Privacy Policy wimrm – Personal Data Protection for Malaysia Members

This Privacy Policy explains how wimrm ("we", "Platform") collects, processes, uses, stores, and protects your personal data when you use the wimrm.net website or our official mobile app.

By registering as a wimrm member or continuing to use our platform after being notified of this policy, you agree to the practices described herein. If you do not agree, please discontinue use of the platform and contact us to close your account.

This policy applies to all users of the wimrm platform, including website visitors, registered users, and active players. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles.

Wimrm collects your personal data in several ways – directly when you register or fill in a form, automatically through your use of the platform, and in some cases from trusted third parties.

The personal data we collect is used specifically for the following purposes, and only for these purposes:

• Account Management: Create, verify, and manage your wimrm account including mandatory KYC processes.
• Transaction Processing: Process deposits, withdrawal of winnings, and all other financial transactions related to your account.
• Service Provision: Allow you to seamlessly access all games, promotions, and features on the wimrm platform.
• Security & Fraud Prevention: Identify and prevent suspicious activity, fraud, money laundering, and platform abuse.
• Regulatory Compliance: Meet legal obligations including anti-money laundering (AML) and PDPA requirements.
• Customer Support: Respond to inquiries, resolve issues, and provide technical support.
• Platform Improvement: Analyze aggregated usage patterns to improve platform design and functionality.
• Marketing Communications: Send promotional information, bonuses, and exclusive offers – only if you have given consent to receive them.

Wimrm does not use your data to make fully automated decisions (without human involvement) that could have a significant impact on your rights or interests.

In compliance with Malaysia's PDPA, wimrm processes your personal data only on a lawful basis:

• Consent: You have given explicit consent, such as agreeing to receive marketing communications or accepting this Privacy Policy during registration.
• Contract Performance: Processing is necessary to provide the services you have requested, including executing transactions and maintaining your account.
• Legal Obligations: wimrm is required by law to process certain data to fulfil compliance requirements such as AML and KYC.
• Legitimate Interest: We process certain data based on legitimate business interests, such as fraud prevention and ensuring platform security, provided these interests do not override your fundamental rights.

Wimrm takes a highly cautious approach to sharing your personal data. We does not sell your personal data to anyone. Data sharing only occurs in the following limited situations:

• Trusted Service Providers: Third parties that help operate our business, such as payment processors, game providers, and technology infrastructure providers – all bound by strict confidentiality agreements.
• Legal Requirement: When required by court order, law enforcement agency directive, or other regulatory obligation.
• Critical Interest Protection: In emergency situations where data disclosure is necessary to protect your safety or the safety of others.
• Business Restructuring: In the event of a merger, acquisition, or asset sale – you will be notified in advance and your rights will be preserved.

Wimrm retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or for as long as required by applicable law.

In general:

• Active account data is retained for the duration your account remains active and for up to 7 years after account closure to meet legal and tax compliance requirements.
• Financial transaction records are retained for a minimum of 7 years in accordance with AML requirements and financial regulations.
• Technical and security log data is retained for 12 months for investigation purposes in the event of a security incident.
• Customer support communication records are retained for 3 years.

When the retention period expires or when you request data deletion (subject to eligibility), wimrm will delete or anonymise your data in a secure and irreversible manner.

As a data subject under Malaysia's PDPA, you have the following rights, which you may exercise at any time:

To exercise any of the rights above, please contact the wimrm customer support team. We will process your request within 21 business days. For more complex cases, this period may be extended, but you will be notified.

The wimrm platform uses cookies and similar tracking technologies to enhance your experience and enable certain features to function properly.

Types of cookies we use:

• Necessary Cookies (Required): Required for core platform functions such as session login and account security. Cannot be disabled.
• Performance Cookies: Collect information about how you use the platform to help us improve our services. Data is collected anonymously.
• Functional Cookies: Save your preferences such as language and display settings to deliver a more personalized experience.
• Analytics Cookies: Help us understand overall platform usage patterns for continuous improvement.

Wimrm continually invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we employ include:

• 256-bit SSL encryption for all communications between your device and wimrm servers.
• Data encryption at rest for sensitive information stored in our database.
• Strict access controls – only authorised staff may access personal data, and only for specific work-related purposes.
• An advanced firewall and intrusion detection system that continuously monitors network traffic.
• Regular security testing including penetration testing conducted by independent security experts.
• Mandatory security training for all wimrm staff involved in data handling.

That said, no system can guarantee 100% absolute security. In the event of any data security breach affecting your rights or freedoms, wimrm will notify you within the timeframe required by applicable law.

The wimrm platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under 18.

Wimrm reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or changes to platform services.

When material amendments occur:

• We will update the "Last updated" date at the top of this page.
• In-app notifications and / or emails will be sent to registered members to inform them of important changes.
• Amendments take effect 14 days after publication, giving you sufficient time to review the changes.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the wimrm platform after any amendments take effect constitutes your acceptance of the revised terms.

If you have any questions, concerns, or wish to exercise your data rights, the wimrm team is here to help.

You can reach us via:

• Live Chat: Available 24/7 on the wimrm mobile app or our web platform – the fastest way to get a response.
• Support Email: Send your enquiry to [email protected]. We aim to respond within 24–48 hours on business days.

Wimrm takes every privacy complaint seriously and strives to resolve them promptly and fairly. If you are not satisfied with how we have handled your complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.