Winner33 Privacy Policy – Personal Data Protection for Malaysian Members

Winner33 collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we may collect from you as a Winner33 member.

A. Data You Provide Directly:

• Registration Information: Your full name, active Malaysian phone number, email address, date of birth, and the password you choose when creating your Winner33 account.
• Identity Verification (KYC) Information: A copy of your MyKad, a selfie for identity verification, and proof of address when required for Anti-Money Laundering (AML) compliance purposes.
• Financial Information: Malaysian bank account details, eWallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), and transaction information related to DuitNow or FPX used for deposits and withdrawals.
• Communications: Any messages, complaints, or enquiries you submit to the Winner33 support team via live chat, email, or other channels.

B. Automatically Collected Data:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and other technical data collected automatically when you access Winner33.
• Usage Data: Login history, pages visited, games played (blackjack, poker, lottery, slots, EPL Sports Betting, e-sports, and more), total wagers placed, and game results.
• Transaction Data: A complete record of all deposits, withdrawals, bonuses claimed, and the full financial history of your Winner33 account.
• Cookie Data: Information stored through cookies and similar tracking technologies to enhance the user experience on the Winner33 platform.

Winner33 uses the personal data we collect solely for legitimate purposes directly related to providing our platform services to you. The following are the primary purposes for which your data is used at Winner33.

Winner33 will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent. If you have consented to receiving marketing communications from Winner33, you may withdraw that consent at any time through your account settings or by contacting our support team.

Winner33 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute commitment to every Winner33 member's privacy. That said, in certain limited circumstances, we may need to share some of your information with specific parties as follows:

• Technical Service Providers: Companies we engage to operate the platform — including cloud computing providers, payment gateways that process DuitNow, Touch 'n Go, GrabPay, FPX Maybank2u, and CIMB Clicks transactions, as well as email delivery services. All these providers are bound by strict confidentiality agreements and may only use your data for the purpose of delivering services to Winner33.
• Malaysian Regulatory Authorities: Winner33 fully complies with all applicable Malaysian legal requirements. We will disclose the necessary data to law enforcement agencies or regulatory authorities when required to do so by a court order, warrant, or any law in force in Malaysia.
• Identity Verification Providers: Third parties we engage to carry out KYC and identity verification processes in fulfilment of anti-money laundering (AML) requirements. This is a legal obligation, not an option.
• Game Providers: In some cases, third-party game providers that supply live casino tables, slots, or Sports Betting systems may receive the minimum data required to deliver their gaming services — limited to an anonymised member ID with no other personal information.
• Fraud Investigation: In cases of suspected fraud, money laundering, or other illegal activity, Winner33 reserves the right to share relevant information with the appropriate parties, including financial institutions and authorities, for investigative purposes.

Winner33 invests seriously in security infrastructure to ensure your personal data is protected at all times — whether it is being transmitted over the internet or stored on our servers.

• 256-Bit SSL Encryption: All data transmitted between your browser and the Winner33 platform is protected by the highest-grade Transport Layer Security (TLS) encryption — the same standard used by major Malaysian banks such as Maybank and CIMB.
• Stored Data Encryption: Sensitive personal data stored in Winner33's databases is encrypted using AES-256, ensuring your information remains unreadable even in the event of unauthorised server access.
• Strict Access Controls: Only Winner33 staff who genuinely require access to your data in order to carry out their authorised duties are permitted to do so. All access is logged and continuously monitored by our internal security team.
• Two-Factor Authentication (2FA): All internal administrative access to Winner33 systems requires multi-factor authentication. Members are also encouraged to enable 2FA on their accounts for an added layer of protection.
• Regular Security Audits: Winner33 conducts regular penetration testing and security audits carried out by independent cybersecurity teams to identify and address vulnerabilities before they can be exploited.

Data Retention Period:

Winner33 retains your personal data for as long as your account remains active, and for the period required thereafter under Malaysian law. Financial transaction records are kept for a minimum of 7 years in accordance with anti-money laundering requirements. Once the required retention period ends, your data will be securely deleted or anonymised.

Winner33 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services. The following are the types of cookies used by Winner33.

• Essential Cookies (Required): These cookies are required for the Winner33 platform to function properly. They store login session information, language preferences, and security settings. Without these cookies, the platform cannot operate and you will not be able to use it. These cookies cannot be disabled.
• Performance & Analytics Cookies: These cookies help us understand how members use Winner33 — which pages are visited most, where users encounter issues, and how the overall navigation flow performs. Data is collected anonymously and used to improve the platform.
• Functional Cookies: These cookies save your personal preferences — such as in-game sound settings, favourite display views, and other display options — so you do not have to reconfigure them each time you log in to Winner33.
• Security Cookies: Used to detect and prevent fraudulent activity, cyberattacks, and suspicious login attempts on your Winner33 account.

You can control and manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Winner33 platform. For more information on how to manage cookies, refer to your web browser's help documentation (Chrome, Firefox, Safari, or Edge).

As a Winner33 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. Winner33 is committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request a copy of the personal data we hold about you. This request can be made through your Winner33 account or by contacting customer support. We will provide the requested information within 21 business days.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction or update. Simple changes can be made directly through your Winner33 account profile settings.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting any processing that took place prior to withdrawal. You can manage your communication preferences through your account settings.
• Right to Lodge a Complaint: If you believe Winner33 has breached this Privacy Policy or the PDPA 2010, you have the right to lodge a complaint directly with us or with the Personal Data Protection Commissioner of Malaysia.
• Right to Erasure (under certain conditions): You may request the deletion of your personal data upon account closure, subject to any legal record-keeping obligations that Winner33 is required to comply with (for example, financial transaction records that must be retained for 7 years).

To submit any request relating to the rights above, please contact Winner33's data protection team by email at support@winner33.best or via in-platform live chat. We will verify your identity before processing any request to protect the security of your account.

Winner33 strictly prohibits the use of the platform by individuals under the age of 18. The Winner33 platform and its services are designed exclusively for adults. We do not knowingly collect or process any personal data belonging to minors.

If you discover that someone under the age of 18 has registered for or is using a Winner33 account — whether their own account or yours without authorisation — please contact the Winner33 support team immediately via live chat. We will investigate and take appropriate action, including the immediate closure of the account in question.

Winner33 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, Malaysian law, or platform improvements. Any material amendments will be communicated to you via an in-platform notification or an email to the address registered on your account.

The "Last Updated" date at the top of this document will always reflect the date of the most recent amendment. We encourage you to review this Privacy Policy periodically — at least every few months — to stay informed about how we protect your data.

Your continued use of the Winner33 platform after any amendments are published will be taken as your acceptance of the revised Privacy Policy terms. If you do not agree with the changes made, you have the right to close your Winner33 account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Winner33, please reach out to us through the channels below. Winner33's data protection team is available to assist you in both Bahasa Malaysia and English.

• Email: support@winner33.best — for privacy enquiries and personal data-related requests
• Live Chat: Available on the Winner33 platform, 24 hours a day, 7 days a week — for immediate assistance
• Response Time: All privacy enquiries will be responded to within 14 business days in accordance with Malaysia's PDPA requirements

If you are not satisfied with our response to your privacy enquiry or complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels established by the Department of Personal Data Protection (JPDP) Malaysia.