33d Privacy Policy – Malaysian Player Personal Data Protection

33d is fully committed to protecting the privacy and security of personal data for all members and visitors to our platform. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards.

This Policy applies to all personal information you provide to us when registering, using our services, contacting customer support, or browsing the 33d platform through any device or channel. This includes the official 33d website, mobile app, and all our official communication channels.

We only collect data that is strictly necessary to provide you with the best service, fulfill our legal obligations, and ensure platform security. We never sell, rent, or trade your personal data for any third-party commercial purpose.

We collect various types of information depending on how you interact with the 33d platform. The following are the main categories of data we collect:

We also collect information automatically through cookies, tracking pixels, and similar technologies when you browse our platform. Further details on cookie usage are explained in Section 6.

Every piece of information we collect is used for a clear and lawful purpose. We do not use your data for any other purpose without informing you in advance. Below are the primary purposes of data use:

• Service Provision: Processing your account registration, deposits, withdrawals, and all gaming transactions.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 18 and confirming your identity for security and legal compliance purposes.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and other illegal activities.
• Service Communications: Sending transaction notifications, account updates, security alerts, and important service-related information.
• Customer Support: Helping resolve inquiries, complaints, and technical issues you report to our team.
• Platform Improvements: Analyzing usage patterns to improve the user experience, introduce new features, and optimize platform performance.
• Legal Compliance: Fulfilling legal obligations, including reporting to regulatory authorities when required.
• Targeted Marketing: Sending you relevant promotions and offers — only if you have given your consent to receive them.

We apply a "minimum necessary" approach to collecting and processing data — meaning we only gather information that is strictly required for the stated purpose. Data that is no longer needed will be deleted in accordance with our retention policy.

33d does not sell, transfer, or disclose your personal data to third parties except in the following defined circumstances:

• Trusted Service Providers: Payment processing companies, cloud service providers, gaming technology providers, and customer support vendors bound by strict confidentiality agreements with us.
• Legal Obligations: When required by a court, regulatory body, law enforcement agency, or competent Malaysian government authority.
• Fraud Prevention: Sharing required information with fraud prevention agencies to protect other players and the integrity of the platform.
• Business Transfer: In the event of a merger, acquisition, or asset sale, your data may be transferred to the relevant party with prior notice given to you.

Every third party that receives your data is required to comply with data protection standards equal to or higher than those we uphold. We periodically audit all third parties to ensure ongoing compliance.

We take data security seriously and have invested in industry-grade security infrastructure to ensure your information is always protected. Key security measures we implement include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is protected with industry-leading encryption.
• Hashed Password Storage: Account passwords are never stored in plain text — we use a strong bcrypt hashing algorithm.
• Two-Factor Authentication (2FA): This additional security feature is available and encouraged for all accounts.
• 24/7 Monitoring: Our security team continuously monitors the system to detect any suspicious activity.
• Regular Penetration Testing: We conduct regular security testing through independent security auditors.
• Data Segmentation: Sensitive data is stored in separate server segments with strict access controls.

While we take all reasonable steps to protect your data, no online system can guarantee 100% absolute security. We encourage you to also take protective measures on your end, such as using a strong and unique password and never sharing your login credentials with anyone.

The 33d platform uses cookies and similar tracking technologies to enhance the user experience, secure login sessions, and understand platform usage patterns. Below are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect core platform functionality, including the ability to log in to your account. Analytics and performance cookies can be disabled without affecting basic platform use.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and 33d's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team by email at [email protected] or via the platform's live chat. We will process your request within 14 working days. Any request requiring additional identity verification will be communicated to you in advance.

We retain your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by Malaysian law. Our general retention schedule is as follows:

• Active Account Data: Retained for the duration your account is active, plus 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• Support Communication Logs: Retained for 2 years from the date of last interaction.
• Technical Log Data: Retained for 90 days and then automatically deleted or anonymized.
• KYC Documents: Retained for 5 years after the business relationship ends, in line with regulatory requirements.

Once the retention period expires, your data will be securely deleted using methods that ensure the information cannot be recovered. For data stored in backup format, deletion will be carried out in the next backup cycle.

33d reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to your registered email address for material changes.
• Displaying a clear notice on the platform's login page at least 14 days before the changes take effect.

Your continued use of the 33d platform after any changes take effect constitutes your acceptance of the latest version of the Privacy Policy. It is your responsibility to review this document periodically to stay informed of how we handle your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 33d, do not hesitate to reach us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the 33d platform
• Telegram: @33dSupport

Our team will endeavour to respond to all privacy-related enquiries within 3 business days. For requests requiring identity verification or further investigation, the full process may take up to 14 business days. We will keep you informed of your request status throughout the process.