Privacy Policy iwin33 —
Your Data Security, Our Priority

This Privacy Policy ("Policy") is published by iwin33 ("Platform", "We") and applies to all users and members who access or use the iwin33.fun website and all related services. By using our platform, you agree to the data collection and usage practices described in this Policy.

Iwin33 is the data controller responsible for the personal information you provide to us. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and apply internationally recognised data protection principles across all aspects of our data handling.

This Policy covers all data collected through the iwin33.fun website, the iwin33 mobile app, email communications, customer support live chat, and any other interactions between you and our platform.

Iwin33 collects various types of personal data depending on how you interact with our platform. Below is a detailed summary of the data we collect and the purpose of collection:

We only collect data that is strictly necessary to provide the services you request. Our data minimisation principle ensures we do not collect information beyond what is operationally required by the platform.

Some data is collected automatically when you use our platform, such as server logs and cookie data. This data is used solely to ensure platform security and optimal performance.

Iwin33 uses your personal data responsibly and only for legitimate purposes. Below is a detailed explanation of how we use each type of data:

• Account management: Create and manage your account, process registration, and verify your identity through the KYC process.
• Transaction processing: Securely process deposits and withdrawals, verify payments, and resolve any transaction-related issues.
• Platform Security: Detect and prevent fraud, money laundering, multiple account usage, and any other suspicious activity.
• Customer support: Answer your inquiries, resolve complaints, and provide technical assistance when needed.
• Service improvement: Analyze usage patterns to improve the platform interface, add new features, and deliver a better user experience.
• Responsible gaming: Monitor your gaming patterns to identify early signs of problem gambling and reach out to you if necessary.
• Legal compliance: Meet reporting obligations to the relevant authorities as required by Malaysian law.

We will not use your data for purposes unrelated to iwin33 services without first obtaining your consent. Any new use of data beyond its original collection purpose will be communicated to you.

Iwin33 values your trust. We do not sell your personal data to anyone. However, in the course of operating the platform, there are limited situations where your data may be shared with certain parties:

• Payment service providers: To process your deposits and withdrawals through legitimate payment channels such as DuitNow and FPX. They only receive the data necessary to process the transaction.
• Game software providers: Gaming technology companies that provide slots, live casino, and other games on our platform may receive limited game session data for technical purposes.
• Identity verification service providers: To carry out KYC checks required by law, we work with approved third parties to verify your identity documents.
• Regulatory authorities & law enforcement: We are legally required to disclose certain information to the relevant government authorities when lawfully requested.
• Technical service providers: Cloud infrastructure, analytics, and cybersecurity providers that help us operate the platform securely and efficiently.

All third parties working with iwin33 are bound by strict data confidentiality agreements and may only use your data for agreed purposes. We conduct regular security assessments of all third-party partners to ensure their compliance with our privacy standards.

Iwin33 does not share your data with companies within our group for cross-marketing purposes without your explicit consent.

Iwin33 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions, security, and navigation. These cookies cannot be disabled as the platform will not function without them.
• Performance cookies: Collect data on how you use the platform to help us identify areas for improvement. All data is collected anonymously.
• Functional cookies: Remember your preferences such as language, display theme, and other settings to provide a more personalized experience.
• Analytics cookies: Help us understand overall platform traffic patterns and usage. This data is used in aggregated form only.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, please refer to your browser's help documentation.

Protecting your personal data from unauthorized access, loss, or misuse is iwin33's absolute priority. We implement multiple layers of technical and organizational security to ensure comprehensive protection:

• End-to-end encryption: All data transmitted through the platform is protected with TLS 1.3 protocol and AES-256 encryption.
• Access Control: The "minimum access rights" principle ensures that only authorised staff may access sensitive member data, and all access is recorded in audit logs.
• 24/7 Monitoring: Our integrated security monitoring system operates around the clock to detect and respond to any security threats in real time.
• Penetration testing: We conduct regular security audits by independent third-party security experts to identify and address any vulnerabilities.
• Two-factor authentication: Members are encouraged to enable 2FA as an additional security layer for their account.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. You also play an important role in protecting your account by using a strong password and not sharing your login credentials.

As an iwin33 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

Iwin33 does not retain your personal data longer than necessary for the original purpose of collection or as required by law. Below is our data retention policy:

• Active account data: Retained for the duration of your active membership plus 5 years after account closure to fulfil legal compliance obligations.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution.
• Cookie & session data: Session cookies are deleted automatically when you close your browser. Persistent cookies expire within 12 months.
• Marketing data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, we use trusted document destruction services.

The iwin33 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from children or minors.

If we find that we have inadvertently collected data from a person under the age of 18, we will immediately take the following steps:

• Close the account immediately.
• Delete all personal data associated with the account.
• Return any remaining account balance after proper identity verification.

If you become aware that a child has registered on our platform, please contact us immediately at [email protected] so that we can take immediate action.

If you have any questions, concerns, or complaints regarding how iwin33 handles your personal data, we encourage you to contact us. Our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• Live Chat: Available 24/7 in your iwin33 account — the fastest way to get a response.
• Privacy Email: [email protected] — for privacy and data protection enquiries.
• General Support Email: [email protected] — for general account-related questions.

We are committed to handling all privacy complaints seriously and transparently. All complaints will be acknowledged within 3 business days and resolved within 30 business days. If you are unsatisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

This Privacy Policy is subject to periodic review. Any material changes will be communicated to you via an in-platform notice or your registered email before the changes take effect.