We take the privacy of every Winsortoto user seriously. This policy explains exactly what data we collect, why we collect it, how we protect it, and what rights you hold over it.
Last Updated: 1 January 2026These cards summarise our key data protection principles. The full legal text in the clauses below is the authoritative version of this policy.
Winsortoto collects only the personal data that is strictly necessary to operate your account, verify your identity, process transactions, and comply with our anti-money laundering obligations. We do not collect data for the sake of collecting it.
All personal data transmitted between your device and the Winsortoto platform is protected by 256-bit SSL/TLS encryption. Stored data is encrypted at rest using industry-standard protocols. Your financial details and identity documents are never held in plain text.
Winsortoto does not sell, rent, or trade your personal data to third-party marketers, advertising networks, or data brokers. Your information is used solely to deliver and improve our services, fulfil legal obligations, and prevent fraud.
You have the right to access, correct, and request deletion of your personal data. You may also request a portable copy of your data at any time. All rights requests are handled by our support team and acknowledged within 72 hours of receipt.
We use cookies and similar technologies to maintain session security, analyse platform performance, and personalise your experience. Essential cookies cannot be disabled as they are required for the platform to function. Non-essential cookies may be managed through your browser settings.
Identity verification data collected during the KYC process is processed under strict anti-money laundering and counter-terrorism financing obligations. This data is handled with the highest level of security and is disclosed only to authorised compliance partners and regulatory authorities where legally required.
By accessing or using the Winsortoto platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, please do not use our services. This policy applies to all users of the Winsortoto platform, including visitors, registered players, and former account holders whose data we are required to retain under applicable law.
Winsortoto ("we", "us", "our", "the Platform") is committed to protecting the personal data of all individuals who interact with our services at winsortoto.cam. This Privacy Policy ("Policy") explains how we collect, use, store, share, and protect your personal information when you visit our website, register an account, make deposits or withdrawals, place wagers, or contact our support team.
This Policy has been prepared in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and applicable privacy standards in the jurisdictions in which we operate. Malaysian users are subject to the provisions of the Malaysian Personal Data Protection Act 2010 (PDPA) to the extent applicable to their interaction with the Platform.
We may update this Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after any update constitutes acceptance of the revised Policy.
This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Winsortoto platform more broadly, and our Responsible Gambling policy.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living individual, either on its own or in combination with other data. Examples include your name, email address, date of birth, payment details, and IP address. |
| "Data Controller" | Winsortoto, the entity that determines the purposes and means of processing personal data collected through this Platform. |
| "Data Processor" | Any third-party service provider that processes personal data on behalf of Winsortoto under a data processing agreement, such as payment processors and identity verification providers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "KYC" | Know Your Customer — the identity verification process through which we confirm a user's identity, age, and other eligibility criteria. |
| "Cookie" | A small text file placed on your device by our platform or third-party tools to store session, preference, or analytical data. |
| "User" / "You" | Any individual who accesses the Winsortoto platform, whether registered or unregistered. |
Winsortoto collects personal data through three primary channels: data you provide directly to us, data collected automatically when you use the Platform, and data obtained from third parties where permitted. The categories of data we collect are as follows:
3.1 Data You Provide Directly
3.2 Data Collected Automatically
3.3 Data from Third Parties
The personal data we collect is used for specific, clearly defined purposes. We do not process your data for any purpose incompatible with the purposes stated below.
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, email address, phone number |
| Identity and age verification (KYC) | Identity documents, selfie/liveness data, date of birth |
| Processing deposits and withdrawals | Payment data, bank/e-wallet identifiers, transaction history |
| Fraud detection and prevention | IP address, device data, usage patterns, payment data |
| Anti-money laundering compliance | KYC data, transaction data, source-of-funds information |
| Customer support and complaint resolution | Communication data, account history, transaction records |
| Responsible gambling monitoring | Wagering patterns, session data, self-exclusion status |
| Platform performance and improvement | Usage data, technical data, session data |
| Personalisation of platform experience | Preference data, usage history |
| Promotional communications (where consented) | Email address, phone number, account preferences |
Responsible Gambling Processing: Winsortoto analyses wagering behaviour and account activity patterns to identify users who may be exhibiting signs of problem gambling. This processing is carried out in the interest of player welfare and is a core component of our duty of care. Where we identify concerning patterns, we may proactively contact the player or apply account restrictions in line with our responsible gambling obligations.
