Personal Data Protection

Privacy Policy Winners33 — Your Information Is Safe With Us

Winners33 takes every member's privacy seriously. This document clearly outlines the types of data we collect, the purposes for which it is used, and how we protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026 PDPA 2010 Compliance 256-bit SSL
By using the winners33 platform, you agree to the collection and use of your personal data as described in this privacy policy. Your privacy is our priority.

1 Introduction and Scope of This Policy

Winners33 ("we", "Platform", "winners33") is fully committed to protecting the privacy and personal data of all members and users of our platform. This Privacy Policy is established to transparently and clearly explain how we collect, use, store, disclose, and protect your personal information.

This document applies to all users who access the winners33.onl website, use the winners33 mobile app, or interact with any services provided by our platform. It also applies to anyone who registers as a member, makes a deposit, withdraws funds, or simply browses our website without registering.

Winners33 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), and we ensure all our data handling practices align with applicable legal requirements. If you have any concerns about how we handle your personal data, please contact our privacy team through the channels stated at the end of this document.

winners33 Commitment: We will not sell your personal data to any third party for marketing or commercial purposes. Your data is used solely for the purposes stated in this policy.

2 Types of Personal Data We Collect

Winners33 collects various types of personal data depending on how you interact with our platform. Below is an overview of the data categories we collect:

2.1 Data You Provide Directly

  • Identity Information: Full name, date of birth, gender, national identity card number (MyKad) or passport
  • Contact Information: Email address, mobile number, residential address
  • Financial Information: Bank account details, bank name, account number (for withdrawal purposes only)
  • Verification Documents: MyKad copy, passport, utility bill, or other requested KYC documents
  • Login Information: Username and encrypted password

2.2 Data Collected Automatically

  • Technical Data: IP address, browser type and version, device operating system
  • Usage Data: Pages visited, time spent, in-game actions
  • Transaction Data: Deposit records, withdrawals, wagering history and wins
  • Location Data: General location based on IP address (not GPS or precise location)
  • Device Data: Unique device identifier, phone model, screen resolution

We never collect credit or debit card numbers directly. All payments are processed through trusted third-party payment providers that comply with PCI-DSS security standards.

2.3 Data Summary Table

Data Category Example Source
Identity Name, date of birth, MyKad Provided directly by you
Relationship Email, phone, address Provided directly by you
Financial Bank account number Provided directly by you
Technical IP address, browser type Automatic
Transactions Deposit & withdrawal records Automatic
Usage Game history, clicks Automatic

3 Purpose of Personal Data Use

Winners33 uses your personal data solely for legitimate purposes necessary for the delivery of our services. We will not use your data for any other purpose without first obtaining your consent.

3.1 Platform Operations

  • Processing of account registration and identity verification (KYC)
  • Process deposits and withdrawals securely and accurately
  • Provide access to the games and services you request
  • Manage bonuses, promotions, and member reward programmes
  • Resolve disputes and provide customer support

3.2 Security and Compliance

  • Identity verification to prevent fraud and money laundering
  • Monitoring of suspicious activity and account protection
  • Compliance with applicable legal and regulatory requirements
  • Enforce age and membership eligibility requirements

3.3 Service Improvement

  • Analyse usage patterns to improve the user experience
  • Personalise game recommendations and promotions based on your preferences
  • Conduct technical testing and platform improvements

3.4 Communications

  • Send important account-related notices (security, KYC, transactions)
  • Inform you of promotions and new offers (with your consent)
  • Send important policy updates or changes to terms

4 Legal Basis for Data Processing

Winners33 processes your personal data based on one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: When you register an account and agree to this privacy policy, you give your consent for us to process your data for the stated purposes.
  • Contract Performance: Processing required to deliver the services you request, including transaction processing and account management.
  • Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements and identity verification.
  • Legitimate Interest: Processing required for the platform's legitimate interests, such as fraud prevention and system security, provided these interests do not override your fundamental rights.

5 Data Sharing and Disclosure

Winners33 does not sell, transfer, or disclose your personal data to third parties without your consent, except in the following situations:

5.1 Trusted Service Providers

We share necessary data with third-party service providers who help us operate the platform, including:

  • Payment gateway and transaction processing providers
  • Identity verification and KYC service providers
  • Cloud infrastructure and data storage providers
  • Gaming software and casino content providers

All these third-party providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

5.2 Legal Requirements

Winners33 may disclose your personal data where required by law, such as upon request by law enforcement authorities, courts, or regulatory bodies with valid jurisdiction.

5.3 Protection of Vital Interests

In situations involving serious security risks, we may disclose necessary information to protect the safety of members or the public.

We will never: Sell your personal data to advertisers, data brokers, or any party for commercial purposes. This is a non-negotiable commitment by winners33.

