3win8 Privacy Policy — Data Protection for Malaysian Players

To provide you with the 3win8 platform's services, we collect several categories of personal information. We only collect what is strictly necessary for the stated purposes — nothing more. Below are the types of information we collect and the reasons we collect them:

We may also collect data automatically when you use the 3win8 platform — including information about how you interact with our website and app, the pages you visit, and the features you use. All such data is collected solely to improve the user experience and ensure platform security.

3win8 uses the personal data we collect solely for the following purposes. We do not use your data for any other purpose without first obtaining your additional consent:

• Account Management: To register and maintain your account at 3win8, including processing logins, managing account settings, and providing access to services you are eligible for.
• Transaction Processing: To process deposits made via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u FPX, CIMB Clicks, and other Malaysian payment methods, as well as to process your winnings withdrawals.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multi-account usage, and any activity that violates 3win8's Terms & Conditions.
• Legal Compliance: To comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, and to cooperate with authorities where required by law.
• Customer Support: To handle enquiries, complaints, and support requests submitted to our Malay-speaking support team.
• Service Improvement: To understand how members use our platform and make meaningful improvements to our products, features, and overall user experience.
• Account-Related Communications: To send you important account-related notifications — such as transaction confirmations, security alerts, and significant policy updates.
• VIP Programme & Rewards: To manage the 3win8 VIP programme, calculate points and membership tiers, and provide the appropriate benefits for each tier.

All data usage is grounded in a valid legal basis — whether for the performance of a contract between you and 3win8, compliance with legal obligations, our legitimate interests as a platform operator, or your explicit consent.

3win8 is committed to never selling or arbitrarily sharing your personal data. However, in the following limited circumstances, we may need to share your data with certain parties:

• Payment Service Providers: Required transaction information is shared with payment processors (such as DuitNow, FPX, and eWallet gateway providers) to enable deposits and withdrawals to be processed securely. These providers are bound by strict data confidentiality agreements.
• Game Providers: Minimal technical data required is shared with authorised game providers such as Pragmatic Play, Evolution Gaming, and others to ensure games function properly within your account.
• Regulatory Body: 3win8 may be legally required to disclose certain data to our licensing regulatory body or relevant authorities as part of statutory compliance.
• Legal Authority: If 3win8 receives a court order or a lawful request from a law enforcement authority, we may be legally required to disclose the relevant data in accordance with due legal process.
• Identity Verification Services: For KYC purposes, certain identity data may be shared with authorised third-party identity verification service providers who are bound by strict confidentiality agreements.

Protecting your personal data is not just a policy — it is a technical practice we carry out every day. 3win8 has made serious investments in security infrastructure to keep your data safe at all times:

• Data Encryption in Transit: All communications between your device and 3win8's servers are secured by TLS 1.3 protocol with AES-256 encryption, ensuring your data remains unreadable to anyone who intercepts your network traffic.
• Data Encryption at Rest: Sensitive data such as financial information and identity documents is stored in encrypted form on our servers. Even if someone were to gain physical access to the servers, they would be unable to read the data without the appropriate encryption key.
• Two-Factor Authentication (2FA): 3win8 offers and actively encourages the use of two-factor authentication on your account as an added layer of security. Enable 2FA in your account settings today.
• 24/7 Security Monitoring: Our security monitoring system operates around the clock to detect and respond to any suspicious activity or intrusion attempts in real time.
• Regular Penetration Testing: 3win8 conducts regular penetration testing using independent security specialists to identify and address any vulnerabilities before they can be exploited.
• Network Segmentation: Servers storing sensitive member data are logically and physically isolated from other parts of our infrastructure to minimise the risk of data exposure in the event of any incident.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% safe from every threat. In the event of a data breach involving your personal data, 3win8 will notify you in accordance with applicable legal requirements and take immediate steps to mitigate the impact.

3win8 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by law. The following are general guidelines for our data retention periods:

• Active Account Data: For as long as your account remains active with 3win8, we retain all data related to your account and activity on the platform.
• Financial Transaction Data: Transaction records are retained for a minimum of 7 years after a transaction occurs, as required under Malaysia's financial and anti-money laundering laws.
• KYC Documents: Identity verification documents (MyKad copies, passports) are retained for a minimum of 5 years after account closure for legal compliance purposes.
• Communication Logs: Customer support chat logs and account-related communications are retained for 3 years for complaint resolution and service quality improvement purposes.
• Technical Data: Technical logs (including IP address logs) are retained for a maximum of 12 months for security and fraud detection purposes.

Once your data is no longer needed and there is no legal obligation to retain it, 3win8 will securely delete or anonymise it using methods that ensure it cannot be recovered or accessed again.

As a 3win8 member and data subject, you have certain rights regarding the personal data we hold about you. We take these rights seriously and will process every valid request promptly: