win1win3 Official Documents

Win1win3 Privacy Policy – Personal Data Protection for Malaysian Members

At win1win3, we regard your privacy as more than a legal obligation — it is a moral responsibility we take seriously every day. This Privacy Policy clearly explains what data we collect, why we need it, how it is protected, and what rights you hold as a member over your own personal data.

Win1win3 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and all applicable regulations governing digital data protection.

Updated: 1 January 2026

Win1win3's Six Privacy Commitments

The core principles that shape how win1win3 manages and protects member personal data.

256-bit SSL Encryption

All data transmitted between your device and win1win3's servers is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks such as Maybank and CIMB. No sensitive data is ever transmitted unencrypted.

PDPA 2010 Compliance

Win1win3 is fully compliant with Malaysia's Personal Data Protection Act 2010. All collection, storage, and use of member personal data is carried out in accordance with the legal requirements set by the Personal Data Protection Commissioner of Malaysia.

No Data Sales

Win1win3 has never sold, and will never sell, member personal data to third parties for marketing or any other commercial purpose. Your data belongs to you — we use it solely to deliver a better service to you.

Secure Data Storage

Win1win3 member personal data is stored on servers protected by layered access controls, intrusion detection systems, and regular backups. Only authorised staff with a legitimate operational need are permitted to access member data.

Your Data, Your Control

As a win1win3 member, you have the full right to review, update, request a copy of, or request the deletion of your personal data at any time. We make this process straightforward — contact our team and your request will be processed within 14 days.

Marketing Communications Controls

You may opt out of marketing communications from win1win3 at any time via the "unsubscribe" link in any email, or by updating your notification preferences in your account settings. Essential operational notifications related to your account cannot be disabled.

This Privacy Policy explains how win1win3 (referred to as "we", "the platform", or "win1win3") collects, uses, stores, and protects your personal data when you use our platform at https://win1win3.best. This Policy applies to all registered members and visitors of the win1win3 platform. By using our platform, you agree to the practices described in this document.

1. Introduction & Scope of This Policy

Win1win3 is an online entertainment platform operating in Malaysia and serving Malaysian players. As a responsible platform operator, we regard member trust as our most valuable asset. A key part of building that trust is being transparent about how we manage your personal data.

The win1win3 Privacy Policy covers all aspects of personal data management, including data collected during account registration, platform usage, deposit and withdrawal processing via local payment methods such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as interactions with our customer support team.

Data Controller: The data controller for the purposes of Malaysia's Personal Data Protection Act 2010 is win1win3, reachable at support@win1win3.best. Any privacy or data management enquiries may be directed to us at that email address.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register an account and use the win1win3 platform, you provide us with the following data voluntarily:

  • Identification Information: Full name as per MyKad, identity card number, date of birth, and gender.
  • Contact Information: An active Malaysian phone number, email address, and residential address.
  • Financial Information: Malaysian bank account or e-wallet details used for deposits and withdrawals — account number, bank name, and account holder name. win1win3 does not directly store credit card numbers or card payment information.
  • Verification Documents: MyKad copy, facial photo (selfie), and proof of address such as a utility bill or bank statement for KYC purposes when required.

2.2 Automatically Collected Data

When you use the win1win3 platform, our systems automatically record certain technical information required for platform operations:

Data Type Example Purpose
Device Data Device type, operating system, phone model Platform display optimisation
Network Data IP address, ISP, approximate location Security & fraud detection
Browser Data Browser type, language settings, screen resolution Compatibility & user experience
Activity Log Pages visited, session duration, click actions Product improvement & security
Transaction Data Deposit, withdrawal, betting, and winnings records Account operations & regulatory compliance

2.3 Gaming & Betting Data

Win1win3 records all betting and gaming activity on the platform — including Malaysia Super League and EPL football bets, slots rounds, live casino games, lottery numbers selected, and any related activity. These records are required to resolve disputes, meet regulatory compliance obligations, and provide you with an activity history upon request.

3. How win1win3 Uses Your Data

Win1win3 uses your personal data solely for legitimate, disclosed purposes. We do not use your data for anything unrelated to delivering this platform's services to you. The primary purposes for which we use your data are:

  • Account Operations: Creating and managing your win1win3 account, processing logins, and verifying your identity.
  • Transaction Processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, and processing winning withdrawals to your bank account or digital wallet.
  • KYC Verification: To verify your identity in line with anti-money laundering (AML) compliance requirements and other regulatory obligations.
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, bonus abuse, and activity that violates win1win3's terms of service.
  • Customer Support: Assists when you reach out to the win1win3 support team with account-related queries or issues.
  • Service Communications: Sending important account-related notifications — including deposit confirmations, withdrawal notifications, security alerts, and updates to our terms of service.
  • Marketing (with consent): Sending you promotional information, new bonuses, and special offers from win1win3 — only if you have consented to receive marketing communications.
  • Legal Compliance: Fulfilling reporting and compliance obligations required under applicable Malaysian law.
  • Platform Improvements: Analysing aggregated usage patterns to understand how the win1win3 platform is used and identify opportunities for improvement.

