy request will only be used to verify your identity and process that request.

Your Rights Regarding Personal Data

01
Right of Access

You have the right to request a copy of all personal data wimmy holds about you. Requests will be processed within 14 working days.

02
Right to Rectification

If any of your data is inaccurate or out of date, you may request a correction at any time through your account profile or by contacting support.

03
Right to Erasure

You may request the deletion of your personal data, subject to applicable legal data retention obligations.

04
Right to Restrict Processing

You may request that wimmy restrict the processing of your data in certain situations — for example, while the accuracy of your data is under investigation.

05
Right to Data Portability

You have the right to receive the data you provided to us in a machine-readable format for the purpose of transferring it to another service.

06
Right to Object

You may object to the processing of your data for specific purposes such as marketing communications — requests will be actioned promptly.

How wimmy Protecting Your Privacy

End-to-End Encryption

All communications between your device and wimmy's servers are protected by 256-bit SSL — the same standard used by banking institutions and Malaysian government portals.

No Data Sales

Wimmy has never and will never sell, rent, or share user profiles with advertisers or marketing companies. Your data belongs to you.

Strict Access Controls

Only wimmy staff with a legitimate operational need may access user data — and every access is logged and monitored for security audit purposes.

Regular Security Audits

Wimmy's systems undergo regular internal and external security audits to ensure data protection consistently meets the latest industry standards.

Two-Factor Authentication

Your wimmy account is protected by two-factor authentication, ensuring that even if your password is compromised, no one else can access your account without the additional verification step.

Legal Compliance

Wimmy's privacy policy fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are protected under local law.

General Questions About Privacy

No. wimmy does not store sensitive payment details such as full card numbers, CVV codes, e-wallet PINs, or online banking passwords. All transactions are processed directly through recognised, security-certified third-party payment gateways. wimmy only receives confirmation that a transaction was successful or failed — not your sensitive details.

Yes, you may request deletion of your personal data by closing your account and submitting a written request to our privacy team. However, certain data may need to be retained for a specified period in accordance with anti-money laundering laws and financial record requirements. We will inform you of the categories of data that must be retained and the applicable retention periods.

No. wimmy does not share users' personal data with other casino platforms, other betting companies, or any commercial entities not directly related to wimmy's operations. Your data is only shared with technical service providers directly involved in running the wimmy platform, and they are bound by strict confidentiality agreements.

Accounts inactive for more than 12 consecutive months will be considered dormant. wimmy will send an email notification before any action is taken. Data for inactive accounts is retained in accordance with our data retention policy and applicable legal requirements. You can reactivate your account at any time by logging in or contacting support.

Play with Feel Secure

Your privacy is fully protected at wimmy. Register today and enjoy a safe, fair and responsible gaming experience.

For individuals aged 18 and above. Also read Terms and Conditions and Responsible Gaming.

Bahasa Melayu