Privacy Policy app33 – Malaysian Player Data Protection

1 Introduction

App33 (hereinafter referred to as "we", "the platform" or "app33") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy is designed to give you a clear understanding of how we handle your personal data in accordance with the Malaysian Personal Data Protection Act 2010 and applicable international data protection standards.

We understand that trust is the foundation of our relationship with every player. When you entrust your personal data to app33, we do not take that trust lightly. Instead, we continuously invest in technology and processes to ensure your data remains secure and is used only for purposes you have consented to.

This Privacy Policy explains the types of data we collect, why we need it, how it is used, who it may be shared with under certain circumstances, and what your rights are as a data subject. We encourage you to read this document carefully and to contact us if you have any questions not answered here.

2 Information We Collect

App33 collects various types of information depending on how you interact with our platform. Below is a breakdown of the categories of information we collect:

We only collect data that is strictly necessary for platform operations and legal compliance. We do not collect data beyond those requirements, and each data category has a clear justification for its collection.

3 How We Use Your Data

App33 uses the data collected for various legitimate and necessary purposes to ensure our platform operates smoothly and delivers the best experience to every player. Specifically, your data is used to:

• Account Management — Creating and managing your account, verifying your identity through the KYC process, and handling login securely.
• Transaction Processing — Processing deposits, withdrawals, and all financial transactions on the platform accurately and securely.
• Customer Support — Providing responsive technical assistance and customer service whenever you need help.
• Platform Security — Detecting and preventing fraud, account abuse, money laundering, and any suspicious activity.
• Responsible Gaming — Monitoring gameplay patterns to identify players who may need support through our Responsible Gaming us.
• Legal Compliance — Fulfilling reporting and compliance obligations required under applicable Malaysian law.
• Platform Improvements — Analysing aggregate usage data to improve the features, performance, and overall experience of the app33 platform.
• Marketing Communications — Sending you relevant promotions, bonus offers, and the latest updates, subject to your communication preferences.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. However, account and security-related communications cannot be disabled as they are essential for the protection of your account.

4 Sharing Information with Third Parties

App33 does not sell, rent, or disclose your personal data to any third party for their own commercial purposes. However, in the course of operating the platform, there are certain situations where we need to share your information with the following parties:

• Payment Providers — Information necessary to process deposit and withdrawal transactions is shared with certified payment providers such as DuitNow, FPX, and relevant e-wallet providers.
• KYC Service Providers — For identity verification purposes, certain information is shared with trusted KYC partners certified by the relevant regulatory authority.
• Game Providers — Data required to operate games, such as usernames and game history, may be shared with game providers registered with app33.
• Legal Authorities — app33 will disclose the required data to legal authorities, enforcement agencies, or regulatory bodies when mandated by Malaysian law or a valid court order.
• Analytics Services — Anonymised usage data may be shared with analytics providers solely for platform improvement purposes.

5 Data Security

Player data security is an absolute priority for app33. We implement a range of technical and organisational measures to protect your data from unauthorised access, loss, alteration, or unintended disclosure.

Key security measures we practise include:

• 256-bit SSL/TLS encryption for all data transmitted over the network between your device and our servers.
• Encryption of sensitive data stored in databases using internationally recognised encryption algorithms.
• Multi-layered firewalls and intrusion detection systems (IDS) operating 24 hours a day, 7 days a week.
• Role-based access control (RBAC) ensuring staff can only access data required for their specific duties.
• Two-factor authentication (2FA) for all administrative access, also available as an additional security option for player accounts.
• Regular security audits and penetration testing conducted by qualified independent parties.
• Well-documented incident response procedures to ensure any breach is handled swiftly and efficiently.

Although we implement all reasonable security measures, no system can be guaranteed 100% secure. We encourage you to take personal precautions as well, such as using a strong password, enabling two-factor authentication, and never sharing your login credentials with anyone.

6 Cookies & Tracking Technologies

App33 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather analytical data that helps us understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
• Performance Cookies — Collecting information on how visitors use the website to help us improve the overall user experience.
• Functional Cookies — Saving your preferences such as language, display theme, and other settings so you do not need to reconfigure them on every visit.
• Analytics Cookies — Helping us understand aggregate usage patterns for product improvement purposes. This data cannot be individually identified.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect platform functionality and your login experience. Continued use of the app33 platform after a cookie notice is displayed will be considered your consent to the use of cookies as described above.

7 Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by app33:

• Right of Access — You have the right to request a copy of the personal data we hold about you.
• Right to Rectification — You may request the correction of any inaccurate or incomplete data.
• Right to Erasure — Under certain circumstances, you may request that your personal data be deleted from our systems.
• Right to Restrict Processing — You may ask us to restrict how we process your data in certain circumstances.
• Right to Data Portability — You may request your data in a machine-readable format for transfer to another service provider.
• Right to Object — You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the rights above, please contact the app33 customer support team via live chat. We will process your request within 30 calendar days. In some cases, we may require identity verification before processing any request related to your data.

8 Data Retention & Deletion

App33 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable Malaysian law. Retention periods vary by data category:

• Active account data is retained for as long as your account remains active on the app33 platform.
• Financial transaction data is retained for a minimum of 7 years in accordance with financial reporting requirements and anti-money laundering regulations.
• Security log data is retained for 2 years for investigation purposes in the event of a security incident.
• Customer support communication data is retained for 3 years for reference and service improvement purposes.
• After an account is closed, personal data that is no longer required will be deleted or anonymised within 90 days, unless there is a legal obligation to retain it for longer.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, appropriate document destruction procedures will be followed.

9 Children's Privacy

The app33 platform is intended for adults aged 18 and above only. We do not knowingly collect or process personal data of individuals under the age of 18. If we discover that a minor's personal data has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

If you discover that someone under the age of 18 has registered on our platform, please notify our customer support team immediately so that appropriate action can be taken without delay.

10 Third-Party Links

The app33 platform may contain references or links to third-party services such as game providers or payment providers. This Privacy Policy applies solely to the app33 platform and does not cover the privacy practices of those third parties.

We encourage you to read the privacy policy of each third-party service you access through the app33 platform. app33 is not responsible for the privacy practices or content of any third-party services.

11 Privacy Policy Amendments

App33 reserves the right to update or amend this Privacy Policy at any time. Any significant changes will be communicated to you via an in-platform notice or through your registered email at least 14 days before the changes take effect, except where changes are required by law and must be implemented immediately.

The "Updated" date at the top of this page reflects the date of the latest version of this Privacy Policy. We encourage you to review this page periodically. Continued use of the platform after amendments are published constitutes your acceptance of the latest version of the Privacy Policy.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you via live chat available 24/7 within the app33 platform.

You may also contact our Data Protection Officer via the platform's official email. All enquiries will be responded to within 3 business days, and all formal complaints will be handled in accordance with established procedures within no more than 30 calendar days.