🔐 winway33 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is issued by winway33 ("winway33", "we", "us", or "our") and applies to all personal data collected through the winway33 website at winway33.lat, the winway33 mobile platform, and all related services (collectively, the "Services").

1.2 winway33 is the data controller responsible for the personal data of registered players and website visitors. We process personal data in accordance with applicable data protection principles, including those applicable under Malaysian law and relevant international standards.

1.3 By registering a winway33 account, using the Services, or visiting the winway33 website, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

1.4 This Policy should be read alongside the winway33 Terms & Conditions, available at winway33.lat/terms-conditions, which governs the broader relationship between winway33 and its players.

1.5 We may update this Policy from time to time. The most current version is always published at winway33.lat/privacy-policy. Material changes will be communicated to registered players via the registered email address or an on-platform notification.

2. Personal Data We Collect

2.1 winway33 collects personal data in the following categories:

2.1.1 Registration & Identity Data

• Full legal name;
• Date of birth (for age verification — players must be 21 or older);
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya);
• Email address;
• Malaysian mobile phone number (in +60 format);
• Username chosen at registration.

2.1.2 Identity Verification (KYC) Data

• Copy of Malaysian MyKad, passport, or other government-issued identity document;
• Proof of residential address (e.g., utility bill, bank statement dated within 3 months);
• Proof of payment method ownership (e.g., screenshot of e-wallet account showing registered name).

2.1.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method details (e-wallet identifiers, FPX bank account references — winway33 does not store full card numbers);
• Transaction history and account balance records.

2.1.4 Gaming Activity Data

• Game session data, including games played, bet amounts, results, and session duration;
• Sportsbook and esports betting activity, including markets wagered, bet amounts, and outcomes;
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status).

2.1.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type and version;
• Login timestamps and session duration;
• Cookie and tracking technology data — see Section 6.

2.1.6 Communications Data

• Live chat support transcripts;
• Email correspondence with the winway33 support team;
• Responses to surveys or feedback requests (where provided voluntarily).

3. How winway33 Uses Your Personal Data

3.1 winway33 uses your personal data for the following purposes:

3.2 winway33 will not use your personal data for any purpose not described in this Policy without first obtaining your consent or having a legitimate legal basis to do so.

4. Legal Basis for Processing

4.1 winway33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between winway33 and you (the Terms & Conditions), including account management, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, anti-money laundering (AML), and gaming regulatory requirements.
• Legitimate Interests: Processing for winway33's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time — see Section 8.

5. Data Sharing & Disclosure

5.1 winway33 does not sell your personal data to third parties. We may share your data with the following categories of recipients for the purposes described in this Policy:

• Game Providers: Third-party game studios (e.g., Evolution Gaming, Pragmatic Play, PG Soft) may receive anonymised session data necessary to operate and troubleshoot games. These providers are contractually bound to process data only for the specified purpose.
• Payment Processors: Malaysian payment service providers (Touch n Go, Boost, DuitNow, FPX banking partners) receive the transaction data necessary to process deposits and withdrawals. winway33 shares only the minimum data required for payment execution.
• Identity Verification Services: Third-party KYC and identity verification providers may process identity document data for the purpose of age and identity verification.
• Fraud Prevention Services: winway33 may share data with fraud detection and AML screening services to identify and prevent financial crime and bonus abuse.
• Regulatory Authorities: winway33 may be required to disclose account and transaction data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law or pursuant to a valid legal order.
• Professional Advisers: Legal counsel, auditors, and compliance consultants acting under obligations of professional confidentiality.

5.2 All third parties with whom winway33 shares personal data are required to implement appropriate security measures and are permitted to process your data only in accordance with winway33's instructions and applicable law.

6. Cookies & Tracking Technologies

6.1 winway33 uses cookies and similar tracking technologies (collectively, "Cookies") on the winway33 website and platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and improve your experience.

6.2 Categories of Cookies Used by winway33

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your winway33 account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impacting platform functionality.
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how visitors use the winway33 platform — which pages are visited most, where errors occur, and how quickly pages load. This data is used to improve platform performance.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and previously used payment methods to speed up future sessions.
• Marketing Cookies: Track your engagement with winway33 promotional content to measure campaign effectiveness. These cookies are only placed where you have provided consent.

6.3 You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the winway33 platform. Most browsers allow you to refuse new cookies, delete existing cookies, and configure settings for specific sites.

