Privacy Policy

win333 (referred to as "we," "us," or "the Company") is the data controller responsible for the collection, processing, and protection of your personal information when you use the Platform accessible at https://win333.cam. All inquiries regarding data protection should be directed to our dedicated privacy team at [email protected].

This Privacy Policy applies to all users of the win333 Platform, including visitors who browse without registering, and Members who hold an active account. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

win333 collects several categories of personal data to operate the Platform, process transactions, verify identities, prevent fraud, and deliver customer support. The types of information we collect include:

A. Information You Provide Directly

• Account Registration Data: Full name, date of birth, email address, phone number, residential address, and chosen username and password.
• Identity Verification (KYC) Documents: Government-issued national ID card (KTP), passport, driver's license, utility bills, bank account statements, or other documents required to confirm your identity, age (minimum 21 years), and residential address in Indonesia.
• Payment Information: Bank account number, bank name (e.g., BCA, BRI, BNI, Mandiri), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history including deposit and withdrawal amounts and timestamps.
• Communication Records: Any messages, questions, or feedback you send to our customer support team via email, live chat, or contact forms, including the content of your inquiry and our responses.
• Responsible Gaming Preferences: Deposit limits, loss limits, session time limits, reality check intervals, and self-exclusion requests that you configure in your Account settings.

B. Information We Collect Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, time zone setting, and unique device identifiers.
• Usage Data: Pages visited, date and time of visits, time spent on each page, referring URL, search terms used to find the Platform, clickstream data, and interaction patterns with games and betting markets.
• Game Activity Data: Bets placed (amount, type, odds, outcome), game sessions (start time, end time, duration), wins and losses, bonus claims and wagering progress, and in-game behavior patterns relevant to fraud detection and responsible gaming monitoring.
• Cookies & Similar Technologies: Session cookies, persistent cookies, web beacons, and local storage used to maintain login state, remember preferences, track navigation, and analyze Platform performance. See Section 8 for full details on cookies.

C. Information from Third Parties

• Payment Processors: Confirmation of successful deposits and withdrawals, transaction reference numbers, and payment method verification status from our banking and e-wallet partners.
• Fraud Prevention Services: Risk scores, device fingerprints, geolocation data, and behavioral signals from third-party fraud detection providers that help us identify suspicious activity and protect both the Platform and legitimate Members.
• Sports Data Providers: Real-time odds, match results, and statistics from licensed data feeds used to operate sports betting markets on BRI Liga 1, Timnas Indonesia fixtures, EPL, La Liga, and other competitions.

win333 processes your personal information for the following specific purposes, each of which is necessary to operate a secure, compliant, and user-friendly gaming platform:

Under applicable data protection law, personal data processing must be justified by a lawful basis. win333 processes your data under the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the Terms & Conditions contract between you and win333, including account creation, transaction processing, bet settlement, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML requirements, tax reporting, dispute resolution, and responses to lawful government or regulatory requests.
• Legitimate Interests: Processing is necessary for win333's legitimate business interests, such as fraud prevention, security monitoring, Platform optimization, and enforcing our Terms & Conditions, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities such as marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal.

win333 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we do share your data with the following categories of trusted third parties under strict contractual safeguards:

win333 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

• Active Account Data: Retained for the entire duration your Account remains active and accessible.
• Closed Account Data: Following voluntary account closure, most personal data is deleted within 90 days, except for data we are legally required to retain for longer periods (see below).
• Transaction Records: Financial transaction history, including deposits, withdrawals, and bet settlements, is retained for 7 years from the date of the transaction to comply with AML regulations, tax laws, and financial auditing requirements.
• KYC Documents: Identity verification documents (KTP, passport, utility bills, bank statements) are retained for 7 years after account closure to comply with international AML and regulatory obligations.
• Responsible Gaming Records: Self-exclusion requests, deposit limits, and responsible gaming tool configurations are retained for 10 years to ensure enforcement of exclusion periods and to support responsible gaming policy compliance.
• Fraud Investigation Data: Data related to suspected fraud, collusion, bonus abuse, or Terms & Conditions violations is retained indefinitely to prevent future abuse and protect the integrity of the Platform.
• Marketing Consent: Your marketing preferences and opt-out status are retained until you withdraw consent or close your Account, whichever comes first.

