Malaysia PDPA Compliance 256-bit SSL Updated: June 2026

33win Privacy Policy โ€“ Personal Data Protection for Malaysian Members 2026

At 33win, your privacy is more than a legal obligation โ€” it is a responsibility we take seriously. This document transparently explains how we collect, use, store, and protect your personal information.

This Privacy Policy applies to all members and users of the 33win platform in Malaysia. If you have any questions, please contact us at support@33win-app.net.

๐Ÿ”
Your data is protected by
256-bit SSL

Bank-grade encryption

Malaysia PDPA

Legal compliance

Zero Data Selling

Data is never sold to anyone

Quick Summary: 33win collects only the personal information necessary to manage your account and process your transactions. We do not sell your data. We protect it with industry-grade encryption technology. And you have the right to access, amend, or request deletion of your data at any time.

Section 1

Introduction & Scope of This Privacy Policy

This Privacy Policy is published by 33win ("we", "platform") and applies to all users of the 33win-app.net website and related services we offer to players in Malaysia.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. This policy clearly outlines:

  • What personal data we collect when you use the 33win platform
  • Why we collect that data and how it is used
  • Who your data may be shared with under certain circumstances
  • The security measures we take to protect your information
  • Your privacy rights and how to exercise them

By registering for or using the 33win platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

This Privacy Policy is written in Bahasa Melayu as the primary document. In the event of any discrepancy in translation, the Bahasa Melayu version shall prevail.

Section 2

Personal Data We Collect

33win only collects data that is strictly necessary to provide our members with a safe, responsible, and high-quality service. The following are the categories of data we collect:

A. Data You Provide Directly

  • Identity information: Full name, date of birth, MyKad or passport number
  • Contact information: Malaysian mobile number, email address
  • Account information: Username, password (stored in unreadable hashed form), security questions
  • Financial information: Bank account number, account name, GrabPay/Touch 'n Go/DuitNow account email (for payment processing purposes only)
  • Verification documents: Copy of MyKad, passport, or bank statement for KYC processing

B. Automatically Collected Data

  • Technical data: IP address, device type, operating system, browser type and version
  • Usage data: Pages visited, time spent, games played, betting history and transactions
  • Location data: General location based on IP address (country/state) for eligibility verification purposes
  • Cookie data: Session cookies, preference cookies, and analytics cookies (see Section 8)
Data CategoryExampleRequirements
IdentityFull name, MyKad number, date of birthMandatory โ€“ account verification
RelationshipPhone number, emailMandatory โ€“ communication & security
FinancialBank account number, eWallet IDRequired โ€“ deposits & withdrawals
TechnicalIP, device, browserMandatory โ€“ security & fraud prevention
UsageGame history, bets placedMandatory โ€“ compliance & improvement
MarketingCommunication preferencesOptional โ€“ withdrawable
Section 3

How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. 33win does not use your data for any purpose unrelated to the services you signed up for. The key purposes are as follows:

  • Account management: Creating, verifying, and maintaining your member account on the 33win platform
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your registered bank account or eWallet
  • Identity verification (KYC): To fulfil legal obligations for verifying member identity in accordance with anti-money laundering regulations
  • Fraud prevention: Detecting and investigating suspicious activity, unauthorised access, and misuse of the platform
  • Customer support: Responding to enquiries, handling complaints, and providing technical support to members
  • Service improvements: Analysing usage patterns to improve platform performance, optimise the user interface, and introduce relevant new features
  • Marketing communications: Sending information about 33win promotions, new bonuses, and exclusive offers โ€” only if you have opted in to receive them
  • Legal compliance: Complying with court orders, regulatory requirements, or other applicable legal obligations

You may withdraw consent to receive marketing communications at any time by updating your account settings or contacting 33win support. Withdrawing consent will not affect your account services.

Section 4

Sharing Data with Third Parties

33win does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a commitment we will not waive.

However, there are limited situations in which your data may be shared with selected third parties:

A. Authorised Service Providers

33win works with trusted third-party service providers to handle certain operations. These include:

  • Payment processors โ€” to facilitate transactions via Malaysian eWallets and online banking
  • Cloud service providers โ€” for secure data storage and high platform performance
  • Game software providers โ€” to deliver slots, live casino, and Sports Betting
  • Analytics service providers โ€” to understand platform usage patterns (in aggregated, anonymised form)

All service providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.

B. Legal Requirements

33win may be required to disclose your personal data where mandated by law, including in response to court orders, regulatory requests, or to prevent serious financial crime.

We will not share your data with third parties for their own marketing purposes without your explicit consent. If you receive a communication claiming to be from 33win but asking for your personal information, please contact us immediately as this may be a phishing attempt.

Section 5

Data Security Measures

33win invests seriously in security technology and procedures to ensure your personal data is always protected against unauthorised access, loss, misuse, or unwanted disclosure.

The security layers we employ include:

  • 256-bit SSL Encryption: All data transmitted between your device and 33win's servers is encrypted using TLS 1.3 with 256-bit encryption โ€” the same standard adopted by Malaysia's leading financial institutions such as Maybank and CIMB.
  • Stored data encryption: Sensitive data stored in our databases (including financial details and identity information) is encrypted using AES-256 algorithms.
  • Password hashing: Your account password is never stored in plain text. We use a one-way cryptographic hash function (bcrypt), meaning even 33win's internal staff cannot read your password.
  • Strict access controls: Only 33win staff with a legitimate business need are permitted to access members' personal data, and all access is logged for audit purposes.
  • 24/7 Monitoring: Our security systems are monitored around the clock to detect any suspicious activity or anomalies that may indicate a potential security breach.
  • Two-factor authentication (2FA): Members are encouraged to enable 2FA for an added layer of protection on their account.
  • Regular security audits: 33win undergoes periodic independent security audits conducted by qualified third-party cybersecurity experts.

