Rujukan Laman

Privacy Policy – How We Handle Your Information

When you open an account with win2888, we collect and protect the information needed to run your wallet, verify withdrawals and keep your sessions secure.

Account data protectionCookie usage explainedWithdrawal verificationData retention termsContact for changes
win2888 Privacy Policy – How We Handle Your Information
PRIVACY CONTACT

How to Reach Us About Your Data

If you have questions about this policy, want to access your records, or need to update your details, our support team is available through live chat, email and phone.

Live Chat Open the chat icon in the bottom right corner of any page and select Privacy Inquiry from the menu. Our agents can pull your account summary, explain what data we hold, and start a formal access or deletion request on the spot. Chat is the fastest way to get answers during business hours.
Email Support Send your data request to our privacy team at the address shown in your account settings. Include your registered email and a brief description of what you need. We reply within 48 hours and will ask for identity confirmation if you request changes or a data export.
Phone Line Call the number displayed in your account dashboard and choose the Privacy option from the menu. Phone support is open daily and can guide you through access requests, correction procedures, and deletion timelines. Keep your account email handy for verification.
DATA HANDLING

How We Protect and Manage Your Information

We encrypt your password, payment tokens and withdrawal details using industry-standard protocols.

Encryption Standards

All sensitive fields—passwords, payment tokens, and personal identifiers—are encrypted in our database and during transmission. We use TLS for every page load and API call, so your data stays private even on public Wi-Fi. Encryption keys are rotated on a fixed schedule and stored separately from user records.

Cookie Policy

We set a session cookie when you log in and a language-preference cookie that lasts 30 days. Both are strictly functional: the session cookie keeps you signed in across the lobby, and the language cookie remembers your choice so you don't reset it every visit. You can delete cookies in your browser settings, though doing so will log you out.

Account Security

Every login is logged with a timestamp, IP address and device fingerprint. Check your recent-activity list in account settings to confirm that all sessions belong to you. If you see an unfamiliar entry, change your password immediately and contact support. We lock accounts after five failed login attempts to block brute-force attacks.

Data Retention

Active account records stay in our system until you close your account. Transaction logs are archived for the period required by local regulation, then securely deleted. If you request account closure, we remove personal identifiers within 30 days but retain anonymised transaction summaries to meet compliance obligations.

Third-Party Sharing

We share only the minimum data needed with licensed payment processors to clear your deposits and withdrawals. Touch 'n Go, GrabPay, Boost and FPX receive your transaction amount and a reference ID, but never your lobby activity or game history. No marketing partners or ad networks receive your personal information from us.

Your Rights

Where local law permits, you can request a copy of your data, ask us to correct errors, or delete records that are no longer needed. Contact us through any of the channels in the Privacy Contact section, verify your identity, and we will process your request within the timeframe required by Malaysian regulations.

Privacy Policy FAQ

Below are the questions we hear most often about data collection, cookies, retention and your rights. If you need more detail, reach out through live chat, email or phone and we will walk you through the specifics for your account.

We ask for your email, phone number, date of birth and payment details during registration. These fields let us verify your identity, process deposits via Touch 'n Go, GrabPay, Boost dan FPX, and send withdrawal confirmations. We also log your IP address and device type to detect unauthorised access.

We share only the transaction amount and reference ID with licensed payment processors when you deposit or withdraw. Touch 'n Go, GrabPay, Boost and FPX never see your game history or lobby activity. We do not sell or rent your personal information to marketing partners or ad networks.

Active account records remain in our system until you close your account. Transaction logs are archived for the period required by Malaysian regulations, then securely deleted. If you request closure, we remove personal identifiers within 30 days but retain anonymised summaries to meet compliance obligations.

We set a session cookie to keep you logged in across pages and a language-preference cookie that lasts 30 days. Both are strictly functional. You can delete cookies in your browser settings, though doing so will log you out and reset your language choice on the next visit.

Log in and go to account settings to view your registered email, phone and payment methods. To request a full data export or correct an error, contact us through live chat, email or phone. We will verify your identity and process updates within three business days.

Yes. Contact support through any channel, confirm your identity, and request account closure. We remove personal identifiers within 30 days. Transaction logs required by local regulation are anonymised and archived, then deleted after the mandated retention period expires.

All payment tokens are encrypted in our database and during transmission using TLS. We never store your full card number or PIN. Touch 'n Go, GrabPay, Boost and FPX handle tokenisation on their end, so sensitive credentials stay with the licensed processor and never pass through our servers in plain text.