6.4 winway33 does not use third-party advertising networks or retargeting pixels that track your browsing activity across other websites.

7. Data Retention

7.1 winway33 retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law.

7.2 The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship plus a minimum of 5 years following account closure, in compliance with AML and gaming regulatory obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the last communication.
• Marketing consent records: Retained until you withdraw consent plus 1 year.
• Technical and device data: Retained for up to 12 months from collection unless relevant to an active fraud or security investigation.

7.3 Following the expiry of the applicable retention period, winway33 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures.

8. Your Rights

8.1 As a winway33 player, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data winway33 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Note that changes to KYC-verified identity data require re-verification.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. Note that winway33 may be required by law to retain certain data (e.g., transaction records for AML purposes) even following a deletion request.
• Right to Restrict Processing: You may request that winway33 restricts the processing of your data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on winway33's legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

8.2 To exercise any of these rights, please contact winway33 via live chat or email at [email protected]. winway33 will respond to all rights requests within 30 days of receipt.

8.3 winway33 may need to verify your identity before processing a rights request to ensure that data is not disclosed to or amended by an unauthorised person.

9. Data Security

9.1 winway33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, and accidental loss.

9.2 Key security measures employed by winway33 include:

• 256-bit SSL/TLS encryption for all data in transit between your device and winway33 servers;
• Encryption at rest for sensitive personal data stored in winway33 databases;
• Access controls — winway33 staff access to player personal data is limited on a strict need-to-know basis, with audit logging of all data access events;
• Password hashing — account passwords are stored using industry-standard one-way cryptographic hashing. winway33 staff cannot view your actual password;
• Two-factor authentication for new device logins, providing an additional layer of account security;
• Regular security assessments including vulnerability scanning and penetration testing of the winway33 platform;
• Incident response procedures — in the event of a data breach that poses a risk to player rights, winway33 will notify affected players and relevant authorities as required by applicable law.

9.3 While winway33 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is 100% secure. You play an important role in protecting your own account by using a strong, unique password and not sharing your login credentials with others.

10. Children's Privacy

10.1 If you believe that a person under the age of 21 has registered on or is using the winway33 platform, please contact our support team at [email protected] immediately so that appropriate action can be taken.

10.2 winway33 employs age verification procedures at registration, including document-based KYC verification, to prevent underage access to the platform.

11. Third-Party Links

11.1 The winway33 platform does not contain links to external third-party websites in the main navigation, game lobby, or content areas. winway33's internal linking policy restricts all navigation to URLs within the winway33 domain.

11.2 To the extent that any third-party service (such as a payment processor interface) is accessed during your use of the winway33 Services, winway33 is not responsible for the privacy practices of such third parties. We recommend reviewing the privacy policy of any third-party service you interact with independently.

12. International Data Transfers

12.1 winway33 may transfer personal data to servers or service providers located outside Malaysia in the course of providing the Services. Such transfers may include game provider infrastructure, KYC verification services, and fraud prevention platforms operating in various jurisdictions.

12.2 Where personal data is transferred internationally, winway33 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations equivalent to those applicable in Malaysia on the receiving party.

12.3 By using the winway33 Services, Malaysian players consent to the transfer of their personal data to jurisdictions outside Malaysia where necessary for the provision of the Services, subject to the safeguards described in this section.

13. Updates to This Privacy Policy

13.1 winway33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations.

13.2 When material updates are made, winway33 will notify registered players via their registered email address or via an on-platform notification, and will update the "Last Updated" date at the top of this Policy.

13.3 The most current version of the winway33 Privacy Policy is always available at winway33.lat/privacy-policy. We encourage players to review this Policy periodically.

13.4 Your continued use of the winway33 platform following notification of material Policy updates constitutes your acceptance of the revised Policy.

14. Contact & Data Enquiries

14.1 For all privacy-related enquiries, data rights requests, or concerns regarding winway33's handling of your personal data, please contact us through the following channels:

• 💬 Live Chat: Available 24/7 on the winway33 platform — for urgent account and privacy concerns, live chat is the fastest channel with response times under 5 minutes.
• 📧 Email: [email protected] — winway33 will acknowledge privacy and data rights requests within 48 hours and respond in full within 30 days of receipt.

14.2 When submitting a data rights request by email, please include your registered username and registered email address so that winway33 can verify your identity before processing the request.

14.3 winway33's support team handles privacy enquiries from players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Ipoh, Kota Kinabalu, and all other regions. All enquiries are handled in English.