Privacy Policy – my3win

1 Who We Are

my3win ("we", "us", "our") operates the online gaming platform accessible at my3win.win. For the purposes of applicable data protection legislation, my3win acts as the data controller in respect of personal data collected directly from users through the Platform. Where personal data is processed by third-party game providers or payment processors on our behalf, those parties act as data processors under contractual terms that require them to maintain data protection standards consistent with this Policy.

If you have any questions about how my3win handles your personal data, or wish to exercise any of your data rights, you may contact us at [email protected].

2 Personal Data We Collect

my3win collects the following categories of personal data from users of the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data except where required by applicable law and with your explicit consent.

3 How We Collect Personal Data

my3win collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: Identity verification data from licensed KYC service providers where you have consented to such verification; fraud risk signals from payment processors; and publicly available sources used for AML screening purposes.

4 How We Use Your Personal Data

my3win uses personal data for the following purposes:

• Account management: Creating, maintaining, and administering your my3win Account, including authentication and access control.
• Service delivery: Processing deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank; enabling gameplay across all my3win products; and delivering promotional offers you are eligible for.
• Legal and regulatory compliance: Performing age verification to enforce the 21+ requirement; conducting Know Your Customer (KYC) checks; complying with anti-money laundering (AML) obligations; and responding to lawful requests from regulatory or law enforcement authorities.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multiple account abuse, payment chargebacks, and other security threats.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour; enforcing self-exclusion requests; and delivering responsible gaming notifications in accordance with our Responsible Gaming Policy.
• Platform improvement: Analysing aggregated usage data to understand how players use my3win and to improve game selection, user interface, and platform performance.
• Customer support: Responding to your enquiries, managing complaints, and resolving disputes.
• Marketing communications: Sending you information about promotions, bonuses, and new features where you have provided consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.

5 Legal Basis for Processing

my3win processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and my3win, including account registration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable law, including KYC, AML, and age verification obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional data uses where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6 Data Sharing & Disclosure

my3win does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: Transaction data shared with Touch n Go, Boost, Maybank, CIMB, and Public Bank as necessary to process deposits and withdrawals. Each processor is contractually bound to handle your data in accordance with applicable data protection standards.
• Identity verification providers: Identity documents and personal details shared with licensed KYC service providers to fulfil age verification and AML obligations.
• Game providers: Gameplay session data (but not payment or identity data) shared with licensed game providers to enable game delivery and resolve technical disputes.
• Legal and regulatory authorities: Personal data disclosed to competent authorities where required by applicable law, court order, or regulatory directive, or where disclosure is necessary to protect the safety of users or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of my3win's assets, personal data may be transferred to the relevant successor entity, subject to the protections of this Privacy Policy.

All third parties with whom my3win shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified by my3win.

7 Cookies & Tracking Technologies

my3win uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality.
• Performance cookies: Used to collect anonymised analytics data about how users interact with the Platform, helping us identify performance issues and improve user experience.
• Functional cookies: Used to remember your preferences, such as language settings and preferred deposit method, to personalise your experience.

my3win does not deploy third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the Platform.

8 Data Retention

my3win retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with AML record-keeping obligations.
• Transaction data: Retained for a minimum of 5 years from the date of the transaction.
• Communications and support records: Retained for 3 years from the date of the last interaction.
• Technical and usage data: Retained in identifiable form for up to 2 years, after which it may be anonymised and retained for longer periods for aggregate analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with my3win's internal data deletion procedures.

9 Data Security

my3win implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and my3win's servers;
• Encryption at rest for sensitive data fields including identity documents and payment references;
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis;
• Regular security audits and penetration testing by independent security professionals;
• Incident response procedures to contain and report data breaches in accordance with applicable regulatory requirements.

10 Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by my3win:

• Right of access: You may request a copy of the personal data my3win holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restriction: You may request that my3win restricts the processing of your personal data in certain circumstances.
• Right to data portability: You may request that personal data you have provided to my3win be transferred to you or a third party in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact my3win at [email protected]. We will respond to all verifiable requests within 30 days. We may require proof of identity before processing your request.

11 Children's Privacy

If you believe that a minor has registered an Account on my3win, please notify us immediately at [email protected].

12 International Data Transfers

my3win operates under international gaming licensing and some of our service providers – including game providers, KYC vendors, and infrastructure providers – are located outside Malaysia. Where personal data is transferred to recipients in other jurisdictions, my3win ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent data transfer mechanisms, to ensure that your data receives a level of protection consistent with this Privacy Policy.

Malaysian users acknowledge that their data may be processed in jurisdictions that do not have data protection laws equivalent to those in Malaysia. By using the Platform, you consent to such international transfers in accordance with the terms of this Privacy Policy.

13 Changes to this Privacy Policy

my3win reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform services. Material changes will be communicated to registered Account holders via email or prominent in-Platform notification at least 7 days prior to taking effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or my3win's data practices, please contact our Data Protection team:

If you are not satisfied with my3win's response to your privacy concern, you may escalate to the relevant data protection authority or the complaints body under my3win's international gaming licensing framework.