Privacy Policy 3klwin –
Player Personal Data Protection

1Introduction and Scope of This Policy

3klwin ("we", "our platform") is an online gaming platform operating in Malaysia. We understand that player trust is our most valuable asset, and that trust is built on a foundation of responsible and transparent data handling.

This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure and protection of personal information you provide to us through our website, mobile app and any other services we offer.

This Policy applies to all 3klwin platform users, including visitors, registered players and anyone who interacts with our platform in any way. By using our services, you agree to the practices described in this Policy.

3klwin fully complies with the Malaysian Personal Data Protection Act 2010 (PDPA) and all related regulations. Any privacy-related enquiries can be directed to our support team, available 24 hours a day.

2Personal Data We Collect

3klwin only collects data that is strictly necessary to provide you with a quality and secure service. The following are the categories of data we collect:

3How We Use Your Data

The personal data we collect is used solely for legitimate and stated purposes. We do not use your data for unrelated purposes without obtaining your consent first.

The primary purposes for which your data is used are as follows:

• Account Management: Create, manage, and maintain your account and verify your identity through the required KYC process.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Customer Support: Provide assistance and resolve any issues or inquiries you raise with our team.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access, and other illegal activities.
• Legal Compliance: Meet regulatory requirements, mandatory reporting obligations, and cooperation with lawful authorities.
• Service Improvement: Analyse usage patterns to improve the platform, add new features, and enhance the overall player experience.
• Marketing Communications: Send promotional information and exclusive offers — only if you have given consent to receive such communications.

4Data Sharing with Third Parties

3klwin does not sell your personal data to anyone. This is our absolute commitment. However, in the course of operating the platform, there are certain situations where data may be shared with trusted parties:

• Payment Providers: Required transaction information is shared with licensed payment processors such as FPX providers, Touch 'n Go, and banking institutions involved in processing your deposits and withdrawals.
• KYC Services: Identity data is shared with licensed identity verification service providers to meet regulatory compliance requirements.
• Technology Providers: Software and infrastructure providers supporting our platform operations, subject to strict confidentiality agreements.
• Legal Authority: Required information may be disclosed to law enforcement agencies, courts, or regulatory bodies when mandated by law.

All third parties that receive your data are contractually bound to protect that information and use it only for the stated purposes. 3klwin conducts rigorous assessments of all partners before any data sharing is approved.

5Data Security and Technical Protection

3klwin continually invests in the latest security infrastructure to ensure your personal data remains protected at all times. The security measures we have in place include:

• 256-bit SSL encryption for all data transmitted between your browser and our servers.
• Encryption of sensitive data stored in the database using industry-standard encryption algorithms.
• Layered access controls — only authorised staff can access specific data according to their role requirements.
• Continuous 24/7 security monitoring to detect any suspicious activity or intrusion attempts.
• Regular security audits by independent third parties to ensure security standards remain up to date.
• A comprehensive incident response plan to address any data breaches quickly and effectively.

6Cookies and Tracking Technologies

The 3klwin platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and cart management. These cookies cannot be disabled.
• Performance Cookies: Collect information on how you use the platform to help us improve our services. All data is anonymised.
• Functional Cookies: Save your preferences such as language and display settings to deliver a more personalised experience.
• Marketing Cookies: Used with your consent to display relevant advertisements. You may withdraw this consent at any time.

You can manage your cookie preferences through your web browser. Please note that disabling certain cookies may affect the functionality of some 3klwin platform features.

7Data Retention Period

3klwin does not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected:

• Active Account Data: Retained for as long as your account is active and in continued use.
• Data After Account Closure: Basic information is retained for 7 years after account closure to meet legal and regulatory requirements related to anti-money laundering.
• Transaction Records: Financial transaction history is retained for 7 years in line with mandatory financial reporting requirements.
• Marketing Data: Retained until you withdraw consent or request deletion.
• Security Logs: Retained for 12 months for investigation and fraud prevention purposes.

Once the retention period expires, data is securely disposed of using methods that ensure it cannot be recovered. For accounts inactive for more than 24 months, we will contact you before taking any action.

8Children's Data Protection

The 3klwin platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal information from anyone under the age of 18.

If we find that personal data of a minor has been collected without appropriate verification, we will take immediate steps to:

• Delete all data associated with that individual from our systems.
• Close the relevant account immediately.
• Notify the parent or legal guardian where identifiable.

9Cross-Border Data Transfers

In the context of global online gaming platform operations, there are situations where your personal data may be transferred to or stored on servers located outside Malaysia.

When cross-border data transfers occur, 3klwin ensures that:

• The recipient country or region has a level of data protection equivalent to or higher than Malaysia.
• Appropriate data protection agreements are signed with the recipient party before any transfer takes place.
• Transfers are only carried out when necessary, using secure encryption methods.
• You will be notified of such transfers if they involve a significant change in how your data is processed.

10How to Contact Us and Submit a Complaint

We welcome any inquiries, concerns, or complaints regarding your privacy and personal data protection. Our Data Protection Officer (DPO) team is ready to assist you with any matter relating to this Privacy Policy.

To reach us regarding privacy matters:

• Browse the Customer Support on the 3klwin platform for immediate 24/7 assistance.
• Submit a written inquiry via the message function in your account for a more detailed record.
• For formal complaints related to PDPA, you also have the right to contact Malaysia Personal Data Protection Department directly.

We are committed to responding to all privacy-related inquiries within 3 working days. More complex complaints may require up to 14 working days to be fully resolved, and you will be kept informed of progress throughout that period.

3klwin takes every privacy complaint seriously. We believe that every concern raised is an opportunity to improve our data protection practices for the benefit of all players.