Privacy Policy — 32win1

1 Introduction

This Privacy Policy ("Policy") is issued by 32win1 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("Users", "you", "your") who access, register on, or interact with the website located at https://32win1.cam and any related services we provide.

32win1 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy describes the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, the measures we take to protect it, and the rights available to you in relation to your personal data.

By registering an account on 32win1, depositing funds, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms and Conditions, which govern your use of the platform as a whole.

2 Definitions

The following terms, as used throughout this Privacy Policy, carry the meanings set out below:

• "Personal Data" — any information that identifies, or could reasonably be used to identify, a natural person, either directly or in combination with other data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any other manipulation of that data.
• "Data Controller" — 32win1, in its capacity as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" — a third party that processes personal data on behalf of 32win1 under documented instructions (e.g., KYC verification providers, payment processors).
• "Consent" — a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
• "Cookies" — small text files placed on a User's device by the platform for the purposes of session management, analytics, and personalisation.
• "KYC" — Know Your Customer; the regulatory identity verification process required for all 32win1 account holders prior to processing withdrawals.

3 Data We Collect

32win1 collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically through your use of the platform; and from third-party service providers involved in payment processing and identity verification.

3.1 Data You Provide Directly

• Full legal name, date of birth, and nationality as provided during registration.
• Contact details including email address, mobile phone number, and residential address.
• Username and hashed password credentials used to access your account.
• Identity documents submitted for KYC verification — including scanned copies of Malaysian MyKad, Passport, or Driver's Licence, and proof of address documents (utility bills, bank statements) dated within three months.
• Payment details including bank account numbers, e-wallet identifiers (for Touch 'n Go eWallet, Boost, GrabPay, DuitNow), and cryptocurrency wallet addresses (BTC, ETH, USDT) used for deposit and withdrawal transactions.
• Any information you voluntarily provide when contacting our 24/7 support team via live chat or email.

3.2 Data Collected Automatically

• IP address, browser type, operating system version, and device identifiers.
• Session data including login timestamps, pages visited, time spent on platform, and game activity logs.
• Transaction records including deposit amounts, withdrawal requests, bet history, and game outcomes.
• Cookie identifiers and tracking data as described in Section 7.
• Geolocation data (at the city or region level) derived from IP address.

3.3 Data from Third Parties

• Identity verification results and risk flags from third-party KYC and anti-fraud service providers.
• Transaction confirmation data from payment processors (FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks).
• Publicly available information where necessary for compliance or fraud prevention purposes.

4 How We Use Your Data

32win1 processes your personal data for the following clearly defined purposes:

4.1 Account Management & Service Delivery

We use your personal data to create and manage your 32win1 account, authenticate your identity at login, process deposits and withdrawals through your registered payment methods (including DuitNow, FPX, Touch 'n Go eWallet, and cryptocurrency channels), and to provide you with access to games, sports betting markets, and all other platform features.

4.2 Regulatory Compliance & KYC

We are required to verify the identity of all users who make withdrawal requests as part of our Know Your Customer (KYC) obligations. We process identity and address documentation for this purpose. We also monitor transactions for anti-money laundering (AML) compliance, which may involve sharing flagged data with regulatory authorities where legally required.

4.3 Fraud Prevention & Security

We process technical and behavioural data — including IP addresses, device fingerprints, and session activity — to detect and prevent fraudulent behaviour, bonus abuse, multi-accounting, and other prohibited activities as defined in our Terms and Conditions. This processing is necessary to protect both 32win1 and our legitimate users.

4.4 Responsible Gambling Monitoring

Where a user has activated responsible gambling tools (deposit limits, session alerts, self-exclusion), we process your account activity data to enforce these restrictions. We may also use behavioural indicators to proactively identify patterns associated with problem gambling, enabling our support team to reach out appropriately.

4.5 Customer Support

All communications between you and our support team — including live chat transcripts and email correspondence — are recorded and retained for quality assurance purposes and to assist in resolving disputes. Our support team operates 24/7 and is accessible via the platform's live chat interface.

4.6 Marketing Communications

Where you have provided consent, 32win1 may contact you by email or in-platform notification with information about promotions, bonuses, new games, and special events. You may withdraw marketing consent at any time by updating your account notification preferences or contacting support. Withdrawal of marketing consent does not affect your ability to use the platform.

5 Legal Basis for Processing

32win1 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity — processing required to fulfil our contractual obligations to you under the Terms and Conditions, including account management, transaction processing, and service delivery.
• Legal Obligation — processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and reporting obligations to relevant authorities.
• Legitimate Interests — processing undertaken to protect the legitimate interests of 32win1 and its users, including fraud prevention, platform security, abuse detection, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for optional purposes such as marketing communications, where we rely on your explicit consent, which you may withdraw at any time.

6 Data Sharing & Disclosure

32win1 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose your data to third parties only in the following circumstances:

6.1 Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include:

• KYC and identity verification providers — for document authentication and age verification.
• Payment processing partners — including the networks supporting FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, GrabPay, Boost, DuitNow, and cryptocurrency transaction processors.
• Cloud infrastructure and data hosting providers — for secure storage and platform operation.
• Fraud detection and cybersecurity service providers — for real-time threat monitoring.
• Customer support platform providers — for live chat and ticketing infrastructure.