Win1win3 applies a "data minimisation" principle — we only collect data that is strictly necessary for the stated purpose. We do not collect sensitive personal data such as medical information, religious beliefs, or political views unless specifically required by applicable law.

4. Sharing Data with Third Parties

Win1win3 does not sell, rent, or disclose member personal data to third parties for their marketing purposes. However, there are limited situations where win1win3 needs to share your data with carefully selected third parties:

4.1 Trusted Service Providers

Win1win3 works with third-party service providers that assist us in operating the platform. These include:

  • Payment Providers: Payment processors facilitating DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay transactions require access to relevant transaction information in order to process payments.
  • Game Providers: Third-party gaming companies that provide slots, live casino, and other games on the win1win3 platform may receive anonymised player IDs for technical integration purposes.
  • Identity Verification Services: Third-party KYC providers that assist us in verifying member identities in line with compliance requirements.
  • Technology Infrastructure: Server and cloud service providers that store win1win3 platform data in a secure, controlled environment.

All third-party service providers we engage are bound by data protection agreements requiring them to safeguard your data and use it solely for the purposes specified — not for their own commercial interests.

4.2 Legal Requirements

Win1win3 may be required to disclose member personal data to the relevant authorities if mandated by Malaysian law — including to the Malaysian Anti-Corruption Commission (MACC), the police, courts, or financial regulatory bodies upon receipt of a legally valid directive. In such circumstances, win1win3 will comply with the legal requirement while endeavouring to notify you in advance if the law permits such notification.

Our Guarantee: win1win3 never shares member personal data with advertisers, data brokers, marketing companies, or any party without a legitimate operational need directly related to delivering win1win3 services to you.

5. win1win3 Data Security Measures

Win1win3 invests seriously in security infrastructure to protect member personal data from unauthorised access, disclosure, alteration, or destruction. The layers of protection we employ include:

  • Data Encryption in Transit: All communications between your device and the win1win3 platform use TLS 1.3 with 256-bit encryption — no sensitive data is transmitted in plain text.
  • Data Encryption at Rest: Sensitive data such as passwords is stored in cryptographically processed (hashed) form — even in the event of unauthorised database access, actual passwords cannot be recovered.
  • Layered Access Controls: A role-based access control (RBAC) system ensures win1win3 staff can only access data necessary to carry out their authorised duties.
  • Two-Factor Authentication: win1win3 encourages all members to enable 2FA on their accounts. win1win3 staff who access the management system are required to use 2FA.
  • Real-Time Security Monitoring: A SIEM (Security Information and Event Management) system continuously monitors platform activity to detect anomalies and potential threats.
  • Regular Security Testing: win1win3 conducts regular penetration testing by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
  • Secure Data Backup: win1win3 platform data is regularly backed up to a separate, secure location to ensure service continuity and data recovery in the event of any incident.

While win1win3 takes comprehensive security measures, no system can guarantee absolute 100% security in an online environment. You also play an important role in your account's security — use a strong password, enable 2FA, and never share your login credentials with anyone.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. win1win3 uses cookies and similar tracking technologies to ensure the platform functions correctly and to provide you with a better experience.

6.2 Types of Cookies Used by win1win3

  • Essential Cookies: These cookies are required for the win1win3 platform to function properly — including maintaining your login session, saving language preferences, and securing transactions. They cannot be disabled as they are essential to the platform's core operations.
  • Performance Cookies: Used to analyse page visits, load times, and user navigation patterns in aggregate, without identifying individuals. This information helps win1win3 improve platform performance.
  • Functional Cookies: Saving your personal preferences such as display settings, preferred currency, and notification preferences so you do not need to reconfigure them each time you log in.
  • Security Cookies: Helps detect suspicious activity, prevent CSRF attacks, and identify unauthorised login attempts.

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers let you view, delete, or block cookies. However, disabling essential cookies may affect how the win1win3 platform functions — including potential issues with logging in or processing transactions correctly.

7. Data Retention Period

Win1win3 retains your personal data only for as long as necessary for the stated purposes, or as required under applicable Malaysian law. The following is a general guide to our data retention periods:

Data Type Retention Period Reason
Active Account Information Throughout active account + 7 years AML & PDPA compliance requirements
Financial Transaction Records 7 years from the date of transaction Malaysian financial legal requirements
Game Activity Logs 3 years from the date of activity Dispute resolution & audits
KYC Documents 7 years from account closure Malaysia AML Requirements
Customer Support Log 3 years from last interaction Reference & service improvement
Marketing Data Until you withdraw your consent Legal basis for marketing communications consent

Once the applicable retention period has expired, win1win3 will securely delete or anonymise your data. Anonymised data can no longer be linked to you personally and may be retained for aggregate analytics purposes.

8. Your Rights Regarding Personal Data

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by win1win3:

Right of Access

You have the right to request a copy of the personal data win1win3 holds about you. We will provide the data in a readily readable format within 14 days of receiving your request.

