Privacy Policy

1Introduction

win1win3 ("we", "us", "our") operates the online casino and sports betting platform accessible at win1win3.cam (the "Platform"). This Privacy Policy describes how win1win3 collects, processes, stores, shares, and protects the personal data of individuals who register accounts, use the Services, or otherwise interact with the Platform.

This Policy applies to all Members and visitors of the Platform regardless of their location, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia or abroad. It should be read alongside our Terms & Conditions and Responsible Gambling Policy.

By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact our support team to arrange Account closure.

2Definitions

Term	Meaning
"Personal Data"	Any information that identifies or can reasonably identify a living individual, directly or in combination with other data — including name, email address, payment details, device identifiers, and IP address.
"Processing"	Any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
"Data Controller"	win1win3, in its capacity as the entity determining the purposes and means of processing your personal data.
"Data Processor"	Any third-party service provider that processes personal data on behalf of win1win3, under contract and subject to this Policy.
"Member" / "You"	A natural person who has registered and holds an active Account on the Platform.
"KYC"	Know Your Customer — the identity and document verification process required prior to processing withdrawals or where otherwise required by applicable regulations.
"Cookies"	Small text files placed on your device by the Platform to facilitate functionality, performance measurement, and personalisation.

3Data We Collect

win1win3 collects the following categories of personal data in connection with the provision of the Services:

3.1 Identity & Contact Data

Full legal name as it appears on government-issued identification documents (MyKad, passport, or equivalent).
Date of birth (for age verification — all Members must be 21 years of age or older).
Email address and mobile phone number registered in your name.
Residential address, including city and postcode.

3.2 Identity Verification (KYC) Documents

Copies of government-issued photo identification (MyKad, passport).
Proof of address documentation (utility bill, bank statement — not older than three months).
Source of funds documentation where required by enhanced due diligence procedures.

3.3 Financial & Transaction Data

Deposit and withdrawal transaction records, including method, amount (in MYR), timestamp, and status.
Partial payment identifiers (e.g., last four digits of a bank account, registered e-wallet phone number) for payment matching and fraud prevention. win1win3 does not store full payment card numbers or complete bank account credentials.
Running account balance history.

3.4 Gaming & Wagering Data

Records of all bets placed, including game type, stake, outcome, and timestamp.
Session duration and play frequency data.
Responsible gambling tool settings and activity (deposit limits, self-exclusion status, cooling-off periods).

3.5 Technical & Device Data

IP address and approximate geographic location derived from IP.
Browser type, version, and operating system.
Device identifiers and screen resolution.
Pages visited, time spent on each page, and referral source.

3.6 Communications Data

Records of live chat support conversations, email correspondence, and any feedback submitted.
Promotional preferences and opt-in or opt-out records for marketing communications.

4How We Collect Your Data

We collect personal data through the following channels:

Direct provision by you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or update your profile.
Automated technical collection — through server logs, cookies, and similar tracking technologies as described in Section 8 of this Policy.
Payment processors and e-wallet providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other integrated Malaysian payment partners. These providers may share transaction confirmation and basic identity matching data with us for the purpose of verifying payments.
Identity verification service providers — third-party KYC and fraud detection services that assist in verifying the authenticity of identity documents and cross-checking against relevant databases.
Third-party analytics providers — aggregated, anonymised platform usage data provided by web analytics tools used to improve Platform performance and user experience.

5Lawful Basis for Processing

win1win3 processes your personal data only where a lawful basis for doing so exists. The primary bases we rely upon are:

Processing Activity	Lawful Basis
Account registration and management	Performance of a contract (these Terms & Conditions)
Payment processing and financial transactions	Performance of a contract; compliance with legal obligations
KYC identity verification	Compliance with legal and regulatory obligations; legitimate interests (fraud prevention)
Fraud detection and prevention	Legitimate interests of win1win3 and protection of other Members
Responsible gambling monitoring	Legitimate interests; compliance with regulatory requirements; protection of Member welfare
Marketing communications (where opted in)	Consent (which may be withdrawn at any time)
Platform analytics and performance improvement	Legitimate interests (anonymised and aggregated where possible)

6How We Use Your Data

Your personal data is used exclusively for the purposes described in this Policy. The specific uses include:

