Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by okwin333 ("okwin333", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://okwin333.cam ("the Platform"). This Policy sets out how okwin333 collects, receives, holds, uses, discloses, and otherwise processes personal data relating to individuals who access or use the Platform, including registered players and visitors browsing without an account ("you", "your", "User", "Player").

okwin333 takes the privacy and security of personal data seriously. We are committed to handling all personal information in a manner that is transparent, proportionate, and consistent with internationally recognised data protection principles, including those that underpin modern privacy legislation in the jurisdictions from which we receive players.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, each of which forms part of the contractual framework governing your use of the Platform.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person's identity.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of the processing of personal data. For the purposes of this Policy, okwin333 is the Data Controller in respect of Player personal data.
• "Data Processor" means a natural or legal person that processes personal data on behalf of the Data Controller.
• "Sensitive Personal Data" means personal data that warrants heightened protection by reason of its nature, including but not limited to financial information, identity document data, and KYC verification materials.
• "Cookies" means small text files placed on your device by a website to store information and track user behaviour across sessions.
• "KYC" means Know Your Customer verification — the process by which okwin333 verifies a Player's identity and the legitimacy of the source of funds used on the Platform.

03 Data Controller

okwin333 acts as the Data Controller for all personal data collected from Users of the Platform. As Data Controller, okwin333 is responsible for determining how and why your personal data is processed and for ensuring that all processing activities comply with applicable data protection obligations.

Where okwin333 engages third-party service providers — such as payment processors, KYC verification partners, or game content providers — to process personal data on its behalf, those entities act as Data Processors and are bound by data processing agreements that restrict their use of personal data solely to the purpose for which they are engaged. okwin333 remains responsible for ensuring that all Data Processors handle personal data in accordance with this Policy.

For all data-related queries, requests, or concerns, please refer to the contact details in Section 17 of this Policy.

04 Data We Collect

okwin333 collects only the personal data that is necessary and proportionate for the purposes outlined in this Policy. The categories of personal data we collect include:

4.1 Account Registration Data

When you create an Account, we collect: full legal name, date of birth, email address, chosen username, and account password (stored in hashed form). This information is necessary to establish and maintain your Account and verify your eligibility to use the Platform.

4.2 Identity Verification (KYC) Data

In order to comply with anti-money laundering obligations and to process withdrawal requests, we collect copies of government-issued identity documents (such as a Malaysian MyKad, passport, or driver's licence), proof of address documents (such as a utility bill or bank statement issued within three months), and in some cases a selfie photograph. This data is handled with the highest level of security and access restrictions.

4.3 Financial Data

We collect information about deposits and withdrawals processed through your Account, including transaction amounts, dates, payment method identifiers (e.g., partial account numbers or e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong), and cryptocurrency wallet addresses where applicable. We do not store full card numbers or banking credentials on our systems.

4.4 Transactional & Gaming Data

We maintain records of all wagers, bets, game sessions, bonus claims, and related activity on your Account. This data is used for Account management, dispute resolution, fraud detection, and regulatory compliance.

4.5 Technical & Usage Data

When you access the Platform, we automatically collect certain technical information, including: IP address, device type and operating system, browser type and version, pages visited, session duration, clickstream data, and referring URL. This data helps us maintain Platform security and improve the user experience.

4.6 Communications Data

If you contact our customer support team via live chat, email, or WhatsApp, we retain a record of that communication including timestamps, message content, and support agent identifiers, for quality assurance and dispute resolution purposes.

4.7 Responsible Gambling Data

If you use any of our responsible gambling tools — including deposit limits, loss limits, session time limits, cool-off periods, or self-exclusion — we record those preferences and activity in order to enforce them effectively and maintain a safe gambling environment.