Right to Correction

If you find that personal data held by win1win3 is inaccurate or incomplete, you have the right to request a correction. You may also update basic profile information directly through your own account settings.

Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. However, this right is not absolute — win1win3 may need to retain certain data to meet legal obligations or to resolve ongoing disputes.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Once an objection is received, win1win3 will stop processing your data for that purpose.

Right to Restriction

You have the right to request restriction of processing of your data in certain circumstances — for example, when you dispute the accuracy of the data, or when processing is unlawful but you do not want the data deleted.

Right to Data Portability

You have the right to receive the personal data you have provided to win1win3 in a structured, commonly used, machine-readable format, and to transmit that data to another data controller should you choose to do so.

How to Submit a Request: To exercise any of the above rights, contact win1win3 by email at support@win1win3.best with the subject line "Privacy Rights Request", along with your full name, account number, and a description of your request. win1win3 will process your request within 14 working days and may require identity verification before processing a request, in order to protect your privacy from unauthorised access.

9. Protection of Minors

The win1win3 platform is intended exclusively for individuals aged 18 and above. win1win3 does not knowingly collect, use, or store personal data of individuals under the age of 18. The win1win3 registration process requires age verification, and we work with payment providers to restrict access based on minimum age requirements.

Should win1win3 discover that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered a win1win3 account, please notify us at support@win1win3.best without delay.

10. Contact Us Regarding Privacy

Win1win3 takes every privacy enquiry and concern seriously. If you have any questions about this Privacy Policy, how we manage your data, or wish to exercise any of your privacy rights, please reach out to us through the following channels:

  • Privacy Email: support@win1win3.best — please include "Privacy Enquiry" in the subject line of your email.
  • Live Chat: Available on the win1win3 platform, operating 24 hours a day, 7 days a week.
  • Response Time: win1win3 is committed to responding to all privacy enquiries within 48 hours, and to resolving privacy rights requests within 14 working days.

Win1win3 values your feedback in helping us improve our privacy practices. If you are dissatisfied with how win1win3 has handled your privacy request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Privacy Policy Updates: win1win3 will review and update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. Any material changes will be communicated via email or in-platform notification at least 14 days before taking effect. The date of the last update is always displayed at the top of this document. We encourage you to check this page periodically.

Play with Peace of Mind — Your Data Is Protected at win1win3

Enjoy a fun and secure gaming experience at win1win3, with the confidence that your personal data is handled responsibly, transparently, and in full compliance with Malaysian law. Register today and experience the difference.

PDPA 2010 Compliance
256-bit SSL · Data Protected
Officially Licensed
256-bit SSL
PDPA Compliance
24/7 Support
Local Payment
Data Protected

FAQ – win1win3 Privacy Policy

Answers to the questions most frequently asked by members regarding privacy and data protection at win1win3.

win1win3 stores the bank account number and bank name you register for withdrawal processing purposes. However, win1win3 does not store credit or debit card numbers directly — all card transactions are processed through a PCI DSS-certified payment gateway that handles card data on their end and sends only a reference token to win1win3's systems. Your bank account data is protected with encryption and is accessible only to authorised staff for the purpose of processing your withdrawals.

Yes, you have the right to request deletion of your personal data. However, this right is not absolute in all circumstances. win1win3 may need to retain certain data for a specified period even after a deletion request is received — in particular, financial transaction records which must be kept for 7 years under Malaysian legal requirements relating to AML and financial reporting. Data that can be deleted immediately includes profile preference information, marketing data, and records not subject to legal retention requirements. Contact us at support@win1win3.best to submit a deletion request, and we will inform you in detail which data can be deleted and which must be retained based on legal obligations.

Not at all. win1win3 does not sell, rent, or share member personal data with third-party advertisers. We do not use your data to display ads from other companies, nor do we allow third parties to use your data for their own marketing purposes. Any marketing communications you receive from win1win3 relate solely to win1win3's own products, promotions, and services — and only if you have consented to receive them. You may unsubscribe from win1win3 marketing emails at any time via the unsubscribe link in the email or through your account settings.

When you close your win1win3 account, your personal data will not be deleted immediately, as there are legal requirements to retain certain records. Financial transaction records will be retained for 7 years from the account closure date, in line with Malaysian financial and AML regulations. KYC documents will be retained for 7 years. Once the mandatory retention period ends, your data will be securely deleted. During the retention period, access to your data is strictly limited and for compliance purposes only. Your data will not be used for marketing or shared with third parties for commercial purposes after account closure.

win1win3 has a comprehensive incident response plan to address any data breach or security incident. In the event of a data breach affecting member personal data, win1win3 will: (1) contain the breach and isolate affected systems as quickly as possible; (2) conduct a thorough investigation to understand the scope and root cause of the incident; (3) notify affected members within 72 hours of the breach being confirmed, providing details of what occurred, the data involved, and the steps to be taken; (4) report to the Personal Data Protection Commissioner of Malaysia if required by law; and (5) implement preventive measures to avoid a recurrence of the same incident in future.
Bahasa Melayu