Creating and maintaining your Account on the Platform.
Processing deposits and withdrawals in MYR through your chosen Malaysian payment methods.
Verifying your identity and age in compliance with our KYC obligations, ensuring that only eligible players aged 21 and above access real-money gaming services.
Detecting, investigating, and preventing fraudulent transactions, money laundering, and other forms of financial crime or platform abuse.
Monitoring wagering patterns as part of our responsible gambling programme, including identifying Members who may be exhibiting signs of problem gambling and intervening appropriately.
Responding to support queries, complaints, and data subject rights requests submitted via live chat or email.
Sending account-related notifications, including transaction confirmations, security alerts, and KYC document requests. These communications are operational in nature and are not subject to marketing opt-out.
Sending promotional communications (including bonus offers, VIP tier notifications, and event invitations) where you have explicitly opted in. You may withdraw consent for marketing communications at any time by contacting our support team.
Improving Platform functionality, game selection, payment method availability, and overall user experience through aggregated, anonymised analytics.
Complying with applicable legal and regulatory requirements, including responding to lawful requests from competent authorities.

win1win3 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by applicable regulations (e.g., automated fraud detection triggers are always subject to human review before any enforcement action is taken).

7Data Sharing & Disclosure

win1win3 does not sell, rent, or trade your personal data to any third party for their own commercial marketing purposes. We share personal data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf, under contractual obligations that require them to handle your data securely and only as instructed by win1win3. These include payment processing partners (including Malaysian e-wallet and banking infrastructure providers), KYC and identity verification platforms, fraud detection and cybersecurity services, customer support infrastructure providers, and anonymised analytics services.

7.2 Regulatory & Legal Disclosure

We may disclose personal data to competent governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or enforceable regulatory direction. In such cases, we will disclose only the minimum data required to comply with the obligation and will notify the affected Member where legally permissible to do so.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or asset sale involving win1win3 or its operating entity, personal data held by win1win3 may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such transfer and the applicable privacy terms of the new entity before the transfer takes effect.

7.4 Consent-Based Sharing

win1win3 will not share your personal data with any other third party without your explicit prior consent.

We never sell your data. win1win3's business model is built on providing a fair and enjoyable gaming platform, not on monetising Member data. Your personal information is used solely to deliver and improve our Services and to meet our legal obligations.

8Cookies & Tracking Technologies

win1win3 uses cookies and similar tracking technologies on the Platform to support functionality, measure performance, and improve the user experience. The categories of cookies used are as follows:

Cookie Type	Purpose	Duration
Strictly Necessary	Essential for the Platform to function — maintaining your login session, processing transactions, and remembering security preferences. Cannot be disabled without impairing Platform functionality.	Session / persistent up to 12 months
Functional	Remembering your preferences such as language, currency display (MYR), and responsible gambling tool settings to personalise your experience.	Up to 12 months
Analytics	Aggregated, anonymised data on how Members navigate the Platform — which games are most visited, session lengths, and feature usage — used to improve Platform design and performance. Individual tracking data is anonymised before analysis.	Up to 13 months
Security & Fraud Detection	Device fingerprinting and session integrity tokens used to detect suspicious activity, prevent multi-accounting, and protect against account takeover attempts.	Session / up to 6 months

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform. win1win3 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements outside of the Platform.

9Data Retention

win1win3 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to applicable legal and regulatory retention obligations. Our general retention periods are as follows:

Active Account data — retained for the duration of the Member's active Account plus a minimum of five years following Account closure, in compliance with anti-money laundering and financial record-keeping requirements.
KYC and identity verification documents — retained for a minimum of five years following the Member's last activity or Account closure, as required by applicable regulations.
Transaction records — retained for a minimum of five years from the date of the transaction.
Support communications — retained for up to three years from the date of the last interaction, unless a longer retention period is required by ongoing legal or regulatory proceedings.
Marketing consent records — retained for as long as marketing communications are sent, plus sufficient time to demonstrate compliance if challenged.
Technical and device logs — retained for up to 12 months under standard operation; may be retained longer in connection with active fraud investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

10Data Security

win1win3 implements technical and organisational measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

Encryption in transit — all data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) protocols with 256-bit encryption. This applies to all pages, account interactions, and payment processes.
Encryption at rest — sensitive personal data stored on our servers, including KYC documents and financial records, is encrypted at the storage level.
Access controls — access to systems containing personal data is restricted on a strict need-to-know basis, with multi-factor authentication required for all administrative access.
Security monitoring — continuous monitoring of Platform infrastructure for unusual access patterns, intrusion attempts, and anomalous behaviour.
Vendor due diligence — all third-party Data Processors are subject to security assessments and contractual obligations requiring them to maintain standards at least equivalent to those applied by win1win3.

