Privacy Policy 13win —
Malaysia User Data Protection

1. Introduction & Scope of Privacy Policy

This Privacy Policy explains in detail how 13win ("we", "Platform", or "13win") collect, use, store, protect, and disclose your personal information when you access or use our online betting platform at https://13win.gd.

This Policy applies to all users of the 13win platform, including visitors who only browse our website, active registered members, and any individual who interacts with our services through any device or channel. This Policy forms part of our Terms and Conditions and should be read together with them.

We are committed to complying with applicable data protection laws and industry best practices in managing your personal information. Your trust is our most valuable asset, and we take this responsibility seriously.

2. Information We Collect

13win collects various types of information to enable us to provide, maintain, and improve our services. The following are the main categories of data we collect:

We not collect sensitive information such as biometric data, political views, religious beliefs, or health records unless specifically required by law or a relevant compliance process.

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. 13win uses your information for the following purposes:

• Account management: Creating and maintaining your user account, processing registration, and verifying your identity through the KYC process;
• Transaction processing: Processing deposits, withdrawals, and all financial transactions related to your betting activity;
• Service delivery: Ensuring you can access all features and games on the 13win platform smoothly and stably;
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, or any other illegal activity that may occur;
• Regulatory compliance: Fulfilling the legal and regulatory obligations imposed on us as a betting platform operator;
• Service communications: Sending important notifications relating to your account, promotions you have opted in to receive, and platform updates;
• Platform improvements: Analysing usage patterns to improve user experience, platform performance, and the development of new features;
• Customer support: Assisting you when you contact our support team with any enquiries or complaints.

4. Information Sharing & Disclosure

13win does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Trusted service providers: We work with selected companies that help us run our operations, such as payment gateway providers, cloud services, and analytics providers. All such parties are bound by strict confidentiality agreements and may only use your data for purposes we specify;
• Legal authority: We will disclose required information when mandated by a court order, valid legal process, or a request from an authorised law enforcement agency;
• Fraud prevention: We may share information with fraud prevention agencies or other platforms to detect and prevent fraudulent activity across platforms;
• Business transfers: In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of that process, subject to prior notice being given to users.

In all of the above situations, we ensure that appropriate safeguards are in place to protect your personal information and that recipients are subject to equivalent confidentiality obligations.

5. Encryption & Technical Security

Data security is at the core of our operations 13win. We implement multiple layers of technical and organisational protection to safeguard your information:

• Encryption in transit: All communications between your browser and our servers are secured by TLS 1.3 protocol with a 256-bit SSL certificate;
• Encryption of stored data: Sensitive information stored in our databases is encrypted using AES-256 standard;
• Two-factor authentication (2FA): Users are encouraged to enable 2FA for an additional layer of security during login;
• Continuous monitoring: Our systems are monitored around the clock to detect any unauthorised access attempts or security anomalies;
• Isolated infrastructure: Financial data and personal data are stored in separate environments with different access controls;
• Penetration testing: We conduct regular security testing by independent security experts to identify and address potential vulnerabilities.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of any security breach that may affect your data, we will notify you within the timeframe required by applicable law.

6. Cookies & Tracking Technologies

13win uses cookies and similar tracking technologies to enhance your user experience and collect analytical data that helps us understand how our platform is used.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality;
• Performance cookies: Collecting information about how you use the platform (pages visited, time spent) to help us improve performance;
• Functional cookies: Remembering your preferences such as language choice and display settings for a more personalised experience;
• Analytics cookies: Used by third-party analytics tools (such as Google Analytics) to understand usage patterns in an aggregated and anonymised manner.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the 13win platform.

7. Data Retention & Deletion

13win only retains your personal information for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data: Retained for the duration your account remains active and used to provide our services;
• Data after account closure: Transaction information and financial records are retained for a minimum of 7 years after account closure to meet legal and regulatory requirements;
• KYC Data: Identity verification documents are retained for the period required by anti-money laundering legislation;
• Technical logs: Server logs and activity are retained for 90 days for security and debugging purposes;
• Marketing data: If you withdraw consent to receive marketing communications, we will stop using your data for that purpose within 30 days.

Once the retention period expires, data will be securely deleted or anonymised in accordance with our internal procedures. Our deletion procedures ensure that data cannot be recovered by any party after the deletion process is complete.

8. Your Rights as a User

As a user 13win, you have certain rights regarding your personal data. We respect and facilitate the exercise of these rights: