winrm7 Privacy Policy

1. Introduction

winrm7 ("we", "us", "our", or "the Platform") is committed to protecting the personal data of all individuals who interact with the winrm7 website at winrm7.net and all associated gaming services. This Privacy Policy sets out, in plain terms, what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over your own information.

This Policy applies to all registered winrm7 Members, visitors who browse winrm7.net without registering, and individuals who contact us for support. It should be read alongside the Terms & Conditions, which govern your use of the Services more broadly.

By registering an account on winrm7 or continuing to use the platform after this Policy's effective date, you acknowledge that you have read and understood how winrm7 handles your personal data.

2. Data Controller

winrm7 acts as the data controller for all personal data collected through the winrm7 platform. As data controller, winrm7 determines the purposes and means of processing your personal information.

For questions or requests relating to personal data, contact the winrm7 Data Protection team at [email protected] — see Section 15 for full contact details.

3. Data We Collect

winrm7 collects personal data through several channels — directly from you during registration and account use, automatically through your use of the platform, and in limited circumstances from third parties such as payment providers. The categories of data we collect include:

winrm7 does not collect or process any special category data (e.g., health data, biometric data, political opinions) except where you voluntarily provide relevant information in the context of a responsible gaming self-exclusion request, in which case such information is processed solely for the purpose of your protection.

4. How We Use Your Data

winrm7 uses personal data for the following purposes:

• Account management: Creating and maintaining your winrm7 Account, verifying identity, processing deposits and withdrawals, and managing your wallet balance.
• Service delivery: Operating the sportsbook, live casino, slots, and all other winrm7 gaming products. Processing bets, settling outcomes, and crediting winnings.
• Regulatory compliance: Fulfilling Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations required by our gaming licence. Retaining transaction and identity records as required by the licensing authority.
• Fraud prevention and security: Detecting and preventing fraudulent activity, suspicious betting patterns, multi-accounting, and unauthorised account access.
• Responsible gaming: Monitoring gaming behaviour for signs of problem gambling, administering self-exclusion requests, and enforcing deposit and loss limits you have set.
• Customer support: Responding to queries, complaints, and account assistance requests submitted through live chat or email.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Members who have not opted out. See Section 13.
• Platform improvement: Analysing aggregate, anonymised usage data to improve the winrm7 platform experience, fix bugs, and optimise performance.

5. Legal Basis for Processing

winrm7 processes your personal data under the following legal bases, depending on the processing activity:

• Contract performance: Processing necessary to provide the Services under the winrm7 Terms & Conditions (account management, payments, gameplay).
• Legal obligation: Processing required to comply with KYC, AML, and licensing authority record-keeping requirements.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and improving service quality — where these interests are not overridden by your rights.
• Consent: Marketing communications, where applicable. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

winrm7 does not sell your personal data to third parties. We share personal data only where necessary and with the following categories of recipients:

• Payment service providers: Touch 'n Go, Boost, GrabPay, FPX banking partners, and crypto payment processors — to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Gaming software providers: Game studios and platform providers (e.g., Evolution, Pragmatic Play) who power the casino and slots products — limited to session and bet data required for game operation.
• Identity verification and AML screening providers: Third-party KYC and fraud prevention services who assist winrm7 in meeting licensing compliance obligations.
• Regulatory and licensing authorities: Where required by law, licence conditions, or a valid legal order, winrm7 may disclose Member data to the relevant gaming authority or law enforcement body.
• IT and infrastructure providers: Cloud hosting, security monitoring, and analytics service providers who process data on winrm7's behalf under binding data processing agreements.

All third-party data processors engaged by winrm7 are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified by winrm7.

7. Cookies & Tracking Technologies

winrm7 uses cookies and similar tracking technologies to operate the platform and improve your experience. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function — session authentication, login state, CSRF protection tokens. These cannot be disabled without breaking platform functionality.
• Performance cookies: Collect anonymised data about how pages are used — load times, error rates, navigation patterns — to help winrm7 improve platform performance.
• Functional cookies: Remember your preferences such as language settings, last-visited game category, and odds format selection.
• Analytics cookies: Aggregate, pseudonymised usage data used to understand which features are most used and to guide product development priorities.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the winrm7 platform.

