Privacy Policy my33 — Your Data, Our Responsibility

My33 ("we", "Platform") takes the privacy of every individual using our services very seriously. This Privacy Policy is drafted to ensure you fully understand how your personal data is managed from start to finish — from account registration through to data deletion at your own request.

This document covers all services offered by my33, including the official website at my33.onl, the mobile app for iOS and Android, live customer support chat, and all related communication channels. This Policy does not apply to third-party websites or services that may be linked from our platform.

My33 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to processing your personal data lawfully, transparently, and responsibly at all times.

My33 collects personal data through several means — information you provide directly during registration, data generated as you use the platform, and technical information collected automatically. Below is a detailed breakdown of each category:

We may also collect supporting documents during the identity verification (KYC) process, such as copies of your identification card, passport, or proof of residential address. All documents are stored in a secure, encryption-protected environment.

Every piece of data we collect has a clear and legitimate purpose. my33 will never use your personal information for purposes beyond what is stated here without first obtaining your additional consent.

• Account Management: Create, verify, and maintain your member account, including mandatory KYC procedures.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions via your chosen payment method.
• Service Delivery: Enable you to seamlessly access all games, promotions, and features on the my33 platform.
• Service Communications: Send important notices relating to your account, security, terms updates, and transaction information.
• Fraud Detection & Security: Monitor suspicious activity, prevent money laundering, and protect platform integrity.
• Product Improvement: Analyse usage patterns in aggregate to improve the gaming experience and user interface.
• Marketing (with consent): Send promotional information and exclusive offers only to members who have opted in to receive them.
• Legal Compliance: Fulfil reporting obligations to relevant authorities as required by law.

My33 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute commitment. However, there are certain situations where we need to share your information with carefully selected parties:

• Payment Service Providers: Transaction information is shared with our integrated payment processors solely to enable secure processing of deposits and withdrawals.
• Game Providers: Minimum required game session data is shared with licensed game providers for technical operational purposes.
• Identity Verification Services: KYC documents are shared with accredited third-party identity verification service providers to meet compliance requirements.
• Legal Authorities: my33 will disclose the required information to the authorities when mandated by law, court order, or a legitimate financial crime investigation.
• Analytics Partners: Anonymous and aggregated usage data (not personal data) may be shared with analytics tools for platform improvement.

All third parties we work with are bound by strict confidentiality agreements and are regularly audited to ensure they meet the data protection standards we have established.

The security of your personal data is the highest technical priority at my33. We continuously invest in cutting-edge security infrastructure to keep your information safe from all cyber threats.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and my33's servers is protected by industry-standard encryption that cannot be compromised.
• Hashed Password Storage: Your password is never stored in plain text — it is processed through a strong cryptographic hashing algorithm.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of account protection.
• 24/7 Monitoring: Our security systems continuously monitor the platform to detect and respond to any suspicious activity in real time.
• Server Segregation: Sensitive member data is stored on isolated servers that are not directly accessible from the public internet.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent third parties.

My33 uses cookies and similar tracking technologies to enhance user experience, understand how the platform is used, and deliver more relevant content to you. Cookies are small text files stored on your device when you browse our platform.

There are four types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use the platform to help us improve the user experience.
• Functional Cookies: Remember your preferences such as language, region, and display settings to deliver a more personalised experience.
• Analytics Cookies: Help us understand website traffic, popular pages, and user navigation patterns in aggregate.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect the functionality of the my33 platform.

My33 retains your personal data for as long as your account is active or as long as necessary to provide services to you. We may also retain certain data for a longer period when required by law, particularly financial and transaction records that must be kept for audit and regulatory compliance purposes.

• Active account data: Retained for as long as your account remains active and has not been closed.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial records.
• Support communication logs: Retained for 3 years for dispute resolution and service audit purposes.
• KYC and identity verification data: Retained for 5 years after account closure in accordance with anti-money laundering requirements.
• Technical log data: Retained for 90 days before being automatically deleted or anonymized.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold. We are committed to helping you exercise these rights without any undue restriction:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.
• Right to Rectification: If your personal data is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to Erasure: You may request deletion of your personal data, subject to applicable legal retention requirements.
• Right to Object to Marketing: You may withdraw consent to receive direct marketing communications at any time.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format upon request.
• Right to Object to Automated Processing: You have the right to object to any decision made solely based on automated processing that significantly affects you.

To exercise any of the above rights, please contact our support team via live chat or email. We will verify your identity first before processing any request related to your personal data.

My33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our services. The "Last Updated" date at the top of this document will always be refreshed whenever changes are made.

For significant changes that may materially affect your privacy rights, we will notify you via an in-app notice or an email sent to the address registered with your account at least 14 days before the changes take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our Data Protection Officer team is ready to assist you:

• Live Chat: Available 24/7 on the my33 app or website
• Privacy Email: [email protected] (responded to within 3 business days)
• Help Centre: Visit FAQ page us for more information

You may also refer to Terms and Conditions us for more information about your rights and responsibilities as a my33 platform member.