Privacy Policy sw303 – Your Personal Data Protection

sw303 ("we", "our platform") is an online sports betting and entertainment platform operating under a recognised international licence. We understand that your personal data is a trust placed in us, and we take this responsibility with the utmost seriousness.

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information when you use sw303.onl, the SW303 mobile app, or any related services we offer ("Services"). It also explains the rights you hold over your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account, accessing, or using SW303 Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Services and contact our support team to close your account if necessary.

We collect various types of personal information depending on how you interact with the platform sw303. The following are the categories of data we collect:

• Registration Information: Full name, date of birth, identification number (MyKad/Passport), email address, mobile number, and username.
• Financial Information: Bank account number, bank name, e-wallet details (Touch 'n Go, GrabPay), and deposit and withdrawal transaction records.
• KYC Verification Documents: Copies of your identity card, passport, bank statements, and other supporting documents required for identity verification.
• Communications: Any messages, complaints, or feedback you submit to our support team via live chat or email.

• Technical Data: IP address, web browser type, device operating system, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time spent on the platform, games played, login frequency, and betting patterns.
• Location Data: General location based on IP address for legal compliance and fraud detection purposes.
• Cookie Information: Session data, language preferences, and personal settings stored via cookies and similar tracking technologies.

sw303 uses collected personal data solely for lawful and stated purposes. We do not sell, rent, or trade your personal data to any third party for their marketing purposes.

The primary purposes for which your data is used are as follows:

• Service Delivery: Providing access to all sw303 platform features, processing deposits and withdrawals, and managing your member account.
• Identity Verification (KYC): Conducting background checks and age verification as required by law to ensure the safety of all users.
• Fraud Prevention & Security: Detecting and investigating suspicious activity, preventing money laundering, and protecting the platform from unauthorized access.
• Service Communications: Sending important account-related notifications, transaction confirmations, security updates, and service information.
• Targeted Marketing: Sending promotions, bonus offers, and relevant campaign information based on your preferences — subject to your consent.
• Legal Compliance: Complying with applicable legal and regulatory requirements, including reporting to the relevant authorities when required.
• Platform Improvements: Analyzing usage patterns to improve the user experience, introduce new features, and enhance overall platform performance.
• Customer Support: Handling member inquiries, complaints, and support requests more efficiently and effectively.

sw303 does not sell or trade your personal data. We only share your information in limited and lawful circumstances as follows:

• Payment Service Providers: Required financial information is shared with approved payment providers (FPX, DuitNow, e-wallets) solely for processing your transactions. All such providers are bound by strict confidentiality agreements.
• Technology Partners: Cloud infrastructure providers, analytics services, and security tools that help us operate the platform. They are granted access only to the data necessary for their specific functions.
• Legal Authority: We will disclose your data to regulatory authorities, law enforcement, or courts when required by law or a valid court order.
• Fraud Prevention: In limited circumstances, we may share information with fraud prevention agencies or other platforms for the purpose of detecting and preventing unlawful activities involving multiple platforms.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the business transaction, with the same privacy protections maintained.

In all of the above situations, we ensure that data sharing is carried out with adequate safeguards and involves only the minimum information necessary for the specific purpose.

Protecting your personal data from unauthorized access, loss, or misuse is our highest priority sw303. We implement multiple layers of comprehensive technical and organisational security measures:

• 256-bit SSL Encryption: All data transmitted between your device and sw303's servers is protected by the same highest-level encryption used by leading banking institutions in Malaysia.
• Two-Factor Authentication (2FA): All member accounts are supported with 2FA options to add an extra layer of protection during login.
• Internal Access Controls: Only authorised SW303 staff with a legitimate business need may access members' personal data, and all access is logged and actively monitored.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular Security Audits: We conduct regular penetration testing and comprehensive security audits carried out by independent cybersecurity firms.
• Secure Data Centre: Your data is stored in data centres certified to international security standards (ISO 27001) with multi-layered physical and digital protection.

sw303 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website or use our app.

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform for improvement purposes, such as traffic analytics and page load times.
• Functional Cookies: Storing your preferences such as language selection, display settings, and login information for your convenience.
• Marketing Cookies: Used to display relevant advertisements and promotions based on your interests and usage patterns — subject to your consent.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience on the SW303 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights over the personal data we hold. sw303 respects and facilitates the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. This request may be submitted to our support team and will be processed within 21 business days.
• Right to Rectification: If your personal data is inaccurate or outdated, you have the right to request a correction. You may also update certain information directly through your account settings.
• Right to Withdraw Consent: You may withdraw your consent to the processing of certain data, particularly for direct marketing purposes, at any time.
• Right to Object: You have the right to object to the processing of your personal data under certain circumstances, such as processing for direct marketing purposes.
• Right to Lodge a Complaint: If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection.

To exercise any of the above rights, please contact our Privacy Officer via email at [email protected]. We will respond to your request within the timeframe required by law.

sw303 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: For as long as your account remains active and you continue using sw303 Services.
• KYC and Financial Data: Minimum 7 years after account closure, in accordance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• Transaction Logs: Minimum 5 years for tax compliance and financial regulatory purposes.
• Communication Data: 3 years for customer service records and dispute resolution.
• Technical Data (Logs): 12 months for fraud detection and security monitoring purposes.

Once the retention period has expired and there is no legal requirement to retain it, your data will be securely deleted or anonymised using industry-approved procedures.

Platform sw303 is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have collected personal data from underage individuals without valid consent, we will take immediate steps to delete that data and close the relevant account. If you believe a child has provided their personal data to us, please contact us immediately at [email protected].

sw303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, applicable laws, or business requirements. Any amendments will be published on this page with a new update date.

For material or significant amendments, we will endeavour to notify you via in-platform notifications or your registered email at least 7 days before the changes take effect. Your continued use of SW303 Services after the effective date of any amendment constitutes your acceptance of and agreement to the updated policy.

We encourage you to review this page periodically to stay informed about our latest privacy practices. The date of the most recent update is always displayed at the top of this document.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):