winalotPrivacy Policy

This page describes what we collect when you use winalot and how we keep that data protected. We at winalot collect your personal information to verify your identity, process your deposits and withdrawals through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet, and to comply with regulatory requirements in your jurisdiction.

Your data is encrypted during transmission and stored securely on our servers. We do not sell or share your information with third parties outside our payment processors, regulatory partners, and legal authorities. When you access winalot across our sportsbook markets (Liga 1, Piala AFF, Champions League), live-dealer tables, slot games, and arcade mechanics, all activity is logged and tied to your verified account.

Our privacy practices are designed to protect your account security and give you control over your personal information. This policy outlines what we collect, how we use it, who may access it, and your rights under local law.

What We Collect on winalot

When you create an account on winalot, we collect your email address, full name, and a password of your choice. During identity verification (KYC), we collect a photograph of your government-issued ID (national ID card, passport, or equivalent) and proof of your current address (utility bill, bank statement, or government correspondence dated within the last three months). We also collect your date of birth from your ID document to verify you are at least 18 years old.

When you deposit or withdraw funds, we collect payment method details tied to your account — primarily your bank account or digital wallet identifier. We retain this information to process your transactions and to detect fraudulent activity. When you play on winalot, we log every game session, bet, outcome, and balance change. We also collect your IP address, browser type, and device information for security and compliance purposes.

Account credentials

Email, full name, date of birth, password hash, and optional phone number for two-factor authentication.

Identity documents

Photograph of government ID and proof of address for KYC compliance and age verification.

Payment details

Bank account or digital wallet identifier (e.g., DANA account, e-wallet code) used for deposits and withdrawals.

Activity logs

Game rounds, bets, outcomes, balance changes, login timestamps, and IP addresses for audit and security.

How We Use Your Data on winalot

We at winalot use your personal information for several purposes. First, we verify your identity to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations in your jurisdiction. Second, we process your deposits and withdrawals by sharing your payment details with our payment processors (such as mobile banking, local payment, online payment, or your bank). Third, we maintain your account history and transaction logs to detect fraud, investigate disputes, and comply with regulatory audits. Fourth, we use your email to send you account notifications (login alerts, withdrawal confirmations, KYC status updates) and to communicate any changes to our policies.

We do not use your data to sell targeted advertising or to profile your behavior for marketing purposes. We do not share your data with unrelated third parties. Our use of your information is limited to winalot operations, regulatory compliance, and fraud prevention.

Data Storage and Third-Party Processors on winalot

Our servers may be located outside your jurisdiction (potentially in other Southeast Asian countries or internationally). By using winalot, you consent to your data being transferred and stored in these locations. We use encryption (TLS/SSL in transit and AES-256 at rest) to protect your data during transmission and storage. Our payment processors (e-wallet, mobile banking, local payment, bank partners, and online payment providers) also access your payment information to settle deposits and withdrawals — these processors have their own privacy policies governing their use of your data.

We retain your identity documents (photographs and address proofs) for the duration of your account and for seven years after account closure to comply with regulatory record-keeping requirements. We retain your transaction logs indefinitely for audit purposes. You may request deletion of non-essential data (such as historical IP logs) after account closure; we will honour requests to the extent permitted by law.

Your Rights and Account Access on winalot

You have the right to access your personal information held by winalot at any time. Your account dashboard provides your email, verified name, address on file, and complete transaction history. You may request a downloadable copy of your personal data by contacting our support team; we will provide it within 10 business days. You may also request correction of inaccurate information or deletion of non-essential data, subject to legal retention requirements.

If you believe your data has been misused or compromised, contact our support team immediately. We will investigate your concern and notify you of our findings. Your rights under local consumer protection law are preserved regardless of our privacy policy. If you reside in a jurisdiction with specific data protection laws (such as GDPR-equivalent frameworks), those protections apply to your data held by winalot.

Cookies and Tracking on winalot

We at winalot use cookies to maintain your logged-in session and to remember your preferences (such as your chosen language or theme). These are session cookies that expire when you close your browser. We do not use tracking cookies for advertising or analytics purposes beyond our internal platform performance monitoring. You may disable cookies in your browser settings; however, this may impair your ability to access winalot features.

Our platform does not integrate third-party analytics services (such as Google Analytics) that would track your behaviour across the web. Your browsing activity on winalot is logged only for security and fraud prevention purposes.

Security Measures and Data Breach Response on winalot

We implement industry-standard security measures to protect your data: HTTPS encryption for all traffic, password hashing using bcrypt, optional two-factor authentication (2FA) for login and withdrawal, and encrypted storage of identity documents. Our servers are protected by firewalls and intrusion-detection systems. We conduct regular security audits and penetration testing to identify vulnerabilities.

In the event of a data breach affecting your personal information, we will notify you within 72 hours of discovery. We will also notify relevant regulatory authorities as required by law. We do not guarantee prevention of all security incidents; however, we commit to responding promptly and transparently if a breach occurs. You should immediately change your winalot password if you suspect unauthorized access to your account.

Policy Changes and Contact on winalot

We reserve the right to update this privacy policy at any time. Material changes will be communicated to you via email at least 14 days before they take effect. Continued use of winalot after a change takes effect constitutes your acceptance of the updated policy. If you do not agree with any change, you may close your account.

If you have questions about our privacy practices, wish to request your personal data, or suspect a data breach, contact our support team via email or in-app chat. We will respond within five business days. Our commitment is to handle your personal information with care and to comply with all applicable privacy law in your jurisdiction.

Our privacy practices reflect our commitment to protecting your personal data while delivering a seamless winalot experience across sportsbook markets, live-dealer tables, slot games, and arcade entertainment. We balance your privacy with our regulatory obligations to verify your identity, prevent fraud, and comply with local law.