At 3win8, protecting the personal data of our Malaysian players is a fundamental obligation — not an afterthought. This Privacy Policy explains clearly and honestly what data we collect, why we collect it, how it is used, and what rights you hold over your information.
All personal data held by 3win8 is encrypted using industry-standard AES-256 encryption at rest. All data transmitted between your device and our servers is secured via TLS 1.3, ensuring your login credentials, payment details, and personal information are never sent in plaintext.
3win8 does not sell, rent, or trade your personal data to any external party for marketing or commercial purposes. Data shared with third parties is limited strictly to what is necessary for platform operations — payment processing, KYC verification, and fraud prevention — under binding confidentiality agreements.
You have the right to access, correct, and request deletion of your personal data held by 3win8, subject to our legal retention obligations. Data access requests are processed within 30 calendar days of receipt. Submit requests via Live Chat or email to our Data Protection contact.
3win8 does not store full payment card numbers, CVV codes, or complete e-wallet credentials on our servers. Payment processing is handled by licensed third-party payment processors under PCI-DSS compliance standards. 3win8 retains only transaction reference identifiers and amounts necessary for account records.
We hold your data only as long as necessary. Account data is retained for the duration of your account plus a post-closure period of 5 years to satisfy our anti-money laundering and licensing obligations. Marketing preferences and behavioural data are held for shorter periods as detailed in our retention schedule.
3win8 uses essential, functional, and analytics cookies to operate the platform and improve your experience. We do not place third-party advertising or tracking cookies without your explicit consent. You may manage your cookie preferences at any time through your browser settings or our cookie consent tool.
This Privacy Policy ("Policy") is published by 3win8 ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting website accessible at https://3win8.cam (the "Website"). This Policy governs the collection, processing, storage, and transfer of personal data relating to registered users, visitors, and prospective customers of the 3win8 Platform.
We are committed to processing personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. By registering an Account with3win8, accessing the Website, or using any service provided by the Platform, you acknowledge that you have read and understood this Privacy Policy.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement between you and the Platform.
This Policy applies to all personal data collected by 3win8 through the Website, mobile platform, customer support channels (including Live Chat, WhatsApp, and email), and any other touchpoint through which you interact with the 3win8 brand. It covers Malaysian users and all other registered account holders regardless of geographic location.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, contact details, financial information, online identifiers, and behavioural data. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, or deletion. |
| "Data Controller" | 3win8, the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third-party entity that processes personal data on behalf of 3win8 pursuant to a data processing agreement, such as payment processors, KYC verification providers, and cloud hosting services. |
| "KYC" | Know Your Customer — the identity verification process required under international AML obligations before a Player may withdraw funds from their Account. |
| "Player" / "User" | Any individual who has registered an Account with 3win8 or who accesses or uses the Website or Platform services. |
| "Sensitive Personal Data" | A subset of personal data that warants heightened protection, including government-issued identification numbers (e.g., Malaysian MyKad numbers), financial account details, and any data revealing health or biometric information. |
3win8 collects personal data through multiple channels and at various stages of your relationship with the Platform. The categories of data we collect are described below.
When you create an Account with 3win8, we collect the following information as part of the registration process:
Before processing any withdrawal, 3win8 requires Players to complete identity verification. During this process, we collect:
We collect transactional data in connection with deposits and withdrawals, including:
Note: 3win8 does not store full payment card numbers, CVV codes, or complete e-wallet credential data. Payment processing is handled by licensed third-party processors.
When you access the Website or mobile platform, we automatically collect:
When you contact3win8's customer support team — via Live Chat, WhatsApp, or email — we retain records of those communications, including the content of messages, timestamps, and support agent notes, for quality assurance, training, and dispute resolution purposes.
Where you use our responsible gambling tools — such as deposit limit settings, cool-off periods, or self-exclusion requests — we record these instructions and maintain them in your Account record. This data is treated with heightened sensitivity and is not used for marketing purposes.
