Privacy Policy winway33 – Our Commitment to Protecting Your Data

This Privacy Policy is issued by Winway33 ("we", "our platform") and applies to all individuals who register, browse, or use any services provided through our official website at winway33.vu and the downloadable Winway33 mobile app.

We take our responsibility to your privacy extremely seriously. Every decision regarding data management is made with your interests and safety as the top priority. This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in digital privacy management.

By using the Winway33 platform, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact our team before continuing to use the platform.

Winway33 collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect and the purposes for doing so:

We only collect data that is strictly necessary to provide our services. Winway33 does not collect sensitive information such as biometric data, medical records, or religious information unless required by law.

Winway33 uses your personal data for purposes that are clear, legitimate, and limited to the operational needs of the platform. We will not process your data for any other purpose without first obtaining your consent.

• Account Management: Creates, verifies and maintains your account; ensures login security and manages your profile settings.
• Transaction Processing: Securely processes deposits, withdrawals and bonus payments through trusted payment providers.
• KYC & AML Verification: Verifies your identity to comply with regulatory requirements related to Know Your Customer (KYC) and Anti-Money Laundering (AML).
• Service Provision: Enables you to seamlessly access all games, promotions and features on the winway33 platform.
• Customer Support: Handles your enquiries, complaints and support requests via live chat or support email.
• Service Communications: Sends important notices regarding your account, security updates and changes to the terms of service.
• Platform Security: Detects and prevents fraud, hacking, bots and any suspicious activity that could harm the platform or other members.
• Analytics & Improvement: Analyses usage patterns in aggregate to improve the user experience and develop better new features.
• Promotional Communications: Sends information about promotions, bonuses and exclusive offers to members who have consented to receive them.

Winway33 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the processing context, we rely on the following bases:

• Contract Performance: Processing required to fulfil the service agreement between you and winway33, including payment processing and account management.
• Consent: For promotional communications and certain cookie usage, we rely on your express consent, which may be withdrawn at any time.
• Legitimate Interest: For platform security, fraud prevention, and usage analysis to improve our services.
• Legal Obligation: To comply with KYC, AML, and reporting obligations to regulatory authorities as required under Malaysian law.

Winway33 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are specific situations where we need to share data with trusted parties to keep our platform running properly.

• Payment Provider: Required transaction information is shared with licensed payment gateways such as FPX, Touch 'n Go eWallet and GrabPay solely to process your transactions.
• KYC Verification Provider: Identity data is shared with accredited third-party KYC verification service providers to authenticate your documents.
• Cloud Infrastructure Provider: Data is stored on cloud servers compliant with ISO 27001 security standards, governed by strict data processing agreements.
• Regulatory Authority: winway33 has a legal obligation to disclose certain information to Malaysian authorities when lawfully directed to do so.
• Technical Partners: Game software and betting platform providers receive the minimum data required to operate games under strict confidentiality agreements.

Winway33 continuously invests in the latest security infrastructure to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure.

• All communications between your device and winway33 servers are protected by TLS 1.3 protocol with AES-256 encryption, ensuring data in transit cannot be intercepted.
• Data stored in our databases is also encrypted using enterprise-grade encryption. Passwords are stored as irreversible hashes using the bcrypt algorithm.
• Access to user data is strictly limited based on role-based access control (RBAC) principles — staff can only view data necessary for their specific duties.
• Winway33 conducts independent security audits every quarter, including penetration testing by certified cybersecurity firms.
• Our real-time threat monitoring system automatically detects and responds to suspicious activity 24 hours a day, 7 days a week.
• We have a comprehensive Incident Response Plan in place. In the event of a data breach, affected members will be notified within 72 hours and immediate remediation steps will be taken.

Winway33 uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and deliver more relevant content to you.

• Essential Cookies: Required for essential platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information about how you use the platform, such as the most frequently visited pages, to help us improve the overall user experience.
• Functional Cookies: Saves your preferences such as display settings, language and game preferences so you do not need to reconfigure them each time.
• Analytics Cookies: We use internal analytics tools to understand usage patterns in aggregate and anonymously for product development purposes.

You can manage or delete cookies at any time through your web browser settings. However, disabling essential cookies may affect certain functions within the Winway33 platform.

Winway33 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required under Malaysian law.

• Active Account Data: Retained for the duration your account is active and for 7 years following account closure for regulatory compliance and audit purposes.
• Transaction Records: Retained for 7 years in accordance with applicable Malaysian accounting and tax legislation.
• Communication Logs: Customer support records and account-related communications are retained for 3 years from the date of last interaction.
• Technical Log Data: System access logs and technical data are retained for a maximum of 12 months before being automatically deleted.
• Post-Account Closure Data: Once the mandatory retention period has ended, all personal data will be securely deleted or permanently anonymised.

Under Malaysia's PDPA and Winway33's policy, you have the following rights regarding your personal data. We are committed to processing every request within 14 business days.

The winway33 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of anyone under the age of 18.

• During registration, we require age verification through date of birth and a valid identification document to ensure all members meet the required age threshold.
• If winway33 determines that a child's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account.
• Parents or guardians who believe their child has registered on our platform should contact our team immediately for remedial action.

Winway33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform developments.

• Members will be notified of any material amendments via their registered email at least 7 days before the changes take effect, along with a summary of what has changed.
• The "Last Updated" date at the top of this page will be updated each time an amendment is made.
• Your continued use of the winway33 platform after any policy amendments are published will be considered your acceptance of the updated policy.
• Previous versions of the Privacy Policy are kept in our archive and can be requested via support email if needed for reference purposes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the Winway33 privacy compliance team is ready to assist you.

• Privacy Email: [email protected] — Use the subject line "Privacy Enquiry" so your email is routed directly to the responsible team.
• Live Chat: The live chat function within the Winway33 platform is available 24/7 for general privacy enquiries, with a response time of under 2 minutes.
• Processing Time: Privacy rights requests will be processed within 14 working days from the date of receipt.
• Official Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) as the relevant regulatory authority.