Privacy Policy 33win68 – Your Personal Data Protection in Malaysia

33win68 is an online betting and casino platform operating in Malaysia, accessible at https://33win68.onl. We understand that our members' trust is our most valuable asset, and that trust starts with how we handle your personal information.

This Privacy Policy clearly and transparently explains:

• What personal information we collect from you when you use the 33win68 platform.
• How and why that information is used by us.
• Who your information may be shared with in limited and specific circumstances.
• The security measures we take to protect your information.
• Your rights regarding your personal data and how to exercise them.

This Privacy Policy applies to all users of the 33win68 platform — whether you are an unregistered visitor, a new member, or a long-standing member. It also applies to all products and services offered under the 33win68 brand.

33win68 only collects personal data that is strictly necessary to deliver a quality service to you. The following are the categories of data we collect:

Data You Provide Directly:

• Registration Information: Full name, Malaysian phone number, email address, and the password you created when registering your 33win68 account.
• Identity Verification (KYC) Information: Malaysian identity card number (MyKad), date of birth and residential address — collected during the identity verification process required for members making withdrawals above a certain threshold.
• Financial Information: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or Malaysian bank account details you use for deposits and withdrawals. 33win68 does not store your credit or debit card numbers directly.
• Communications: Any messages, complaints, or enquiries you send to the 33win68 customer support team via live chat, email, or other communication channels.

Automatically Collected Data:

• Log Data: IP address, web browser type, device operating system, pages visited, and access time for each session on the 33win68 platform.
• Gaming Activity Data: Betting history, game preferences, transaction history, and bonus activity on the 33win68 platform.
• Device Data: Device type (Android/iOS phone, laptop), screen resolution and unique device identifier used to access the platform.
• Cookie Data: Session information and preferences stored via browser cookies — see Section 7 for full details.

Personal data collected from 33win68 members is used solely for lawful and specific purposes. We do not use your data for any other purpose without your prior consent. The following are the primary purposes for which personal data is used at 33win68:

• Account Management: To create, verify and manage your 33win68 account, including processing registration, login and identity verification.
• Transaction Processing: To process deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, or FPX, and to process withdrawals of your winnings to your registered account.
• Platform Security: To detect and prevent fraud, money laundering, multiple account usage and other illegal activities that could compromise the security of the platform and its members.
• Customer Support: To process enquiries, complaints, and support requests submitted to the 33win68 support team.
• Responsible Gaming: To monitor gaming patterns and identify members who may need support related to Responsible Gaming, in line with 33win68's commitment to member well-being.
• Marketing (with consent): To send you promotions, bonus offers, and the latest 33win68 updates — only if you have given your consent to receive them.
• Legal Compliance: To comply with applicable legal and regulatory obligations in Malaysia, including anti-money laundering reporting requirements.

33win68 does not sell, rent, or share members' personal data with third parties for marketing purposes. However, under the following limited circumstances, we may need to share your data with certain parties:

• Payment Service Providers: The transaction information required is shared with e-wallet and banking providers such as Touch 'n Go, GrabPay, DuitNow, and FPX to process your deposits and withdrawals. These providers are bound by strict data protection agreements.
• Game Providers: Third-party game providers such as Evolution Gaming, Pragmatic Play, and PG Soft receive only the limited session information required to run the games. They do not receive your full financial or personal details.
• Malaysian Authorities: 33win68 will disclose personal data to the relevant authorities in Malaysia where required by law, court order, or official investigation. This includes the Financial Intelligence Unit (FIU) of Bank Negara Malaysia in cases related to money laundering.
• Technical Service Providers: Hosting, cybersecurity, and analytics service providers that help us operate the 33win68 platform may have limited access to your data. All such providers are bound by strict confidentiality agreements.

In all data sharing scenarios above, 33win68 ensures that recipients of the data are bound by privacy protections equivalent to or greater than the standards we ourselves uphold.

33win68 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All communications between your browser and the 33win68 servers are encrypted using TLS protocol with 256-bit keys — the highest security standard used in the banking industry.
• Stored Data Encryption: Sensitive data stored in the 33win68 database — including passwords and financial information — is encrypted using strong hashing algorithms and cannot be read in its original form.
• Strict Access Controls: Access to members' personal data is restricted to 33win68 staff who have a legitimate need to access it. All access is logged and audited on a regular basis.
• 24/7 Monitoring: The 33win68 cybersecurity team continuously monitors the platform to detect and respond to any security threats promptly.
• Two-Factor Authentication (2FA): 33win68 offers 2FA for all accounts as an added security layer to protect your account against unauthorised access.
• Regular Penetration Testing: The 33win68 platform undergoes regular security testing conducted by independent security experts to identify and address any potential vulnerabilities.

While we take all reasonable steps to protect your data, please note that no security system is 100% impenetrable. If you suspect your account has been compromised, contact the 33win68 support team immediately at support@33win68.onl.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), every 33win68 member has the following rights regarding their personal data:

• Right to Access: You have the right to know what personal data we hold about you and to request a copy of that data at any time.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request that it be corrected.
• Right to Erasure: Under certain circumstances, you have the right to request that your personal data be erased from our systems. Please note that some data may need to be retained to fulfil legal obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out beforehand.

To exercise any of the rights above, please contact the 33win68 privacy team at support@33win68.onl, clearly stating the right you wish to exercise and the information needed to verify your identity. We will respond within 14 business days.

33win68 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the 33win68 website. The following are the types of cookies we use:

You can control and manage cookie usage through your web browser settings. Please note that disabling essential cookies may affect the functionality of the 33win68 platform.

The 33win68 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

• Should we discover that we have collected data from a minor, we will take immediate steps to delete that data and close the relevant account.
• Parents or guardians who believe their child under the age of 18 has registered an account on 33win68 are urged to contact us immediately at support@33win68.onl.

In the course of its operations, personal data of 33win68 members may be stored or processed on servers located outside Malaysia. This may occur when we use cloud computing services or international technology providers.

• Any transfer of data outside Malaysia is conducted in compliance with the relevant international data transfer requirements under Malaysia's PDPA 2010.
• 33win68 ensures that any country or organisation receiving members' personal data provides a level of data protection equivalent to Malaysia's PDPA.
• All third-party service providers that store or process 33win68 members' data outside Malaysia are bound by strict data processing agreements that ensure adequate data protection.

33win68 does not retain members' personal data for longer than is necessary for the purposes set out in this Privacy Policy. Retention periods depend on the type of data and its intended use:

• Active Account Data: Personal data of members with active accounts is retained for as long as the account remains active and in use.
• Transaction History: Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to accounting and anti-money laundering.
• Security Log Data: Security logs and session data are retained for 12 months for fraud detection and security incident investigation purposes.
• Inactive Accounts: If an account has been inactive for more than 24 months, 33win68 reserves the right to delete personal data that is no longer required for legal obligations.
• Closed Accounts: Following account closure, personal data that is no longer required will be deleted within 90 days, except for data that must be retained to comply with legal obligations.

If you have any questions, concerns, or complaints regarding 33win68's Privacy Policy or how we handle your personal data, please do not hesitate to get in touch:

• Email: support@33win68.onl (please indicate "Privacy Enquiry" in the subject line)
• Live Chat: Available directly on the 33win68 platform, 24 hours a day, 7 days a week in Bahasa Malaysia
• Response Time: We aim to respond to all privacy enquiries within 14 business days

If you are dissatisfied with our response or the way we handle your personal data, you have the right to lodge a complaint with the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital.

33win68 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer.

• Any material changes to this Privacy Policy will be communicated to members via in-platform notifications or email to their registered address, at least 14 days before the changes take effect.
• The "Updated" date at the top of this document indicates the date on which this Privacy Policy was last revised.
• Continued use of the 33win68 platform after any changes take effect will be considered your acceptance of the amended Privacy Policy.
• We encourage you to review this page periodically to stay informed about how we protect your information.