Privacy Policy SW303 –
Our Commitment to Protecting Your Data

Introduction and Scope of This Privacy Policy

SW303 is committed to protecting the privacy of all members who use our platform. This Privacy Policy applies to all personal information collected through sw303.win, the sw303 mobile app, and all our official communication channels including email and customer support services.

This document is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously, as we understand how important the security of personal information is to every member — especially in the context of an online financial and entertainment platform.

Personal Information We Collect

SW303 collects members' personal information through several means, depending on the nature of your interaction with our platform. The following are the categories of information we collect:

Account Registration Information:

• Full name as it appears on official identification documents.
• Date of birth for age verification (minimum 18 years old).
• Active email address for account communications.
• Mobile number for two-factor authentication (2FA).
• Username and password chosen during registration.

Identity Verification (KYC) Information:

• A copy of MyKad, passport, or other official identity document.
• Recent bank statement or utility bill for residential address verification.
• Bank account or e-wallet details for processing deposits and withdrawals.

Platform Usage Information:

• Betting history, gaming activity, and financial transactions.
• IP address, device type, operating system, and browser version.
• Activity log data and platform usage timestamps.
• Game preferences and personal account settings.

How We Use Your Information

Personal information collected by sw303 is used solely for legitimate and necessary purposes in operating the platform. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying and maintaining your member account at sw303.
• Transaction Processing: Processing deposits, withdrawals and any financial transactions you carry out through the platform.
• Identity Verification: Conducting the required KYC process to ensure account security and legal compliance.
• Service Communications: Sending account-related notifications, relevant promotions, policy updates and customer support responses.
• Fraud Prevention: Detecting and investigating any suspicious activity to protect all members.
• Service Improvement: Analysing aggregated usage patterns to improve the functionality and user experience of the sw303 platform.
• Legal Compliance: Fulfil applicable legal and regulatory obligations including financial reporting requirements.

SW303 does not use members' personal data for any third-party advertising or commercial profiling purposes without the explicit consent of the member concerned.

Disclosure of Information to Third Parties

SW303 does not sell, rent, or disclose members' personal information to third parties for marketing or commercial purposes. However, in certain limited situations, we may share information with the following parties:

• Payment Service Providers: Transaction information that must be shared with payment service providers such as FPX, Touch 'n Go, GrabPay and Boost to process your financial transactions.
• Game Providers: Technical data required to ensure the smooth operation of casino and sports games provided by third-party suppliers.
• Identity Verification Services: KYC information shared with recognised identity verification service providers to meet compliance requirements.
• Legal Authority: Information required by government authorities, regulatory bodies or courts under a lawful order issued in accordance with Malaysian law.
• Cybersecurity Services: Technical data that must be shared with security service providers to detect and prevent fraud and cyberattacks.

Data Storage and Retention Period

SW303 stores members' personal information on secure servers equipped with multi-layered physical and digital protection. All data is encrypted using AES-256 encryption standards at rest and SSL/TLS during transmission.

Data retention periods are as follows:

• Active Account Data: Retained for as long as the member account remains active and for a period of 7 years after account closure to meet legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and financial legal requirements.
• Platform Activity Logs: Retained for 2 years for security and investigation purposes if required.
• KYC Records: Retained for the duration of the active account plus 7 years after account closure.
• Customer Support Communications: Retained for 3 years for reference and service improvement purposes.

Once the retention period expires or data is no longer required, sw303 will securely delete or anonymise the information using methods that ensure it cannot be recovered.

Your Rights as a SW303 Member

As a sw303 member, you have several important rights regarding your personal data guaranteed under Malaysia's Personal Data Protection Act 2010:

To exercise any of the above rights, please contact the sw303 data protection team via our official email. Your request will be reviewed and processed within the stipulated timeframe.

Cookies and Tracking Technologies

The sw303 platform uses cookies and similar tracking technologies to enhance the user experience and analyse website performance. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymised information about how members use the platform (pages visited, time spent) to help us improve our services.
• Functional Cookies: Saving your preferences such as language, display settings and auto-login to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity and to ensure the security of user sessions.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the sw303 platform.

Data Security and Protective Measures

The security of member personal data is sw303's top priority. We implement a range of technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, or destruction.

The security measures we practice include:

• Data encryption in transit using TLS 1.3 protocol and at rest using AES-256 encryption.
• Two-factor authentication (2FA) for all member accounts and internal system access.
• System monitoring 24 hours a day, 7 days a week to detect any suspicious activity.
• Penetration testing conducted periodically by independent security experts.
• Tiered access controls ensuring that only authorised personnel can access member personal data.
• Periodic data backups to a secure, separate location to ensure data recovery in the event of an emergency.
• Mandatory information security training attended by all sw303 staff on a regular basis.

While we take all reasonable steps to protect your data, no security system is completely infallible. In the event of a data breach affecting members' personal information, sw303 will notify affected parties within 72 hours in line with international best practices.

Cross-Border Data Transfers

In operating the sw303 platform, certain member personal data may be transferred to, stored in, or processed outside Malaysia, particularly in the context of server hosting and international game provider integrations.

Any such data transfer is carried out in compliance with the applicable legal requirements, including:

• Ensuring the recipient country maintains a level of data protection equivalent to or higher than Malaysia.
• Executing data transfer agreements that incorporate internationally recognised standard protection clauses.
• Obtaining member consent for data transfers where required by law.

Children's Privacy Protection

The sw303 platform is strictly for adults aged 18 and above. We do not knowingly collect or process any personal information from children under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge, we will immediately take the following steps:

• Immediately closing the related account.
• Permanently deleting all related personal data.
• Returning any financial balance to the original deposit source where identifiable.

Parents or guardians who have reason to believe that a child under their care has registered an account on sw303 are encouraged to contact us immediately through our official customer support channels.

Amendments to This Privacy Policy

SW303 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the technologies we use.

When material changes are made to this policy, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Sending email notifications to all registered sw303 members.
• Displaying a clear notice on the platform's login page for a minimum period of 30 days.

Continued use of the sw303 platform after a policy change takes effect will be considered your acceptance of the updated policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how SW303 handles your personal data, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Response Time: Within 5 working days for general enquiries, 14 working days for data rights requests.
• Language: Enquiries are accepted in Malay and English.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory authority in your country.