3win8 processes your personal data for the following defined purposes:
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contract performance |
| Identity and age verification (KYC) | Identity documents, selfie, address proof | Legal obligation |
| Processing deposits and withdrawals | Financial and transactional data | Contract performance |
| Fraud detection and AML compliance | Transaction data, IP data, KYC records | Legal obligation |
| Customer support and dispute resolution | Communications data, account history | Legitimate interest |
| Platform performance and improvement | Technical and device data, session data | Legitimate interest |
| Responsible gambling enforcement | RG tool settings, account activity | Legal obligation / consent |
| Personalised promotions and offers | Account activity, preferences | Consent (opt-in) |
| Legal and regulatory compliance | All categories as required | Legal obligation |
3win8 processes personal data one or more of the following legal bases, as applicable to each specific processing activity:
Processing is necessary to fulfil the contractual relationship between 3win8 and the Player — including account management, game provision, deposit processing, and withdrawal facilitation.
Processing is required to comply with applicable laws and regulatory obligations — including anti-money laundering (AML) legislation, Know Your Customer (KYC) requirements under our international gaming licence, and age verification obligations. Under these obligations, 3win8 must verify that all Players are aged 21 and above and that transactions do not facilitate money laundering or the financing of prohibited activities.
Processing is necessary for the legitimate interests of 3win8, where those interests are not overridden by the fundamental rights and freedoms of data subjects. Legitimate interests pursued by 3win8 include fraud prevention, platform security, network and information security, customer support quality assurance, and internal analytics for business improvement.
Where processing is based on consent — for example, the sending of personalised promotional communications or the use of non-essential cookies — we will obtain your explicit consent prior to initiating that processing. You may withdraw consent at any time by adjusting your Account communication preferences or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
3win8 does not sell, rent, or trade personal data. We share personal data with third parties only to the extent necessary for the operation of the Platform and fulfilment of our legal obligations. All third-party data processors operate under binding data processing agreements that prohibit use of your data for purposes beyond those specified.
Transactional data is shared with licensed payment service providers responsible for processing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels. These processors handle payment data under PCI-DSS compliant frameworks.
Identity documents submitted during the KYC process are shared with licensed identity verification partners for document validation, facial recognition matching (where applicable), and sanctions screening. These providers are bound by strict confidentiality obligations.
Transaction and account data may be shared with fraud detection and AML compliance platforms to identify and prevent fraudulent transactions, money laundering activity, and account manipulation.
3win8 uses third-party cloud infrastructure providers for server hosting, database management, and content delivery. These providers store data on3win8's behalf under contractual data protection obligations.
Where required by applicable law, the order of a court of competent jurisdiction, or a regulatory authority with appropriate authority over the Platform's licensing, 3win8 may disclose personal data to governmental or regulatory bodies without prior notice to the data subject.
Third-party service providers accessed through the Platform — including payment gateways such as Touch 'n Go eWallet, Boost, and GrabPay — operate under their own independent privacy policies. 3win8 is not responsible for the privacy practices of these third-party services. We encourage you to review the relevant privacy notices for any third-party services you use in connection with the Platform.
3win8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to satisfy legal, regulatory, or dispute resolution obligations. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / licensing obligation |
| KYC identity documents | Duration of account + 5 years post-closure | AML / licensing obligation |
| Financial transaction records | 7 years from transaction date | International AML standards |
| Customer support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Responsible gambling tool records | Duration of account + 5 years | Player protection obligation |
| Marketing preferences and consents | Until withdrawal of consent + 1 year | Consent |
| Technical / device / session logs | 13 months from collection | Legitimate interest |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised aggregate data may be retained indefinitely for statistical analysis.
3win8 uses cookies and similar tracking technologies to operate the Website, remember your preferences, analyse platform usage, and (where you have provided consent) deliver relevant promotional content.
Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently, to remember user preferences, and to provide reporting information to site operators. Session cookies expire when you close your browser. Persistent cookies remain on your device for a defined period.
