M13Win Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

M13Win takes the privacy of its members very seriously. This Privacy Policy is written in Bahasa Malaysia to make it easier for Malaysian players to understand, and clearly explains how your personal data is collected, used, stored, and protected by the M13Win platform.

This Policy applies to all users who access the M13Win platform via m13win.xyz, including registered members, website visitors, and any individual who interacts with our platform in any capacity. It covers all services offered by M13Win, including slots, Live Casino, table games, e-sports betting, bonus programmes, and customer support services.

M13Win complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all personal data handling practices. We are committed to ensuring that your personal data is processed lawfully, fairly, and transparently in accordance with the principles set out in that legislation.

M13Win collects several categories of personal data depending on how you interact with our platform. Below is a summary of the types of data we may collect:

We do not collect sensitive data categories such as medical information, political affiliations, religious beliefs, or biometric information unless specifically required by Malaysian law for compliance purposes. Credit card numbers are not stored directly by M13Win — all card transactions are processed through third-party payment processors that comply with PCI-DSS standards.

M13Win uses the personal data collected for the following legitimate and stated purposes:

• Account Management: To create, verify, and manage your M13Win account, including Malaysian phone number verification and identity verification (KYC)
• Service Provision: To allow you to play games, make deposits and withdrawals using local Malaysian e-wallets, and access all features on the M13Win platform.
• Transaction Processing: To process deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and to manage withdrawals to your account
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus manipulation, or any other misuse of the platform
• Legal Compliance: To fulfil legal and compliance obligations under Malaysia's Personal Data Protection Act 2010 and other applicable legislation
• Customer Support: To handle your enquiries, complaints, and support requests via live chat and support email
• Service Communications: To send important account notifications such as deposit confirmations, security alerts, and terms updates
• Marketing (with consent): To send promotional information, bonus offers, and the latest M13Win news — only if you have agreed to receive such communications
• Platform Improvements: To analyse aggregated, anonymised usage patterns for the purpose of improving the M13Win platform user experience
• Responsible Gaming: To monitor gameplay patterns and identify players who may need responsible gaming assistance or intervention

We will not use your personal data for any purpose not stated above without first obtaining your explicit consent.

M13Win does not sell or transfer your personal data for third-party commercial purposes. However, in the following limited circumstances, we may share your data with the parties listed:

• Trusted Service Providers: Companies that help us operate the platform — including payment processing providers for Malaysian local e-wallets (Touch 'n Go, GrabPay, and others), game providers (Pragmatic Play, PG Soft, and others), and technical infrastructure providers. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for the purposes specified in those agreements.
• Legal Authorities: Malaysian law enforcement agencies, courts, or regulatory bodies that issue valid legal orders or requests requiring the disclosure of information. In such situations, M13Win will only disclose the minimum information necessary.
• Security Protection: Where M13Win reasonably believes that disclosure is necessary to protect the safety, rights, or property of M13Win, its members, or the public from serious and unavoidable harm.
• Business Transfer: In the event of a merger, acquisition, or transfer of M13Win's assets to another entity, members' personal data may be transferred as part of the transaction. Members will be notified by email prior to any such transfer.

M13Win implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, use, or disclosure:

• 256-bit SSL Encryption: All communication between your browser and M13Win servers is encrypted using TLS 1.3 with AES-256 encryption — the strongest standard commercially available
• Encrypted Storage: All personal data stored in M13Win's databases is encrypted with AES-256 at rest and in transit
• Strict Access Controls: Only M13Win staff with a legitimate business need may access member data, and only to the extent required for their role. All access is logged and audited regularly
• Two-Factor Authentication (2FA): All administrator access to M13Win internal systems requires 2FA. We also encourage members to enable 2FA on their accounts for added protection
• 24/7 Threat Monitoring: M13Win's automated monitoring system detects and alerts on any suspicious activity or unauthorised access attempts in real time
• Regular Security Audits: M13Win undergoes regular independent security assessments and penetration testing to identify and address any vulnerabilities before they can be exploited
• Data Segregation: Member deposit funds are held in an account separate from M13Win's operational funds, ensuring your money is always available and protected.

