we1win3 Privacy Policy

1. Introduction

Welcome to we1win3. This Privacy Policy ("Policy") applies to all users of the we1win3 platform, accessible at we1win3.lat, including our website, mobile applications, and any related services (collectively, the "Platform"). we1win3 is operated under an international online gaming licensing framework and serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and beyond.

This Policy describes the types of personal data we collect, the purposes for which we process that data, how long we retain it, with whom we may share it, and the rights available to you as a data subject. By registering an account with we1win3 or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

If you have any questions or concerns about this Policy, please contact us at [email protected] before using the Platform.

2. Personal Data We Collect

we1win3 collects personal data in several ways — directly from you when you create or update an account, automatically as you use the Platform, and in some cases from third-party identity verification services. The categories of data we may collect include but are not limited to:

2.1 Account & Identity Data

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address (including postcode and country)
• Username and encrypted password
• Government-issued identity document details (MyKad, passport) for KYC verification
• Selfie photograph submitted for identity verification purposes

2.2 Financial & Transaction Data

• Deposit and withdrawal records denominated in MYR
• Payment method identifiers (e.g. Touch n Go eWallet, Boost, Maybank, CIMB account details)
• Transaction history, including bets placed and winnings received
• Cryptocurrency wallet addresses where applicable (e.g. USDT TRC20)

2.3 Technical & Usage Data

• IP address, device type, and operating system
• Browser type and version
• Pages visited, features accessed, and time spent on platform
• Login timestamps and session duration
• Geolocation data (approximate, derived from IP address)

2.4 Communications Data

• Records of live chat, email, and WhatsApp support conversations
• Survey responses and feedback submissions
• Marketing communication preferences

2.5 Responsible Gaming Data

• Self-imposed deposit limits, session limits, and loss limits
• Self-exclusion elections and their effective periods
• Cooling-off period requests

3. How We Use Your Personal Data

we1win3 processes personal data only for specified, explicit, and legitimate purposes. The primary legal bases on which we rely are: (a) performance of contract with you; (b) compliance with legal obligations; and (c) our legitimate interests in operating a safe, fair, and sustainable gaming platform. Specific purposes include:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the we1win3 platform.
• Payment processing: To facilitate deposits and withdrawals in MYR via your chosen payment method, including Touch n Go, Boost, Maybank, CIMB, GrabPay, and USDT TRC20.
• Regulatory compliance and KYC: To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable international gaming licensing requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other unauthorised activity on the Platform.
• Customer support: To respond to your queries, complaints, and support requests via live chat, email, or WhatsApp in English, Bahasa Melayu, or 中文.
• Platform improvement: To analyse usage patterns, optimise game performance, and enhance the overall player experience across our 3,000+ games.
• Marketing communications: To send you promotional offers, bonus updates, and product news — but only where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Responsible gaming: To monitor gaming behaviour, enforce self-imposed limits, action self-exclusion requests, and promote safe play in accordance with our Responsible Gaming commitments.
• Legal proceedings: To establish, exercise, or defend legal claims where necessary.

we1win3 will not process your personal data for any purpose that is incompatible with the purposes listed above without first providing you with prior notice and, where required, obtaining your consent.

4. Data Sharing and Disclosure

we1win3 does not sell or rent your personal data to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

4.1 Service Providers

We engage carefully vetted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include:

• Identity verification and KYC partners
• Payment gateway and e-wallet operators (Touch n Go, Boost, Maybank, CIMB, GrabPay)
• Cloud infrastructure and data hosting providers
• Fraud detection and cybersecurity vendors
• Customer support platform providers
• Analytics and platform performance tools

All service providers are contractually prohibited from using your data for their own purposes and must handle it in accordance with our instructions and this Policy.

4.2 Regulatory and Legal Authorities

we1win3 may be required to disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by applicable law or a valid legal order. We will notify you of such disclosures where we are legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the successor entity. We will notify you via email or a prominent Platform notice prior to your data being transferred or becoming subject to a different privacy policy.

4.4 With Your Consent

We may share your data with other third parties where you have provided explicit consent for us to do so. You may withdraw such consent at any time by contacting us at [email protected].

