Win303 Privacy Policy – Personal Data Protection for Malaysian Members

1Scope & Application of This Policy

This Privacy Policy is issued by win303 and applies to all personal information collected, used, stored, or disclosed by win303 in connection with the operation of the win303.click platform and all services offered through it.

This policy applies to:

• All individuals who access the win303.click website, whether as guests or registered members.
• All members using any win303 service, including Sports Betting, slots, lottery, e-sports, and live casino table games.
• Individuals who contact the win303 customer support team through any communication channel.
• Individuals who interact with win303 marketing campaigns or promotions.

By using the win303 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue use of the win303 platform and contact us to discuss the options available to you.

Win303 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all its implementing regulations. This Policy is updated from time to time to reflect changes in legal requirements or win303's operational practices. The date of the most recent update is stated at the top of this document.

2Personal Data We Collect

Win303 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data collected:

Registration & Identity Data:

• Full name as stated on your official Malaysian identity document (MyKad or passport)
• An active mobile number for two-factor authentication and communications
• An active email address as the primary win303 communication channel
• Date of birth for minimum age verification (18 years and above)
• Malaysian state of residence for compliance purposes

Financial & Transaction Data:

• E-wallet details used for deposits and withdrawals (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay)
• Bank account details for withdrawals via FPX, Maybank2u, or CIMB Clicks
• Deposit and withdrawal transaction history in Malaysian Ringgit (RM)
• Betting and gaming history for responsible gambling compliance purposes

Technical & Usage Data:

• IP address and general location information (state within Malaysia) for security purposes
• Device type, operating system, and web browser used
• Account login data and activity logs
• Cookie data and similar tracking technologies (see Section 7)

3How We Use Your Data

Win303 uses the personal data collected for the following legitimate and operationally necessary purposes:

• Account Management – Creating, maintaining, and verifying your win303 member account.
• Transaction Processing – Processing deposits and withdrawals in Malaysian Ringgit via your chosen Malaysian payment methods.
• Identity Verification – To verify your age eligibility and identity in accordance with Malaysian legal requirements and industry compliance standards.
• Account Security – Detecting and preventing fraudulent activity, account breaches, and money laundering involving the win303 platform.
• Customer Support – Providing the technical and administrative support you need via live chat, WhatsApp, or email.
• Responsible Gambling – Monitors gaming patterns to identify signs of problem gambling and provide appropriate support to members who need it.
• Marketing Communications – Sending information about relevant win303 promotions, bonuses, and offers – only if you have consented to receive such communications.
• Platform Improvements – Analyses aggregated, anonymised usage data to improve the overall user experience on win303.
• Legal Compliance – To fulfil legal and regulatory obligations applicable to win303's operations in Malaysia.

4Legal Basis for Data Processing

Win303 processes your personal data on the basis of one or more legal grounds recognised under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent – You provide explicit consent for the collection and use of your data when registering a win303 account and accepting this Privacy Policy. Consent for marketing communications is optional and may be withdrawn at any time.
• Contractual Performance – Processing your personal data is necessary for win303 to fulfil its contractual obligations under the Terms & Conditions you agreed to upon registration, including transaction processing and account management.
• Legitimate Interests – Win303 has legitimate interests in processing certain data for security, fraud prevention, and service improvement purposes – subject to balancing against your rights and interests as a member.
• Legal Obligations – Certain data processing is necessary for win303 to comply with applicable legal and regulatory requirements in Malaysia.

5Data Sharing & Disclosure

Win303 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. Your personal data is shared only in the following circumstances and with the following parties:

• Payment Service Providers – Information necessary to process transactions is shared with payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX gateway processors. Such sharing is kept to a minimum and is solely for the purpose of processing your transactions.
• Game Providers – Minimum account information required to log in to games is shared with win303's slots and table game providers. These providers are bound by strict confidentiality agreements.
• Technical Service Providers – Cloud and technical infrastructure providers used by win303 may process your data as part of their services, subject to comprehensive data processing agreements.
• Legal Authority – Win303 will disclose personal data to Malaysian authorities when required by a court order, warrant, or valid legal requirement. Win303 will endeavour to notify you of any such request unless prohibited by law from doing so.
• Professional Advisors – Lawyers, accountants, or auditors involved in win303's legitimate operations may access data required for their work, subject to professional confidentiality obligations.

In all data-sharing arrangements, win303 ensures that the receiving party is bound by data protection obligations equivalent to win303's own standards, and may only use the data for the specific permitted purposes.

