Privacy Policy

Wingo ("we", "us", "our", "Company") is the operator of the online gaming and sports betting platform accessible at wingo.cam ("Platform"). As part of providing our services — which include casino games, live dealer tables, sports betting, and associated account management — we necessarily collect and process certain personal data about our players and website visitors ("you", "User").

This Privacy Policy ("Policy") sets out in clear, plain terms: what personal data we collect, the purposes for which we process it, the legal bases on which we rely, how long we retain data, your rights in respect of your personal data, and how to contact us with any privacy-related enquiry or complaint.

We are committed to protecting the privacy and security of every player on the Wingo platform. We collect only the data that is genuinely necessary to operate your account safely, process your transactions, and comply with our legal and regulatory obligations. We do not sell personal data to third parties under any circumstances.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

The categories of personal data we collect depend on your relationship with the Platform — whether you are a visitor, a registered player, or a player undergoing identity verification. The table below summarises the categories of data we collect and the context in which each category arises:

We do not collect any special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by applicable law or regulation, and only then with your explicit consent where required.

Wingo collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or responding to a survey or promotional communication.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and usage behaviour — collected via server logs, cookies, and similar technologies.
• Third-Party Payment Providers: Transaction confirmation data received from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and partner Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong) as part of deposit and withdrawal processing.
• Identity Verification Services: Data received from third-party KYC and age verification service providers engaged by Wingo to validate your identity documents.
• Fraud Prevention & Security Providers: Risk signals and device fingerprint data received from fraud detection service providers to protect the integrity of the Platform and the security of player accounts.

Wingo processes personal data only where a valid legal basis exists for doing so. The principal legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform our obligations under the contract formed when you register an account — including account management, payment processing, KYC verification, and the delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering obligations, age verification requirements, fraud prevention duties, and record-keeping regulations.
• Legitimate Interests: Processing carried out in pursuit of Wingo's legitimate business interests — including fraud detection, platform security, responsible gambling monitoring, and internal analytics — where those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent for specific processing activities (such as optional marketing communications), we will request that consent explicitly and separately. You may withdraw consent at any time by contacting our support team or updating your account preferences.

We use your personal data exclusively for the following defined purposes:

• To create, manage, and maintain your Wingo account and verify your identity and eligibility in accordance with our Terms & Conditions.
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method, including DuitNow, FPX, Touch 'n Go eWallet, Boost, and Malaysian bank transfers.
• To verify your age (21+), identity, and address as part of the mandatory KYC process, and to comply with applicable anti-money laundering regulations.
• To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, bonus abuse, and unauthorised access to accounts or the Platform.
• To enforce our Terms & Conditions, including the suspension or closure of accounts found to be in breach.
• To monitor gaming activity patterns for the purposes of our responsible gambling programme — including identifying players who may be displaying signs of problem gambling and offering support tools.
• To provide customer support in English, Bahasa Melayu, and Mandarin via live chat, WhatsApp, and email.
• To personalise your experience on the Platform, including displaying relevant game recommendations and promotional offers based on your activity history.
• To send transactional communications relevant to your account — including deposit confirmations, withdrawal updates, KYC status notifications, and security alerts.
• To conduct internal analytics and improve the performance, stability, and user experience of the Platform.
• To comply with any applicable legal, regulatory, or court-ordered obligation to disclose personal data to a competent authority.

Wingo shares personal data only in limited and controlled circumstances with the categories of recipients described below. In all cases, data sharing is subject to strict confidentiality obligations and appropriate safeguards:

• Payment Processors: DuitNow, FPX networks, Touch 'n Go eWallet, Boost, GrabPay, and participating Malaysian banking institutions (Maybank, CIMB, Public Bank, Hong Leong) — to the extent necessary to process deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Third-party identity verification services engaged to perform age verification and document authentication as part of the KYC process.
• Fraud & Security Service Providers: Specialist fraud prevention and cybersecurity partners engaged to protect the Platform and player accounts from unauthorised access, suspicious activity, and money laundering.
• Game Technology Providers: Third-party game studios and live dealer platform providers who supply the games available on the Platform. These providers may receive limited session data necessary for game functionality — they do not receive your financial or identification documents.
• IT & Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who support the technical operation of the Platform under binding data processing agreements.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory directive — including disclosure to relevant law enforcement or anti-money laundering authorities in connection with a lawful investigation.
• Professional Advisors: Lawyers, auditors, and compliance consultants, subject to strict professional confidentiality obligations, where necessary for the conduct of Wingo's legal or business affairs.

