Privacy Policy — 3win2u

This Privacy Policy ("Policy") is published by 3win2u ("Company", "Platform", "we", "us", "our") and applies to all personal data collected, processed, stored, and shared in connection with your use of the 3win2u website, mobile platform, and associated gaming, wagering, and customer service functions (collectively, the "Services").

3win2u is committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection principles recognised under international regulatory frameworks. We process personal data only where we have a lawful basis to do so, only to the extent necessary for the stated purpose, and only for as long as required.

By registering an account with 3win2u, accessing the platform, or otherwise engaging with our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must refrain from using the 3win2u platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, identification number, contact details, financial information, IP address, device identifiers, and behavioural data generated through use of the Services.
• "Data Controller" means 3win2u as the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third party engaged by 3win2u to process Personal Data on our behalf under binding contractual obligations, such as payment service providers, fraud prevention vendors, and customer support platforms.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "User" or "Player" means any individual who registers an account with or otherwise uses the Services provided by 3win2u.
• "KYC Data" means identity and age verification documentation submitted by Users as part of the Know Your Customer compliance process, including government-issued identification, proof of address, and supporting financial documents.
• "Cookies" means small text files placed on a User's device by the 3win2u platform for the purposes of session management, preferences storage, analytics, and security.

3win2u collects Personal Data through multiple channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party service providers involved in delivering the Services.

3.1 Data Provided Directly by You

3.2 Data Collected Automatically

When you access or use the 3win2u platform, we automatically collect technical and behavioural data that supports platform security, performance monitoring, and fraud prevention. This includes:

• IP address, approximate geographic location (city/region level), and internet service provider information.
• Device type, operating system, browser type and version, screen resolution, and language settings.
• Session data including login timestamps, session duration, pages visited, game titles accessed, bet amounts placed, and navigation patterns.
• Referral source — the URL or marketing channel through which you arrived at 3win2u.
• In-game activity logs, including wagers placed, game outcomes, and bonus interactions.

3win2u processes your Personal Data only where a lawful basis exists. The following table sets out the primary purposes for which we process Personal Data and the corresponding legal basis for each.

3win2u processes your Personal Data in accordance with the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We do not process Personal Data for any purpose beyond those disclosed in this Policy without first obtaining your consent or establishing a fresh lawful basis.

5.1 Payment Processing

Financial data associated with your deposits and withdrawals — including bank account numbers, e-wallet identifiers such as Touch 'n Go eWallet and Boost, DuitNow reference numbers, FPX transaction IDs, and cryptocurrency wallet addresses — is processed solely for the purpose of executing your requested financial transactions. We do not store full card numbers or full bank account credentials on our servers; these are handled by our certified payment processor partners under their own data security obligations.

5.2 Identity Verification

KYC Data — including copies of your Malaysian IC (MyKad), passport, proof of residential address, and any selfie or biometric verification material — is processed exclusively for the purposes of age verification (confirming you are 21 or older), identity authentication, and satisfaction of our anti-money laundering obligations. KYC documents are stored in encrypted form and access is restricted to authorised compliance personnel on a strictly need-to-know basis.

5.3 Responsible Gambling Monitoring

3win2u uses behavioural data — including deposit frequency, bet patterns, session duration, and loss history — to identify players whose activity may indicate problem gambling. This processing is conducted as a legitimate interest and regulatory obligation, and may trigger proactive outreach from our responsible gambling team or the automatic application of account restrictions where warranted.

The 3win2u platform uses cookies and similar tracking technologies to support core functionality, maintain session security, and improve the overall platform experience.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform functionality. These include session authentication cookies, security tokens, and cookies that remember your language preference. These cannot be disabled without impairing your use of the platform.
• Functional Cookies: Remember your preferences and settings (such as preferred deposit method or game display options) to personalise your experience between sessions.
• Analytics Cookies: Used to understand how players navigate and interact with the platform. Data collected is aggregated and used to improve performance and user experience. We use server-side analytics solutions.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and unauthorised account access.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the 3win2u platform, including the ability to log in or place bets.

