Malaysia PDPA 2010 Compliance

Privacy Policy my3win – Data Protection Malaysian Users

Your privacy is not merely a legal obligation for us — it is a moral responsibility we take to heart. This Privacy Policy transparently explains how my3win collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: 1 January 2026 Jurisdiction: Malaysia Bahasa Melayu (ms-MY) PDPA 2010 Compliance
my3win's Privacy Commitment
256-bit SSL encryption for all data
No sale of data to third parties
Full data access & deletion rights
Full compliance with Malaysia's PDPA 2010
Data breach notification within 72 hours
Data Protection Officer appointed

My3win's Six Data Protection Principles

We adhere to strict data protection principles to ensure your personal information remains secure and is handled with full integrity at all times.

Purpose Limitation

My3win only collects data that is strictly necessary for clearly stated purposes. We do not collect excessive data or use it for purposes that have not been disclosed to you in advance.

High-Level Security

All personal data is stored on servers protected by AES-256 encryption, tiered access controls, and round-the-clock threat monitoring by our IT security team.

Full User Control

You have full rights to access, amend, download, or request deletion of your personal data at any time. This can be done through your account settings or by contacting our team.

No Sale of Personal Data

My3win has never and will never sell, rent, or disclose your personal data to third-party advertisers for commercial purposes without your explicit consent.

Data Minimisation

Your personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. After that, it is securely deleted using approved methods.

Malaysia PDPA Compliance

The my3win Privacy Policy is drafted and periodically updated to ensure full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the guidelines issued by the Personal Data Protection Commissioner.

01Introduction – my3win's Privacy Commitment

Welcome to the Privacy Policy page my3win. We understand that your trust in our platform goes beyond the quality of games or speed of payouts — it also rests on the confidence that your personal data is in safe hands.

As an online betting platform operating in Malaysia and serving Malaysian players, my3win is bound by the Personal Data Protection Act (PDPA) 2010 and all regulations in force under it. Beyond mere legal compliance, we believe that respecting user privacy is the foundation of long-term trust — and that trust is at the heart of our relationship with the my3win player community.

This Privacy Policy applies to all users who access the my3win website, use our mobile application, register an account, or interact with any of our services. By using the my3win platform, you acknowledge that you have read and understood this Privacy Policy.

Note: This policy forms part of the my3win Terms & Conditions. In the event of any conflict between this document and other terms, this Privacy Policy shall prevail on all matters relating to personal data protection.

02Personal Data We Collect

My3win collects personal data from you through various means during your interactions with our platform. The types of data collected are as follows:

Data Category Sample Information Primary Purpose
Identity DataFull name, MyKad/passport number, date of birthIdentity verification (KYC) & age verification
Contact DataEmail, phone number, addressCommunication & support
Financial DataBank account number, e-wallet (TNG, GrabPay, DuitNow)Processing of deposits & withdrawals
Activity DataBetting history, game preferences, login timesPrivacy & account security
Technical DataIP address, device type, browser, operating systemSecurity & platform improvements
Cookie DataSession cookies, analytics cookies, interface preferencesUser experience & analytics

We may also receive data about you from legitimate third-party sources such as identity verification providers, fraud prevention agencies, and Malaysian payment service providers we work with, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.

Sensitive Data: my3win does not knowingly collect sensitive personal data such as health information, biometric data, or political views. Should such information be submitted to us inadvertently, it will be deleted promptly.

03How We Use Your Data

My3win uses your personal data only for legitimate, stated purposes. The following are the primary ways we use the data we collect:

  • Account Management: Creating and managing your my3win account, including identity verification, password recovery, and account security management.
  • Transaction Processing: Processing deposits and withdrawals via Malaysian local payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX through Maybank2u or CIMB Clicks.
  • Service Delivery: Providing access to all my3win games and services, including football betting, Live Casino, virtual sports, and slots.
  • Service Communications: Sending transaction notifications, security alerts, terms updates, and important information related to your account.
  • Platform Improvement: Analysing usage data to understand how players interact with the platform, with the aim of improving the overall user experience.
  • Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse to protect all users.
  • Legal Compliance: To fulfill the legal and regulatory obligations applicable to my3win's operations in Malaysia.
  • Marketing (With Consent): Sending promotional information, bonus offers, and platform updates — only where you have consented to receive such communications.
Data Minimisation Principle: my3win only processes data that is necessary for the stated purposes. We do not use your data for unrelated purposes without first obtaining your renewed consent.

04Third-Party Data Sharing & Disclosure

My3win does not sell or rent your personal data. However, we may share your data with select third parties in the following limited circumstances:

  • Payment Service Provider: Payment processors such as FPX, DuitNow, Touch 'n Go, and GrabPay receive the transaction data necessary to complete your deposits and withdrawals.
  • Game Providers: Live casino providers such as Evolution Gaming, Ezugi, SA Gaming, and Pragmatic Play Live may receive the minimum session data required to deliver their gaming services.
  • KYC Provider: Third-party identity verification services that help us confirm users' identities and ages in accordance with legal requirements.
  • Fraud Prevention Agency: Sharing of necessary data with relevant authorities for the purpose of detecting and preventing financial fraud.
  • Legal Authority: my3win will disclose data to the police, courts, or Malaysian authorities where required by a court order or applicable law.
🔒
Data Protection Agreement: All third parties that receive data from my3win are bound by strict data protection agreements and are only permitted to use that data for the specified purposes.

