3win Privacy Policy – Personal Data Protection for Malaysian Players

3win ("we", "platform", or "company") values the privacy of every user who registers and uses our services. This Privacy Policy has been drawn up to uphold sound data protection principles and to ensure you know exactly what happens to your personal information.

This policy covers all aspects of personal data processing related to the use of the platform 3win – from the moment you first visit our website, throughout your time as an active member, and even after you close your account. We want the relationship between 3win and our players is built on trust, and transparency around privacy is a cornerstone of that trust.

If you ever have questions about how your data is handled, or wish to exercise any of your privacy rights, don't hesitate to reach out to us at privacy@3win.world. Our dedicated data privacy team will respond to your enquiry within two business days.

3win only collects data that is strictly necessary to provide a safe, efficient, and quality service. We do not collect data excessively or without a clear purpose.

A. Data You Provide Directly

• Identity information: Full name as per identity card or passport, identity card number (MyKad) or passport number
• Contact information: Malaysian mobile number, email address, and residential address
• Financial information: Bank account number, bank name (for withdrawal purposes), phone number linked to digital wallets such as Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay
• Verification documents: Copy of identity card, utility bill, or other supporting documents for the KYC process
• Account information: Username, password (stored in encrypted hash format), and security questions

B. Automatically Collected Data

• IP address and general geographic location information
• Device type, operating system, and web browser version in use
• Login history including time, date, and access location
• Gaming and betting activity data, including game type, bet amount, and outcome
• Deposit and withdrawal transaction history data

Your personal data is collected through several different channels depending on how you interact with the platform 3win:

• Registration form: Basic information is collected when you create a new account at 3win
• KYC Process: Identity verification documents are collected when you are required to verify your account
• Financial transactions: Financial data is collected when you make a deposit via FPX, DuitNow, Touch 'n Go, GrabPay, or other methods, and when you request a withdrawal
• Platform usage: Activity data is automatically collected when you use the platform, including games played and wagering amounts
• Cookies and tracking technologies: Technical data is collected via cookies placed on your web browser
• Support communications: Conversation records with our customer support team are retained for quality assurance and documentation purposes
• Affiliate programme: If you registered via an affiliate link, we receive basic referral information from that affiliate

3win use your personal data solely for lawful purposes directly related to the provision of our services. Below is a summary of our data usage purposes:

We will not use your data for any purpose beyond those stated above without first obtaining your consent. If you do not wish to receive marketing communications from 3win, you may unsubscribe at any time via the unsubscribe link in our emails or by contacting our support team.

3win does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes without your consent. This is our fundamental commitment to player privacy.

However, there are limited situations where your data may be shared with specific parties:

• Payment service providers: FPX, DuitNow, and digital wallet providers are shared only the minimum information required to complete your transaction
• Licensed game providers: Live casino and slots providers such as Evolution Gaming and Pragmatic Play receive player IDs for game logging and winnings settlement purposes
• Regulatory and law enforcement authorities: If directed by Malaysian authorities or a valid court order
• Infrastructure service providers: Hosting and cybersecurity providers who have signed strict confidentiality agreements with 3win

The security of your personal data is our top technical and operational priority at 3win. We continually invest in our security infrastructure to ensure your data is protected at all times.

Technical Security Measures

• 256-bit SSL/TLS encryption for all communications between your browser and 3win's servers
• Passwords are stored in an irreversible bcrypt hash format
• Databases are encrypted at the storage level using AES-256 encryption
• Access to player data is restricted to staff with a legitimate need only
• An intrusion detection system (IDS) operating 24/7 to identify any suspicious activity
• Regular data backups stored at a separate, secure location

Data Retention Period

• Active account data: Retained for the duration your account remains active
• Transaction data: Retained for 7 years to comply with financial regulatory requirements
• Game activity data: Retained for 2 years from the date of last activity
• Closed account data: Minimum data is retained for 5 years after account closure for compliance and dispute resolution purposes
• Security logs: Retained for 12 months for security incident investigation purposes

Platform 3win uses cookies and similar tracking technologies to ensure a smooth and secure user experience. Cookies are small text files stored in your web browser when you visit our platform.

Types of cookies we use:

• Essential cookies (cannot be disabled): Required for core platform functions such as login authentication, session security, and language preferences. Without these cookies, the platform cannot function properly.
• Performance cookies: We collect information on how you use the platform to help us improve performance and user experience. All data is collected anonymously.
• Preference cookies: Remembering your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics cookies: Used in aggregate to understand how users interact with our platform for improvement purposes.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect platform functionality 3win. Continued use of the platform after the cookie notice is displayed will be considered consent to our use of cookies.

As a user of the platform 3win, you hold certain privacy rights that we fully respect. Below is an explanation of those rights and how you may exercise them:

3win takes child protection extremely seriously. Our platform is designed exclusively for adults aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

All prospective members are required to confirm that they are at least 18 years of age at the point of registration. Our KYC process includes age verification via valid identity documents.

If a parent or guardian suspects that their child or ward has registered on 3win, please contact us immediately at privacy@3win.world or via our live chat so we can take prompt and appropriate action.

Platform 3win may contain links to third-party websites or services in certain contexts, such as links to payment or game providers. This Privacy Policy applies solely to the 3win and does not cover the privacy practices of any third-party websites or services you may access through links on our platform.

We encourage you to read the privacy policy of each third-party service you use. 3win is not responsible for the privacy practices or content of third-party websites linked to or from our platform.

3win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. Each update will be accompanied by a new "Updated" date at the top of this document.

For material amendments — changes that significantly affect how we process your data or your privacy rights — we will provide clear notification through:

• Email to the address registered to your account
• A notification visible on the 3win platform when you log in
• Announcement on the platform's homepage for a minimum of 14 days

Continued use of the platform 3win after the effective date of the amendment will be considered acceptance of the updated Privacy Policy. If you do not agree with any amendment, please close your account before the amendment takes effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 3win handles your personal data, you are welcome to reach us through the following channels:

• Dedicated privacy email: privacy@3win.world – for data and privacy rights enquiries
• General support email: support@3win.world – for general account and platform enquiries
• Live chat: Available 24/7 directly on the 3win platform for immediate response

We are committed to responding to all privacy enquiries within two business days. For more complex requests such as full data access or data deletion requests, the process may take up to 14 business days depending on the complexity of the request.