05 How We Collect Data

Personal data is collected by okwin333 through the following channels:

06 Legal Basis for Processing

okwin333 relies on the following legal bases to process your personal data, depending on the specific purpose of the processing:

• Contractual Necessity: Processing is necessary to perform the contract between okwin333 and the Player — including Account management, processing deposits and withdrawals, resolving disputes, and delivering the gaming and betting services described in our Terms & Conditions.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC identity verification, anti-money laundering (AML) reporting, and responsible gambling compliance mandates.
• Legitimate Interests: Processing is necessary for purposes of okwin333's legitimate interests — including fraud detection, platform security, system maintenance, improvement of services, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by applicable law, or where neither of the above bases applies, we will seek your explicit consent before processing your personal data for a specific purpose. You have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to that withdrawal.

07 How We Use Your Data

okwin333 uses the personal data it collects for the following purposes:

• To create, manage, and maintain your Account on the Platform.
• To process and verify your identity in compliance with KYC and AML obligations prior to processing withdrawals.
• To process deposits and withdrawals via payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks.
• To operate and settle wagers placed on casino games, sports events (including EPL and Liga Super Malaysia markets), and other betting products offered on the Platform.
• To communicate with you regarding your Account, transactions, promotions, and Platform updates — including by email and in-platform notification.
• To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised access, and other prohibited conduct as described in our Terms & Conditions.
• To enforce our responsible gambling policies, including monitoring activity for signs of problem gambling and administering deposit limits, loss limits, and self-exclusion elections.
• To improve Platform features, user experience, and service quality through aggregated and anonymised usage analysis.
• To comply with applicable legal obligations, regulatory directives, and lawful requests from competent authorities.
• To resolve disputes, process complaints, and provide customer support in English, Bahasa Melayu, and 中文.

08 Data Sharing & Disclosure

okwin333 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Personal data may, however, be shared in the following limited circumstances:

8.1 Payment Service Providers

We share financial and identity data with payment processors and financial institutions necessary to execute and settle deposit and withdrawal transactions. Processors include providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong. These processors are bound by contractual data protection obligations and are permitted to use your data only for the specific transaction-processing purpose.

8.2 KYC and Identity Verification Providers

We may engage third-party identity verification services to validate documents submitted during the KYC process. Such providers are authorised to process identity data solely for verification purposes and are required to maintain appropriate security standards.

8.3 Game and Technology Providers

Game content providers and platform technology suppliers who operate components of the okwin333 Platform may receive limited technical and account data necessary to deliver their services. These providers operate as Data Processors under binding data processing agreements.

8.4 Legal and Regulatory Authorities

okwin333 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or as reasonably necessary to protect the legal rights and interests of okwin333, its players, or third parties.

8.5 Business Transfers

In the event of a merger, acquisition, asset sale, or other corporate restructuring involving okwin333, personal data held by okwin333 may be transferred to the acquiring or successor entity, subject to that entity assuming equivalent data protection obligations.

09 Cookies & Tracking Technologies

The okwin333 Platform uses cookies and similar tracking technologies to support Platform functionality, enhance security, and analyse usage patterns. The categories of cookies we use include:

• Essential Cookies: Strictly necessary for the Platform to operate. These include session authentication cookies, security tokens, and cookies that remember your login state. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences — such as language selection and game lobby settings — to personalise your experience across sessions.
• Analytical Cookies: Collect anonymised information about how users interact with the Platform, which pages are visited most frequently, and where errors occur. This data is used to improve Platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, enforce account security policies, and manage session expiry for inactive logins.

Most web browsers allow you to control cookie settings through their privacy or settings menus. Note that disabling non-essential cookies may affect the functionality of certain Platform features. okwin333 does not use cookies to serve third-party advertising or share behavioural data with advertising networks.

10 Data Retention

okwin333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulatory obligation, or legitimate business need. The following retention periods apply as general guidelines:

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents its re-identification.

