Privacy Policy 33xx —
Protection Personal Data You

1 Information We Collect

When you register and use the platform 33xx, we collect several categories of personal information to ensure our services run smoothly, securely, and in compliance with applicable legal requirements. Below are the types of data we collect and the purposes for which they are collected:

We only collect data that is strictly necessary for the stated purposes. The principle of minimum data collection (data minimisation) is strictly upheld — we will never request information beyond what is necessary to operate our services.

2 How We Use Your Information

The personal information we collect is used responsibly and limited to legitimate purposes only. 33xx uses your data for the following purposes:

• Account management — registering, verifying, and managing your account on the 33xx platform.
• Payment processing — securely processes deposits, withdrawals, and other financial transactions via supported payment methods such as DuitNow, FPX, and local eWallets.
• KYC & AML Compliance — fulfils identity verification and anti-money laundering obligations as required by Malaysian law.
• Platform security — detecting, investigating, and preventing fraudulent activity, account misuse, and cybersecurity threats.
• Service improvement — analyzing usage patterns to improve your gaming experience, platform performance, and the game selection offered.
• Service communications — sending important account-related notifications, terms updates, security alerts, and responses to your customer support inquiries.
• Responsible gaming — monitors gaming patterns to identify signs of problem gambling and provide appropriate assistance.
• Marketing communications — sending relevant promotional information and special offers, subject to your consent preferences, which can be withdrawn at any time.

3 Data Sharing

33xx does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in operating the platform, we may need to share your data with certain parties under limited and controlled circumstances:

• Payment providers — banking institutions, eWallet operators, and payment gateways that process your deposit and withdrawal transactions. These parties are bound by strict confidentiality agreements and data security standards.
• Licensed game providers — third-party game operators who provide gaming content on the 33xx platform. They receive only the minimum data necessary to run the games.
• Technology service providers — companies supporting our technical infrastructure such as cloud computing, fraud detection, and platform analytics, all subject to strict data processing agreements.
• Legal authority — law enforcement bodies, courts, or regulatory authorities when required by Malaysian law or a valid court order.
• Professional advisors — lawyers, accountants, or auditors bound by their professional confidentiality obligations.

In all data sharing arrangements, we ensure that recipients comply with data protection standards equivalent to our privacy policy. Any transfer of data outside Malaysia will be carried out in accordance with the Personal Data Protection Act 2010.

4 Cookies & Tracking Technologies

Platform 33xx uses cookies (cookies) and similar tracking technologies to enhance your experience, ensure session security, and analyse our platform's performance. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login authentication and session management. These cookies cannot be disabled as they are critical to your account security.
• Performance Cookies — collecting information on how you use the platform (pages visited, time spent, errors encountered) to help us improve our services.
• Functional Cookies — saving your preferences such as language, display settings, and game choices so you don't need to reset them every time you login.
• Analytics Cookies — helps us understand aggregated and anonymised usage patterns for continuous platform improvement purposes.

You can manage your cookie preferences through your web browser settings at any time. Disabling essential cookies may affect platform functionality. For non-essential cookies, you may opt out without losing access to the platform's core features. 33xx.

5 Data Retention & Deletion

33xx retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. The following are our data retention guidelines:

• Active account data — retained for the duration your account is active and for 5 years after account closure, for legal compliance and dispute resolution purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian tax and anti-fraud legal requirements.
• Security and access logs — retained for 12 months for security investigation and unauthorised activity detection purposes.
• Customer support communications — retained for 3 years for reference and service quality improvement purposes.
• Marketing data — retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your data will be securely deleted using industry-standard data erasure methods, ensuring it cannot be recovered or misused after deletion.

6 Your Rights

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by 33xx. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact our customer support team 33xx via in-app live chat or email at [email protected]. We will process your request within 30 business days from the date of receipt.

7 Data Security

33xx implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or unintentional destruction:

• End-to-end encryption — all data transmitted between your device and our servers is protected with TLS 1.3 and 256-bit SSL encryption.
• Two-factor authentication (2FA) — an additional security layer available to all member accounts to prevent unauthorised access even if your password is compromised.
• Real-time threat monitoring — our intrusion detection system (IDS) monitors platform traffic 24/7 and automatically responds to suspicious activity.
• Regular penetration testing — we conduct security assessments (penetration testing) periodically by independent third parties to identify and patch vulnerabilities before they can be exploited.
• Role-based access control — internal staff may only access data necessary to perform their duties, with all access logged and audited.
• Incident response plan — we have clear procedures for handling data breaches, including notification to the relevant authorities and affected members within the timeframe prescribed by law.

8 Children's Privacy

Platform 33xx is an adult service intended solely for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors.

If you become aware that an individual under the age of 18 has registered an account on our platform, please contact our support team immediately. We will take prompt action to close the account and delete all associated data.

9 Policy Amendments

33xx reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Whenever an amendment is made, the "Updated" date at the top of this page will be updated to reflect the latest version.

For material amendments — meaning changes that significantly affect how we use your data — we will notify you via:

• An in-account notification upon your next login.
• Email sent to the address registered in your account.
• A prominent notice on our platform's home page.

Continued use of the platform 33xx after an amendment is published will be considered acceptance of the revised Privacy Policy. If you disagree with the changes, you have the right to close your account by contacting our support team.

We encourage you to review this page from time to time to ensure you are always informed of how 33xx protect your personal information. Previous versions of this Privacy Policy are available upon request through our customer support.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 33xx handles your personal data, our team is ready to assist through the following channels:

• Live Chat — the fastest way to get immediate assistance, available 24 hours a day, 7 days a week within the 33xx app.
• Privacy Email — for more detailed written inquiries, you may contact us at [email protected]. We aim for a response time within 2 business days.

For more information about our platform, please refer to the Terms and Conditions, Responsible Gaming and FAQ ours.