5. Data Retention

we1win3 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:

• Active account data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML and gaming regulatory requirements.
• Transaction records: Retained for a minimum of 7 years to comply with financial record-keeping obligations.
• KYC and identity documents: Retained for the period required by applicable gaming licensing rules, typically 5–7 years from the end of the business relationship.
• Support communications: Retained for 3 years from the date of the interaction, or longer if related to an ongoing dispute or legal matter.
• Marketing preferences: Retained until you withdraw consent or opt out, after which they are updated within 30 days.
• Technical log data: Typically retained for 12–24 months for security and fraud analysis purposes.

When personal data is no longer required, we1win3 will securely delete or anonymise it in a manner that prevents reconstruction or identification.

6. Cookies and Tracking Technologies

we1win3 uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate and improve the Platform. The types of cookies we use are:

6.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as session management, login authentication, and security controls. You cannot opt out of these cookies without affecting your ability to use the Platform.

6.2 Analytics Cookies

These cookies help us understand how players interact with we1win3 — including which games are most popular, where users drop off, and how navigation flows are performing. Data collected is aggregated and anonymised where possible.

6.3 Functional Cookies

These cookies remember your preferences such as language selection, preferred payment method, and display settings, so you do not need to re-enter them each session.

6.4 Marketing Cookies

With your consent, we may use cookies to deliver personalised promotions and bonus offers relevant to your gaming interests on we1win3. You may withdraw your consent for marketing cookies at any time via your cookie preference settings on the Platform.

7. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data held by we1win3:

• Right of Access: You may request a copy of all personal data we hold about you, free of charge, within 30 days of a verified request.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. For basic profile details, you may do this directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary, where you withdraw consent, or where we have processed it unlawfully. This right is subject to our regulatory retention obligations.
• Right to Restrict Processing: You may ask us to suspend the processing of your data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request that your data be provided in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of our legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where we rely on consent as a legal basis, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Subject Request". We may need to verify your identity before processing your request. We will respond within 30 calendar days of receiving a verified request.

8. Security Measures

we1win3 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction. These include:

• Transport Layer Security (TLS) encryption for all data in transit
• AES-256 encryption for sensitive data stored at rest
• Multi-factor authentication (MFA) options for player accounts
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Regular third-party penetration testing and security audits
• 24/7 automated fraud monitoring and anomaly detection systems
• Strict vendor due-diligence processes for all third-party service providers

Despite these measures, no system is completely immune to security risks. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, we1win3 will notify affected players and relevant supervisory authorities in accordance with our legal obligations and without undue delay.

You also play a role in keeping your account secure. Please use a strong, unique password for your we1win3 account, enable MFA where available, and never share your login credentials with anyone. If you suspect unauthorised access to your account, contact us immediately at [email protected].

9. Minors and Age Restriction

we1win3 is strictly an adult platform. Our services are intended solely for individuals who are 21 years of age or older, in line with Malaysian gambling age restrictions and our international gaming licensing obligations.

we1win3 does not knowingly collect or process personal data from persons under the age of 21. During registration, all players are required to provide their date of birth and submit identity verification documents to confirm they meet the minimum age requirement. We employ automated age verification checks and manual KYC review processes to enforce this restriction.

If we1win3 becomes aware that a player has provided false information to circumvent our age verification processes, the account will be suspended immediately, all associated funds will be frozen pending investigation, and any personal data collected will be deleted as swiftly as our regulatory obligations allow.

If you are a parent or guardian and believe your child may have registered on the Platform, please contact us immediately at [email protected] so we can take prompt action.

10. Changes to This Privacy Policy

we1win3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the Platform informing players of the change
• Where required by law, seek fresh consent from affected players

We encourage you to review this Policy periodically to stay informed about how we1win3 is protecting your information. Your continued use of the Platform after any changes have been published constitutes your acceptance of the updated Policy.

If you disagree with any changes to this Policy, you have the right to close your account and request deletion of your personal data (subject to our regulatory retention obligations) by contacting [email protected].

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we1win3 handles your personal data, please do not hesitate to get in touch with our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the we1win3 Platform (average response time 3–5 minutes)
• WhatsApp: Available in English, Bahasa Melayu, and 中文

When contacting us about a data protection matter, please include "Privacy Enquiry" or "Data Subject Request" in the subject line so we can direct your query to the right team promptly. We aim to acknowledge all privacy-related correspondence within 2 business days and resolve requests within 30 calendar days.