11 Data Security

okwin333 implements a layered approach to data security designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
• At-Rest Encryption: Sensitive personal data — including KYC documents and financial identifiers — is encrypted at rest in our data storage systems.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based permissions, multi-factor authentication requirements, and comprehensive access logging.
• Intrusion Detection: Our systems are monitored continuously for anomalous activity. Automated alerts and response protocols are in place to address potential breaches in real time.
• Third-Party Security Assessments: okwin333 engages independent security experts to conduct periodic assessments of our platform infrastructure and data handling practices.
• Data Breach Response: In the event of a confirmed data breach affecting your personal data, okwin333 will notify affected individuals and relevant authorities as required by applicable law and as promptly as circumstances permit.

12 International Data Transfers

In the course of operating the Platform and engaging service providers globally — including payment processors, KYC verification services, and cloud infrastructure providers — your personal data may be transferred to and processed in jurisdictions outside Malaysia. Such transfers may include countries that do not provide the same level of legal data protection as Malaysia.

Where personal data is transferred internationally, okwin333 ensures that appropriate safeguards are in place, including:

• Execution of standard contractual clauses or equivalent data transfer agreements with recipient entities.
• Engagement of service providers that maintain recognised security certifications and demonstrable data protection frameworks.
• Technical measures — including encryption — applied to data in transit across borders.

By using the okwin333 Platform, you acknowledge and consent to the transfer of your personal data to international service providers where necessary for the operation of the services described in this Policy, subject to the protections outlined above.

13 Your Data Rights

Subject to applicable law and any legitimate restrictions — such as ongoing legal obligations or active fraud investigations — you hold the following rights in respect of your personal data held by okwin333:

• Right of Access: You may request confirmation of whether okwin333 holds personal data about you and, if so, a copy of that data together with information about how it is used.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you. For certain Account data, you may be able to update information directly through Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful — subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restriction: You may request that okwin333 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of the personal data you have provided to okwin333.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for fraud detection purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact okwin333 using the details in Section 17. We will respond to all valid requests within 30 days. In cases of complexity or high volume of requests, we may extend this period by a further 60 days, and will inform you accordingly.

okwin333 will not charge a fee for the exercise of data rights unless requests are manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply or the request may be refused.

14 Children & Minors

The okwin333 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21. Registration by minors is expressly prohibited and constitutes a material breach of the Terms & Conditions.

If okwin333 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant Account, void any balances, and permanently delete the associated personal data. If you believe that a minor has registered an Account or submitted personal data to okwin333, please notify our support team immediately via live chat or email.

15 Third-Party Links & Services

The okwin333 Platform does not contain links to third-party external websites, social media platforms, or advertising networks in the course of normal Platform use. However, in the event that okwin333 integrates or references third-party services — such as payment gateways or identity verification tools — those services operate under their own privacy policies. okwin333 is not responsible for the data practices of third-party service providers beyond the contractual obligations imposed on them as Data Processors.

Any personal data submitted directly to a third-party service — such as during a payment transaction conducted through a Maybank or Touch 'n Go eWallet interface — is governed by that provider's own privacy terms in addition to this Policy.

16 Amendments to This Policy

okwin333 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the structure of our Platform. Where amendments are material — meaning they substantively affect the rights of Players or the manner in which personal data is used — we will provide advance notice by email to registered users or by posting a prominent notice on the Platform for a reasonable period prior to the changes taking effect.

The effective date of the current version of this Policy is stated at the top of this document. We recommend reviewing this Policy periodically to stay informed about how okwin333 handles your personal data. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

17 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by okwin333 — including requests to exercise your data rights — please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the Platform. Average response time: 3–5 minutes. Agents available in English, Bahasa Melayu, and 中文.
• Email: [email protected] (plain text — not a clickable link). Response within 6 hours during standard hours (09:00–22:00 MYT); within 12 hours outside of those hours.
• Privacy Requests: When submitting a data rights request by email, please include "Privacy Request" in the subject line along with your registered Account username or email address, and a clear description of your request. We will acknowledge receipt within 48 hours and respond in full within 30 days.

okwin333 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you may have the right to refer the matter to the relevant data protection authority in your jurisdiction.