Privacy Policy malaysia33 – Personal Data Protection

1 Introduction & Privacy Policy Scope

This Privacy Policy ("Policy") is published by Malaysia33 and applies to all users of the malaysia33.onl platform, including the website, Android and iOS mobile apps, and all related services. This Policy transparently explains how Malaysia33 manages your personal data in accordance with best data protection practices and applicable law.

At Malaysia33, we understand that your trust in us goes beyond fair gameplay or fast deposits — it's also about the confidence that your personal information is handled responsibly. We do not take this responsibility lightly. Every decision we make regarding your data is guided by your best interests and privacy.

By using the Malaysia33 platform, you agree to the collection and use of information as described in this Privacy Policy. This Policy should be read together with the Terms & Conditions malaysia33, which forms the entire agreement between you and us.

2 Types of Personal Data We Collect

Malaysia33 collects your personal data through various means — directly when you register and use the platform, automatically through tracking technologies, and in certain cases, from trusted third-party sources. The following are the categories of data we collect:

Registration & Identity Data

• Full name as shown on official identification documents (MyKad or passport)
• Date of birth and gender
• Active email address and mobile phone number
• Current residential address
• Password (stored in cryptographically processed form — we do not store your original password)

Financial & Transaction Data

• Bank account number and bank name (for deposit and withdrawal processing)
• Records of all deposit and withdrawal transactions
• Payment methods used (FPX, Touch 'n Go eWallet, Boost, GrabPay, and others)
• Betting activity and game history

Technical & Usage Data

• IP address and device information (device type, operating system, phone model)
• Browser type and version used
• Login session data including time, location, and session duration
• Pages visited and buttons clicked within the platform
• App performance data and technical error reports

Identity Verification Data (KYC)

• Valid copy of MyKad, passport, or driving licence
• Proof of address such as a recent utility bill or bank statement
• In certain cases, a selfie photo for live identity verification purposes

3 How We Use Your Data

Every piece of data collected by malaysia33 has a clear and legitimate purpose. We do not use your data for any purpose other than those stated here:

Malaysia33 does not make automated decisions that have legal or similarly significant effects on you solely based on automated processing of your data, without human involvement.

4 Legal Basis for Data Processing

Malaysia33 processes your personal data on the following lawful bases in accordance with accepted data protection practices:

• Contract Performance: Processing necessary to provide platform services to you, including account management and transaction processing
• Legal Obligation: Processing required to comply with applicable laws, including AML and KYC obligations
• Legitimate Interest: Processing for platform security, fraud prevention, and service improvement purposes
• Consent: For marketing communications and certain cookie usage — you may withdraw consent at any time

5 Data Sharing & Disclosure

Malaysia33 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in certain limited situations, we may share your data with the following parties:

• Service Providers: Technical partners, payment processors, and cloud service providers that assist in platform operations, subject to strict data protection agreements
• Regulatory Authority: Government bodies, law enforcement agencies, or courts when required by law or a valid court order
• KYC & AML Providers: Identity verification and anti-money laundering check services used to ensure platform security
• Business Transfer: In the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity subject to appropriate notice being given to you

All third parties that receive malaysia33 member data are bound by confidentiality and data protection obligations equal to or stricter than those we apply ourselves. We conduct regular audits of all service providers to ensure ongoing compliance.

6 Security & Data Protection

Malaysia33 continually invests in high-grade security infrastructure to ensure your personal and financial data is fully protected. Key security measures we employ include:

• 256-bit SSL/TLS encryption for all data transmission between your device and our servers
• Password storage using strong hashing algorithms — we do not store passwords in plain text
• Two-factor authentication (2FA) is available and recommended for all accounts
• Round-the-clock security monitoring by an in-house cybersecurity team
• Periodic security audits conducted by qualified independent third parties
• Intrusion detection systems (IDS) and multi-layered firewalls
• Data storage in data centers with strict physical access controls
• Tested and documented security incident response procedures

While we take all reasonable precautions, no security system in the world can be guaranteed 100% secure. In the event of a security breach that materially affects your data, we will notify you within the timeframe required by applicable law.

7 Data Retention Period

Malaysia33 does not retain your personal data longer than necessary for the purpose it was collected. Retention periods vary based on the type of data and legal requirements:

• Active account data: Retained for the duration your account is active and for the required period after account closure to meet legal obligations
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial and AML legal requirements
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later
• Support communication logs: Retained for 3 years from the date of last interaction
• Technical data and server logs: Retained for 90 to 180 days depending on log type
• Marketing data (if consented): Retained until you withdraw consent or request deletion

Once the relevant retention period has expired, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

8 Cookies, Tracking & Similar Technologies

Malaysia33 uses cookies and similar tracking technologies to enhance the user experience, analyze platform usage patterns, and provide essential functionality. Types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session verification and security. These cookies cannot be disabled
• Functional Cookies: Store your preferences such as language and display settings for a smoother experience
• Analytics Cookies: Help us understand how users interact with the platform so we can continuously improve it
• Performance Cookies: Help monitor and improve platform speed and stability

You can manage or block cookies through your browser settings at any time. Please note that blocking certain cookies may affect specific platform functions. Malaysia33 does not use third-party advertising cookies or cross-site tracking technologies.

9 Your Rights as a Data Subject

Malaysia33 respects and facilitates the exercise of your rights regarding personal data. Your rights include:

To exercise any of the above rights, contact the malaysia33 data protection team via live chat or our support email. We will process your request within 30 calendar days of receipt. In complex cases, this period may be extended to up to 60 days, with notice provided to you.

10 Children & Minors Privacy

Malaysia33 does not provide services to individuals under 18 years of age. Our platform is not designed for minors, and we do not knowingly collect personal data from children. We employ various technical measures and age verification procedures to prevent registration by underage individuals.

If we discover that a child's personal data has been collected unintentionally, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered on our platform, please contact our support team immediately.

11 Changes to This Privacy Policy

Malaysia33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. Any material changes will be communicated to you via:

• Notices prominently displayed on the homepage or your account dashboard
• A notification email will be sent to your registered email address at least 14 days before the changes take effect
• Push notifications via the malaysia33 mobile app if you have enabled notifications

Your continued use of the malaysia33 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. The "Updated" date at the top of this document will always reflect the latest date changes were made.