Privacy Policy WIN303 – Malaysian Member Personal Data Protection

WIN303 collects your personal information through various channels during the registration process, platform usage, and interactions with our support team. We only collect data that is strictly necessary to provide you with a quality and secure service.

In addition to data you provide directly, we also collect information automatically through cookies, server logs, and similar technologies as you browse the WIN303 platform. This data helps us detect suspicious activity and ensure a smoother gaming experience for you.

Every piece of data we collect has a clear and legitimate purpose. WIN303 does not use your data for any purpose other than those stated below. Our data minimisation principle ensures we do not retain more information than is necessary.

• Verifying your identity during registration and the KYC process to ensure the safety of all members.
• Processing deposits and withdrawals quickly and securely to verified accounts in your name.
• Sending important account notifications such as transaction confirmations, security alerts, and service updates.
• To personalise your gaming experience with relevant game recommendations and promotions based on your gaming history.
• Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• To fulfil legal obligations and regulatory compliance requirements imposed on WIN303.
• Conducting internal analysis to improve our platform, games, and customer support services.
• Supporting responsible gaming programs by monitoring gameplay patterns that may indicate a problem.

WIN303 understands that your trust is our most valuable asset. We do not share your personal information indiscriminately. However, there are certain situations where data sharing is necessary to ensure smooth service delivery or to fulfil legal obligations.

• Payment Service Provider: Financial information that must be shared with payment processors such as FPX, Touch 'n Go, and Boost to enable transactions to be processed.
• Identity Verification Provider: Identity data is shared with trusted KYC partners for document verification and background checks as required by law.
• Regulatory Authority: WIN303 will disclose information to government authorities or law enforcement when required by court order or applicable Malaysian law.
• Technology Partner: IT infrastructure and cloud service providers supporting WIN303 platform operations, subject to strict confidentiality agreements.

All third parties that receive your data from WIN303 are required to comply with data protection standards equivalent to or stricter than our own policy. We have zero tolerance for any use of data that deviates from the agreed purpose.

The security of your data is WIN303's absolute priority. We continuously invest in the latest security infrastructure to ensure your personal information is always protected against unauthorised access, theft, or damage.

• All data is stored on secure servers with full encryption using AES-256 and SSL/TLS 256-bit technology.
• Member passwords are never stored in plain text — we use a one-way, irreversible hashing method.
• Round-the-clock, 24/7 security monitoring by our in-house cybersecurity team.
• Penetration testing is conducted periodically by independent third parties to identify and address any vulnerabilities.
• Automatic backup systems ensure your data is not lost in the event of a technical failure.

Data retention periods depend on the type of information and legal requirements. Generally, active account records are retained for the duration of membership, while financial transaction records are kept for seven years in accordance with PDPA requirements and relevant laws in Malaysia. Data that is no longer needed will be securely deleted using non-recoverable methods.

The WIN303 platform uses cookies and similar tracking technologies to enhance your experience, secure your account, and understand how members use our platform. Cookies are small text files stored on your device by your web browser.

• Essential Cookies: Required for core platform functions such as login verification, language preference storage, and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous information about how you use the platform, helping us identify areas that need improvement.
• Functional Cookies: Saving your personal preferences such as display settings, language, and favourite game selections for a more convenient future experience.
• Security Cookies: Used to detect suspicious login activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may cause some platform features to not function properly.

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data held by WIN303. We fully respect these rights and make it easy for you to exercise them.

WIN303 is an online gaming platform exclusively for adults aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

Should we discover that a minor's personal data has been collected without our knowledge — for example through fraudulent account registration — we will immediately delete that data and close the account without any compensation. Parents or guardians who become aware that their child has registered on our platform are urged to contact us immediately.

In operating the WIN303 platform, some of your personal data may be transferred to or stored on servers located outside Malaysia. Such transfers occur only when necessary to provide the services you use, and we ensure that a level of protection comparable to Malaysia's PDPA 2010 is upheld at the transfer destination.

• All cross-border data transfers are subject to rigorous security assessments before approval.
• Third-party partners outside Malaysia are required to sign legally binding data processing agreements.
• WIN303 prioritises the use of data centres located in Malaysia or within the Southeast Asian region wherever possible.

WIN303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. All changes will be published on this page with a clear update date.

For significant changes that materially affect your rights or how we use your data, WIN303 will notify you via your registered email or an in-platform notice at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how WIN303 handles your personal data, our Data Protection team is ready to assist you.

• Live chat within the WIN303 platform — available 24 hours a day, 7 days a week for immediate responses.
• Data protection email: [email protected]
• Email response time: within 2 to 4 hours on business days.
• For formal complaints relating to PDPA, you may also contact the Department of Personal Data Protection Malaysia (JPDP).