6.2 Regulatory Authorities

We may be legally required to disclose your personal data to regulatory bodies, law enforcement agencies, tax authorities, or courts of competent jurisdiction where such disclosure is required by law or pursuant to a valid legal order. 32win1 will notify affected users of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of 32win1, your personal data may be transferred to the acquiring entity. We will notify affected users of any such transfer and ensure appropriate data protection standards are maintained by the successor entity.

7 Cookies & Tracking Technologies

32win1 uses cookies and similar tracking technologies to operate the platform efficiently, maintain session continuity, analyse user behaviour, and improve the overall user experience. The types of cookies we use are described below:

• Strictly Necessary Cookies — Required for core platform functionality, including user authentication, session management, and security token validation. These cannot be disabled without impairing your ability to use the platform.
• Performance & Analytics Cookies — Used to collect aggregated, anonymised data about how users navigate the platform (pages visited, session duration, error rates) to help us identify and resolve usability issues.
• Functional Cookies — Used to remember your preferences such as language settings, display preferences, and previously selected payment methods.
• Marketing Cookies — Where consented to, used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. You may opt out of marketing cookies via your browser settings without affecting platform access.

Most modern browsers allow you to control cookie behaviour through their settings. Disabling non-essential cookies may affect certain personalisation features of the platform but will not prevent you from accessing core services. For further guidance on managing cookies, refer to your browser's help documentation.

8 Data Retention

32win1 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our retention practices are as follows:

• Active Account Data — Retained for the duration of your account membership and for a period of five (5) years following account closure, in compliance with financial record-keeping and AML regulatory requirements.
• KYC Documentation — Identity documents and verification records are retained for a minimum of five (5) years following the date of verification, as required under anti-money laundering legislation.
• Transaction Records — Full records of all deposit, withdrawal, and betting transactions are retained for a minimum of seven (7) years for audit and regulatory compliance purposes.
• Support Communications — Live chat transcripts and email correspondence are retained for two (2) years from the date of the last communication, unless retention is required for an ongoing dispute or legal matter.
• Marketing Data — Where consent has been withdrawn, marketing-related data is removed from active communication lists within 30 days. Anonymised engagement analytics may be retained in aggregated form.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

32win1 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your browser and our servers.
• Encryption at rest for sensitive data fields including financial information, identity documents, and authentication credentials.
• Two-factor authentication (2FA) available and recommended for all user accounts.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented need.
• Regular penetration testing and vulnerability assessments of platform infrastructure.
• Incident response procedures for prompt identification, containment, and notification in the event of a data breach.

While we employ industry-standard security controls, no online platform can guarantee absolute security against all threats. We encourage users to take personal security precautions including the use of strong, unique passwords and enabling 2FA on their accounts.

10 Your Rights

Subject to applicable data protection law and certain exceptions (e.g., where data must be retained for regulatory compliance), you have the following rights in relation to your personal data held by 32win1:

To exercise any of the above rights, please submit a written request to our Data Protection contact via the support channel set out in Section 14. We will respond to all valid requests within thirty (30) days. Where a request is complex or involves multiple data subjects, we may extend this period by a further two months, with prior notice to you.

We may be required to verify your identity before fulfilling a data rights request to prevent unauthorised access to another person's data. Identity verification for this purpose will follow a simplified process compared to standard KYC and will not require submission of full documentation in most cases.

11 Minors — 21+ Only

32win1 operates a strict minimum age policy. All users must be 21 years of age or older to register an account or use any service on the platform. The collection and processing of personal data from individuals under 21 years of age is not permitted on 32win1.

We implement age verification measures at registration and as part of the KYC process to enforce this policy. If 32win1 becomes aware that personal data has been collected from an individual under the age of 21, we will promptly suspend the associated account, delete the data collected, and return any deposited funds subject to verification of the deposit method.

12 Third-Party Links & Services

The 32win1 platform may, from time to time, contain references or links to third-party services (for example, game studios or payment gateway landing pages) that operate under their own privacy policies. 32win1 is not responsible for the privacy practices or content of such third-party services and recommends that you review the privacy policy of any third-party service before providing personal data to them.

Third-party service providers engaged by 32win1 as data processors (such as KYC providers and payment processors) are contractually bound to process your data only in accordance with our instructions and in compliance with applicable data protection law. They are not permitted to use your data for their own purposes.

13 Updates to This Privacy Policy

32win1 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered users via email or a prominently displayed platform notification prior to the changes taking effect.

Minor amendments that do not materially affect your rights or our obligations may be made without prior notice. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage users to review this Policy periodically to remain informed of how we handle your personal data.

Continued use of the 32win1 platform following any Policy update constitutes your acceptance of the revised terms. If you do not agree with any update, you should cease using the platform and may request account closure by contacting our support team.

14 Contact Us — Data & Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 32win1, please contact us through the following channel:

For responsible gambling-related data requests — including self-exclusion records or deposit limit history — please visit our Responsible Gambling page or include "Responsible Gambling Data Request" in your subject line when emailing support.