All third-party Data Processors engaged by Wingo are required to process personal data solely for the purposes instructed by Wingo, to implement appropriate technical and organisational security measures, and to maintain strict confidentiality. Wingo remains accountable for the handling of your data by its processors.

Wingo retains personal data only for as long as it is genuinely necessary for the purposes for which it was collected, or for as long as is required by applicable law or regulation. The general retention periods applied to the principal categories of data are as follows:

• Account & Identity Data: Retained for the duration of your account, plus a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the completion of verification or the closure of the associated account, whichever is later.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial compliance and audit purposes.
• Gaming Activity Logs: Retained for a minimum of three (3) years following the last recorded gaming session, for responsible gambling monitoring, dispute resolution, and fraud investigation purposes.
• Customer Support Communications: Retained for two (2) years following the resolution of the relevant support interaction, to support service quality review and dispute resolution.
• Technical & Usage Data: Retained in aggregated or anonymised form for up to two (2) years for analytical and platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where a legal obligation or ongoing regulatory investigation requires extended retention, data will be retained for the duration of that obligation or investigation and then deleted promptly upon its conclusion.

Wingo implements and maintains comprehensive technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security measures include:

• 256-bit SSL (Secure Socket Layer) encryption applied to all data transmitted between your device and the Platform.
• Encryption at rest for all stored personal data and financial records held in our database infrastructure.
• Strict access controls and role-based permissions ensuring that personal data is accessible only to employees and contractors who have a documented operational need to access it.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Comprehensive audit logging of all administrative access to systems holding personal data.
• Multi-factor authentication protocols for all internal staff access to production systems.
• A documented incident response plan for the detection, containment, and notification of any personal data breach.

While Wingo takes all reasonable steps to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely immune from security risks. We strongly encourage you to use a strong, unique password for your Wingo account, enable any available two-factor authentication, and contact our support team immediately if you suspect any unauthorised access to your account.

The Wingo Platform uses cookies and similar tracking technologies to ensure the proper functioning of the website, to remember your preferences, and to collect anonymised usage data that helps us improve our service. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the operation of the Platform — including maintaining your login session, preserving your language and display preferences, and ensuring security features function correctly. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember choices you have made — such as your preferred language, last-used game category, or display settings — to provide a more personalised experience on return visits.
• Performance and Analytics Cookies: Collect anonymised data about how visitors use the Platform, including which pages are visited most frequently, how long sessions last, and where visitors navigate from. This data is used exclusively for internal service improvement purposes.
• Security Cookies: Support fraud detection and account security functions, including the identification of unusual login patterns or suspicious session behaviour.

Wingo does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks or social media platforms. You may manage cookie preferences through your browser settings; however, please note that disabling strictly necessary cookies may affect the functionality of the Platform.

Subject to applicable law and any overriding legal obligations (including anti-money laundering record-keeping duties), you have the following rights in respect of your personal data held by Wingo. You may exercise any of these rights by contacting our Data Privacy team at the email address provided in Section 15:

Wingo will respond to all verified privacy rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it. We do not charge a fee for exercising your rights in good faith.

The Wingo Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain personal data of any individual under the age of 21. The 21+ age requirement is enforced at the point of registration and verified through our mandatory KYC process, which requires submission of a valid government-issued identification document confirming the player's age.

The Platform may contain references or links to third-party services — including game providers, payment processors, and responsible gambling support organisations. This Privacy Policy applies solely to data processed by Wingo through the wingo.cam Platform. Wingo is not responsible for the privacy practices or the content of any third-party website or service.

Where Wingo engages third-party Data Processors to assist in the delivery of our services — including payment processors such as DuitNow, Touch 'n Go eWallet, Boost, and FPX-connected Malaysian banks — those processors are contractually required to process personal data solely on Wingo's instructions, to implement appropriate security measures, and to maintain strict confidentiality. Wingo conducts due diligence on all third-party processors prior to engagement and reviews those relationships on a regular basis.

Wingo reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing activities, or best practice standards. Where amendments are material — for example, changes affecting the categories of data collected, the purposes of processing, or your rights — we will provide at least seven (7) days' advance notice via the registered email address on your account and a prominent notice on the Platform.

The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Wingo, please contact our support and data privacy team using the details below. We treat all privacy enquiries as a priority and commit to responding within the timescales set out in Section 11.

For concerns relating to responsible gambling, self-exclusion requests, or gambling-related support resources, please visit our Responsible Gambling page, where you will find details of available tools and external support organisations.