While we take all reasonable security measures, no system can be guaranteed 100% immune to cyber threats. You also play an important role in keeping your account secure โ€” use a strong password, never share your login credentials, and report any suspicious activity to 33win support immediately.

Section 6

Data Retention Period

33win retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law.

Data TypeRetention PeriodReason
Active account dataFor the duration of active accountOngoing account management
Transaction & financial data7 years after transactionMalaysia PDPA & tax requirements
KYC Documents5 years after account closureAML legal compliance
Communication logs3 yearsDispute resolution
System log data1 yearSecurity & audit
Marketing dataUntil consent is withdrawnConsent-based

Once the retention period expires, data will be securely deleted or fully anonymised so that it can no longer be linked to you.

Section 7

Your Privacy Rights as a 33win Member

As a data subject under Malaysia's PDPA, you have certain rights regarding the personal data 33win holds about you. We respect and facilitate the exercise of all these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. We will fulfil this request within 21 working days.

Right to Rectification

If the data we hold is inaccurate or out of date, you have the right to request a correction. Update your information within your 33win account or contact our support team.

Right to Erasure

You may request the deletion of your personal data under certain circumstances. Some data may need to be retained for legal or security purposes.

Right to Object

You may object to the processing of your data for direct marketing purposes. Withdraw your consent at any time without penalty.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform where applicable.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, contact us at support@33win-app.net with the subject line "PRIVACY RIGHTS REQUEST". Please include your full name and account number. We will respond within 5 business days.

Section 8

Cookie Policy

33win uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand platform usage patterns. Cookies are small text files stored on your device when you browse the 33win platform.

Cookie TypePurposeDurationStatus
Session Cookies Maintaining your login session; required for account security Until logout Mandatory
Preference Cookies Saves your language preference, theme, and personal settings 1 year Mandatory
Security Cookies Preventing unauthorised access and CSRF attacks Session Mandatory
Analytics Cookies Understanding how users interact with the platform (anonymised data) 2 years Optional
Performance Cookies Measuring page load times and identifying technical issues 1 year Optional

You can manage and delete cookies through your browser settings. However, disabling mandatory cookies may affect certain functions on the 33win platform, including your ability to log in to your account.

Section 9

Protection of Children's Data

The 33win platform is intended solely for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we discover or are made aware that personal data belonging to an individual under the age of 18 has been inadvertently collected, we will take immediate steps to:

  • Suspending the account in question immediately
  • Delete all data relating to that individual from our systems
  • Returning any deposited funds (where applicable) to their original source

Parents or guardians who believe their child may have registered an account with 33win are urged to contact us immediately at support@33win-app.net so that prompt action can be taken.

33win encourages parents and guardians to monitor their children's online activity and to use appropriate parental control software to prevent minors from accessing betting platforms.

Section 10

Links to Third-Party Websites

The 33win platform may from time to time contain links to third-party websites or services (for example, game providers or payment partners). This Privacy Policy applies solely to the 33win platform.

33win is not responsible for the privacy practices or content of any third-party websites you access via those links. We recommend reading the Privacy Policy of each third-party website before providing them with any personal information.

If you interact with payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or Maybank2u, those interactions are governed by the respective provider's privacy policy, not 33win's.

Section 11

Amendments to This Privacy Policy

33win reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. All amendments will:

  • Published on this page with an updated "Last updated" date
  • Members will be notified via email (for material amendments) at least 7 days before changes take effect
  • Prominently displayed on the 33win platform at login

Your continued use of the 33win platform after an amendment's effective date constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, please discontinue use and contact us to close your account.

Section 12

Contact the 33win Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 33win handles your personal data, please reach out to us via:

Email (Recommended)
support@33win-app.net
Subject: PRIVACY POLICY ENQUIRY
Live Chat
Available 24/7 within the platform
Response within <5 minutes

We are committed to responding to all privacy-related enquiries within 5 business days. For formal complaints, a structured resolution process will be initiated and you will be kept informed of your case's progress.

If you are dissatisfied with how we have handled your privacy complaint after going through our internal process, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the PDPA 2010.

Why Your Privacy Is Safe with 33win

Six tangible data protection commitments we uphold every single day

Malaysia PDPA Compliance

All of 33win's data processing operations are in full compliance with Malaysia's Personal Data Protection Act 2010. We stay up to date with any relevant changes in the law.

256-bit SSL Encryption

All data transmitted between your device and 33win's servers is protected with bank-grade encryption. No one can intercept or read your information while in transit.

Zero Data Selling

33win has never and will never sell, rent, or trade members' personal data to any third party for their own marketing purposes. This is an unwavering commitment.

Full Access & Control Rights

You have full rights to access, amend, transfer, or request the deletion of your data. The process is straightforward โ€” simply send us an email and we will respond within 5 working days.

Independent Security Audits

The 33win platform undergoes regular security assessments by independent experts. Any identified vulnerabilities are addressed promptly to ensure ongoing data protection.

Policy in Bahasa Malaysia

We believe every member deserves full transparency into how their data is managed. That is why this Privacy Policy is written entirely in plain, jargon-free language โ€” no technical complexity.

๐Ÿ”’

Your Data Is Protected. Enjoy 33win with Complete Peace of Mind.

Register your 33win account with confidence โ€” Malaysia's betting platform that takes your privacy and data security as seriously as your gaming experience.

256-bit SSL ยท PDPA Compliant ยท Zero Data Selling ยท 24/7 BM Support

Bahasa Melayu