Privacy Policy mywin

This Privacy Policy ("Policy") is published by MyWin ("we", "Platform", "MyWin") and applies to all users, visitors and registered members who access or use the services provided on the mywin.vin website. This document explains in detail how we collect, process, store, protect and disclose your personal information, as well as the rights you hold in relation to that data.

Mywin takes our responsibility to protect member privacy seriously. We understand that your trust is our most valuable asset, and we have crafted this policy with great care, transparency, and clarity — so you know exactly what happens to your information when you join us.

By registering a MyWin account, making a deposit, using any platform feature or simply browsing our website, you are deemed to have read and agreed to this Privacy Policy in full. If you do not agree, please discontinue use of the platform and contact our support team to close your account if applicable.

Mywin collects various types of information necessary to provide a safe, compliant, and high-quality service. The data we collect can be grouped into several main categories:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, religious beliefs, or political views unless required by applicable law.

Every piece of information we collect has a clear and legitimate purpose. mywin uses your personal data for the following purposes:

• Account management: Creating, verifying, and maintaining your member account, including secure login and two-factor identity verification.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions carried out on the platform accurately and securely.
• Legal compliance: Fulfilling our obligations under AML (Anti-Money Laundering), KYC, and applicable gambling regulations.
• Fraud detection: Monitoring account activity to detect and prevent fraud, unauthorized access, or platform abuse.
• Customer service: Addressing enquiries, resolving complaints, and providing the necessary technical support.
• Platform improvements: Analysing usage patterns to improve user experience, website performance, and platform features.
• Marketing communications: Sending promotional offers, bonus information, and platform updates — only to members who have given their consent.
• Responsible gaming: Monitoring gambling patterns to identify signs of problem gaming and offer appropriate assistance.

Mywin does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. However, there are limited circumstances where we need to share information with certain parties to enable us to deliver our services fully:

• Payment service providers: Licensed payment gateways that process your deposits and withdrawals. They receive only the information necessary to process transactions and are bound by strict confidentiality obligations.
• Third-party KYC providers: An identity verification service used to validate documents submitted during the KYC process, ensuring compliance with regulatory requirements.
• Regulatory authority: Government agencies, law enforcement bodies or regulatory authorities when required by law or a valid court order.
• Technology partners: Cloud infrastructure providers, cybersecurity services, and analytics tools that help us operate the platform — all subject to strict data processing agreements.

Every third party that receives data from mywin is required to adhere to confidentiality standards as strict as our own, and may only use that data for purposes specified in their agreement with us. We do not permit them to use your data for their own ends.

Mywin continuously invests in enterprise-grade security infrastructure to ensure that members' personal data is always protected against unauthorized access, loss, misuse, or disclosure. Our key security measures include:

• 256-bit SSL encryption: All communications between your browser and mywin servers are encrypted using TLS 1.3 protocol, making your data unreadable to third parties while in transit.
• bcrypt password storage: Member passwords are never stored in plain text. We use strong cryptographic hashing algorithms with a unique salt for each account.
• Two-Factor Authentication (2FA): Members are encouraged — and for large withdrawals, required — to enable 2FA for an additional layer of protection.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect threats, intrusion attempts, and suspicious activity in real time.
• Data segregation: Sensitive financial data is stored separately from profile data in distinct databases with strict access controls.
• Regular security audits: mywin undergoes regular security audits and penetration testing by accredited independent security firms.

While we take every reasonable measure to protect your data, no system is entirely risk-free. In the event of a data breach that affects your rights and freedoms, we will notify you within the timeframe required by applicable law.

Mywin uses cookies and similar tracking technologies to enhance user experience, ensure platform security, and understand how members interact with our website. Cookies are small text files stored on your device when you visit our site.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect platform functionality and your login experience. Analytics and marketing cookies can be disabled without impacting core platform capabilities.

As a mywin member, you have certain rights regarding your personal data, and we respect them fully. Below is a summary of those rights:

To exercise any of the above rights, contact our privacy team via email [email protected]. We will process your request within 30 working days. Certain rights may be limited in specific circumstances — for example, where processing is required to fulfil a legal obligation — and we will notify you clearly if this applies.

Mywin retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. Our principle is simple — we do not keep data longer than necessary.

• Active account data: Retained for the duration of active membership and up to 7 years after account closure for financial law and AML compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with accounting legislation and regulatory compliance requirements.
• KYC documents: Retained for 5 years after the business relationship ends, in line with applicable AML requirements.
• Technical and security logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Customer support communications: Retained for 3 years for historical reference and team training purposes.
• Marketing data: Deleted within 30 days of you withdrawing your marketing consent.

When data is no longer needed and the minimum retention period has elapsed, we will securely delete or anonymise it so it can no longer be linked to you.

The mywin platform is strictly for individuals aged 18 and above. We do not intentionally collect, store or process any personal data from individuals under 18 years of age. Should we discover that such data has been collected inadvertently, we will take immediate steps to delete it and close the relevant account.

Parents and guardians who discover that their minor child has registered an account on mywin are urged to contact us immediately at [email protected] so that we may take appropriate action without delay.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we strongly encourage you to contact us directly. Our privacy team is ready to assist you.

You can reach us via:

• Privacy Email: [email protected]
• Live Support: Via the live chat button within the mywin platform (24 hours, 7 days a week)
• FAQ Page: Visit our FAQ page for answers to frequently asked questions about privacy

We are committed to responding to all privacy-related enquiries within 5 working days. For formal rights requests (such as data access or deletion), the response period is up to 30 working days in accordance with applicable legal requirements.