Privacy Policy — we1win3

we1win3 ("the Platform", "we", "us", or "our") is an online casino and sports betting platform serving Malaysian users at we1win3.cam. We are committed to protecting the personal information of everyone who registers an account, interacts with our support team, or otherwise engages with any part of the we1win3 Platform.

This Privacy Policy ("Policy") sets out the basis on which we collect, store, process, use, and disclose personal data obtained from registered Members and Platform visitors. It applies to all services, features, and content accessible through we1win3.cam and any associated communication channels including live chat, WhatsApp support, and email.

By creating an account on the Platform, depositing funds, or continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which are incorporated by reference.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial information, and device identifiers.
• "Data Controller" means we1win3, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by we1win3 to process Personal Data on our behalf, including payment processors, KYC verification providers, and fraud detection services.
• "Member" / "User" means any individual who has registered a we1win3 account or is actively using the Platform.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of Personal Data for a stated purpose.
• "Cookies" means small data files placed on your device by the Platform to facilitate functionality, session management, and analytics.
• "KYC" means Know Your Customer — the identity and age verification process required for all registered Members before withdrawals are processed.

We collect Personal Data across several categories depending on how you interact with the Platform. The table below summarises the categories of data we collect and the primary source of each:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data unless expressly required by law or for specific KYC compliance purposes, in which case you will be notified and your consent obtained separately.

we1win3 collects Personal Data through the following methods:

4.1 Direct Collection

You provide Personal Data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our customer support team, or respond to promotional communications.

4.2 Automated Collection

When you access the Platform, we automatically collect Technical Data through cookies, server logs, and similar technologies. This includes your IP address, session duration, pages visited, game history, and device information. This data is used to maintain session integrity, detect fraud, and optimise platform performance.

4.3 Third-Party Sources

We may receive supplementary data from third-party service providers where lawfully permitted. These include identity verification bureaus used for KYC processing, fraud prevention databases, and payment processors such as those operating DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay networks. Data received from third parties is handled with the same care as data you provide directly.

we1win3 processes your Personal Data for the following specific and legitimate purposes:

• Account Management: To register your account, verify your identity, maintain your player profile, and manage your Account balance and preferences.
• Transaction Processing: To process deposits via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay, and to process withdrawal requests back to your verified payment method.
• KYC & AML Compliance: To verify your age (minimum 21 years), confirm your identity, and comply with applicable anti-money laundering obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of communication for training and quality assurance purposes.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Platform Personalisation: To tailor promotional offers, game recommendations, and content to your preferences and activity profile.
• Legal Obligations: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from competent authorities.
• Analytics & Improvement: To analyse aggregate usage patterns, identify performance issues, and continuously improve the Platform experience for all Malaysian users.
• Responsible Gambling: To monitor betting patterns that may indicate problem gambling and to apply self-exclusion, deposit limit, or cooling-off restrictions requested by you.

we1win3 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our obligations under the Terms & Conditions you accepted at registration — including account management, transaction processing, and support services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML monitoring, and age verification requirements.
• Legitimate Interests: Processing undertaken to pursue the legitimate business interests of we1win3, including fraud detection, platform security, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes such as marketing communications and non-essential cookies, which requires your explicit opt-in consent. You may withdraw consent for these purposes at any time without affecting the lawfulness of prior processing.

we1win3 does not sell or rent your Personal Data to third parties for commercial purposes. We may share your data in the following limited and controlled circumstances:

7.1 Service Providers

We engage trusted third-party Data Processors to assist in delivering our services. These include payment gateway providers (DuitNow, FPX operators, e-wallet partners), identity verification and KYC service providers, IT infrastructure and cloud hosting providers, and fraud detection technology partners. All processors are bound by data processing agreements that restrict them from using your data for any purpose other than providing the contracted service to we1win3.

7.2 Legal and Regulatory Disclosure

We may disclose Personal Data to law enforcement agencies, regulatory authorities, courts, or other competent public bodies when required to do so by applicable law, court order, or where such disclosure is necessary to protect the legal rights of we1win3 or prevent harm to a third party.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the we1win3 business, Member Personal Data may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and will retain your rights over your data.

We retain Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and transaction records: Retained for a minimum of 5 years following account closure to satisfy AML record-keeping obligations.
• KYC documentation: Retained for a minimum of 5 years from the date of the last transaction or account closure, whichever is later.
• Customer support communications: Retained for 2 years from the date of the interaction, unless required longer for ongoing dispute resolution.
• Session logs and Technical Data: Retained for 12 months and then anonymised or deleted.
• Marketing preferences and consent records: Retained for the duration of your membership and for 12 months following withdrawal of consent.

When Personal Data is no longer required for any legitimate purpose, we will securely delete or permanently anonymise it so that it can no longer be associated with you as an identifiable individual.

we1win3 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption across all data transmissions between your device and the we1win3 Platform.
• Encrypted storage for all sensitive Personal Data including financial records and KYC documents at rest.
• Two-factor authentication (2FA) available for all registered accounts as an optional but strongly recommended security measure.
• Role-based access controls limiting employee access to Personal Data to those with a specific operational need.
• Real-time fraud monitoring systems that detect anomalous login patterns, unusual transaction activity, and potential account compromise.
• Regular security audits and penetration testing of Platform infrastructure.

While we apply industry-leading security measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials. If you suspect your account has been compromised, contact our support team immediately via live chat.

The we1win3 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. Cookies are small text files stored on your device when you visit the Platform.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for Platform functionality including login sessions, account authentication, and security. These cannot be disabled without impairing core functionality.
• Performance Cookies: Collect anonymised data on page load times, error rates, and navigation patterns to help us identify and resolve technical issues.
• Functional Cookies: Remember your preferences such as language selection, preferred payment method, and display settings to provide a more consistent experience across sessions.
• Analytics Cookies: Used to understand aggregate user behaviour patterns on the Platform. Data collected is anonymised and used solely for internal improvement purposes.

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies stored on your device. Please note that disabling certain cookies may affect the functionality and performance of the we1win3 Platform.

Subject to applicable data protection law, you hold the following rights in respect of your Personal Data held by we1win3: