Privacy Policy app33 – Malaysia Member Data Protection

This Privacy Policy is published by app33 ("we", "the platform") and applies to all members and users who access or use the services provided through app33.best and any other digital channels we operate. This document transparently sets out our privacy practices — specifically how we collect, use, store, share, and protect your personal data as a valued Malaysian member.

We understand that trust is the foundation of a good relationship between a platform and its users. Not everyone enjoys reading through lengthy policy documents, but we believe you deserve to know exactly what happens to your information when you register, play, or make any transaction at app33. As such, we have endeavoured to write this policy in clear, plain language rather than obscure legal jargon.

app33 committed to upholding recognised data protection principles, including data minimisation (collecting only what is strictly necessary), a clear purpose for every piece of data collected, secure storage, and respect for your rights as a data subject. This commitment goes beyond mere legal obligation — it is a core value we hold in how we run our operations.

app33 collects personal data from you in several ways — directly when you register or use the platform, automatically as you browse our website, and in limited cases from legitimate third-party sources for verification purposes. Below are the categories of data we collect and the purposes for which they are collected:

We do not collect irrelevant sensitive data such as health information, religious beliefs, or political views. The financial data we retain consists of transaction records only — app33 does not store your full credit card number or bank account details; payment processing is handled by trusted, recognised third-party payment providers, such as the Malaysian e-wallet gateways you use.

app33 only uses your personal data for legitimate purposes as stated below. We will not use your data for purposes other than those stated without notifying you and, where necessary, obtaining your consent again.

Primary purposes for using members' personal data app33:

• Identity verification and eligibility: Verifying that you meet the minimum age requirement (18 years old) and other membership eligibility conditions before granting access to the platform.
• Financial transaction processing: Facilitates deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks, and processes withdrawals in MYR securely and accurately.
• Platform service provision: Managing your account and providing access to slots, poker, baccarat, Live Casino, and Sports Betting covering Malaysia Super League football, EPL, cricket, badminton, and e-sports.
• Security and fraud prevention: Detecting and preventing unauthorised access, identity fraud, money laundering, and conduct that violates app33's Terms & Conditions.
• Customer support: Enables app33's Bahasa Malaysia-speaking support team to assist you in resolving any issues or queries effectively.
• Responsible gaming: Monitoring gameplay patterns to identify signs that may require responsible gaming intervention, and enforcing limits you have set for yourself.
• Legal compliance: Fulfilling reporting obligations to relevant authorities under anti-money laundering legislation and applicable gambling regulations.
• Promotional communications (with your consent): Sending information about promotions, new bonuses, and special offers that may interest you — only if you have given your consent to receive such communications.

app33 does not sell or rent members' personal data to any party for marketing purposes. However, there are limited circumstances in which we need to share certain information with third parties in order to provide our services or fulfil our legal obligations. These circumstances are as follows:

• Payment service providers: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX online banking, the required transaction information is shared with the relevant payment gateways. These providers are bound by strict confidentiality agreements and their own data security standards.
• Game providers: To provide slots, poker, and Live Casino games, the minimum required data (such as session IDs and betting records) is shared with the relevant game providers. This data is used solely to enable gameplay functionality and is not used for any other purpose by those providers.
• Third-party fraud detection systems: As part of our efforts to prevent fraud and money laundering, app33 may use third-party services that process technical metadata (such as IP addresses and device patterns) to identify suspicious activity.
• Legal authorities: app33 will disclose personal data to government authorities, law enforcement, or regulatory bodies when required to do so by valid law, court order, or in connection with investigations into illegal activity.
• Business transfer: If app33 is involved in a merger, acquisition, or sale of business assets, user data may be transferred as part of those business assets, provided the receiving party maintains an equivalent or higher standard of data protection.

In all data sharing instances, app33 ensuring that all recipients are bound by adequate data protection obligations through written agreements before any data is shared.

Protecting members' personal data is among the highest technical and operational priorities at app33. We invest continuously in security infrastructure and industry best practices to ensure your data is protected against unauthorised access, alteration, disclosure, or destruction.