05Security & Data Protection

My3win implements a comprehensive range of technical and organisational measures to protect your personal data from unauthorised access, loss, damage, or accidental disclosure:

  • Data Encryption: All data transmitted between your browser and the my3win platform is protected by 256-bit TLS/SSL encryption. Data stored on our servers is encrypted to the AES-256 standard.
  • Tiered Access Controls: Only authorised personnel who require access to carry out their duties may access users' personal data, and all access is logged for audit purposes.
  • Two-Factor Authentication (2FA): my3win's internal systems use 2FA for all staff-level access to user data.
  • Continuous Monitoring: my3win's IT infrastructure is monitored 24/7 to detect any intrusion attempts or suspicious activity.
  • Periodic Security Assessments: Penetration testing and security audits are conducted periodically by independent security experts.
  • Staff Training: All my3win staff who handle personal data undergo regular data protection training.
Important Note: While we take all reasonable precautions, no security system can be guaranteed to be 100% secure. You are responsible for keeping your account password confidential and not sharing it with anyone.

06Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and my3win's privacy policy, you have the following rights regarding your personal data:

Right to Access
You may request a copy of the personal data we hold about you at any time.
Right to Rectification
You may request corrections to any data that is inaccurate or incomplete.
Right to Erasure
You may request the deletion of your personal data, subject to applicable legal obligations.
Right to Object
You may object to the processing of your data for direct marketing purposes.
Right to Data Portability
You may request a copy of your data in a machine-readable format.
Right to Restrict Processing
You may request a restriction on the processing of your data in certain circumstances.

To exercise any of the rights above, please contact our Data Protection Officer at privacy@my3win.biz. We will process your request within 30 days calendar days from the date of receipt. For complex cases, this period may be extended by up to 60 days, with notice provided to you.

07Cookies, Tracking Technologies & Analytics

My3win uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Cookie Type Purpose Duration Status
Session Cookies Maintaining your login status and gaming session Expires when the browser is closed Mandatory
Preference Cookies Saving language settings, layout preferences, and display options 1 year Mandatory
Security Cookies Preventing CSRF and other security attacks Session only Mandatory
Analytics Cookies Analysing platform usage patterns for improvement 2 years Options
Marketing Cookies Displaying relevant promotions to users 90 days Options

You can manage and delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the my3win platform. For optional cookies, you may grant or withdraw consent via the cookie settings panel accessible at the bottom of our page.

08Cross-Border Data Transfers

As part of my3win's platform operations, we work with international service providers such as live casino providers, which means your personal data may be processed outside Malaysia. All such transfers are carried out with adequate safeguards in place, including:

  • Binding data protection agreements with all third-party providers that receive Malaysian user data.
  • Ensuring that recipient countries maintain a level of data protection equivalent to or higher than Malaysia's
  • Use of standard data protection clauses recognised by the Malaysian PDPA Commissioner
Our Commitment: Regardless of where your data is processed, the protections applied to it will always meet or exceed the standards set out under Malaysia's PDPA 2010.

09Data Breach Response Procedure

While we take all reasonable precautions, my3win has a comprehensive incident response procedure in place in the event of a data breach:

  • Detection & Assessment: Our security team monitors systems 24/7. Any suspected incident will be assessed within 4 hours of detection.
  • Containment: Immediate containment measures will be taken to limit the scope of any confirmed breach.
  • Notice to Users: If a high-risk data breach affects your data, we will notify you within 72 hours via your registered email.
  • Reporting to Authorities: Data breaches required by law to be reported will be notified to the Personal Data Protection Commissioner of Malaysia within the stipulated timeframe.
  • Recovery: Our IT team will take immediate remediation action and update security measures to prevent recurrence.
📧
Reporting an Incident: If you suspect any suspicious activity on your account or have concerns regarding data security, please contact us immediately at security@my3win.biz or via 24/7 Live Chat.

10Children's Data Protection

My3win strictly prohibits the use of our platform by individuals under the age of 18. We do not knowingly collect personal data from children or minors.

If we find that personal data belonging to a minor has been collected without proper consent, we will take immediate action to delete that data, close the associated account, and refund any related funds in accordance with our procedures.

Parents & Guardians: If you believe your child has registered or used the my3win platform without your knowledge, please contact us immediately at support@my3win.biz and we will take immediate action.

11Privacy Policy Amendments

My3win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or technology. When significant changes are made, we will:

  • Updating the "Last Updated" date at the top of this document
  • Sending email notifications to all registered users at least 14 days before the changes take effect
  • Displaying a prominent notice on the my3win platform homepage

Continued use of the my3win platform after the effective date of any amendment is considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the effective date.

12Contact Us – Data Protection Officer

My3win has appointed a Data Protection Officer responsible for ensuring ongoing compliance with Malaysia's PDPA 2010 and our privacy policy.

For any enquiries, complaints, or requests relating to this Privacy Policy or your personal data, please reach us through the following channels:

  • Privacy Email: privacy@my3win.biz
  • Security Email: security@my3win.biz
  • General Support Email: support@my3win.biz
  • Live Chat: Available 24/7 on the my3win platform
⏱️
Response Time: We are committed to responding to all privacy-related enquiries within 3 business days. Requests involving data subject rights will be processed within 30 calendar days of receiving a complete request.

Join my3win – A Platform That Respects Your Privacy

With a transparent privacy policy, industry-standard encryption, and full compliance with Malaysia's PDPA, you can play at my3win with complete peace of mind knowing your data is always protected. Register for free today – simple, secure, and safeguarded.

256-bit SSL protected
Malaysia PDPA Compliance
No sale of personal data
Bahasa Melayu