This Privacy Policy explains how Winjitu collects, uses, stores, and protects your personal information when you use our online sports betting and casino platform. We are committed to handling your data responsibly and transparently.
This Privacy Policy ("Policy") is issued by Winjitu ("Winjitu", "we", "us", "our"), the operator of the online sports betting and casino gaming platform accessible at https://winjitu.cam (the "Platform"). It governs the collection, processing, storage, and transfer of personal data relating to all registered players, prospective users, and visitors to the Platform ("you", "your").
Winjitu is committed to protecting the privacy of every individual who interacts with our Platform. We process personal data in accordance with applicable international data protection principles and our obligations under the licensing framework under which we operate.
By registering an account, depositing funds, or otherwise using the Platform, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read together with our Terms and Conditions.
Key Commitment: Winjitu does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your data is used solely for the purposes of operating the Platform and complying with our legal obligations.
The following definitions apply throughout this Privacy Policy:
Winjitu collects the following categories of personal data from users of the Platform:
Where you interact with our responsible gambling tools — such as setting deposit limits, requesting self-exclusion, or completing a problem gambling self-assessment — we collect and retain records of those interactions to ensure we fulfil our duty of care obligations.
Winjitu collects personal data through the following means:
Winjitu processes your personal data only where a valid legal basis exists. The applicable legal bases are set out below:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Identity verification (KYC) | Legal obligation; performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| Anti-money-laundering checks | Legal obligation |
| Fraud prevention and security monitoring | Legitimate interests |
| Responsible gambling monitoring | Legal obligation; legitimate interests |
| Customer support communications | Performance of contract; legitimate interests |
| Marketing communications (where opted-in) | Consent |
| Platform analytics and improvement | Legitimate interests |
Winjitu uses your personal data for the following purposes:
To create and administer your player account; to process deposits and withdrawals to your nominated Malaysian bank account or eWallet; to verify your identity and eligibility to use the Platform; and to provide customer support via live chat and email.
To comply with our obligations under applicable anti-money-laundering legislation; to meet KYC requirements imposed by our licensing authority; to maintain records required for regulatory audit purposes; and to report suspicious activity where legally required to do so.
To detect, investigate, and prevent fraudulent activity, multi-accounting, collusion, and other prohibited conduct; to monitor for unauthorised access to player accounts; and to maintain the integrity of the Platform's betting and gaming markets.
To monitor betting and deposit patterns for indicators of problem gambling; to implement and record responsible gambling tool settings requested by you (deposit limits, self-exclusion, etc.); and to fulfil our duty of care obligations to vulnerable players.
To send you transactional notifications (account activity alerts, withdrawal confirmations, KYC status updates); and, where you have provided explicit consent, to send you promotional communications about Winjitu offers, bonuses, and events. You may withdraw consent to marketing communications at any time by contacting our support team.
To analyse aggregated and anonymised usage data for the purpose of improving Platform performance, user experience, and game selection. No individual-level profiling for commercial purposes is conducted without your explicit consent.
Winjitu does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the minimum extent necessary:
We will never share your personal data with advertising networks, data brokers, or unaffiliated third parties for commercial marketing purposes.
The Platform uses cookies and similar tracking technologies to operate correctly and provide you with a personalised experience. The types of cookies we use are:
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. By continuing to use the Platform, you consent to our use of cookies as described in this clause.
Winjitu retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC identity documents | 5 years from account closure or last transaction |
| Transaction and betting records | 5 years from date of transaction |
| Responsible gambling records | 5 years from relevant interaction or self-exclusion end date |
| Customer support communications | 3 years from last interaction |
| Technical / session logs | 12 months from generation |
| Marketing consent records | Until consent is withdrawn, plus 12 months |
Following expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data management procedures.
Winjitu implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:
While Winjitu takes all reasonable precautions to safeguard your data, no internet-based system is completely immune to risk. We strongly recommend enabling two-factor authentication on your Winjitu account and using a strong, unique password.
Winjitu respects your rights in relation to your personal data. Subject to applicable law and our legitimate interests, you have the following rights:
To exercise any of these rights, please contact our support team via live chat or at the email address stated in Section 15. We will respond to all verifiable requests within 30 calendar days. Please note that certain rights are subject to exceptions — for example, we cannot delete transaction records that we are legally required to retain.
The Platform is strictly for persons aged 21 (twenty-one) years and above. Winjitu does not knowingly collect personal data from persons under the age of 21.
Age verification is conducted as part of our mandatory KYC process. If we become aware that an account has been opened by, or personal data has been submitted by, a person under the age of 21, we will immediately suspend the account, void any associated transactions, and securely delete the personal data concerned.
If you are a parent or guardian and believe that a minor has submitted personal data to Winjitu, please contact us immediately at the address in Section 15. We will take prompt action to investigate and, where confirmed, delete the data.
21+ Only. The Winjitu Platform is not directed at, and must not be used by, any person under the age of twenty-one (21) years. Access by minors is a serious breach of our Terms and Conditions and applicable law.
As an internationally licensed online gaming platform, Winjitu may transfer personal data to, and process it in, jurisdictions outside Malaysia. Such transfers are made in connection with our KYC verification services, payment processing infrastructure, and Platform hosting arrangements.
Where personal data is transferred internationally, Winjitu takes steps to ensure that adequate safeguards are in place to protect your data, including contractual data processing agreements with receiving parties that impose obligations equivalent to those described in this Policy.
By using the Platform and accepting this Policy, you acknowledge and consent to the transfer of your personal data as described in this clause.
Winjitu reserves the right to update or modify this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via email to the registered address and/or via a notice on the Platform no less than 7 calendar days before the changes take effect, except where changes are required by law or regulation.
The "Last Updated" date at the top of this Policy will be revised to reflect the date of any material amendments. Continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease use of the Platform and request account closure.
The current version of this Privacy Policy is always available at https://winjitu.cam/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the Winjitu Data Privacy team through the following channels:
When submitting a data subject rights request, please provide your registered email address and a description of your request so we can verify your identity and respond efficiently.
This Privacy Policy was last reviewed and updated on 1 January 2026. For related information, please review our Terms and Conditions and Responsible Gambling Policy.
All data transmitted between your device and Winjitu is protected by 256-bit SSL encryption — the same standard used by Maybank and CIMB for online banking. Your personal and financial data is never transmitted in plain text.
Winjitu does not sell, rent, or trade your personal data to advertisers, data brokers, or unaffiliated third parties under any circumstances. Your information is used solely to operate and improve the Platform.
Access, correct, export, or request deletion of your personal data at any time. We process all data subject requests within 30 calendar days and will never penalise you for exercising your privacy rights.
We keep your data only as long as legally required. Transaction and KYC records are retained for 5 years post-closure in line with AML obligations. Technical logs are deleted after 12 months.
Every use of your personal data is mapped to a specific legal basis — contract, legal obligation, legitimate interests, or consent. We process the legal section of this Policy in plain English so you always know exactly how your data is being used.
Have a privacy question at midnight? Our live chat team is available around the clock. For formal data requests, email [email protected] with "Privacy Request" in the subject line.
Our support team is available 24/7 to address any concerns about how Winjitu handles your personal data. Visit our FAQ for answers to common privacy questions.
21+ Only Play responsibly. Visit our Responsible Gambling page for self-help tools and support resources.