01 Introduction
Winbot33 ("Winbot33", "we", "us", "our") operates the online casino and sports betting platform accessible at https://winbot33.cam. We are the data controller responsible for the personal data collected through our platform and are committed to processing that data in a lawful, transparent, and secure manner.
This Privacy Policy describes what personal data we collect from users ("you", "Player", "User") when you register an account, make a deposit, place a wager, contact our support team, or otherwise interact with the Winbot33 platform. It explains why we collect that data, how we use it, with whom we may share it, and what rights you have in relation to it.
By creating an account or using the Winbot33 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this policy, you must not access or use the platform.
Note: This Privacy Policy should be read alongside our
Terms & Conditions and
Responsible Gambling Policy, both of which are incorporated by reference. In the event of any conflict, the relevant specialised document shall take precedence on its subject matter.
02 Definitions
For the purposes of this Privacy Policy:
- "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or in combination with other data.
- "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
- "Data Controller" means Winbot33, which determines the purposes and means of processing personal data collected through the platform.
- "Data Processor" means any third party that processes personal data on behalf of Winbot33, under contract and subject to strict data processing obligations.
- "KYC" means Know Your Customer — the identity and age verification process required under our anti-money laundering obligations.
- "Cookie" means a small text file stored on your device by a website to recognise you and remember preferences between sessions.
- "Platform" means the Winbot33 website, mobile site, and any associated applications through which our services are provided.
03 Data We Collect
Winbot33 collects personal data across several categories depending on your level of interaction with the platform. The categories of data we collect are described below:
| Category |
Examples |
When Collected |
| Identity Data |
Full name, date of birth, MyKad or passport number, nationality |
Registration and KYC verification |
| Contact Data |
Email address, phone number, residential address (Malaysia or overseas) |
Registration and KYC |
| Financial Data |
Bank account details, e-wallet account numbers (Touch 'n Go, Boost, GrabPay, DuitNow), transaction histories, deposit and withdrawal amounts |
When you deposit or withdraw |
| Gaming Activity Data |
Game play history, bet amounts, wager outcomes, session duration, game preferences |
During active platform use |
| Technical Data |
IP address, device type and operating system, browser type, login timestamps, geolocation data |
Automatically, during platform access |
| Communications Data |
Live chat transcripts, email correspondence, support ticket content |
When you contact our support team |
| Preference Data |
Marketing communication preferences, language settings, responsible gambling limit settings |
When you update account settings |
We do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless this is strictly necessary for compliance purposes and you have provided explicit consent.
04 How We Collect Your Data
We collect personal data through the following means:
- Direct Submission: Data you provide when registering an account, completing KYC, making deposits or withdrawals, updating your profile, setting responsible gambling limits, or contacting our support team.
- Automated Collection: Technical data collected automatically when you access the platform, including through cookies, web beacons, pixel tags, and server logs.
- Payment Processors: Financial data shared with us by your payment provider (such as Maybank, CIMB Bank, Public Bank, Hong Leong Bank, or e-wallet operators) when you initiate a transaction.
- Identity Verification Providers: Data returned by third-party KYC verification services when we confirm your identity and age in accordance with our anti-money laundering obligations.
- Analytics Providers: Aggregated and anonymised behavioural data from analytics tools that help us understand how players navigate and use the platform.
05 Legal Basis for Processing
Winbot33 processes your personal data on the following legal grounds:
- Contractual Necessity: Processing your data is necessary to provide the services you have requested — including account creation, gameplay, deposits, withdrawals, and customer support — in accordance with our Terms & Conditions.
- Legal Obligation: We are required to collect and retain certain data (including KYC documentation and financial transaction records) in order to comply with applicable anti-money laundering, counter-terrorism financing, and financial reporting obligations.
- Legitimate Interests: We process certain technical and behavioural data to detect and prevent fraud, protect the security of the platform, improve user experience, and conduct internal analytics. Our legitimate interests do not override your fundamental privacy rights.
- Consent: Where we send you direct marketing communications or use non-essential cookies, we will seek your consent before doing so. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
06 How We Use Your Data
Winbot33 uses your personal data for the following purposes:
- To create and manage your player account, including identity verification and age confirmation (21+ requirement).
- To process deposits and withdrawals through supported Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, and Hong Leong Bank.
- To provide access to games, betting markets, and promotional offers in accordance with your account status.
- To apply and enforce responsible gambling tools including deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion.
- To detect and prevent fraud, money laundering, account abuse, and other prohibited conduct described in our Terms & Conditions.
- To provide customer support in English, Bahasa Melayu, and Mandarin via live chat, WhatsApp, and email.
- To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
- To send you promotional communications about bonuses and platform features — where you have consented to receive such communications.
- To improve the performance, security, and functionality of the Winbot33 platform through internal analytics and testing.
- To comply with applicable law, respond to regulatory enquiries, and enforce our legal rights.
07 Data Sharing & Disclosure
Winbot33 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data in the following limited circumstances:
- Service Providers: We engage trusted third-party vendors including payment processors, identity verification providers, IT infrastructure providers, fraud detection services, and customer support tools. All such vendors are bound by data processing agreements that restrict the use of your data to the services they provide on our behalf.
- Game Providers: In order to facilitate gameplay, certain technical identifiers and session data may be shared with the game studios whose titles appear on the Winbot33 platform. No payment or identity data is shared with game providers beyond what is technically necessary.
