Privacy Policy winrm20 – Personal Data Protection for Malaysia Platform Members

Winrm20 collects several categories of personal information as you interact with our platform. Below is a detailed list of the data types collected along with their purposes:

Every piece of data we collect has a clear and limited purpose. winrm20 does not use your data beyond the stated scope without first obtaining your additional consent.

• Account Management: Processing registration, verifying KYC identity, managing secure login, and your account settings.
• Transaction Processing: Handling deposits, withdrawals, and all financial transactions on the platform securely and accurately.
• Platform Security: Detecting and preventing fraudulent activity, unauthorized access, and multi-account usage.
• Customer Support: Providing effective support when you reach out to our support team.
• Legal Compliance: Fulfilling reporting, audit, and compliance requirements with the relevant regulatory bodies.
• Service Improvement: Analyzing usage patterns in aggregate (not individually) to improve the platform experience.
• Promotional Communications: Sending relevant offers and promotions — you may unsubscribe at any time via account settings.

Protecting your data is our top technical and operational priority. winrm20 invests in industry-grade security infrastructure to keep your information safe at all times.

• 256-bit SSL Encryption: All communications between your device and winrm20 servers are fully encrypted using the latest TLS protocol.
• Stored Data Encryption: Sensitive data such as financial information and ID numbers are encrypted at rest in our database.
• Two-Factor Authentication (2FA): An extra layer of security to ensure only you can access your account.
• 24/7 Monitoring: Our automated threat detection system continuously monitors for suspicious activity and responds immediately.
• Regular Security Audits: Security assessments are conducted periodically by independent third parties to identify and patch any vulnerabilities.
• Internal Access Controls: Only authorised staff with an operational need may access member data, and every access is recorded.

Winrm20 takes a highly cautious approach when it comes to data sharing. We does not sell, rent, or trade member personal data to any party for marketing purposes.

Your data is only shared in limited, necessary circumstances:

• Payment Processors: Required transaction information is shared with licensed payment providers to securely process your deposits and withdrawals.
• Technology Service Providers: Selected technical partners who help operate the platform infrastructure — all bound by strict confidentiality agreements.
• Regulatory Body: When required by law or a valid regulatory directive, the necessary information will be disclosed in accordance with proper procedures.
• Fraud Prevention: In cases of suspected fraud, relevant information may be shared with the appropriate financial institutions or investigative bodies.

All third parties receiving winrm20 member data are bound by data protection agreements and are regularly audited to ensure their compliance.

The winrm20 platform uses cookies and similar technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session management. Cannot be disabled.
• Performance Cookies: Collecting information on how members use the platform to help us improve the overall user experience.
• Preference Cookies: Remembering your settings and preferences such as language, currency, and display options.
• Security Cookies: Helps detect suspicious login attempts and protects your account from unauthorized access.

Winrm20 retains member personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Once the retention period ends, data will be securely deleted or anonymised.

• Active Account Data: Retained for the duration of active membership and for any additional period required by law following account closure.
• Transaction Records: Retained for 7 years after a transaction occurs, in line with Malaysia's audit requirements and financial regulations.
• Security Logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Communications Data: Customer support communication records are retained for 3 years for reference and service improvement.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by winrm20. We fully respect and facilitate the exercise of these rights.

Winrm20 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. We are committed to notifying you of any material changes.

• Changes that significant will be notified to members via email or in-platform notification at least 14 days prior takes effect.
• The "Updated" date at the top of this page always reflects latest version currently in effect.
• Continued use of the platform after a policy change takes effect means you accept the updated policy.
• You are advised to review this page periodically to stay informed of how we handle your data.