Privacy Policy

Privacy Policy win37 — Your Information Is Always Protected

Win37 takes seriously our responsibility to protect the privacy and personal data of every player. This document transparently explains how we collect, use, store, and protect your information in accordance with the Malaysia Personal Data Protection Act 2010.

Last updated: 1 January 2026

How win37 Protects Your Personal Data

Personal data protection is more than a legal obligation for win37 — it is a core part of our commitment to the trust and safety of every player in Malaysia.

High-Level Data Encryption

All personal data transmitted between your device and win37's servers is encrypted using TLS 1.3 protocol with AES-256 encryption. This means your sensitive information cannot be read by any third party during transmission.

Secure Data Storage

Your personal data is stored on servers protected by multiple layers of physical and digital security. Database access is granted only to authorised personnel, and every access is recorded in a comprehensive audit log.

Strict Access Controls

Win37 applies the principle of "minimum privilege", where staff are granted access only to the data required to perform their specific duties. Two-factor authentication (2FA) is mandatory for all internal administrative access.

No Data Sales

Win37 does not sell, rent, or trade players' personal data to any third party for commercial purposes. Your data belongs to you, and we fully respect that ownership right without exception.

Malaysia PDPA Compliance

All of win37's data handling practices fully comply with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews to ensure our procedures remain aligned with the latest legal requirements.

Regular Security Audits

Win37's data security systems are assessed regularly by internal security teams and independent external auditors. Any vulnerabilities identified are addressed promptly in accordance with a strict, documented incident response protocol.

By using the win37 platform, you agree to the data handling practices described in this Privacy Policy. Please read this document carefully. If you do not agree with any part of this policy, please do not use win37 services.

1Introduction and Scope of Privacy Policy

Win37 ("we", "Platform") is committed to protecting the privacy of every user who accesses and uses the win37.fun website. This Privacy Policy clearly and transparently explains how we collect, process, store, and protect your personal data when you interact with our platform.

This policy applies to all users of the win37 platform, including registered players, unregistered website visitors, and any individual who interacts with our customer support services through any available channel.

Win37 acts as the responsible data controller for all personal data collected through this platform. We ensure that all data processing is carried out in accordance with internationally recognised data protection principles and in compliance with applicable Malaysia legislation.

If you have any questions regarding how we handle your personal data, the win37 support team is available at any time through the channels available within the platform.

2Types of Personal Data Collected

Win37 only collects personal data that is strictly necessary to provide you with a safe, seamless, and high-quality service. Below are the categories of data we collect and the purposes for which they are collected:

Data Category Example Information Main Purpose
Identity Information Full name, date of birth, identity card number Account verification & KYC
Contact Information Email address, phone number, residential address Communication & support
Financial Information Bank account number, digital wallet details Deposit & withdrawal processing
Technical Data IP address, device type, web browser, operating system Security & fraud detection
Usage Data Gaming history, login times, wagering activity Compliance & responsible gaming
Communication Data Support chat records, player feedback Service improvement

Win37 does not collect information that is not directly relevant to the provision of our services. All data collection is carried out transparently and with clear user consent, except for data collected automatically for technical security purposes.

3How We Use Your Personal Data

The personal data we collect is used solely for legitimate and reasonable purposes in the context of delivering win37 platform services. The use of your data includes the following:

  • Creating and managing your player account and ensuring a smooth, secure login process
  • Processing deposit and withdrawal transactions accurately and securely through supported payment methods
  • Verifying player identity (KYC) to comply with anti-money laundering legal requirements
  • Detecting and preventing fraudulent activity, multi-account usage and promotional system abuse
  • Providing effective and responsive customer support through multiple channels
  • Sending important notifications related to your account, transactions and platform policy changes
  • Monitoring gameplay patterns for responsible gaming and addiction risk detection
  • Improving product and service quality based on aggregate platform usage pattern analysis

Win37 will not use your personal data for third-party marketing purposes without your explicit consent. All marketing communications from win37 will include an option to unsubscribe at any time.

4Third-Party Data Sharing

Win37 does not share, sell, or disclose your personal data to third parties without your consent, except in the limited circumstances set out below:

  • Payment Service Providers: Required financial information is shared with authorised payment processors to enable deposit and withdrawal transactions to be processed securely.
  • Identity Verification: KYC data is shared with registered identity verification service providers to authenticate the documents submitted by players.
  • Legal Requirements: win37 may disclose data to competent authorities when required to do so by court order or applicable legislation in Malaysia.
  • Fraud Prevention: Certain information may be shared with recognised industry bodies for fraud prevention and security protection of the online gaming ecosystem.