3win2u does not sell, rent, or commercially trade your Personal Data to third parties. We share your data only in the following limited and controlled circumstances:

• Payment Service Providers: Financial data necessary to process your MYR deposits and withdrawals is shared with licensed payment processors including FPX gateway operators, DuitNow clearing institutions, e-wallet partners (Touch 'n Go, Boost, GrabPay), and banking partners (Maybank, CIMB, Public Bank, Hong Leong). These processors are contractually bound to use your data only for payment processing purposes.
• Identity Verification Partners: KYC data may be shared with specialist identity verification service providers who assist in validating documents and confirming identity authenticity under strict data processing agreements.
• Game Software Providers: Limited technical data (player session identifiers, bet activity) is shared with our game studio partners to enable game delivery, resolve disputes, and ensure RNG audit trails. No identity-linked Personal Data beyond session tokens is transmitted to game providers.
• Fraud Prevention & Security Vendors: Device fingerprint data, IP addresses, and behavioural signals may be shared with fraud intelligence platforms to detect and prevent fraudulent activity, money laundering, and account takeover attempts.
• Regulatory and Legal Disclosure: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, court order, or regulatory instruction — without prior notice to you where disclosure obligations prohibit it.

3win2u retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction or re-identification.

3win2u implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our platform is encrypted in transit using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive Personal Data — including KYC documents, financial records, and account credentials — is stored in encrypted format using AES-256 encryption standards.
• Access Controls: Internal access to Personal Data is granted on a strict need-to-know basis. Staff with legitimate access rights are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): Available for all player accounts. We strongly recommend enabling 2FA to protect your 3win2u account from unauthorised access.
• Regular Security Audits: Our platform undergoes periodic penetration testing and security assessments conducted by qualified independent security professionals.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, 3win2u will notify affected Users without undue delay and take immediate steps to contain and remediate the breach.

As a User of the 3win2u platform, you hold a number of rights in relation to your Personal Data. 3win2u respects these rights and has processes in place to facilitate their exercise. Your rights include:

• Right of Access: You may request a copy of the Personal Data 3win2u holds about you, including an explanation of how it is being used. We will respond to verified access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Simple updates (such as contact details) can be made directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. Note that certain data must be retained for legal and regulatory compliance reasons and cannot be erased on request alone.
• Right to Restriction of Processing: In certain circumstances, you may request that we suspend active processing of your data — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your data where we rely on legitimate interests as the legal basis — particularly in relation to direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our Data Protection team via the support channel listed in Section 14. We will acknowledge your request within 5 business days and resolve it within 30 days. We may need to verify your identity before processing data rights requests.

The 3win2u platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store Personal Data from persons under the age of 21. Age verification is a mandatory step in our KYC process, and accounts found to belong to underage individuals will be immediately closed and any associated funds returned to the deposit source.

If you are a parent or guardian and believe that a minor has provided Personal Data to 3win2u without your consent, please contact our support team immediately. We will investigate and take prompt remedial action, including deletion of any data collected from the underage individual.

As an internationally operated platform, some of your Personal Data may be transferred to, stored, or processed in jurisdictions outside Malaysia. These may include countries where our server infrastructure is hosted, where our payment processing partners operate, or where our game studio providers are based.

Where Personal Data is transferred outside Malaysia or the jurisdiction of our primary regulatory framework, 3win2u ensures that appropriate safeguards are in place to protect the transferred data. These safeguards include:

• Contractual protections via data processing agreements containing standard data protection clauses with all receiving parties.
• Transfer only to jurisdictions or organisations that maintain data security standards materially equivalent to those described in this Policy.
• Technical controls — including encryption in transit and at rest — applied regardless of the destination jurisdiction.

3win2u reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered Users via email notification to the address on file, or via a prominent notice displayed on the platform, with a minimum of 14 days' advance notice prior to the effective date.

The most current version of this Policy is always accessible at https://3win2u.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the 3win2u platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you do not agree with the changes made to this Policy, you must cease use of the Services and may request account closure by contacting our support team. Upon verified account closure, we will process the return of any Real Money Fund balance to your registered payment method and retain only the minimum data required for legal and regulatory compliance purposes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 3win2u processes your Personal Data — including requests to exercise any of your data rights described in Section 10 — please contact our Data Protection team using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy / Data Rights Request" in the subject of your email to ensure prompt routing to the appropriate team
• Live Chat: Available 24 hours a day, 7 days a week via the platform's live chat widget
• Response Time: We acknowledge privacy-related enquiries within 5 business days and aim to resolve them within 30 calendar days

For general enquiries unrelated to data privacy — including account support, bonus queries, or responsible gambling assistance — please visit our FAQ page or contact our 24/7 live support team directly. For responsible gambling support resources, please visit our Responsible Gambling page.