Privacy Policy 333win – Malaysian Player Data Protection

Section 1 – Personal Data We Collect

333win only collects data that is strictly necessary to provide a safe, functional service that meets regulatory requirements. Below are the categories of data we collect and the reasons they are needed.

We do not collect data beyond what is necessary for platform operations. Sensitive data categories such as medical information or religious beliefs are not collected by 333win under any circumstances.

Section 2 – How We Use Your Personal Data

333win uses your personal data on a valid legal basis — whether to fulfill our service agreement with you, to pursue legitimate interests that do not override your privacy rights, or based on your explicit consent. The following are the primary purposes for which your data is used.

• Account Operations: Creating and managing your account, verifying your identity and age, processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and keeping your account secure from unauthorised access.
• Service Provision: Grants access to all 333win games including slots, live casino, football betting (Malaysia Super League, EPL), lottery, and progressive jackpots, based on your account status.
• Service Communications: Sends important account-related notifications such as deposit confirmations, withdrawal status updates, security alerts, terms updates, and responses to your support requests.
• Marketing (with consent): If you have given your consent, we may send you information about new promotions, bonuses, and the latest 333win offers. You can withdraw this consent at any time by contacting support or through your account's communication settings.
• Security & Fraud Prevention: Detecting and preventing fraud, multi-account use, money laundering, and activities that violate the platform's terms of use. This includes analysis of unusual betting patterns and transactions.
• Legal Compliance: To fulfil applicable regulatory and legal obligations, including anti-money laundering (AML) requirements, identity verification (KYC), and record-keeping for audit purposes.
• Responsible Gaming: Monitoring activity patterns to identify early signs of problem gambling and ensuring that protective tools such as deposit limits are functioning correctly to safeguard vulnerable players.

Section 3 – Data Sharing with Third Parties

333win does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we may share your data with a limited categories of third parties as outlined below, strictly for the stated purposes.

• Payment Service Providers: PCI-DSS certified payment gateways that process your transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. Data shared is strictly limited to the information required to complete each transaction.
• Game Providers: Licensed game software providers whose games are accessible through the 333win platform. Data shared is limited to player ID and relevant gaming activity, strictly for the purposes of game fairness and technical dispute resolution.
• Technical Service Providers: Cloud infrastructure providers, cybersecurity systems, and customer support platforms that assist in running 333win's operations. All such providers are bound by strict confidentiality agreements and may only use your data for the purposes specified.
• Regulatory Bodies & Law Enforcement: When required by law, court order, or a legitimate regulatory authority. 333win will notify you of any such request where permitted to do so by law.

Section 4 – Data Security Measures

333win continuously invests in data security technologies and processes designed to protect your personal information from unauthorised access, data breaches, tampering, or loss.

• Encryption in transit: All communications between your browser or app and 333win's servers are secured using TLS 1.3 (Transport Layer Security) with the strongest available cipher suites. This ensures your data cannot be read by anyone attempting to intercept the connection.
• Encryption at rest: Sensitive personal data stored in 333win's databases is encrypted at rest using AES-256. This means that even if someone were to gain physical access to the servers, the stored data cannot be read without the corresponding encryption key.
• Internal access controls: Access to player data within the 333win organisation is governed by the principle of least privilege — only staff who genuinely require access to specific data in order to perform their duties are permitted to do so, with all access logged in an audit trail.
• Two-factor authentication: 333win's internal systems that store player data require two-factor authentication for all staff access, adding an extra layer of protection even if a staff member's password is compromised.
• Regular security testing: 333win conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• Real-time monitoring: A real-time threat detection system monitors 333win's platform traffic and activity 24/7 to identify anomalies that may indicate intrusion attempts or unauthorised activity.

Section 5 – Cookie Policy & Tracking Technologies

333win uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how the platform is used. Below are the types of cookies used and their respective purposes.

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of the platform 333win. For more information on how to manage cookies in your browser, refer to your respective browser's help documentation.

Section 6 – Your Rights Over Personal Data

333win recognises and respects your rights over your personal data. These rights can be exercised by contacting our support team via email or live chat.

To exercise any of the rights above, contact our data protection team 333win via email at support@333win-play.com with the subject line "Data Privacy Rights Request" and specify the type of request you are submitting. We will verify your identity before processing any request to ensure security. Standard response times are 14–30 days depending on the nature and complexity of the request.

