Privacy Policy 13win —
Member Personal Data Protection

Welcome to the 13win Privacy Policy page. This document explains in detail how we, as the operator of the 13win platform, collect, store, use, disclose, and protect your personal information when you use our website and services at https://13win.lc.

We understand that entrusting personal information to any online platform requires a high level of confidence. At 13win, we do not take that trust lightly. Every decision we make regarding data handling is guided by a simple principle — if it is not good for our members, it is not good for 13win.

This Privacy Policy applies to all 13win platform users, including visitors, registered members, and former members whose data remains in our system within the defined retention period.

13win collects various types of information depending on how you interact with our platform. Below is a summary of the data categories we collect:

In addition to information you provide directly, we also collect data automatically through cookie technology and analytics tools when you browse our platform. This data helps us understand how members interact with the platform in order to improve the user experience.

The personal data we collect is used solely for legitimate and transparent purposes. We do not use your data for purposes unrelated to the services you use. Below is a full list of data usage purposes at 13win:

• Account Management: To create and maintain your member account, process registrations, and verify your identity through the KYC process.
• Transaction Processing: To manage deposits, withdrawals, and all financial transactions associated with your account on the 13win platform.
• Security Verification: To detect and prevent fraud, money laundering, duplicate accounts, and any suspicious activity.
• Customer Support: To answer enquiries, resolve technical issues, and assist you through our 24/7 support channels.
• Service Communications: To send important notifications regarding your account, transactions, policy changes, and system updates.
• Marketing (with consent): To send promotional information, bonus offers, and exclusive campaigns if you have consented to receive marketing communications.
• Legal Compliance: To fulfil legal obligations, anti-money laundering (AML) regulations, and the requirements of relevant regulatory bodies.
• Platform Improvement: To analyse usage patterns and improve the design, features, and overall performance of the 13win platform.

13win does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, there are specific situations where we need to share your data with trusted parties in order to deliver the best service to you:

• Service Providers: Payment processing partners (FPX, DuitNow, e-wallets), cloud infrastructure providers, and game software vendors integrated with our platform. All parties are bound by strict data confidentiality agreements.
• Legal Compliance: When required by Malaysian law or a valid court order — including AML reporting obligations to the relevant financial authorities.
• Fraud Prevention: Sharing necessary information with fraud prevention agencies or industry bodies to protect the integrity of our platform and player community.
• Business Transfers: In the event of a company merger, acquisition, or asset sale, member data may be transferred to the new entity, which will continue to be bound by this Privacy Policy.

Outside of the situations stated above, 13win will not disclose your personal information to any party without your prior written consent.

The security of your personal data is one of our highest priorities at 13win. We continuously invest in industry-leading technology and best practices to ensure your information is always protected against unauthorised access, loss, or misuse.

The technical and organisational security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and 13win servers is protected with industry-grade SSL/TLS encryption. You can verify this by looking for the padlock icon in your browser's address bar.
• Stored Data Encryption: Sensitive information such as passwords and payment details are stored in encrypted format using irreversible hashing algorithms.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account, reducing the risk of unauthorised access even if their password is compromised.
• 24/7 Monitoring: Our cybersecurity team continuously monitors the system to detect any unusual activity or intrusion attempts.
• Internal Access Controls: Only staff with specific authorisation may access member personal data, and all access is logged for audit purposes.
• Regular Security Audits: Our security systems are regularly evaluated by independent security experts to identify and remediate any potential vulnerabilities.

13win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you as a returning user and personalise your experience.

There are several types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as login session authentication, security, and CSRF protection. Without these cookies, the platform will not function properly.
• Performance Cookies: To collect anonymised data on how users interact with the platform, including the most frequently visited pages and time spent. This data helps us improve website performance.
• Functional Cookies: To save your preferences such as language, display settings, and login information (if you select "Remember Me") for a more convenient future experience.
• Analytics Cookies: Used together with analytics tools to understand usage patterns in aggregate, anonymised form for the continuous improvement of the 13win platform.

As a 13win member, you have certain rights regarding your personal data. We are committed to making it easy for you to exercise these rights in a straightforward and cost-free manner:

• Right of Access: You have the right to know what personal data we hold about you and to request a copy of that data.
• Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data — subject to our legal obligations to retain specific records.
• Right to Restrict Processing: You may request that we restrict how we use your data in certain situations, such as during a dispute review process.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format for transfer to another platform.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

13win retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration of your active account and up to five (5) years after account closure, in accordance with AML and financial legislation requirements.
• Financial Transaction Records: Retained for seven (7) years in accordance with applicable financial reporting and audit legal requirements in Malaysia.
• Support Communication Logs: Retained for three (3) years for reference and dispute resolution purposes.
• Anonymous Analytics Data: Aggregated anonymised data may be retained indefinitely as it no longer contains personally identifiable information.

When the retention period expires or you submit a valid deletion request, your data will be securely deleted or anonymised using procedures approved by the 13win security team.

We may update this Privacy Policy from time to time to reflect changes in our privacy practices, service updates, or new legal requirements. The latest version will always be available on this page with a clear "Last Updated" date.

For material changes that significantly affect your privacy rights, 13win will notify you through:

• In-platform notification upon your next login.
• Notification email to the address registered on your account.
• A prominent notice on the platform's home page at least 14 days before the changes take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the 13win Data Protection Officer (DPO) team is ready to assist you.

• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
• Privacy Email: [email protected] — state "Privacy Inquiry" in your email subject line.
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.