No online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, win1win3 will take all required steps in accordance with applicable data protection law, including notifying affected Members without undue delay where legally required to do so.

11Your Data Rights

As a data subject, you have the following rights with respect to your personal data held by win1win3. These rights are subject to applicable legal limitations and regulatory retention obligations:

Right of Access

Request a copy of the personal data win1win3 holds about you, including information on how it is being processed.

Right of Rectification

Request correction of inaccurate or incomplete personal data held in your Account profile or KYC records.

Right of Erasure

Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations that may require us to retain certain records.

Right to Restrict Processing

Request that we temporarily limit how your data is used — for example, while the accuracy of data you have contested is being verified.

Right to Data Portability

Request a copy of data you have provided to us in a structured, machine-readable format, where technically feasible and where the processing is based on consent or contract.

Right to Object

Object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing communications. Objections to marketing are actioned immediately.

Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Right to Lodge a Complaint

If you believe your data rights have been infringed, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of the above rights, please contact win1win3 via live chat or email as described in Section 15. We will acknowledge your request within five business days and aim to resolve it within thirty calendar days, or notify you if a longer period is required.

12Children & Minors

The Platform is strictly intended for individuals aged 21 years and above. win1win3 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If win1win3 becomes aware that personal data has been collected from an individual under the age of 21, that Account will be immediately suspended, any balance will be investigated for potential refund of genuine deposits, and all personal data associated with the underage Account will be securely deleted. Any parent or guardian who believes that their minor child has accessed the Platform should contact our support team immediately via live chat.

Strict 21+ policy. win1win3 takes underage gambling prevention seriously. We employ age verification at registration, may request documentary proof of age at any time, and actively use responsible gambling tools to monitor for indicators of underage play.

13Third-Party Services

The win1win3 Platform integrates with third-party services including payment gateways (such as those operated by Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other Malaysian financial institutions) and game content providers. These third-party services operate under their own privacy policies and data practices.

When you initiate a payment transaction, you will interact with the payment provider's interface and infrastructure. win1win3 receives only the transaction confirmation data necessary to credit your Account — we do not receive or store your full banking credentials or e-wallet login details. We encourage you to review the privacy policies of any third-party service providers you interact with.

win1win3 is not responsible for the privacy practices or data security of third-party services accessed through or in connection with the Platform. Integration with a third-party payment or game service does not imply endorsement of that provider's data practices beyond the contractual obligations we impose on all Data Processors.

14Amendments to This Policy

win1win3 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the Services offered on the Platform. Material amendments will be communicated to registered Members by displaying a prominent notice on the Platform or by sending a notification to the registered email address on file.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acknowledgement of, and agreement to, the revised Policy. If you do not agree to the revised Policy, you must cease use of the Platform and may request Account closure by contacting our support team.

We recommend reviewing this Privacy Policy periodically to remain informed about how win1win3 handles your personal data. We commit to maintaining transparent, up-to-date privacy disclosures as our platform continues to evolve for the benefit of Malaysian players.

15Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by win1win3, please reach out through the following channels:

Live Chat (Preferred)

Available 24 hours a day, 7 days a week, directly on the win1win3 Platform. For urgent data-related queries including account security concerns, live chat is the fastest way to reach our team. Members in Kuala Lumpur, Penang, Johor Bahru, and across Malaysia can access live chat at any time.

Email — Privacy & Data Requests

For formal data subject rights requests, privacy complaints, or detailed enquiries about this Policy, please contact us at:
[email protected]
Please quote "Privacy Request" in the subject line of your email. This address is displayed as plain text — it is not a clickable link. Copy and paste it into your email client.

win1win3 takes all privacy enquiries seriously. We will acknowledge your request within five business days and aim to provide a substantive response within thirty calendar days.

Contents