Privacy Policy 3 Win – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") is published by 3 win and applies to all services offered through the 3 win website and mobile platform. This Policy clearly and transparently explains how we collect, process, store, share, and protect your personal data when you use our platform.

We understand that your trust in 3 win depends greatly on how we handle your sensitive information. This policy is written in plain language — not dense legal jargon — so you can clearly understand what happens to your data.

By registering for or using the services 3 win, you agree to the collection and use of your data as described in this Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

3 win only collects data that is strictly necessary to provide a reliable, secure, and legally compliant service. The following are the categories of data we collect:

Personal data collected by 3 win is used exclusively for the following purposes. We never process your data for any purpose not listed here without first obtaining your additional consent:

• Service Provision: Creates and manages your account, processes deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, ShopeePay, Boost, and FPX, and enables access to all features on the 3 win platform.
• Identity Verification (KYC): Meets legal requirements for verifying member identity, preventing fraud, and ensuring only eligible individuals access the platform.
• Account Security: Detecting and preventing unauthorised access, fraud, money laundering, and other illegal activities that may compromise the security of your account and funds.
• Service Communications: Sends important account-related notifications, including transaction confirmations, security alerts, and updates to key terms.
• Experience Enhancement: We analyse how you use the 3 win platform to continuously improve the interface, enhance performance, and tailor the experience to the needs of Malaysian players.
• Customer Support: Helps you resolve any enquiries, complaints, or technical issues through 3 win's Malay-language support team.
• Legal Compliance: Meets the reporting and compliance obligations mandated by Malaysian law and relevant regulatory bodies.

Should 3 win wishes to use your data for a new purpose not listed above — such as for optional marketing communications — we will obtain your explicit consent beforehand, and you may withdraw that consent at any time.

3 win does not sell or trade your personal data to any party for commercial purposes. However, in the course of legitimate business operations, we may share your data with the following parties under limited and controlled circumstances:

• Payment Processing Providers: When you make a deposit or withdrawal via Touch 'n Go, GrabPay, DuitNow, or FPX, the transaction data required to complete the process is shared with the respective payment provider. These providers are bound by strict confidentiality agreements.
• Technical Service Providers: Companies that help us operate the platform, such as cloud computing, cybersecurity, and analytics services. All such parties are bound by strict data processing agreements and are not permitted to use your data for any other purpose.
• Regulatory Bodies and Law Enforcement: Where required by Malaysian law or a valid court order, we may be obligated to disclose certain data to the relevant authorities.
• Related Companies within the Group: In certain circumstances, data may be shared between entities within the 3 win group of companies, but only for internal operational purposes and subject to the same privacy policy.

Protecting your personal and financial data is the number one technical priority at 3 win. We have continuously invested in robust security infrastructure to ensure your data remains protected at all times:

• Data Encryption in Transit: All communications between your device and 3 win servers are encrypted using TLS 1.3 with the strongest cipher suites available — the same standard used by Malaysia's leading financial institutions.
• Encryption of Data at Rest: Sensitive data such as passwords is stored in encrypted form using the bcrypt algorithm. Even 3 win's internal team cannot view your password in its original form.
• Two-Factor Authentication (2FA): We offer 2FA for all accounts. You are strongly encouraged to enable this feature in your 3 win profile settings.
• 24/7 Monitoring: Our automated monitoring system is always active to detect unusual activity, intrusion attempts, and any security threats to user data.
• Fund Segregation: Player funds are held in accounts fully segregated from the company's operational funds, providing an additional layer of financial protection.
• Regular Security Audits: The 3 win platform undergoes regular independent penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

That said, no security system can guarantee 100% protection at all times. You also play an important role in keeping your account secure – always use a strong password, never share your login credentials, and enable 2FA on the platform 3 win.

3 win does not retain your personal data longer than necessary. Retention periods vary depending on the type of data and the purpose for which it was collected:

• Active Account Data: Retained for as long as your account remains active on the 3 win platform, plus any additional period required to meet legal obligations following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax regulatory requirements, including records of deposits and withdrawals via local e-wallets.
• Support Communication Logs: Live chat session records and support emails are retained for 2 years for quality control purposes and reference in the event of any dispute.
• Technical Data & Logs: Server logs and technical data are retained for 90 days before being automatically deleted, unless required for an ongoing security incident investigation.
• Marketing Data (where consent has been given): Retained until you withdraw your consent to receive marketing communications from 3 win.

As a member 3 win, you have the following rights regarding the personal data we hold about you. All requests may be submitted by email to privacy@3win-bangla.com and will be processed within 72 business hours: