Privacy Policy

This Privacy Policy (the "Policy") is issued by winner33 (the "Company", "we", "us", or "our") and applies to all personal data collected from users (each a "Player", "User", or "you") who access or interact with the winner33 website at winner33.cam and all associated services, features, and applications (collectively, the "Platform").

winner33 is committed to safeguarding your privacy and handling your personal data with care, transparency, and respect. This Policy explains what personal data we collect, the purposes for which it is processed, the circumstances under which it may be shared, the security measures we apply to protect it, and the rights you may exercise in relation to your data.

In this Policy, the following terms shall have the meanings assigned below unless context requires otherwise:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, whether or not by automated means, including collection, recording, storage, use, disclosure, and deletion.
• "Data Controller" means winner33 in its capacity as the entity that determines the purposes and means of Processing Personal Data.
• "Third Party" means any natural or legal person other than you, winner33, and winner33's authorised data processors.
• "KYC" means Know Your Customer — identity and source-of-funds verification procedures mandated for anti-money laundering compliance.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 10 of this Policy.

winner33 collects the following categories of Personal Data, depending on your interaction with the Platform:

winner33 does not intentionally collect Sensitive Personal Data (such as racial or ethnic origin, religious beliefs, or health data) unless specifically required by a legal obligation and with your explicit consent where mandated.

winner33 collects Personal Data through the following means:

• Direct provision by you — when you register an account, complete KYC, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automated technologies — as you interact with the Platform, technical data is collected automatically via Cookies, server logs, and similar tracking technologies (see Section 10).
• Third-party sources — we may receive identity and fraud-screening data from payment processors (including FPX, DuitNow, and partner banking institutions such as Maybank, CIMB, and Public Bank) and identity verification service providers engaged to support our KYC obligations.

winner33 processes your Personal Data for the following purposes:

1. Account Management: To create, maintain, verify, and administer your winner33 account, including password recovery and account security.
2. Service Delivery: To process bets, credit winnings, handle deposits and withdrawals in MYR, and deliver the core sportsbook and live casino services you have requested.
3. KYC & AML Compliance: To fulfil our obligations under applicable anti-money laundering and counter-terrorism financing regulations, including verifying your identity and monitoring transactions for suspicious activity.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
5. Customer Support: To respond to your enquiries, resolve disputes, and provide assistance related to your account or any Platform feature.
6. Responsible Gambling: To monitor betting patterns that may indicate problem gambling behaviour and to administer self-exclusion, deposit limit, and session alert requests.
7. Platform Improvement: To analyse usage patterns, improve user experience, test new features, and carry out internal analytics — typically using aggregated or anonymised data.
8. Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates where you have opted to receive such communications. You may withdraw consent at any time by contacting support.
9. Legal Compliance: To comply with legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and exercise or defend legal claims.

winner33 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under your account agreement, including delivering betting services and processing financial transactions.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including KYC, AML, and data retention requirements.
• Legitimate Interests: Processing carried out in winner33's legitimate interests — including fraud prevention, Platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent — such as receiving marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

winner33 does not sell, rent, or trade your Personal Data. We may disclose your Personal Data to the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors & Banking Partners: Including FPX network participants (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow operators, and e-wallet providers (Touch 'n Go, Boost, GrabPay) — solely to process your financial transactions.
• Identity Verification Providers: Third-party KYC and AML screening services engaged to verify your identity and screen transactions against regulatory watchlists.
• Technology & Hosting Providers: Cloud infrastructure, platform software, and cybersecurity service providers who process data on winner33's behalf under binding data processing agreements.
• Customer Support Tools: Live chat and helpdesk software providers used to manage and respond to your support requests — limited to the data necessary to resolve your query.
• Legal & Regulatory Authorities: Law enforcement agencies, courts, or regulatory bodies where disclosure is required by law, court order, or to protect the rights and safety of winner33, its players, or the public.

winner33 retains Personal Data for as long as necessary to fulfil the purposes outlined in this Policy and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with winner33 and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of seven (7) years from the date of the transaction in accordance with applicable financial regulations.
• KYC Documentation: Identity and verification documents are retained for five (5) years following the end of the customer relationship.
• Support Communications: Chat logs and email correspondence are retained for up to three (3) years from the date of the interaction.
• Technical & Log Data: Server logs and session data are typically retained for ninety (90) days, unless extended for security investigation purposes.

Upon expiry of applicable retention periods, Personal Data is securely deleted, destroyed, or irreversibly anonymised.

winner33 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all Platform pages and API communications;
• Encrypted storage of sensitive data at rest, including passwords (hashed and salted) and payment credentials;
• Role-based access controls limiting internal staff access to Personal Data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication options available to Players for account login.

winner33 uses Cookies and similar tracking technologies on the Platform to deliver core functionality, analyse usage, and improve your experience. The following categories of Cookies are used:

• Essential Cookies: Strictly necessary for Platform operation, including session management, account authentication, and security functions. These cannot be disabled.
• Analytics Cookies: Used to collect aggregated, anonymised data on how Players interact with the Platform, including page visits, session duration, and navigation paths — enabling us to improve the user experience.
• Functional Cookies: Store your language preferences, display settings, and other personalisation choices to enhance your browsing experience across sessions.
• Marketing Cookies: Where you have provided consent, these cookies may be used to deliver relevant promotional content based on your Platform activity.

You may manage or disable non-essential Cookies through your browser settings. Please note that disabling certain Cookies may affect the functionality of the Platform.

Subject to applicable law and any overriding legal obligations, you hold the following rights in respect of your Personal Data held by winner33:

To exercise any of the above rights, please contact winner33 using the details provided in Section 15. We will respond to all legitimate requests within a reasonable timeframe and without charge, unless a request is manifestly unfounded or repetitive.

The winner33 Platform is strictly intended for use by persons aged 21 years and above. winner33 does not knowingly collect Personal Data from individuals under the age of 21.

If winner33 discovers or has reason to believe that a registered account is held by a person under the age of 21, that account will be immediately and permanently closed, all balances will be withheld pending investigation, and any Personal Data collected will be deleted in accordance with applicable law.

If you have reason to believe that a minor has registered or attempted to register an account on winner33, please contact our support team immediately at [email protected].

In the course of providing services to you, winner33 may transfer your Personal Data to recipients located outside Malaysia, including to technology and infrastructure providers whose servers are located in other jurisdictions.

Where such transfers occur, winner33 takes steps to ensure that your Personal Data receives an adequate level of protection, including through the use of contractual clauses, data processing agreements, and other appropriate safeguards consistent with applicable data protection standards.

winner33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered Players via the email address associated with their account and/or through a prominent notice on the Platform, in advance of the effective date where practicable.

We encourage you to review this Policy periodically. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which winner33 processes your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 on the Platform — average response time 3–5 minutes. Available in English, Bahasa Melayu, and Mandarin.
• Email: [email protected] — for data-related requests, please include "Data Privacy Request" in the subject line of your message.

For information on our betting platform rules and your account obligations, please review our Terms & Conditions. For responsible gambling tools and support, visit our Responsible Gambling page.