Key technical security measures we have implemented include:

• Encryption in transit: All communications between your browser and app33's servers are protected by the latest TLS (Transport Layer Security) protocol — the same technology used by banks and leading financial institutions to secure online transactions.
• Storage encryption: Sensitive data stored in app33's databases — including payment details and identity verification information — is stored in encrypted form. Even in the highly unlikely scenario where someone gains unauthorised access to the database, the encrypted data would be useless without the decryption keys, which are stored separately.
• Tiered access controls: app33 operates on a least-privilege principle — staff only have access to the data they need for their specific roles. Access to critical systems requires multi-factor authentication.
• Continuous monitoring: app33's security systems monitor platform traffic and activity 24 hours a day to detect any anomalies or suspicious access attempts in real time.
• Regular security testing: app33 conducts regular penetration testing and vulnerability assessments to identify and address any security weaknesses before they can be exploited.

Website app33 uses cookies and similar tracking technologies to enhance your browsing experience and enable essential platform functions to run smoothly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use on the platform app33:

• Essential cookies (required): These cookies are required for the platform's core functions, such as keeping you logged in during your session, processing transactions securely, and displaying content correctly. Without these cookies, the platform cannot function properly.
• Performance and analytics cookies: We use analytics cookies to understand how members use the app33 platform — which pages are visited most frequently, how long sessions typically last, and where traffic comes from. This information is used in aggregate (not at an individual level) to improve the user experience.
• Preference cookies: These cookies store your preferences, such as language settings and display preferences, so you do not have to reconfigure them each time you visit the app33 platform.
• Security cookies: Used to detect unusual behaviour that may indicate an unauthorised access attempt or fraudulent activity — a core component of app33's account protection system.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of the platform app33 — in particular, essential cookies required for login and transaction processing.

app33 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy, or longer than required by applicable law. The following are general guidelines on retention periods by data category:

• Active account data: Retained for as long as your account remains active on the app33 platform. Following account closure, basic data is kept for a period defined by legal retention requirements before being deleted or anonymised.
• Financial transaction records: Retained for a minimum of 7 years from the date of transaction, as required by anti-money laundering legislation and applicable accounting regulations.
• Security logs and support communications: Retained for 2 to 3 years for security audit purposes and the resolution of any disputes that may arise at a later date.
• Aggregate analytics data: Anonymised data (with all personal identifiers removed) may be retained for longer periods for trend analysis and overall platform improvement purposes.

Once the designated retention period has elapsed and there is no longer a legitimate legal or business reason to continue storing it, your personal data will be securely deleted from our systems. app33 using methods that ensure the data cannot be recovered.

If you wish to request early deletion of your personal data ahead of the standard retention schedule (known as the "right to be forgotten"), you may submit a request to the support team app33. Such requests will be assessed in accordance with applicable legal requirements — some data may not be erasable if its retention is required by law, such as financial transaction records.

As a member app33 whose data we process, you have certain rights regarding your personal data. app33 respects these rights and provides mechanisms for you to exercise them with ease:

To exercise any of the rights above, please contact the support team app33 via live chat, email at support@app33.best, or WhatsApp. Please include sufficient identifying information so we can verify your identity before processing your request. app33 will endeavour to respond to data rights requests within 30 days of receipt.

Platform app33 is intended strictly for individuals aged 18 and above. We do not knowingly collect personal data from children or individuals below the applicable minimum age. The app33 registration process requires date-of-birth verification, and we employ technical measures and verification procedures to minimise the risk of under-age registration.

In the event that app33 determines that personal data belonging to a minor has been collected inadvertently, we will take immediate action to delete the relevant data and close the account in question. Parents or guardians who discover that their child or dependent may have registered on the platform app33 urged to contact us immediately at support@app33.best so that appropriate action can be taken without delay.

app33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, technological developments, new legal requirements, or feedback from our members. When material amendments are made, we will:

• Displaying a clear notice on the platform's main page app33 regarding any changes made.
• Updating the "Last Updated" date at the top of this document.
• In the event of material amendments that affect how we use your data, we will send a direct notification to the email address or phone number registered to your account.

We encourage you to review this Privacy Policy periodically. Continued use of the platform app33 after the effective date of any amendment will be considered acceptance of the latest version of this Privacy Policy. If you disagree with the changes made, you have the right to close your account and we will process the withdrawal of any eligible balance in accordance with our standard procedures.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way app33 handling your personal data, please reach out to us through the following channels. Our Bahasa Malaysia-proficient team is ready to assist you and will endeavour to respond within a reasonable timeframe: