Privacy Policy

This Privacy Policy is issued by 3we ("3we", "we", "us", "our"), the operator of the online gaming platform accessible at 3we.one. 3we operates under an international gaming licence and is committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, visitors, and prospective users.

This Policy applies to all personal data collected through the 3we website, mobile browser interface, customer support channels, and any other touchpoint through which 3we interacts with individuals. It should be read in conjunction with the 3we Terms & Conditions, which are incorporated herein by reference.

3we collects personal data in the following categories, to the extent necessary for the purposes described in this Policy:

2.1 Identity Data

• Full legal name, date of birth, and gender;
• Government-issued identification number (e.g., Malaysian identity card number or passport number);
• Copies of identification documents where required for KYC verification.

2.2 Contact Data

• Email address;
• Malaysian mobile phone number;
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor).

2.3 Financial Data

• Transaction history (deposits and withdrawals in MYR);
• Payment method identifiers (e.g., FPX bank reference, Touch n Go eWallet transaction IDs, Boost reference codes);
• 3we does not store complete payment card numbers or full banking credentials — payment processing is handled by third-party payment service providers under their own privacy frameworks.

2.4 Gaming and Behavioural Data

• Game session records, including games played, bets placed, outcomes, and session duration;
• Bonus usage and wagering history;
• Self-imposed responsible gaming settings (e.g., deposit limits, self-exclusion periods).

2.5 Technical Data

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Login timestamps, session identifiers, and access logs.

2.6 Communications Data

• Records of customer support interactions, including live chat transcripts and email correspondence;
• Responses to surveys, promotions, or feedback requests where voluntarily provided.

3we collects personal data through the following channels:

• Direct interactions — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a promotion;
• Automated technical means — through cookies, server logs, and similar technologies as your device interacts with the 3we platform (see Section 7);
• Third-party sources — from payment processors, fraud prevention services, and identity verification providers where 3we engages such services to comply with its legal and regulatory obligations.

3we uses your personal data for the following purposes:

• Account management — creating, maintaining, and securing your 3we account;
• Platform operation — processing deposits and withdrawals, providing access to games, calculating and awarding bonuses, and managing your MYR wallet balance;
• Regulatory compliance — meeting anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations imposed by 3we's international gaming licence;
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, account misuse, and prohibited conduct as defined in the Terms & Conditions;
• Customer support — responding to your enquiries, resolving disputes, and improving the quality of support services;
• Marketing communications — where you have provided consent, sending promotional offers, bonus notifications, and platform updates via email or in-platform messaging;
• Platform improvement — analysing aggregated usage patterns to improve the 3we platform, game selection, and user experience;
• Legal obligations — retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and enforcing 3we's legal rights.

3we processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and 3we (i.e., to operate your account and provide the gaming service);
• Legal obligation — processing required to comply with AML, KYC, and gaming regulatory requirements;
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent — processing for direct marketing communications, where consent has been obtained and can be withdrawn at any time.

3we does not sell, rent, or trade your personal data to third parties for their own commercial purposes. 3we may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers — FPX operators, Touch n Go eWallet, Boost, Maybank2u, CIMB Clicks, Public Bank, and other payment processors necessary to facilitate your transactions;
• Identity verification and KYC providers — third-party services engaged to verify your identity in compliance with regulatory requirements;
• Fraud prevention and risk management services — providers that assist 3we in identifying and preventing fraudulent activity;
• Game content providers — licensed game studios whose titles are hosted on the 3we platform, to the extent necessary for game operation and audit;
• Regulatory and legal authorities — where 3we is required by law, court order, or regulatory directive to disclose information;
• Affiliated entities and successors — in the context of a corporate restructuring, merger, or acquisition, subject to appropriate confidentiality obligations.

All third-party service providers engaged by 3we are contractually obligated to process personal data only for the specified purpose and to maintain appropriate data protection standards.

3we uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used include:

• Strictly necessary cookies — required for the platform to function, including session management, login authentication, and security tokens. These cannot be disabled without impairing platform functionality;
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming configuration;
• Analytical cookies — used to collect aggregated, anonymised usage data to help 3we understand how the platform is used and identify areas for improvement;
• Marketing cookies — used only where consent has been obtained, to personalise promotional content displayed within the 3we platform.

You may control or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. 3we does not use third-party advertising cookies to track your activity across other websites.

3we retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data — retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Customer support records — retained for three (3) years from the date of the interaction;
• Marketing consent records — retained until consent is withdrawn, plus a reasonable period thereafter for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data cannot be deleted due to overriding legal or regulatory obligations, it will be stored securely and accessed only for those specific purposes.

3we implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• HTTPS encryption for all data transmitted between your device and the 3we platform;
• Access controls and role-based permissions limiting internal access to personal data on a need-to-know basis;
• Secure storage of account credentials using industry-standard hashing techniques;
• Regular security assessments and vulnerability testing of platform infrastructure.

Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, 3we will notify affected individuals and relevant authorities in accordance with applicable law.

Subject to applicable law and any overriding regulatory obligations, you have the following rights in relation to your personal data held by 3we:

• Right of access — to request a copy of the personal data 3we holds about you;
• Right of rectification — to request correction of inaccurate or incomplete personal data;
• Right of erasure — to request deletion of your personal data, where 3we no longer has a legal or regulatory basis for retaining it;
• Right to restrict processing — to request that 3we limits its use of your personal data in certain circumstances;
• Right to data portability — to receive your personal data in a structured, machine-readable format, where technically feasible;
• Right to withdraw consent — to withdraw consent for marketing communications or other consent-based processing at any time, without affecting the lawfulness of prior processing;
• Right to object — to object to processing based on 3we's legitimate interests, where you have grounds relating to your particular situation.

To exercise any of the above rights, please contact 3we's support team via live chat or email (see Section 14). 3we will respond to data rights requests within 30 calendar days. Complex or high-volume requests may require an extended response period, in which case you will be notified.

The 3we platform is strictly for persons aged 21 years and above. 3we does not knowingly collect personal data from individuals under the age of 21. If 3we becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately suspended, the data will be deleted, and any deposits returned where practicable. If you believe that 3we may have inadvertently collected data from a minor, please contact us immediately.

3we operates under an international gaming licence, and some of the third-party service providers engaged by 3we may process personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, 3we ensures that appropriate safeguards are in place — including contractual data protection obligations — to maintain a level of protection consistent with applicable privacy standards.

By using the 3we platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence. 3we will not transfer data to jurisdictions that do not provide an adequate level of protection without implementing appropriate safeguards.

3we reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Material changes will be notified to registered users via email or prominent in-platform notice at least 14 days prior to taking effect, where practicable.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the 3we platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms.

For any queries, requests, or concerns relating to this Privacy Policy or 3we's handling of your personal data, please contact us through the following channels:

• Email: support [at] 3we.one (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the 3we platform

3we aims to acknowledge all data-related enquiries within two (2) business days and to resolve them within 30 calendar days.