While M13Win takes all reasonable precautions, no security system is one hundred percent foolproof. In the event of a data breach that materially affects your personal data, M13Win will notify you within 72 hours of becoming aware of the breach, in line with industry best practices.

The M13Win platform uses cookies and similar tracking technologies to enhance the user experience and ensure essential platform functions operate correctly. The following types of cookies are used:

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collects aggregated, anonymised information about how users interact with the platform — including most-visited pages and page response times. This data helps us improve platform performance.
• Functional Cookies: Remembering your preferences such as favourite game types, display settings, and interface preferences to provide a more personalised experience.
• Analytics Cookies: Used to understand overall platform usage patterns for product improvement purposes. This data is anonymised and does not identify you as an individual.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the M13Win platform. Cookies do not store your financial information or passwords — this sensitive information is only processed through separate secure channels.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles adopted by M13Win, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you. Access requests will be processed within 14 business days from the date the request is received.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Corrections will be made within 7 business days.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose. This does not apply to data that is required by law to be retained (such as financial transaction records).
• Right to Restrict Processing: In certain situations, you may ask us to restrict how we use your personal data while a particular issue is being resolved.
• Right to Object: You have the right to object to the use of your personal data for direct marketing purposes at any time. Objections will be processed immediately.
• Right to Unsubscribe: You may unsubscribe from all M13Win marketing communications at any time via the unsubscribe link in any promotional email or through your account settings.

To exercise any of the rights listed above, please contact the M13Win privacy team by email at support@m13win.xyz, clearly stating your request and providing sufficient identifying information for us to verify your identity.

M13Win does not retain your personal data longer than necessary for the purposes outlined in this Privacy Policy or as required by applicable Malaysian law. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for the duration of your active account plus the statutory period required after account closure (typically 7 years for financial records in accordance with Malaysian legal requirements)
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date as required under Malaysian accounting and anti-money laundering laws
• Support Communication Records: Retained for 2 years from the date of last interaction for complaint resolution and service improvement purposes
• Technical & Security Logs: Retained for 90 days for security and technical troubleshooting purposes
• Marketing Data (with consent): Retained until you withdraw your consent or unsubscribe from marketing communications

Once the retention period expires, your personal data will be securely deleted using methods that ensure the data cannot be recovered. Fully anonymised data (i.e. data that can no longer be linked to any specific individual) may be retained for a longer period for aggregate analytics purposes.

The M13Win platform is intended for individuals aged 18 and above only. We do not knowingly collect or process personal data from anyone under the age of 18.

If M13Win discovers that personal data of a child under 18 years of age has been collected without proper age verification, we will take the following steps immediately:

• Deleting all related personal data from our systems
• Closing the relevant account and returning any deposit balance to the identified legal guardian
• Taking additional preventive measures to ensure similar incidents do not recur

If you are a parent or guardian and believe your child has registered a M13Win account, please contact us immediately at support@m13win.xyz. We will take prompt action to resolve the matter.

M13Win reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The notification process for changes is as follows:

• Material changes (those that significantly affect your privacy rights) will be communicated via email to your registered address at least 14 days before the changes take effect
• In-platform notifications will also be displayed to ensure all active members are informed of any changes
• The "Updated" date at the top of this document will be revised whenever changes are made
• Previous versions of the Privacy Policy will be archived and available upon request via the support email

Your continued use of the M13Win platform after any changes take effect will be considered your acceptance of the updated privacy terms. If you do not agree with any changes, you have the right to close your account before they come into effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how M13Win handles your personal data, please reach out to us:

• Privacy Email: support@m13win.xyz — for privacy and personal data enquiries, please include "Privacy Enquiry" in the subject line of your email
• Live Chat: Available 24/7 within the M13Win platform — for general enquiries and issues requiring an immediate response

For requests relating to data access, correction, or deletion rights, please include in your email: your full name, your M13Win account number, the type of request being submitted, and any other relevant details. This allows our team to process your request more quickly and accurately.

M13Win is committed to responding to all privacy-related enquiries within 14 working days from the date the request is received. More complex complaints may require additional time, but you will be kept informed of progress on a regular basis.