Once the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you as an identifiable individual.

win333 employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols, the same encryption standard used by banks and financial institutions worldwide.
• Secure Data Storage: Personal data at rest is stored in encrypted databases hosted in secure data centers with 24/7 physical security, biometric access controls, redundant power supplies, and fire suppression systems.
• Access Controls: Access to personal data is restricted on a need-to-know basis using role-based access control (RBAC). Only authorized personnel who require access to perform their duties (e.g., customer support agents, KYC verification staff) are granted limited, audited access.
• Multi-Factor Authentication (MFA): Internal systems and administrative accounts require multi-factor authentication to prevent unauthorized access even if credentials are compromised.
• Regular Security Audits: win333 undergoes regular penetration testing, vulnerability scanning, and third-party security audits to identify and remediate potential weaknesses before they can be exploited.
• Intrusion Detection & Prevention: Real-time monitoring systems detect and block suspicious network activity, brute-force login attempts, DDoS attacks, and other security threats.
• Employee Training: All win333 staff undergo mandatory data protection and cybersecurity training to ensure they understand their obligations to protect Member data and recognize phishing, social engineering, and other attack vectors.
• Incident Response Plan: In the unlikely event of a data breach, win333 has a documented incident response plan to contain the breach, assess the impact, notify affected Members, and report to regulatory authorities as required by law.

win333 uses cookies and similar tracking technologies to enhance your experience, maintain login sessions, remember your preferences, and analyze Platform usage. A cookie is a small text file stored on your device by your web browser at the request of a website. We use the following types of cookies:

A. Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core functionality such as user authentication, session management, and security features. Without these cookies, services you have requested (such as logging in or placing a bet) cannot be provided. Strictly necessary cookies do not require your consent.

B. Functional Cookies

Functional cookies remember your preferences and choices (such as language preference, time zone, and deposit/withdrawal method) to provide a more personalized experience. These cookies do not track your activity across other websites.

C. Performance & Analytics Cookies

These cookies collect aggregated, anonymized data about how visitors use the Platform, including which pages are visited most often, how long visitors stay, and whether they encounter error messages. This information helps us improve Platform performance and user experience. We do not use this data to identify you personally.

D. Marketing & Targeting Cookies

Marketing cookies track your browsing activity to deliver personalized promotional offers and advertisements based on your interests. These cookies may be set by win333 or by third-party advertising partners. You may opt out of marketing cookies through your browser settings or our cookie preference center.

Managing Cookies: Most web browsers allow you to control cookies through their settings. You can configure your browser to block or delete cookies, or to notify you when a website attempts to set a cookie. Note that blocking strictly necessary cookies may prevent you from accessing certain features of the Platform, including logging in or placing bets.

Depending on your jurisdiction, you may have the following rights with respect to your personal information. win333 respects these rights and provides mechanisms to exercise them:

• Right of Access: You have the right to request a copy of the personal data we hold about you, including account details, transaction history, KYC documents, and communication records. We will provide this information in a commonly used electronic format within 30 days of your request.
• Right to Rectification: If you believe that any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct it. You can update most information directly through your Account settings, or contact support for assistance.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Note that we may be legally required to retain certain data (such as transaction records and KYC documents) for the retention periods specified in Section 6.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your personal data in certain situations, such as while we verify the accuracy of disputed data or assess whether our legitimate interests override your objection to processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider, where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to marketing, we will immediately stop sending promotional communications. For objections based on legitimate interests, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: If you believe that win333 has violated your data protection rights, you have the right to lodge a complaint with the supervisory authority in your jurisdiction.

Exercising Your Rights: To exercise any of the above rights, please contact our privacy team at [email protected] with the subject line "Data Protection Request." We will respond to your request within 30 days and may require identity verification to prevent unauthorized disclosure of personal data.

If we become aware that we have inadvertently collected personal information from an individual under 21, we will take immediate steps to delete that information from our systems and close any associated Account. Parents or guardians who believe their child may have provided personal information to win333 should contact us immediately at [email protected] so we can take appropriate action.

Our KYC verification process is designed to detect and prevent underage registration. All Members are required to provide government-issued identification confirming they are at least 21 years old before any withdrawal can be processed. Attempts to circumvent age verification by submitting false or altered documents will result in permanent account closure and forfeiture of any Wallet Balance.

win333 operates an international gaming platform and may transfer your personal data to servers and third-party service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

These safeguards may include:

• Transferring data only to countries that have been deemed by relevant authorities to provide an adequate level of data protection;
• Using standard contractual clauses approved by data protection regulators that require the recipient to protect your data to the same standard as required within Indonesia;
• Ensuring that the recipient is certified under an approved data protection framework that provides equivalent protections;
• Obtaining your explicit consent to the transfer where required by law.

For further information about the safeguards we use for international data transfers, please contact [email protected].

win333 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or technological developments. When we make material changes that reduce your rights or significantly alter how we process your data, we will provide prominent notice on the Platform and, where required by law, seek your consent before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Your continued use of the Platform after any changes to this Privacy Policy become effective constitutes your acceptance of the revised policy. If you do not agree to the revised Privacy Policy, you must cease using the Platform and request account closure before the effective date of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or how win333 processes your personal data, please contact our privacy team: