Privacy Policy WIN303 — Malaysia Player Data Protection

01Introduction

WIN303 ("we", "Platform") is committed to protecting the privacy and security of all our players' personal information. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management.

This document describes the types of information we collect when you use the win303 platform, the purpose of that collection, how we protect your data, and your rights as the data owner. We believe transparency is the foundation of trust, which is why we want you to fully understand how your data is managed.

This policy applies to all win303 services, including the website, mobile app, customer support live chat, and all other communication channels we operate.

02Data We Collect

WIN303 only collects information necessary to deliver high-quality services and ensure legal compliance. The following are the categories of data we collect:

Data Category	Example Information	Primary Purpose
Identity Data	Full name, date of birth, identification card number	KYC verification, legal compliance
Contact Data	Email address, phone number, residential address	Account communications, transaction notifications
Financial Data	Bank account number, deposit records, withdrawal records	Payment processing, financial audits
Technical Data	IP address, device type, web browser, operating system	Account security, fraud detection
Gaming Data	Betting history, wins, games played	Responsible gaming, platform analytics
Cookie Data	Language preferences, login sessions, analytics data	Enhanced user experience

We do not collect sensitive information such as biometric data, medical records, or religious information unless specifically required by applicable law.

03How We Use Your Data

Every piece of data we collect is used for a clear and legitimate purpose. WIN303 does not use your data beyond what is necessary to provide the services you have registered for.

• Account management: Creating and maintaining your player account, including secure login processes and password management.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions promptly and securely.
• KYC verification: Meeting anti-money laundering (AML) legal requirements and identity verification obligations mandated by relevant authorities.
• Customer support: Resolving complaints, answering inquiries, and providing effective technical assistance to players.
• Platform security: Detecting and preventing fraud, multi-account usage, and suspicious activity that could affect other players.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need support and offering self-control tools.
• Platform improvements: Analyzing usage data in aggregate and anonymized form to improve the overall user experience.
• Marketing communications: Sending promotional offers and platform updates — you can unsubscribe at any time.

04Data Sharing with Third Parties

WIN303 does not sell or rent your personal data to any party for commercial purposes. However, we may share necessary information with the following parties in limited circumstances:

• Payment providers: Required financial data is shared with partner banks and e-wallet providers such as DuitNow, Touch 'n Go, and GrabPay solely for the purpose of processing your transactions.
• Identity verification providers: KYC information may be verified through approved third parties to ensure AML compliance.
• Technology providers: Companies supporting our technical infrastructure are bound by strict confidentiality agreements and may only access data required for their specific tasks.
• Legal authorities: WIN303 will comply with valid court orders and official requests from authorized law enforcement agencies.

05Data Security Measures

WIN303 continuously invests in the latest security infrastructure to ensure your data is always protected. The key security measures we employ include:

• 256-bit SSL encryption: All communications between your device and WIN303 servers are protected with bank-grade encryption.
• Data segregation: Sensitive data such as passwords is stored in hashed form and cannot be recovered.
• Strict access controls: Only personnel with specific authorisation may access player data, and all access is logged for audit purposes.
• Regular penetration testing: WIN303's security systems are regularly tested by independent security experts to identify and patch any vulnerabilities.
• Secure data backup: Data is regularly backed up to separate locations to ensure service continuity in the event of an unexpected disruption.

06Cookies and Tracking Technologies

WIN303 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you during repeat visits.

• Essential cookies: Required for basic platform functions such as login session management. These cookies cannot be disabled.
• Preference cookies: Saving your preferences such as language and display settings for a seamless experience.
• Analytics cookies: Helping us understand how players interact with the platform for continuous improvement. Data is collected anonymously.
• Security cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some areas of the win303 platform.

07Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data that win303 is fully committed to respecting:

To exercise any of the above rights, please contact the WIN303 data protection team. We will process your request within 30 calendar days of receipt.

08Data Retention Period

WIN303 only retains your personal data for as long as it is needed for the stated purpose or as required by applicable law. The following are our data retention guidelines:

• Active account data: Retained for the duration your account remains active and for the period required after account closure.
• Financial records: Retained for a minimum of 7 years in compliance with Malaysia's accounting and AML legal requirements.
• Security logs: Retained for 12 months for security incident investigation purposes if required.
• Support communication data: Retained for 3 years for reference and service improvement purposes.

Once the retention period expires, data will be securely deleted or converted into an anonymised format that cannot be linked to any individual.

09International Data Transfers

As a global online platform, WIN303 may store or process your data on servers located outside Malaysia. When this occurs, we ensure that such data transfers are protected by agreements guaranteeing a level of protection equivalent to Malaysia's standards.

We only transfer data to countries or entities that provide an adequate level of data protection, or where we have implemented appropriate contractual safeguards such as recognised Standard Contractual Clauses.

10Child Protection

The win303 platform is strictly for adults aged 18 and above. We do not intentionally collect personal data from minors. If you believe that someone under the age of 18 has registered an account at win303, please contact us immediately and we will take appropriate action, including deleting all related data.

11Contact the Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the win303 Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the WIN303 platform
• Response time: We aim to respond to all privacy enquiries within 5 business days

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant data protection authority in your country.

12Privacy Policy Amendments

WIN303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to the services we offer. All amendments take effect upon publication on this website.

For significant changes, we will provide clear notice to players via email or in-platform notification at least 14 days before the changes take effect. Continued use of the WIN303 platform after the effective date constitutes acceptance of the amended terms.

This Privacy Policy was last updated on January 2026. We encourage you to review this page periodically to stay informed about how we protect your information.