6Security & Data Storage

Win303 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, loss, or damage:

• Encryption in Transit – All data communications between your browser and win303's servers are secured using TLS 1.3 with strong cipher suites. win303's SSL certificates are issued by recognised Certificate Authorities (CAs).
• Encryption at Rest – Sensitive data stored in win303's databases, including financial details and identity documents, is encrypted using AES-256.
• Role-Based Access Control – Access to win303 systems and data is restricted on a principle of least privilege – each staff member may only access the data necessary for their specific role.
• Two-Factor Authentication – All administrative access to win303's internal systems requires two-factor authentication. Members are also encouraged to enable 2FA on their accounts.
• Continuous Security Monitoring – win303's systems are monitored around the clock to detect security threats, intrusion attempts, and suspicious activity.
• Regular Security Audits – Win303 conducts regular penetration testing and independent security audits to identify and address vulnerabilities.

That said, win303 cannot guarantee the absolute security of any system connected to the internet. In the event of a material data breach affecting your information, win303 will notify you within a reasonable timeframe as required under applicable Malaysian law.

7Cookies & Tracking Technologies

Win303 uses cookies and similar tracking technologies to enhance your experience on our platform. The following types of cookies are used:

• Essential Cookies (Required) – Required for core win303 platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies – Helps win303 understand how visitors use the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is analysed in aggregate and anonymised form.
• Functional Cookies – Saves your preferences such as display language and account settings so you do not have to reconfigure them each time you log in to win303.
• Marketing Cookies (Optional) – Used to display win303 promotional content relevant to your interests. These cookies are only activated with your explicit consent.

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the win303 platform. More information on managing cookies is available in your win303 account settings under the "Privacy & Cookies" section.

8Cross-Border Data Transfers

In the course of its operations, win303 may transfer your personal data to service providers operating outside Malaysia. This may include cloud infrastructure providers and international game suppliers.

When data is transferred outside Malaysia, win303 ensures that:

• Transfers are made to countries or organisations that provide a level of data protection comparable to that afforded under Malaysian law.
• Comprehensive data transfer agreements have been put in place with overseas data recipients, including standard protection clauses that bind them to standards equivalent to Malaysia's PDPA.
• Data transferred is kept to a minimum and used solely for the purposes necessary to deliver win303 services to you.

9Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and win303's privacy policy, you have the following rights regarding your personal data:

• Right of Access – You have the right to request a copy of the personal data win303 holds about you. Win303 will provide this copy in a readable format within 30 business days of the request date.
• Right to Rectification – If the personal data win303 holds about you is inaccurate or incomplete, you have the right to request a correction. Some data can be updated directly in your win303 account settings.
• Right to Erasure – Under certain circumstances, you have the right to request that win303 delete your personal data. Please note that this right may be limited by win303's legal obligations to retain certain records.
• Right to Restrict Processing – You may request that win303 restrict the processing of your data while a dispute regarding data accuracy or the validity of processing is being resolved.
• Right to Data Portability – You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object – You may object to the processing of your personal data for direct marketing purposes at any time, and win303 will cease such processing immediately.
• Right to Withdraw Consent – Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact win303's Privacy Officer by email at support@win303.click, stating the right you wish to exercise along with your account details for identity verification purposes. win303 will not charge any fee for reasonable rights requests.

10Data Retention Period

Win303 retains members' personal data for as long as necessary for the purposes set out in this policy, or as required under applicable Malaysian law:

• Active Account Data – Retained for the duration your account is active, plus any additional period required by law following account closure.
• Financial Transaction Records – Retained for a minimum of 7 years from the transaction date, in line with Malaysia's tax and financial legal requirements.
• Security Logs – Retained for 12 months for security investigation and fraud prevention purposes.
• Customer Support Communications – Retained for 3 years after complaint resolution for reference and service improvement purposes.
• Marketing Data – Retained until you withdraw consent or request deletion, whichever comes first.

Upon expiry of the retention period, personal data will be securely disposed of using methods that ensure it cannot be recovered or accessed again by any party.

11Children's Privacy

Win303 does not provide services to individuals under the age of 18. The win303 platform is strictly for adults. Win303 does not knowingly collect personal data from children or minors under the age of 18.

If win303 becomes aware that personal data of a child under 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who discover that their child has registered or used the win303 platform should contact us immediately at support@win303.click.

12Contact the Win303 Privacy Officer

Win303 has appointed a Privacy Officer responsible for ensuring compliance with Malaysia's PDPA and this Privacy Policy. If you have any questions, concerns, or complaints regarding the privacy of your personal data at win303, please contact us via:

• Privacy Email: support@win303.click (please state "Privacy Enquiry" in the subject line)
• Live Chat: Available on the win303 platform – 24 hours a day, 7 days a week
• WhatsApp: Available via win303's support number – 24 hours a day

Win303 is committed to responding to all privacy enquiries within 5 business days. For formal rights requests such as data access or erasure, the response time is within 30 business days as required by Malaysia's PDPA.

If you are not satisfied with win303's response to your privacy complaint, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner under the Personal Data Protection Act 2010.