8. Data Retention

winrm7 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active accounts: All account, transaction, and gaming activity data is retained for the duration of your membership.
• Closed accounts: Following account closure, winrm7 retains identity, KYC, financial, and transaction records for a minimum of five (5) years to comply with AML regulations and licensing authority requirements.
• Self-exclusion records: Records of self-exclusion requests are retained indefinitely to prevent re-registration during an active exclusion period and to maintain a history of exclusion status.
• Support communications: Chat transcripts and email correspondence are retained for two (2) years from the date of the last interaction.
• Marketing consent records: Records of marketing opt-in and opt-out are retained for the lifetime of the account plus two years.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual.

9. Data Security

winrm7 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and winrm7 servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular independent security penetration testing and vulnerability assessments.
• Two-factor authentication (2FA) options for Member accounts to protect against credential compromise.
• Automated fraud detection and anomaly monitoring systems that flag suspicious access patterns in real time.

No data transmission over the internet can be guaranteed 100% secure. While winrm7 takes all reasonable steps to protect your data, you also play a role in security by maintaining a strong, unique password for your winrm7 account and enabling 2FA.

10. Your Data Rights

Subject to applicable law and the conditions of our gaming licence, you have the following rights regarding your personal data held by winrm7:

• Right of access: Request a copy of the personal data winrm7 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected — subject to our legal obligations to retain certain records.
• Right to restriction: Request that winrm7 restrict processing of your data in certain circumstances, e.g. while a dispute is being resolved.
• Right to data portability: Request your personal data in a structured, machine-readable format for transfer to another controller.
• Right to object: Object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, contact winrm7 at [email protected]. Requests will be acknowledged within 72 hours and fulfilled within 30 days. In exceptional circumstances the response period may be extended to 60 days, in which case you will be notified with the reason for the extension.

11. International Data Transfers

winrm7 operates servers and engages service providers across multiple jurisdictions. Your personal data may be transferred to and processed in countries outside Malaysia. When winrm7 transfers data internationally, it does so only where:

• The destination country provides an adequate level of data protection as determined by the relevant authority; or
• Appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules between winrm7 and the receiving entity; or
• The transfer is necessary for the performance of your contract with winrm7 (e.g., payment processing via an internationally operating e-wallet provider).

12. Children's Privacy

The winrm7 platform is strictly prohibited for individuals under the age of 21. winrm7 does not knowingly collect personal data from persons under 21. If winrm7 becomes aware that personal data has been collected from a minor, the account will be immediately suspended, all data will be deleted, and any funds held will be returned to the originating payment method after investigation.

If you believe a person under 21 has registered on winrm7, please contact [email protected] immediately.

13. Marketing Communications

With your consent, winrm7 may send you promotional emails, bonus notifications, and platform updates. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any winrm7 marketing email.
• Updating your communication preferences in Account Settings under the "Notifications" section.
• Contacting the winrm7 support team to request immediate removal from all marketing lists.

Opting out of marketing communications does not affect transactional emails relating to your account — deposit confirmations, withdrawal notifications, security alerts, and KYC requests will continue to be sent as these are necessary for the operation of your account.

14. Changes to This Privacy Policy

winrm7 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Members via email notification or a prominent in-platform notice prior to the change taking effect. The revised Policy will be posted on this page with an updated effective date.

Your continued use of the winrm7 platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the changes. If you do not accept a revised Policy, you should cease using the platform and may close your account in accordance with the process described in the Terms & Conditions.

15. Contact & Data Protection

For all privacy-related enquiries, data subject requests, or concerns about how winrm7 handles your personal information, please contact the winrm7 Data Protection team:

• Email: [email protected] — include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 for immediate queries. For formal data subject requests, email is preferred as it creates a written record.
• Response Commitment: Acknowledgement within 72 hours; full response within 30 days as required.

If you are not satisfied with winrm7's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.