1. Home
  2. Privacy Policy
Data Protection · 256-bit SSL Encryption · No Sharing Without Consent

Privacy Policy 33win – How We Protect Members' Personal Data in Malaysia

Your privacy is more than a legal obligation to us — it is a commitment we take seriously every day. This document clearly explains what we collect, why we need it, and how we keep it secure.

Last Updated: January 2026 · Malaysia PDPA 2010 Compliant

PRIVACY COMMITMENT

Six Ways 33win Protects Your Data

This Policy is more than a document — it reflects the real practices we carry out every day to maintain your trust.

High-Level Encryption

All data transmitted between your device and 33win's servers is protected using 256-bit SSL encryption — the same standard used by leading financial institutions worldwide.

Strictly Restricted Data Access

Only staff who genuinely require access to your personal data for authorized operational purposes are permitted to do so. All access is logged and monitored by our internal security team.

Malaysia PDPA Compliant

33win operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have complete rights over your data, and we respect those rights.

No Sale of Data to Third Parties

Your personal data is never sold, rented or shared with any external marketing party for advertising purposes. Your information belongs to you, not to our business as a commodity.

Right to Data Erasure

You may request deletion of your personal data at any time through 33win customer support, subject to applicable legal retention requirements.

Data Breach Notification

In the event of any security incident involving your data, 33win will notify you within the timeframe required by law and take immediate remedial action.

Contents
Privacy Questions?
Live Chat — available 24/7 for privacy enquiries
[email protected]
Response within 1–24 hours

Important Note to All Users

By using the website, mobile app or any services 33win, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of our platform. We encourage you to read this document in full so you understand your rights completely.

1. Scope & Introduction to the Privacy Policy

This Privacy Policy ("Policy") describes the personal data collection, use, storage and protection practices of 33win ("us", "Platform") for all users who access the website, mobile app and related services operated under the 33win.lc domain.

This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international privacy standards. We are committed to ensuring that all data you entrust to us is handled responsibly, transparently and securely.

This Policy may be updated from time to time. Any significant changes will be communicated to members via in-platform notifications or registered email. Continued use of the platform after changes are published means you accept the updated version of the Policy.

This Policy applies to all data collected via the desktop website, Android and iOS mobile apps, and any official 33win communication channels including live chat and support email.

2. Personal Data We Collect

We only collect data that is strictly necessary to provide a safe, fair and trustworthy service. The following are the categories of data we collect:

Data You Provide Directly

  • Identity Information: Full name, identity card number (MyKad), date of birth and full address collected during account registration.
  • Contact Information: Phone number, email address and, where applicable, the social media account you use to log in.
  • Financial Information: Bank account number, bank name and eWallet details registered for deposit and withdrawal purposes.
  • KYC Verification Documents: A copy of your MyKad or passport, proof of address, and any other documents required for the identity verification process.

Automatically Collected Data

  • Technical Data: IP address, device type, operating system, browser version and screen resolution.
  • Usage Data: Pages visited, session duration, betting records, transaction history and platform usage patterns.
  • Location Data: Approximate location based on IP address for security purposes and geographic region verification.
  • Cookie Data: Information stored through cookies and similar tracking technologies in your web browser or app.
We do not collect sensitive information such as biometric data, medical records or religious beliefs unless explicitly required by applicable law.

3. How We Use Your Data

Every piece of data we collect is used for a legitimate and necessary purpose. Below is a complete list of the purposes for which your personal data is used by 33win:

Purpose of Use Types of Data Used Legal Basis
Account registration & verification Name, email, phone number, MyKad Contract performance
Deposit & withdrawal processing Bank details, phone number, email Contract performance
KYC verification & anti-fraud MyKad, supporting documents, IP address Legal obligation
Customer support & communications Email, phone number, chat records Legitimate interest
Security monitoring & fraud prevention IP address, device data, usage patterns Legitimate interest & legal
Promotional & bonus notifications (with consent) Email, phone number Consent
Product improvement & platform analytics Anonymised usage data Legitimate interest

4. Data Sharing with Third Parties

33win does not sell, rent or trade your personal data. However, under certain circumstances, we share data with selected third parties for legitimate operational purposes:

  • Payment Processor: Transaction data is shared with banks, eWallet operators and approved payment gateways solely to process your deposits and withdrawals.
  • Identity Verification Provider: KYC data is shared with approved third-party verification services that are bound by strict confidentiality agreements.
  • Technical Service Provider: The cloud computing services, data hosting, and cybersecurity providers we use may process your data on our behalf, subject to binding data processing agreements.
  • Legal Requirement: We may be required to disclose your data if ordered by a court, law enforcement agency or regulatory body with lawful jurisdiction.
All third parties we engage are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for the specific purposes set out in their agreements with us.