You may manage or disable cookies at any time through your browser settings. Most browsers allow you to block, delete, or restrict cookies for specific websites. Note that disabling essential or functional cookies will affect Platform performance and may prevent certain features from operating correctly. For guidance on managing cookies in your browser, consult your browser's help documentation.
3win8 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or disclosure. Our security infrastructure includes:
While 3win8 takes extensive technical measures to protect your data, account security is a shared responsibility. You are solely responsible for keeping your password confidential and not sharing your account credentials with any third party. If you suspect unauthorised access to your account, contact our support team immediately via Live Chat.
As a data subject whose personal data is processed by 3win8, you hold the following rights with respect to your personal information. 3win8 will respond to valid rights requests within 30 calendar days of receipt, subject to identity verification.
You may request a copy of all personal data held by 3win8 relating to your Account. We will provide a structured summary of your data in a commonly used electronic format.
You may request correction of inaccurate or incomplete personal data. Basic account details such as email address and phone number may be updated directly through your Account settings.
You may request deletion of your personal data, subject to our legal retention obligations under AML and licensing regulations. Erasure requests will be assessed and actioned to the maximum extent permissible by law.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved — without requiring deletion of the data.
Where processing is carried out by automated means on the basis of contract or consent, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
You may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes. Objections to direct marketing will be actioned immediately without requiring justification.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
If you believe your data protection rights have been breached, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
To exercise any of the above rights, please contact our Data Protection team via Live Chat or by emailing [email protected] with the subject line "Data Rights Request". Identity verification will be required before any request is actioned.
The 3win8 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21.
All new Account registrations are subject to age verification as part of our KYC process. Where an Account is found to be registered by a person under the age of 21, that Account will be immediately closed, any balance forfeited, and all personal data associated with the account will be securely deleted to the extent permissible by applicable legal obligations.
If you have reason to believe that a minor has registered an Account with 3win8, please contact our support team immediately via Live Chat or by emailing [email protected]. We treat all such reports with the highest priority.
This platform is for adults aged 21 and above only. If you are under 21, please do not attempt to register. Parental controls and internet filtering tools are available to help prevent underage access to gambling websites. Please visit our Responsible Gambling page for guidance.
3win8 is an internationally operated platform. In the course of providing our services, your personal data may be transferred to, stored in, or processed by systems located in jurisdictions outside of Malaysia. This includes our cloud infrastructure providers and certain third-party data processors.
Where personal data is transferred to jurisdictions that do not have an equivalent level of data protection to international standards, 3win8 ensures appropriate safeguards are in place, which may include:
By registering an Account and using the Platform, you acknowledge and consent to the transfer of your personal data to international jurisdictions as described in this section.
3win8 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the scope of our services. The date of the most recent revision is displayed at the top of this page.
Where material changes are made to this Policy — particularly changes that affect the basis on which we process your personal data or that expand our use of personal data in ways not previously disclosed — 3win8 will notify registered Players via the email address associated with their Account or by displaying a prominent notice on the Website prior to the changes taking effect.
Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the amended Policy, please discontinue use of the Platform and contact our support team to request account closure and data deletion in accordance with your rights under Section 10.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 3win8, please contact us through any of the following channels:
For formal data rights requests — including access, rectification, erasure, portability, or objection — please include your full name, registered email address, Account username, and a clear description of your request. Identity verification will be required before any request is processed.
3win8 targets a response time of 30 calendar days for all data rights requests. Where a request is particularly complex or where a high volume of requests has been received, this period may be extended by a further 30 days, in which case the affected Player will be notified of the extension and reason for delay.
3win8 customer support is available 24 hours a day, 7 days a week, including Malaysian public holidays. Privacy and data protection enquiries received by email will be addressed by our compliance team within the target 30-day period. For urgent account security concerns, please use Live Chat for the fastest response.
We take privacy seriously across every touchpoint — from registration through to withdrawal. 3win8 is Malaysia's trusted online casino platform, serving players across Kuala Lumpur, Penang, Johor Bahru, and beyond with full MYR support, fast payouts, and genuine data protection.
For players aged 21 and above only. Please gamble responsibly.