3win8 Privacy Policy

1Introduction

This Privacy Policy ("Policy") is issued by 3win8 ("3win8", "we", "us", "our") and applies to all personal data processed in connection with your use of the 3win8 website at 3win8.one and all associated services, gaming products, and content (collectively, the "Platform").

3win8 is committed to protecting the privacy and personal data of all players and visitors, including those based across Malaysia — from Kuala Lumpur, Bangsar, and Petaling Jaya to Penang, Johor Bahru, and beyond. We process personal data in accordance with internationally recognised data protection standards, including principles aligned with the General Data Protection Regulation (GDPR) and Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering a 3win8 account, making a deposit, or otherwise using the Platform, you acknowledge that you have read, understood, and agree to the data processing practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.

2Data We Collect

3win8 collects personal data through several means, including information you provide directly, data generated through your use of the Platform, and information received from authorised third parties. The categories of personal data we collect include:

• Full legal name, date of birth, and gender (as provided at registration)
• Residential address, city, state, and postcode (including Malaysian cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya)
• Email address and mobile phone number
• Government-issued identification documents (where required for KYC verification)

• Payment method details, including bank account information (Maybank, CIMB, Public Bank) and e-wallet identifiers (Touch n Go eWallet, Boost)
• Transaction history: deposit amounts, withdrawal requests, bonus credits, and wager records
• Source of funds information (where required under anti-money laundering obligations)

• IP address, device type, operating system, and browser type
• Session data including login timestamps, game activity logs, and session duration
• Cookies and similar tracking technologies (see Section 7)
• Geolocation data at the country and city level (not precise GPS location)

• Records of customer support interactions via live chat and email
• Survey responses and feedback submitted voluntarily through the Platform

3How We Use Your Data

3win8 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your 3win8 player account, processing your registration, and verifying your identity.
• Service Delivery: Enabling access to casino games, sportsbook betting (including football, UFC, and Malaysia Super League markets), slot games, Fisher Game, and all other Platform features.
• Payment Processing: Processing deposits and withdrawals in MYR via your chosen payment method, and fulfilling associated financial obligations.
• Regulatory Compliance: Meeting our obligations under applicable gaming authority standards, anti-money laundering (AML) laws, and know-your-customer (KYC) requirements.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and other illegal conduct on the Platform.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling and administering player protection tools such as deposit limits, loss limits, and self-exclusion.
• Customer Support: Responding to inquiries, resolving disputes, and improving the quality of our support services.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, game selection, and user experience.

4Legal Basis for Processing

3win8 processes personal data only where a valid legal basis exists. The legal bases on which 3win8 relies for its processing activities are:

• Contractual Necessity: Processing required to perform the contract with you — i.e., to provide 3win8 gaming services pursuant to the Terms & Conditions you accepted at registration.
• Legal Obligation: Processing required to comply with applicable laws, gaming authority regulations, AML obligations, and tax reporting requirements.
• Legitimate Interests: Processing in pursuit of 3win8's legitimate business interests — including fraud prevention, Platform security, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given consent, particularly in relation to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5Data Sharing and Disclosure

3win8 does not sell, rent, or trade your personal data to third-party marketing companies. We may share your personal data with the following categories of recipients only to the extent necessary and subject to appropriate confidentiality obligations:

• Payment Processors: Financial institutions and e-wallet operators (including Maybank, CIMB, Public Bank, Touch n Go eWallet, and Boost) to process your deposits and withdrawals.
• Game Studio Partners: Licensed game providers who operate games accessible via the 3win8 Platform, to the extent required for game delivery and integrity monitoring.
• KYC and Identity Verification Providers: Specialist third-party services used to verify your identity and comply with regulatory obligations.
• Regulatory Authorities: Gaming authority bodies, financial intelligence units, and law enforcement agencies, where 3win8 is legally required to make such disclosures (e.g., suspicious transaction reporting).
• Technology and Hosting Providers: Cloud infrastructure and technology service providers who host and support the 3win8 Platform under strict data processing agreements.

Any third-party data processor engaged by 3win8 is contractually required to process personal data only on 3win8's documented instructions and to maintain appropriate technical and organisational security measures.

6Data Retention

3win8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law or gaming authority regulation. The following general retention principles apply:

• Active Account Data: Retained for the duration of your active account relationship with 3win8, plus a post-closure period of five (5) years to meet regulatory and legal obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the date of the transaction in accordance with applicable anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant business relationship.
• Marketing Preferences: Retained until you withdraw consent or object to processing, after which they are promptly suppressed or deleted.
• Technical Logs: Retained for up to 12 months for security and operational purposes, unless specific logs are required for an ongoing investigation.

Upon expiry of the applicable retention period, 3win8 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

7Cookies and Tracking Technologies

3win8 uses cookies and similar web technologies to operate the Platform effectively and to improve your experience. The categories of cookies deployed by 3win8 are as follows:

• Strictly Necessary Cookies: Essential to the basic operation of the 3win8 Platform, including maintaining your login session, processing transactions, and ensuring Platform security. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Remembering your account preferences, language settings, and device recognition to streamline future 3win8 login sessions.
• Analytical Cookies: Collecting aggregated, anonymised data about how players use the Platform to identify performance issues and improve the user experience. 3win8 uses first-party analytics only.

3win8 does not deploy third-party advertising cookies or cross-site tracking cookies. You may manage or block cookies through your browser settings; however, disabling strictly necessary cookies will impair Platform functionality including the ability to log in to your 3win8 account.

8Your Data Subject Rights

Subject to applicable law and gaming authority regulations, registered 3win8 players have the following rights in respect of their personal data:

• Right of Access: The right to request a copy of the personal data 3win8 holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by 3win8.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: The right to request that 3win8 restricts the processing of your personal data in certain circumstances (e.g., while the accuracy of data is contested).
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact 3win8 customer support. 3win8 will respond to valid data subject requests within thirty (30) days of receipt. 3win8 may require identity verification before processing a data subject request.

9Security Measures

3win8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 3win8 servers
• AES-256 encryption for sensitive personal data and financial records stored at rest
• Multi-factor authentication requirements for administrative access to data systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Strict role-based access controls limiting personnel access to personal data on a need-to-know basis
• Continuous security monitoring and incident response procedures with defined escalation paths

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 3win8 will notify affected players without undue delay and in accordance with applicable notification obligations.

10Minors and Age Verification

The 3win8 Platform is strictly intended for use by individuals who are 21 years of age or older. 3win8 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process.

If 3win8 discovers that personal data has been collected from an individual under the age of 21, such data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe a minor has accessed the 3win8 Platform, please contact our customer support team immediately at [email protected].

11Updates to This Privacy Policy

3win8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or gaming authority requirements. Where amendments are material, 3win8 will publish a notice on the Platform and, where practicable, notify registered players by email to the address on file prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 3win8 protects your personal data. Your continued use of the Platform following publication of any amended Policy constitutes your acknowledgement of the changes.

12Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 3win8, please contact our Data Protection team through the following channel:

Email: [email protected] (plain text — not a clickable link)

3win8 customer support is available 24 hours a day, 7 days a week. We are committed to addressing all privacy-related enquiries promptly and transparently, and will respond to data subject requests within thirty (30) days of receipt.

For further information about your rights as a player on the 3win8 Platform, please also review our Terms & Conditions and Responsible Gaming Policy.