Privacy Policy

Malaysia33 ("Company", "we", "us", "our") operates the online gaming platform accessible at malaysia33.cam and all associated mobile-optimised interfaces. We are committed to safeguarding the privacy and personal data of every individual ("User", "Player", "you") who accesses, registers with, or otherwise interacts with the Malaysia33 platform.

This Privacy Policy ("Policy") describes in detail the categories of personal data we collect, the purposes for which that data is processed, the legal bases underpinning our processing activities, the parties with whom data may be shared, and the rights you hold as a data subject. This Policy forms an integral part of the Malaysia33 Terms and Conditions and should be read in conjunction with that document.

By registering an account on the Malaysia33 platform, or by continuing to use the platform after this Policy has been brought to your attention, you acknowledge that you have read, understood, and agree to the data practices described herein. If you do not agree with any aspect of this Policy, you should not use the platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that individual's identity.
• "Processing" means any operation or set of operations performed on personal data, whether or not by automated means — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Malaysia33 in its capacity as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means a third party that processes personal data on behalf of Malaysia33 under a contractual arrangement and in accordance with our documented instructions.
• "Data Subject" means the individual to whom the personal data relates — in the context of this Policy, this primarily refers to registered Players.
• "Consent" means a freely given, specific, informed, and unambiguous indication by the data subject of their agreement to the processing of their personal data.
• "Cookies" means small text files placed on a user's device by a website to store information about that user's preferences and browsing activity.

Malaysia33 collects personal data through several means, including direct collection from you during registration and account use, automated collection through technical systems, and in certain cases from third-party identity verification partners. The categories of data we collect are as follows:

We do not collect special categories of sensitive personal data (such as biometric data, health information, or racial origin) except where a regulatory requirement specifically mandates it and appropriate safeguards are in place.

Malaysia33 uses your personal data for the following purposes. We process your data only where a valid legal basis exists as set out in Section 5.

We use identity and contact data to create and maintain your Player account, authenticate your login, process your KYC verification, and communicate essential account-related notices including password resets, security alerts, and policy updates.

We process financial data to execute deposits and withdrawals via supported MYR payment channels (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency options including BTC, ETH, and USDT), to prevent fraud, and to satisfy anti-money laundering (AML) obligations.

Technical and account data is used to deliver, maintain, and improve the platform — including personalising your gaming experience, diagnosing technical faults, and conducting internal analytics to understand how features are used across our player base.

We are required by applicable law and our operating licence conditions to collect and retain certain data for defined periods for the purposes of AML compliance, fraud prevention, tax reporting, and responsible gambling monitoring. Processing for these purposes may override your right to erasure in certain circumstances.

Where you have given explicit consent, we may use your contact data to send you promotional communications about Malaysia33 offers, bonuses, and new platform features. You may withdraw your consent to marketing communications at any time by contacting our support team or using the unsubscribe mechanism in any marketing message.

Communications data from live chat, email, and WhatsApp interactions is retained to resolve support queries, train support staff, and maintain records of dispute resolutions. Our support team operates in English, Bahasa Melayu, and Mandarin.

Malaysia33 processes your personal data on one or more of the following legal bases, which are assessed on a purpose-by-purpose basis:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you under the Terms and Conditions — for example, to process your deposits and withdrawals, settle wagers, and manage your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and gambling licence conditions.
• Legitimate Interests: Processing is necessary for the purposes of our legitimate business interests — including fraud prevention, platform security, and internal analytics — provided those interests are not overridden by your privacy rights.
• Consent: For optional processing activities such as marketing communications and non-essential analytics cookies, we rely on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

Malaysia33 does not sell, rent, or trade your personal data to any third party for commercial gain. We may share your personal data with the following categories of recipients where it is necessary to do so:

We engage trusted third-party service providers who act as data processors on our behalf, including payment gateway operators, identity verification platforms, cloud infrastructure providers, and fraud detection services. These parties are contractually bound to process data only on our documented instructions and to implement appropriate technical and organisational security measures.

