Privacy Policy 33bmw — Member Personal Data Protection

33bmw, accessible at https://33bmw.ml, is a leading online gaming platform fully committed to protecting the privacy and personal data security of every registered member. This Privacy Policy has been formulated to comply with the requirements of the Malaysian Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

This policy clearly and thoroughly explains what types of personal data we collect, why it is collected, how it is used, who can access it, how long it is retained, and your rights as the owner of that data. We have written this policy in plain, easy-to-understand language so you truly know how your information is managed — not just confusing legal jargon.

By registering and using the 33bmw services, you agree to the collection and processing of your personal data as described in this document. If you do not agree with any part of this Privacy Policy, you are encouraged to contact our support team before continuing to use the platform.

To provide a secure, seamless, and high-quality service, 33bmw collects several categories of personal data. Below is a full description of each category along with its intended use:

We only collect data that is strictly necessary for the stated purposes. This data minimisation principle ensures we do not gather excessive information irrelevant to platform operations.

33bmw collects your personal data through a variety of transparent and lawful methods. The following are the primary ways in which information is collected:

• Account Registration: When you register, you provide us directly with basic information such as your name, email, phone number, and date of birth.
• KYC Process: During identity verification, you upload identification documents and proof of address that we require to meet compliance obligations.
• Financial Transactions: Every deposit and withdrawal made automatically generates a financial record stored in our system.
• Platform Usage: While you play, behavioral data such as games selected, wager amounts, and session duration are collected automatically.
• Cookies & Tracking Technologies: Your web browser sends technical information such as your IP address and device type when you access our platform.
• Support Interactions: When you contact customer support via live chat or email, the conversation is recorded for quality and security purposes.
• Licensed Third Parties: In certain cases, we may receive verification information from licensed third-party KYC service providers.

Every piece of data we collect has a clear and lawful purpose. 33bmw processes your personal data for the following purposes:

• Account Management: Creating, maintaining and managing your member account, including identity verification and eligibility.
• Transaction Processing: Processing all deposits, withdrawals and financial transactions on the platform securely and efficiently.
• Legal Compliance: Fulfilling our obligations under PDPA 2010, anti-money laundering (AML) requirements and Know Your Customer (KYC).
• Platform Security: Detecting and preventing fraud, unauthorised access, multiple account usage and suspicious activity.
• Service Communications: Sending important notifications related to your account, transactions, promotions and policy updates.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.
• Service Improvement: Analysing aggregated (anonymised) usage data to enhance user experience and platform features.
• Experience Personalization: Personalising game recommendations, promotions and content based on your preferences and usage behaviour.

33bmw does not share your personal data with third parties except in the following limited and lawful circumstances. All third parties who receive your data are bound by strict confidentiality agreements.

• Payment Provider: FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay and crypto providers require certain transaction data to process your payments.
• KYC Provider: Licensed third-party identity verification companies may receive copies of your documents for verification purposes only.
• Game Provider: Internationally licensed gaming software providers that supply live casino and slot content require minimum session data.
• Legal Authorities: We will disclose information when required by court order, police investigation or legitimate regulatory requirements.
• Cloud & Technical Services: Cloud and technical infrastructure providers that support our platform's operations may have limited access to data for technical purposes only.

In all of the above data sharing situations, we ensure that only data that is strictly necessary is shared, and the receiving party is obligated to maintain the confidentiality and security of that data to a standard equivalent to our own.

The security of your personal data is a responsibility we take seriously. 33bmw implements multiple layers of technical and organisational protection to keep your data safe at all times.

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS protocol, making it unreadable to unauthorized parties.
• Internal Access Controls: Only staff with a legitimate operational need are granted access to member personal data, and every access is automatically logged.
• 24/7 Monitoring: Our cybersecurity system monitors platform traffic and activity around the clock to detect any threats or anomalies.
• Regular Security Testing: We conduct regular penetration testing and security audits by independent experts to identify and patch vulnerabilities.
• Storage Data Encryption: Sensitive data stored in our databases is encrypted using the latest industry standards and is not stored in plain text.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of security to protect their account from unauthorised access.

33bmw retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account is active plus any legally mandated period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction occurs in accordance with Malaysian financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 6 years after the business relationship ends as required by AML/CFT requirements.
• Technical Logs: Access and technical activity logs are retained for 12 months for security and investigation purposes where required.
• Support Conversation Records: Retained for 24 months for service quality purposes and reference in the event a dispute arises.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the designated retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

As the owner of your personal data, Malaysian law grants you certain rights that are fully upheld by 33bmw. You may exercise any of the following rights at any time:

33bmw uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to operations.
• Performance Cookies: Collecting anonymous information about how visitors use the platform, such as the most frequently visited pages, to help us improve performance.
• Functional Cookies: Storing your preferences such as language, display settings and game preferences so your experience is more personalised on future visits.
• Analytics Cookies: Helping us understand platform usage patterns in aggregate using analytics tools that comply with privacy regulations.

You may manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect specific platform functions and your overall user experience.

33bmw is a gaming platform restricted to individuals aged 18 and above only. We do not intentionally collect or process personal data of underage children.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who find that their child has registered on our platform should contact our customer support immediately.

33bmw reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new service features. Any amendments will be communicated to you via:

• In-platform notifications at least 14 days before amendments take effect for material changes.
• An email will be sent to your registered email address for amendments considered to have a significant impact on your privacy rights.
• Updates the "Last Updated" date displayed at the top of this document.
• A prominent notice on the platform's main page for a specified period after amendments take effect.

Continued use of the 33bmw platform after amendments take effect constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this policy periodically to stay informed about how we manage your data.

If you have any questions, concerns or complaints regarding how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist. We are committed to responding to all privacy enquiries within 5 business days.

• Live Chat: The fastest way to get an immediate response — available 24 hours a day, 7 days a week via the chat icon within the platform.
• Email: Send your detailed enquiry to [email protected] and our team will reply within 1–2 business days.
• Official Complaints: If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP).

We value every piece of feedback from our members, as it helps us improve our privacy practices and better protect the interests of all 33bmw platform users.