Privacy Policy win321

1Introduction

Win321 is fully committed to protecting the privacy and personal data security of all users on our platform. This Privacy Policy explains in detail how we collect, use, disclose, and protect your information when you use win321 services at win321.onl.

This document is drafted in compliance with the requirements of the Malaysia Personal Data Protection Act (PDPA) 2010 and international industry standards. By using the win321 platform, you agree to the collection and use of information as described in this policy.

2Information We Collect

Win321 collects various categories of information to enable us to provide a safe, fair, and efficient service to all users. The information we collect falls into two main categories:

Information You Provide Directly

• Registration Information: Full name, date of birth, identification card number, email address, and phone number.
• Financial Information: Bank account number, bank name, and transaction details for deposits and withdrawals.
• KYC Verification Documents: Copy of your identification card, passport, or other valid identification document.
• Account Information: Password (stored in encrypted hash form), account preferences and security settings.
• Communications: Any messages or inquiries you send to our customer support team.

Automatically Collected Information

• Technical Data: IP address, browser type, operating system and screen resolution.
• Usage Data: Pages visited, games played, session duration and navigation patterns.
• Device Data: Unique device identifiers and hardware information for security verification purposes.
• Cookies and Tracking Technologies: win321 uses session cookies and persistent cookies to improve user experience.

Data Categories	Purpose of Collection	Retention Period
Registration Information	Identity verification & account management	Throughout the active account period + 5 years
Financial Data	Transaction processing & AML compliance	7 years (legal requirement)
KYC Documents	Age & identity verification	Throughout the active account period + 5 years
Usage Data	Service improvement & security	2 years
Communication Log	Customer Support & Dispute Resolution	3 years

3How We Use Your Information

Win321 uses collected personal data solely for legitimate purposes necessary for platform operations. We will not use your data for any other purpose without first obtaining your consent.

The main purposes for which your data is used are as follows:

• Verifying your identity and ensuring you meet the platform's eligibility requirements, including the minimum age of 18.
• Processing deposits and withdrawals safely and efficiently through your preferred payment method.
• Providing responsive and effective customer support services.
• Identifying and preventing fraud, money laundering, and suspicious activities.
• Complying with applicable legal and regulatory requirements, including reporting obligations to regulatory authorities.
• Sending important notifications related to your account, transactions, and policy changes.
• Enhancing platform security and preventing unauthorized access.
• Analyzing usage patterns for the purpose of service improvement and user experience enhancement.

4Data Sharing and Disclosure

Win321 enforces a strict policy against sharing users' personal data. We does not sell, rent, or trade your data to any third party. However, there are limited situations where we may need to share your information:

• Payment Service Providers: Transaction details required to be shared with licensed payment processors such as FPX, DuitNow and e-wallet providers for the purpose of processing your deposits and withdrawals.
• Regulatory Authority: win321 is required to comply with directives from legitimate authorities, including lawful requests for information from law enforcement agencies.
• Identity Verification Services: KYC information to be shared with licensed identity verification providers for the purpose of ensuring the accuracy and validity of your documents.
• Technical Service Providers: Infrastructure and technology platform providers bound by strict confidentiality agreements and not permitted to use your data for their own purposes.

All third parties we engage with are required to comply with data protection standards equivalent to or higher than those we uphold ourselves.

5Cookies and Tracking Technologies

Win321 uses cookies and similar tracking technologies to enhance platform functionality, analyze usage patterns, and maintain the security of your session. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how users interact with the platform for improvement purposes.
• Functional Cookies: Saving your preferences such as language, theme, and display settings to deliver a more personalized experience.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the win321 platform.

6Data Security

The security of your personal data is win321's top priority. We implement multiple layers of technical and organisational security measures to protect your information from unauthorised access, disclosure, alteration or destruction.

• 256-bit SSL/TLS encryption for all data communications between users and win321 servers.
• Passwords are stored using strong hashing algorithms — we ourselves cannot read your password.
• Role-based access controls ensuring only authorised personnel can access user data.
• Round-the-clock security threat monitoring by our cybersecurity team.
• Regular security audits by independent security firms to identify and address any vulnerabilities.
• Encrypted data backup systems to ensure information recovery in the event of technical disruption.

7Cross-Border Data Transfers

As part of our integrated platform operations, your personal data may be stored or processed on servers located outside Malaysia. Where such transfers occur, win321 ensures that the destination country or region maintains an equivalent level of data protection, or we ensure appropriate safeguards through binding contractual agreements with data recipients.

8Your Rights

Under this Privacy Policy and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your data subject to legal and contractual compliance requirements.
• Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict how we process your data.
• Right to Data Portability: You have the right to receive your data in a machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact our support team via live chat on the win321 platform. We will process your request within 30 business days.

9Children's Privacy

The win321 platform is for individuals aged 18 and above only. We do not intentionally collect personal data from minors. Should we find that a minor's personal data has been collected without proper age verification, we will take immediate action to delete that information and close the relevant account.

10Privacy Policy Amendments

Win321 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. The "Last Updated" date at the top of this document indicates when this Privacy Policy was last reviewed.

When material changes occur, win321 will notify registered users via email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated policy.

We encourage you to review this page regularly so you are always informed of how we protect your information. For any enquiries regarding this policy, please visit the Frequently Asked Questions (FAQ) us or contact our support team directly via live chat.