Winsortoto processes personal data on one or more of the following lawful bases, depending on the nature of the processing activity:
Winsortoto does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
No Third-Party Marketing: Your contact details, account information, and usage data are never shared with advertisers, marketing networks, or data brokers. We do not use your data to build advertising profiles or sell insights to third parties under any circumstances.
Winsortoto retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum and maximum retention periods:
| Data Category | Retention Period |
|---|---|
| Account registration data | For the lifetime of the account, plus 5 years after closure |
| KYC identity documents | 5 years from the date of the last transaction or account closure, as required by AML regulations |
| Transaction and financial records | 7 years from the date of each transaction, in compliance with financial record-keeping obligations |
| Customer support communications | 3 years from the date of the last interaction |
| Wagering and game history | 5 years from the date of the activity |
| Technical and usage data (logs) | 12 months on a rolling basis |
| Self-exclusion records | Indefinitely, to prevent re-registration during an active exclusion period |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction policy. Where data cannot be deleted immediately due to technical constraints, it will be isolated and protected until secure deletion is possible.
Winsortoto employs a layered security architecture to protect the personal data we hold. Our key security measures include:
Your Role in Security: No security system is entirely impenetrable. You are responsible for maintaining the confidentiality of your account credentials. Winsortoto will never ask you for your password via email, live chat, or any other channel. If you receive any communication purporting to be from Winsortoto that asks for your password, please report it immediately to [email protected].
Winsortoto uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that allow us to recognise returning visitors, maintain session security, and understand how users interact with the Platform.
We use the following categories of cookies:
You can manage non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may limit the functionality available to you on the Platform. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or other browsers you use to access Winsortoto).
Subject to applicable law and the conditions of our gaming licence (which may restrict certain rights in respect of data held for AML or regulatory compliance purposes), you hold the following rights in relation to your personal data processed by Winsortoto:
To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and provide a substantive response within 30 days. We may ask you to verify your identity before processing your request.
The Winsortoto Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.
If we become aware that personal data has been collected from a person under the age of 21 — whether through our own detection or through a report from a parent or guardian — we will immediately suspend the relevant account, delete the collected data where legally permissible, and refund any deposited funds after applicable verification and processing.
If you believe that a minor has registered an account on our Platform or that personal data belonging to a minor is being processed by us, please contact our support team immediately at [email protected]. We will investigate and respond within 48 hours.
Winsortoto operates under international gaming licensing and may process or store personal data outside of Malaysia. Where personal data is transferred to countries that do not provide a level of data protection equivalent to Malaysian standards, we implement appropriate safeguards, which may include:
Our key third-party service providers, including identity verification and payment processing partners, are required to maintain data protection standards consistent with internationally recognised frameworks as a condition of their engagement with Winsortoto.
By registering an account and using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia as described in this section. We take reasonable steps to ensure that any such transfers are carried out securely and in compliance with applicable data protection law.
Winsortoto reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable data protection law, changes in our data processing practices, new service features, or recommendations from data protection authorities.
When we make material changes to this Policy — meaning changes that significantly affect how we use your personal data or the rights available to you — we will notify active account holders by email or via an in-platform notice prior to the changes taking effect. Minor or administrative updates will be reflected by a revision of the "Last Updated" date without direct notification.
We encourage all users to review this Policy periodically. The current version of this Policy, along with its effective date, is always available at winsortoto.cam/privacy-policy. Continued use of the Platform after any revision constitutes acceptance of the amended Policy.
If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way Winsortoto handles your personal data, you may contact us through the following channels:
For requests related to responsible gambling tools — including self-exclusion, deposit limits, or session time restrictions — please refer to our dedicated Responsible Gambling page for the applicable contact process and tools.
This Privacy Policy was last reviewed and updated on 1 January 2026. Winsortoto is committed to maintaining transparent, fair, and lawful data processing practices in all aspects of our operations.
You now know exactly how we handle your data. Explore Winsortoto with confidence — fast local payments, competitive odds, and support available around the clock.
For players aged 21 and above only. Questions about your data? Contact us at [email protected]