We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to prevent, investigate, or take action against illegal activity, suspected fraud, or breaches of our Terms and Conditions.

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, personal data held by Malaysia33 may be transferred to the acquiring entity, subject to the receiving party assuming the obligations of this Privacy Policy with respect to the transferred data.

In circumstances not covered above, we will share your personal data with third parties only with your explicit prior consent. You may withdraw such consent at any time.

Malaysia33 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without materially affecting platform functionality.
• Functional Cookies: Allow the platform to remember your preferences — such as your chosen language (English, Bahasa Melayu, or Mandarin), display settings, and last-used payment method — to improve your experience on return visits.
• Analytics Cookies: Used with your consent to collect aggregated, anonymised data on how players interact with the platform, enabling us to identify areas for improvement. No individual player is identifiable from analytics data.
• Marketing Cookies: Used with your consent to measure the effectiveness of promotional campaigns and to deliver relevant offers. You may opt out of marketing cookies at any time through your account settings.

You can manage your cookie preferences at any time through your account settings or by adjusting your browser configuration. Please note that disabling strictly necessary cookies may impair your ability to use the Malaysia33 platform.

Malaysia33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your active account plus five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction to meet financial and regulatory reporting obligations.
• KYC Documents: Retained for five (5) years from account closure or the date of the last transaction, whichever is later, in accordance with applicable anti-money laundering regulations.
• Support & Communications Records: Retained for three (3) years from the date of the interaction to support dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your active marketing consent plus a reasonable period thereafter to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it can no longer be attributed to an identifiable individual.

Malaysia33 implements a comprehensive framework of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our platform servers.
• At-rest encryption for all personal data stored on our cloud infrastructure.
• Multi-factor authentication requirements for all staff access to systems containing player personal data.
• Role-based access controls ensuring that employees access personal data only to the extent required for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Continuous real-time monitoring for suspicious access patterns, including automated alerts for anomalous login attempts.
• Formal data breach response procedures with defined escalation timelines and notification obligations.

As a data subject, you hold a number of rights with respect to your personal data held by Malaysia33. These rights may be subject to conditions and limitations under applicable law. To exercise any of these rights, please submit a written request to [email protected]. We will respond within thirty (30) calendar days of receipt of a valid request.

The Malaysia33 platform is strictly intended for individuals who are at least twenty-one (21) years of age. We do not knowingly collect personal data from persons under the age of 21. As part of our registration and KYC process, we verify the age of all applicants before granting access to any real-money gaming features.

If we become aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on our platform, please contact us immediately at [email protected].

Malaysia33's primary data processing infrastructure is located within jurisdictions that maintain adequate data protection standards. However, some of our third-party service providers — including cloud infrastructure and payment processing partners — may process personal data in countries outside Malaysia. In all such cases, we ensure that appropriate safeguards are in place before any transfer occurs.

Safeguards for international transfers may include: contractual clauses approved by relevant data protection authorities, adequacy decisions recognising the destination country's data protection framework as equivalent to applicable standards, or binding corporate rules where data is transferred within a corporate group.

You may request further information about the specific safeguards applicable to any international transfer of your personal data by submitting a written request to our support team.

The Malaysia33 platform does not include links to third-party websites or services for commercial or advertising purposes. Where references to third-party entities (such as payment providers) appear on the platform, they are provided for informational purposes only.

Malaysia33 accepts no responsibility for the privacy practices, data handling procedures, or content of any third-party service you may independently access. We recommend reviewing the privacy policy of any third-party service before providing them with your personal data.

Malaysia33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or platform functionality. Material changes — being changes that affect your rights or the nature of data we collect — will be communicated to registered Players via email or a prominent on-platform notice no fewer than fourteen (14) calendar days before the revised Policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date on which the most recent revision was published. Your continued use of the platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and may close your account in accordance with the Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how your personal data is being handled, please contact our support team through any of the following channels:

If you are dissatisfied with our response to a privacy complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We encourage you to contact us in the first instance so that we have the opportunity to address your concern directly.