5. Data Security Measures

We invest seriously in security infrastructure to ensure your personal data is always protected. Key security measures we implement include:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers.
  • Encryption of data at rest for all sensitive information stored in our databases.
  • Two-factor authentication (2FA) available and encouraged for all member accounts, mandatory for all withdrawals.
  • 24/7 security monitoring by our internal cybersecurity team and automated threat detection systems.
  • Penetration testing periodically by independent external security firms to identify and patch system vulnerabilities.
  • Role-based access control ensures that only authorised staff can access sensitive data.
While we take all reasonable measures, no security system can be guaranteed 100% foolproof. You also play an important role by keeping your password and login credentials secure.

6. Cookies and Tracking Technologies

33win uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services.

Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login, game sessions and security. Cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects anonymous analytics data on how you use the platform to help us improve our services.
  • Preference Cookies: Stores personal settings such as your language, time zone and display preferences.
  • Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access and other security threats.

You can manage cookie settings through your browser at any time. Disabling certain cookies may affect the functionality or experience of using the 33win platform.

7. Your Privacy Rights as a Member

Under Malaysia's PDPA and our internal policy, you have the following rights regarding your personal data held by 33win:

ACCESS RIGHT
Access to Your Data

Request a copy of all personal data we hold relating to your account in a readable format.

RIGHT TO RECTIFICATION
Data Rectification

Request correction of any inaccurate or incomplete personal data in your account.

RIGHT TO ERASURE
Data Deletion

Request deletion of your personal data in certain situations, subject to legal retention requirements.

RIGHT TO OBJECT
Objection to Processing

Object to the processing of your personal data for direct marketing purposes at any time without providing a reason.

RIGHT TO RESTRICTION
Restriction of Processing

Request restriction of your data processing under certain circumstances, such as while a data accuracy dispute is being resolved.

DATA PORTABILITY RIGHT
Data Portability

Receive your personal data in a structured, machine-readable format for transfer to another service provider.

To exercise any of the above rights, contact the 33win customer support team via live chat or email. We will process your request within 30 days as required by law.

8. Children's Privacy

Platform 33win is intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

Serious Warning: Should we discover that personal data from a minor has been collected without our knowledge, that data will be deleted immediately and the associated account will be terminated. Parents and guardians are advised to monitor their children's use of online platforms.

9. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes stated in this Policy or as required by law. General data retention period guidelines are as follows:

  • Active Account Data: Retained for as long as your account is active on the 33win platform.
  • Financial Transaction Data: Retained for a minimum of 7 years as required by Malaysian financial law.
  • KYC Data: Retained for the duration of the active account and up to 5 years after account closure for legal compliance purposes.
  • Closed Account Data: Basic information is retained for up to 5 years after account closure for audit and fraud prevention purposes before being securely deleted.
  • Security Logs: Retained for 12 months for security incident investigation purposes if required.

10. How to Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we manage your personal data, we encourage you to contact us directly. Our privacy team is ready to assist.

Live Chat
Available 24/7 — the fastest way
Email
[email protected] · Response within 1–24 hours

We are committed to responding to all privacy-related inquiries within a reasonable timeframe and processing all privacy rights requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department.

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions about Privacy at 33win

No. 33win never sells, rents, or shares your personal data with third-party advertising or marketing companies. The only situations in which data is shared are with service providers directly involved in platform operations (such as payment processors and KYC verification services), and all such parties are bound by strict confidentiality agreements.

Yes, you may request the deletion of your personal data. However, some data may need to be retained for a specified period to comply with legal requirements, such as financial transaction records (minimum 7 years). Once the legal retention period expires, your data will be securely deleted. To submit a deletion request, contact our customer support via live chat or email.

You can stop receiving promotional emails at any time in two ways: (1) Click the "Unsubscribe" link at the bottom of any promotional email we send, or (2) Go to your account settings in the 33win platform and adjust your communication preferences. Changes typically take effect within 3–5 business days. Please note that even if you unsubscribe from promotional emails, we will still send important account-related communications required for service operations.

After your account is closed, we will retain the minimum personal data necessary to comply with legal requirements — in particular, financial transaction records that must be kept for at least 7 years under Malaysian financial law. Data that is no longer required will be securely deleted once the specified retention period ends. You may still request a copy of your data before or after account closure.

Your Privacy Is Safe With 33win

Register your account today with confidence — your data is protected with the latest encryption, never sold to any party, and you retain full control over your information.

Register a Free Account Terms & Conditions
Bahasa Melayu