- Regulatory & Law Enforcement Authorities: We may disclose personal data to government authorities, regulators, or law enforcement agencies where required by applicable law, court order, or regulatory direction — including in connection with anti-money laundering investigations.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will provide notice of such a transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those in this policy.
- With Your Consent: We may share your data with additional third parties where you have provided explicit consent to do so.
Malaysian Payment Data: Financial data processed through Malaysian payment channels — including FPX, DuitNow, and registered bank accounts at Maybank, CIMB, Public Bank, and Hong Leong Bank — is handled in accordance with the applicable requirements of Bank Negara Malaysia and the relevant payment network rules.
08 Cookies & Tracking Technologies
Winbot33 uses cookies and similar tracking technologies to operate the platform effectively and to enhance your experience. Cookies are small text files stored on your device when you visit the platform. We use the following categories of cookies:
- Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as account login, session management, and security functions. These cookies cannot be disabled without significantly affecting platform functionality.
- Performance & Analytics Cookies: These cookies collect anonymised information about how users interact with the platform — pages visited, time spent, and errors encountered — to help us improve performance. We use this data in aggregate form only.
- Functional Cookies: These remember your preferences such as language settings, display options, and responsible gambling configurations so that you do not need to reset them on each visit.
- Marketing Cookies: Where you have consented, we may use cookies to track your interaction with promotional content and serve you relevant offers within the platform. We do not use third-party advertising networks to display Winbot33 advertising on external websites.
You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to access and use the platform. For most browsers, cookie management options are available under Settings > Privacy or Settings > Advanced.
09 Data Retention
Winbot33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
- Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
- Financial Transaction Records: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with applicable financial record-keeping requirements relevant to Malaysian banking and payment operations.
- Gaming Activity Data: Retained for the duration of your account and for up to three (3) years following account closure, for dispute resolution, fairness auditing, and responsible gambling analysis.
- Communications Data: Support tickets, chat transcripts, and email correspondence are retained for up to three (3) years from the date of the communication.
- Marketing Preference Data: Retained until you withdraw consent or close your account, plus a reasonable period to process the withdrawal.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
10 Data Security
Winbot33 implements technical and organisational measures designed to protect your personal data against unauthorised access, loss, destruction, or disclosure. Our security infrastructure includes:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- AES-256 encryption at rest for stored personal and financial data.
- Two-factor authentication (2FA) available to all players for account login.
- Role-based access controls restricting internal data access to staff whose roles require it.
- Regular security audits and penetration testing conducted by qualified third-party security professionals.
- Fraud detection systems that monitor for anomalous account behaviour and flag suspicious activity in real time.
While we take all reasonable precautions to protect your data, no system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying our support team immediately if you suspect unauthorised access to your account. Winbot33 will never ask you for your password via chat or email.
11 Your Rights
Subject to applicable law, you have the following rights in relation to your personal data held by Winbot33:
- Right of Access: You may request a copy of the personal data we hold about you. We will respond to access requests within 30 days of receipt.
- Right to Rectification: If your personal data is inaccurate or incomplete, you may request that we correct or update it. Most account details can be updated directly through your profile settings.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that we are required to retain certain data (including KYC and financial records) for the minimum periods described in Section 9.
- Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances — for example, while a correction request is being assessed.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
To exercise any of these rights, please contact our support team at [email protected] or via live chat. We may need to verify your identity before processing your request.
12 Children's Privacy
The Winbot33 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect or process personal data from persons under the age of 21.
If you are a parent or guardian and believe that a minor under your care has registered an account or provided personal data to Winbot33 without your consent, please contact our support team immediately at [email protected]. We will investigate and take prompt action to close the account and delete the relevant data.
All registration submissions are subject to age verification checks. Accounts found to belong to persons under 21 will be suspended immediately, all balances forfeited, and the matter reported to the relevant authorities where required by law.
13 International Data Transfers
Winbot33 may transfer your personal data to servers or service providers located outside of Malaysia. Where such transfers occur, we take steps to ensure that your data remains subject to appropriate safeguards, including:
- Transfers to service providers operating in jurisdictions that provide an adequate level of data protection as recognised by applicable privacy frameworks.
- The use of contractual data processing agreements that impose data protection obligations equivalent to those applied within Malaysia.
- Technical measures including encryption and access controls that protect data in transit and at rest regardless of the jurisdiction in which it is stored.
By using the Winbot33 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside of Malaysia as described in this section, subject to the safeguards outlined above.
14 Updates to This Privacy Policy
Winbot33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify you through one or more of the following channels:
- A prominent notice displayed on the Winbot33 platform homepage or within your account dashboard.
- An email notification sent to your registered email address.
- An in-platform alert visible upon your next login.
The "Last updated" date at the top of this document will be revised whenever changes are made. We encourage you to review this policy periodically to remain informed about how we protect your information. Continued use of the Winbot33 platform after the effective date of any update constitutes your acceptance of the revised policy.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way Winbot33 handles your personal data, please reach out to our dedicated privacy support team:
Live Chat
Available 24/7. Average response time 3–5 minutes. Agents available in English, Bahasa Melayu, and Mandarin.
Data Requests
For access, correction, or deletion requests, email us with your full name and registered email. We process all requests within 30 days.
For responsible gambling support, self-exclusion requests, and account cooling-off tools, please visit our Responsible Gambling page. For the full terms governing your use of the platform, please refer to our Terms & Conditions.