6 Data Storage and Security Measures

6.1 Data Retention Period

Winners33 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by law. Generally:

  • Active account data: For the duration your account is active and up to 5 years after account closure
  • Financial transaction records: Minimum 7 years as required by financial regulations
  • KYC and identity verification records: Minimum 5 years after the business relationship ends
  • Access and security logs: 12 months from date of creation

6.2 Technical Security Measures

Winners33 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

  • 256-bit SSL/TLS encryption for all data in transit
  • Sensitive data encrypted in the database using AES-256 standards
  • Two-factor authentication (2FA) for all account access
  • 24/7 security monitoring and threat detection system
  • Periodic security audits by independent third parties
  • Role-based access control — only staff who need to may access your data

Personal data of winners33 members is stored in data centres compliant with ISO 27001 standards, with automated backup systems and a comprehensive disaster recovery plan.

7 Cookies and Tracking Technologies

Winners33 uses cookies and similar tracking technologies to enhance the user experience and gather analytics data that helps us improve the platform.

7.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session authentication and security. Cannot be disabled.
  • Functional Cookies: Remember your preferences such as language, display settings, and game preferences for your convenience.
  • Analytics Cookies: Help us understand how users interact with the platform — which pages are popular, where users encounter issues, and more.
  • Performance Cookies: Used to monitor the platform's technical performance and detect any issues that need to be resolved.

7.2 Managing Cookies

You can manage and delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect platform functionality and your gaming experience. For more information on managing cookies, refer to your browser's help documentation.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding your personal data held by winners33. We are committed to respecting and facilitating the exercise of these rights.

Rights Data Protection You

Winners33 respects all your rights as a data subject under Malaysia's PDPA 2010

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete data.

Right to Erasure

You may request deletion of your data in certain situations, subject to legal obligations.

Right to Restriction of Processing

You may request that we restrict the processing of your data under certain circumstances.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Winners33 will process all requests relating to your data rights within 30 working days from the date the request is received. If your request is complex, we will notify you of any additional time required.

9 Children's Data and Minor Protection

The winners33 platform is strictly limited to individuals aged 18 and above. We do not intentionally collect, process, or store personal data of individuals under the age of 18.

If we find that personal data of an individual under the age of 18 has been collected without valid consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on our platform, please contact us immediately so that appropriate action can be taken.

10 Cross-Border Data Transfers

In operating a platform that encompasses global technology infrastructure, some of your personal data may be transferred to, stored in, or processed in countries outside Malaysia. This includes cloud servers and data centres located in various locations.

Winners33 ensures that all cross-border data transfers are carried out with adequate safeguards, including:

  • Data processing agreements with recognised standard protection clauses
  • Selection of service providers that comply with international data protection standards
  • Data encryption in transit and at rest
  • Data protection impact assessment for high-risk transfers

Although your data may be processed outside Malaysia, the protection standards we impose on all providers are at least equivalent to the requirements of Malaysia's PDPA 2010.

11 Amendments to This Privacy Policy

Winners33 reserves the right to update or amend this privacy policy at any time to reflect changes in our business practices, new legal requirements, or improvements in how we handle data.

Any material changes to this policy will be communicated to you via:

  • Prominent notice on the winners33.onl homepage
  • Email to the address registered to your account
  • Notice upon login requiring your acknowledgement

The "Updated" date at the top of this document will always reflect the latest version of our privacy policy. Continued use of the winners33 platform after the effective date of any changes constitutes your acceptance of the updated policy.

12 Contact Us — Data Protection Officer

Winners33 has appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with PDPA 2010 and handling all privacy-related enquiries.

If you wish to:

  • Exercise any of the data rights stated above
  • Lodge a complaint about how we handle your data
  • Find out more about our privacy practices
  • Withdraw consent you have previously given

Please contact our privacy team. We will endeavour to respond to all enquiries within 5 business days and resolve formal requests within 30 business days.

Data Protection Officer Email: [email protected]
General support is available via 24/7 live chat on the winners33 platform.

Why Your Data Secure With Winners33

Six layers of protection ensuring the privacy and security of your personal information

256-bit SSL Encryption

All data transmitted between your device and the winners33 servers is protected by 256-bit SSL encryption — the same standard used by the world's leading financial institutions.

Two-Factor Authentication

Your account is protected by two-factor authentication (2FA), ensuring only you can access it even if your password is compromised.

PDPA 2010 Compliance

All winners33 data handling practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — not merely as a formality, but as a genuine commitment.

Encrypted Data Storage

Sensitive data in the winners33 database is stored in encrypted form using AES-256 standards, ensuring layered security even if the system is physically accessed.

Independent Security Audit

Winners33 undergoes regular security audits by independent third-party firms that verify our system compliance and identify any vulnerabilities before they can be exploited.

No Data Sales

Winners33 has never and will never sell members' personal data to any third party for commercial purposes. Your data is used solely to deliver services to you.

🔒

Privacy Protected, Gaming Worry-Free

Your personal data is fully protected at winners33. Register today and enjoy a safe, transparent gaming experience that meets the highest data protection standards, alongside over 500,000 Malaysian players.

PDPA 2010 Compliance 256-bit SSL Encryption No Data Sales
Bahasa Melayu