Privacy Policy will33
Data Protection You Are Our Priority

Will33 ("we", "Platform" or "will33") operates the website will33.app as an online entertainment platform for Malaysian users. We take the privacy and personal data security of every user who trusts us very seriously.

This Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal information when you use the will33 platform. It also outlines your rights as a user and how to exercise them.

By registering, logging in, or using any part of the will33 platform, you are deemed to have read, understood, and agreed to this Privacy Policy. If you do not agree with any provision of this policy, please discontinue use of our platform.

Will33 only collects information that is strictly necessary to provide a safe, seamless and responsible service to our users. The information collected falls into several categories:

Account Registration Information:

• Full name as shown on official identification documents.
• Date of birth for age verification.
• Active email address for account communications.
• Mobile phone number for two-factor authentication (2FA).
• Passwords are stored in hashed form — we never store passwords in plain text.
• Your preferred username.

Identity Verification (KYC) Information:

• A valid copy of MyKad or passport.
• Proof of current address (utility bill or bank statement not older than 3 months).
• Bank account or e-wallet information for processing deposits and withdrawals.
• A selfie holding your identification document if required by our security team.

Platform Activity Information:

• Deposit and withdrawal transaction records.
• Game history and betting records on the platform.
• IP address and device information used for login.
• Session logs including login and logout times.
• Platform interaction data such as pages visited and time spent.

Below is a summary of the data categories we collect, along with their purposes and retention periods:

Every piece of information we collect is used specifically for legitimate and transparent purposes. will33 does not use user data for undisclosed purposes without prior consent.

• Account Management — processes registration, verifies identity, and manages your account.
• Transaction Processing — ensures deposits and withdrawals are processed correctly and securely.
• Platform Security — detects and prevents fraud, account abuse, and other security threats.
• Legal Compliance — fulfils AML (Anti-Money Laundering), KYC, and reporting obligations to regulatory bodies.
• Service Improvements — analyses usage patterns to enhance the user experience and improve platform features.
• Service Communications — sends important notifications related to your account, security, and transactions.
• Related Promotions — keeps you informed about the latest will33 offers and promotions, with the option to unsubscribe at any time.
• Customer Support — enables our team to assist you more effectively when you contact us.

Will33 does not sell, rent or trade users' personal data to any third party for commercial marketing purposes. However, in the course of operating the platform, we may share certain information with the following parties:

• Licensed Payment Processors — FPX, Visa, Mastercard, Touch 'n Go eWallet, Boost and GrabPay require transaction information to securely process your deposits and withdrawals.
• Identity Verification Providers — a KYC partner that helps us verify your identification documents in compliance with regulatory requirements.
• Regulatory bodies and legal authorities — we are obligated to share certain information when lawfully requested by competent authorities, courts, or relevant regulatory bodies.
• Technology Service Providers — cloud infrastructure, cybersecurity, and analytics companies that assist us in operating the platform, bound by strict confidentiality agreements.

All third parties working with will33 are bound by strict data protection agreements and may only use shared information for the specific agreed purposes. They are not permitted to use your data for any other purpose.

Will33 uses cookies and similar tracking technologies to enhance the user experience, ensure session security and understand how users interact with our platform.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Preference Cookies — saves your preferences such as language selection and interface display for a more comfortable experience.
• Analytics Cookies — helps us understand how users interact with the platform for continuous improvement purposes. This data is collected in aggregate and is not used to identify individuals.
• Security Cookies — detects suspicious activity and helps prevent unauthorised access to your account.

You can manage or delete cookies through your web browser settings at any time. However, please note that disabling essential cookies may affect the platform's functionality and your user experience.

Will33 continuously invests in the latest security infrastructure to ensure your personal data is protected at all times. The security measures we implement cover technical, organisational and procedural aspects.

• Data encryption in transit — all communications between your device and will33 servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Data encryption at rest — sensitive data such as financial information and KYC documents are stored in encrypted form using AES-256 encryption algorithms.
• Two-Factor Authentication (2FA) — an additional layer of protection that requires verification through your device during login.
• 24/7 Security Monitoring — an automated threat detection system that monitors platform activity around the clock and raises alerts upon any suspicious activity.
• Regular penetration testing — will33 conducts regular security penetration testing by independent security teams to identify and patch any system vulnerabilities.
• Internal Access Controls — access to user data among will33 staff is restricted on a need-to-know basis.

Under Malaysia's PDPA 2010 and will33's privacy policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of Access — you have the right to request a copy of the personal data we hold about you.
• Right to Rectification — you have the right to request that we correct any personal information that is inaccurate or incomplete.
• Right to Erasure — in certain circumstances, you may request that we delete your personal data, subject to legal obligations requiring us to retain specific records.
• Right to Object — you have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Restrict Processing — in certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.
• Right to Data Portability — you have the right to receive your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact our privacy team by email at [email protected] by stating the right you wish to exercise and your account information for verification. We will process your request within 30 business days.

Will33 only retains your personal data for as long as necessary to fulfil the original purpose of collection, comply with legal obligations, or resolve any related disputes.

• Active account data retained for as long as your account remains active on the will33 platform.
• Data after account closure — certain information such as KYC records is retained for 5 years after account closure to comply with anti-money laundering legal requirements.
• Financial transaction records retained for 7 years in accordance with the Companies Act and Malaysian financial regulations.
• Security & Activity Logs retained on a rolling 90-day basis for fraud detection and security audit purposes.
• Customer support communication records retained for 2 years for reference and service improvement purposes.

Once the defined retention period expires, data will be securely deleted or fully anonymised so that it can no longer be linked to any individual.

The will33 platform may contain links to third-party websites or services for user convenience. Please take note of the following:

• Will33 is not responsible for the privacy practices or content of any linked third-party websites.
• Each third-party website has its own privacy policy that you should review separately.
• Any information you share directly with third parties (e.g. when making payments through a bank portal) is subject to their own privacy policy, not will33's.

We encourage you to always review the privacy policy of every platform you visit, especially before providing any personal information.

Will33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business practices, technology, legal requirements or regulatory directives.

• Any material changes to this Privacy Policy will be communicated to you via your registered email at least 14 days before the changes take effect.
• The latest update date will always be displayed at the top of this page for your reference.
• Your continued use of the will33 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
• If you disagree with any changes made, you have the right to close your account before the changes take effect by contacting our support team.

If you have any questions, concerns or complaints regarding this Privacy Policy or how will33 handles your personal data, our privacy team is here to help.

You may also refer to the FAQ for answers to frequently asked questions about privacy and account security. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.