Privacy Policy sw303 –
Protection Malaysian User Data

This Privacy Policy is issued by sw303 and applies to all users who register an account, access the website, use the mobile app, or interact with any digital service we operate under the sw303 brand.

We understand that personal data is a sensitive and valuable asset. In today's digital world, too many parties attempt to exploit user information without their knowledge. sw303 takes a different stance — we believe players deserve to know exactly what happens to their data, and we collect only what is truly necessary.

This policy should be read together with our Terms and Conditions and Responsible Gaming Policy. All three documents form the complete framework governing the relationship between sw303 and each of its users.

Sw303 collects data across several categories depending on your interaction with our platform:

A. Data You Provide Directly:

• Identity information: Full name, identification card number (MyKad), date of birth, and a selfie photo during the KYC process.
• Contact information: Mobile phone number and email address used during registration.
• Financial information: Bank name, bank account number, and e-wallet name for deposit and withdrawal purposes.
• Login information: Username and password (stored in an unreadable hashed format).

B. Data Collected Automatically:

• Device data: Device type, model, operating system, and unique device identifier.
• Network data: IP address, browser type, and internet service provider.
• Session data: Login and logout times, pages visited, and gaming session duration.
• Game data: Betting history, wins, losses, and game preferences.
• Transaction data: Complete history of all deposits, withdrawals, and bonus movements.

Every piece of data we collect has a clear and legitimate purpose. sw303 uses user data for the following purposes:

• Account Management & Verification — ensuring only you can access your account.
• Financial Transaction Processing — processing deposits and withdrawals safely and accurately.
• Legal compliance — fulfilling KYC, AML, and other applicable regulatory requirements.
• Platform security — detecting and preventing fraud, money laundering, and unauthorized access.
• Service Improvement — analyzing usage patterns to improve the player experience.
• Customer Support — enabling the sw303 support team to assist you effectively.
• Service communications — sending important notifications related to your account, transactions, and security.
• Marketing communications — only if you have agreed to receive promotional communications from sw303.

Sw303 does not use your data for any purpose not listed above. Should we wish to use your data for a new and different purpose in the future, we will obtain your consent beforehand.

Sw303 processes your personal data on a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA) and related legislation. The legal bases we rely on are:

• Consent: For marketing communications and certain optional data uses.
• Contract performance: For all processing necessary to provide sw303 services to you.
• Legal obligation: For KYC, AML compliance, and reporting requirements stipulated by law.
• Legitimate interest: For platform security, fraud prevention, and service improvement.

Sw303 does not sell your personal data. However, to operate the platform effectively, we may need to share certain information with carefully selected third parties, all subject to strict confidentiality agreements:

• Payment & Banking Providers — to process deposits and withdrawals (e.g. banks, FPX, e-wallet providers). Only data required for the specific transaction is shared.
• Game Providers — to operate games within the sw303 platform. Information shared is typically a session ID, not personal identity details.
• IT & Security Service Providers — for hosting, cybersecurity, and the platform's technical infrastructure.
• Competent Authorities — if required by law or a valid court order.

All third parties we work with have signed data processing agreements ensuring they handle your information to a data protection standard equal to or higher than sw303's own standards.

Protecting your data is a top technical priority in every sw303 platform development decision. We implement multiple layers of security to ensure your data remains protected at all times:

• 256-bit SSL Encryption: All data transmitted between your device and sw303 servers is protected by industry-grade end-to-end encryption.
• Passwords are hashed: Your password is stored as a one-way hash using modern algorithms — no one, including sw303 staff, can read your original password.
• Layered access control: Only specifically authorised sw303 staff may access user data, and only data relevant to their assigned duties.
• 24/7 monitoring: Our automated monitoring system detects any suspicious activity or unauthorised access attempts in real time.
• Periodic security audits: The sw303 platform undergoes periodic independent security audits to identify and address any potential vulnerabilities.
• Secure data centres: Data is stored in data centres that comply with international physical and digital security standards.

Sw303 does not retain your data indefinitely. We only store data for as long as it is needed for the stated purpose or as required by law:

• Active account data: Retained for as long as your account is active and for 5 years after account closure (PDPA and AML requirements).
• Financial Transaction Records: Minimum 7 years after a transaction occurs, in line with Malaysia's accounting legal requirements.
• KYC Records: 5 years after the business relationship ends, as required by AML regulations.
• Game activity logs: 2 years for customer support and audit purposes, then deleted or anonymised.
• Customer support communications: 1 year after case resolution, for future support reference.

Once the retention period expires and there is no legal requirement to keep the data longer, sw303 will permanently delete or encrypt the data so it can no longer be identified.

Under Malaysia's PDPA and sw303's commitment to transparency, you have the following rights regarding your personal data:

To exercise any of these rights, contact the sw303 support team via live chat in the app. We will process your request within 30 business days. Please note that some data deletions may not be fully possible where a legal obligation prevents it — we will inform you clearly if that is the case.

The sw303 website uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Below is an explanation of the cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled without affecting platform functionality.
• Preference Cookies: Stores your preferences such as language, dark mode, and display settings to make your experience more comfortable.
• Analytics Cookies: Helps us understand how players interact with the platform so we can continuously improve the user experience. This data is analysed in aggregate and is not used to identify individuals.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the sw303 platform. For the sw303 mobile app, permission management is handled through your device's system settings.

Sw303 reserves the right to update this privacy policy from time to time in line with legal changes, technological developments, or changes in how we operate the platform. Any amendments will be communicated via:

• In-app notification on sw303 at least 14 days before changes take effect.
• Announcement on the platform homepage with a clear update date.
• For significant material changes, we will request fresh consent from users where required.

Continued use of the sw303 platform after the effective date of any changes constitutes acceptance of the revised policy. The latest version of the privacy policy is always available on this page. For privacy-related inquiries, visit the support section within the sw303 app.