Section 7 – Data Retention & Deletion

333win does not retain your personal data for longer than is necessary for the purpose it was collected, or longer than required by applicable laws and regulatory obligations.

• Active account data: For as long as your account is active and you are using 333win's services.
• Data after account closure: A minimum of 5 years following account closure, to comply with AML record-keeping requirements, financial audits, and the resolution of any potential post-closure disputes.
• Transaction records: A minimum of 7 years for financial records, in line with Malaysian taxation and financial regulatory requirements.
• Support communication data: 3 years from the date of last communication, for reference and dispute resolution purposes.
• Analytics cookie data: Maximum 13 months from the date of collection, after which data is automatically deleted or anonymised.

When the retention period expires, your data will be securely deleted or irreversibly anonymised so it can no longer be linked to any individual. The secure deletion process uses industry-standard methods to ensure data cannot be recovered.

Section 8 – Cross-Border Data Transfers

In the course of operating the platform, your personal data may be transferred to and processed on servers located outside Malaysia. 333win ensures that any such data transfers are carried out with adequate protections in place.

• Data transfer agreements: All cross-border data transfers are protected by contractual agreements that require data recipients to comply with data protection standards equivalent to or exceeding those in Malaysia.
• Primary data storage: Primary data for Malaysian players is stored on servers in accredited data centres that meet international data security standards, with redundant backup systems in place to ensure service continuity.
• Regulatory compliance: All data transfers are carried out in accordance with applicable data protection laws, and we continuously monitor regulatory developments to ensure ongoing compliance.

Section 9 – Protection of Children & Minors

Platform 333win is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from children or underage individuals.

• Age verification: All 333win registration processes require age verification. Any account suspected of being owned or used by an individual under 18 will be suspended immediately while an investigation is conducted.
• Parent / guardian reporting: If you believe your child or someone in your care has registered a 333win account, please contact us immediately at support@333win-play.com. We will investigate, close the account, and delete all associated data without delay.
• No marketing to minors: 333win does not employ any marketing methods that target or appeal to children and minors.

Section 10 – Contact Us About Data Privacy

If you have any questions, concerns, or requests relating to how 333win handles your personal data, we encourage you to reach out to us directly. Our data protection team is available to assist in both Bahasa Melayu and English.

Data Privacy and You – What Every 333win Player Needs to Know

When Malaysians engage with digital services today — whether shopping online, using e-wallets, or playing on an online casino platform like 333win — they actually leave behind a trail of data that service providers have a responsibility to manage carefully. Awareness of data privacy is growing among Malaysian consumers, and this is a development that we at 333win wholeheartedly welcome.

One of the most common concerns we hear from players is about payment data — "Is my Touch 'n Go account number safe with 333win?" The answer is yes, and here is why: 333win does not store your full e-wallet account numbers or banking details on our servers. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, you are in fact interacting directly with a PCI-DSS certified payment gateway — the most stringent international payment data security standard. The platform 333win only receives confirmation that a transaction was successful — not your full account details.

Another common concern is about game activity data — "Does 333win keep a record of every game I play?" Yes, we do retain records of your gaming activity, and this is entirely in your interest. These records allow us to resolve any disputes regarding game outcomes or transactions, ensure your winnings are paid out accurately, meet regulatory requirements that mandate gambling platforms to maintain activity records, and provide meaningful responsible gambling tools — such as spending history displays that help you monitor your own play.

There is another point we want to make absolutely clear: 333win never uses your personal data or activity data to sell to advertisers, data brokers, or any third party for marketing purposes unrelated to our platform. This is not merely a legal commitment — it is a core business principle we uphold without exception. Our business model 333win is built around delivering the best gaming experience to Malaysian players, not monetising player data for third parties.

Regarding the use of cookies, we would like to clarify that the cookies used by 333win is primarily for security and functionality — not to track you across other websites. Session cookies that keep you logged in, security cookies that detect suspicious login attempts, and preference cookies that remember your settings — these are the cookies we use. We do not use third-party cookies that track your browsing activity outside the platform 333win.

Players who want to know exactly what data we hold about them have the full right to request a complete personal data report. Send an email to support@333win-play.com with this request and we will provide a comprehensive report within 30 days. The report will cover all categories of data we hold, how it is used, and who it is shared with. This is your right as a player 333win and we encourage you to use it if you want to ensure your privacy is fully protected.