All third parties we work with are required to comply with data protection standards at least equivalent to win37's own policy. Contractually binding data protection agreements must be signed by all parties before any data sharing takes place.

5Data Security Measures

Win37 continuously invests in the latest security infrastructure to ensure your personal data is protected against unauthorised access, loss, alteration, or unintended disclosure.

win37 Security Layers
  • SSL/TLS 1.3 encryption for all data communications between players and servers
  • AES-256 encryption for data stored in databases including passwords and financial information
  • Active 24-hour firewall and intrusion detection system (IDS/IPS)
  • Two-factor authentication (2FA) is available and encouraged for all player accounts
  • Regular vulnerability scanning and penetration testing

While win37 takes all reasonable steps to protect your data, please be aware that no digital security system can guarantee 100% absolute protection. Should any data security incident occur that affects your information, we will notify you within the timeframe required by law.

6Your Rights Over Personal Data

As a win37 player, you have certain rights regarding your personal data that we respect and are ready to help you exercise. These rights include:

Right of Access

You have the right to obtain a copy of the personal data we hold about you at any time by submitting a written request.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request deletion of your personal data, subject to any legal record-keeping obligations binding on win37.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, without conditions.

Right to Data Portability

You may request a copy of your data in a machine-readable format for the purpose of transferring it to another platform.

Right to Restriction of Processing

You may request restriction of data processing in certain circumstances, such as while a data accuracy review is in progress.

To exercise any of the above rights, please contact the win37 support team via live chat on the platform. We will process your request within 30 working days from the date we receive your complete submission.

7Cookies and Tracking Technologies

Win37 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyse platform usage patterns in an aggregated and anonymous manner.

  • Essential Cookies: Required for core platform functions such as login sessions, security verification, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting anonymous statistical data on how players use the platform to help us identify and resolve technical issues.
  • Preference Cookies: Saving your personal settings such as preferred language and display preferences for a more comfortable experience on your next visit.

You can manage and delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and security of the win37 platform.

8Data Retention Period

Win37 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following are our general data retention guidelines:

  • Active account data is retained for as long as your account remains active on the win37 platform
  • Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's taxation and financial legal requirements
  • KYC documents are retained for 5 years after account closure to meet anti-money laundering requirements
  • Customer support communication logs are retained for 3 years for reference and service improvement purposes
  • Technical data and security logs are retained for 12 months for threat detection and incident investigation purposes

Once the designated retention period has expired, your personal data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to your identity.

9Cross-Border Data Transfers

In the course of operating the win37 platform, your personal data may be processed or stored on servers located outside Malaysia. win37 ensures that any such data transfers are carried out with adequate and appropriate safeguards.

All cross-border data transfers are carried out only to destinations with a level of data protection equivalent to or exceeding Malaysia's standards. Contractually binding data processing agreements must be in place before any data transfer to third parties outside Malaysia is made.

Data Transfer Assurance

Regardless of where your data is processed, the protection standards set out in this Privacy Policy remain fully applicable to your personal data. You may request further information about the protective measures used for data transfers by contacting the win37 support team.

10Children's Privacy

The win37 platform is strictly restricted to users aged 18 and above. win37 does not knowingly collect, process or store any personal data from individuals under the age of 18.

If we find that personal data has been collected from someone below the specified age limit, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who believe their child has registered an account with win37 are asked to contact us immediately.

11Privacy Policy Amendments

Win37 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to our services. The "Last Updated" date at the top of this document indicates the date of the most recent revision.

Any material amendments to how we handle your personal data will be communicated via a prominent notification within the platform or by email to the address registered to your account, at least 7 days before such amendments take effect.

Your continued use of the win37 platform after any Privacy Policy amendments take effect will be considered as your acceptance of the amended policy. We encourage you to review this page periodically.

12Contact Us About Privacy

If you have any questions, concerns or complaints regarding how win37 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

Contact the win37 Privacy Team

Email: [email protected]
Live Chat: Available 24/7 via the win37 platform
Response Time: Within 3 business days for general enquiries; 30 business days for formal data rights requests

You may also refer to the FAQ us for answers to frequently asked questions about privacy and data security. If you are not satisfied with our response, you have the right to file a complaint with the relevant Malaysia Personal Data Protection Department.

Join win37 — A Platform That Fully Respects Your Privacy

Now you can be confident that your personal data is in safe hands with win37. Register a free account today and enjoy a gaming experience secured by robust privacy and security standards.

256-bit SSL Encryption Malaysia PDPA Compliance No Data Sales 24/7 Privacy Support
Bahasa Melayu