Club33 Privacy Policy – Protecting Malaysian Players' Data Is Our Priority

Club33 uses collected data only for specific, legitimate purposes. Below is a full explanation of how your data is used in our platform's operations.

• Account Management: Identity and contact data is used to create and manage your account, including identity verification, password recovery, and important account-related communications such as transaction notifications and security alerts.
• Transaction Processing: Financial data is used to process deposits and withdrawals via your preferred Malaysian payment method — whether that's Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks. Every transaction is logged for record-keeping and audit purposes.
• Legal Compliance: In line with legal requirements, club33 uses identity and financial data for AML (Anti-Money Laundering) and KYC (Know Your Customer) compliance. This includes verifying the source of funds and monitoring for unusual activity.
• Platform Security: Technical data such as IP addresses, device information, and login patterns are used to detect and prevent unauthorised access, fraud, multi-account usage, and activities that violate our Terms & Conditions.
• Responsible Gaming: Your gaming activity data is used to identify patterns that may indicate a gambling problem. club33 uses this information to offer proactive assistance or take preventive action in line with our responsible gambling commitment.
• Service Communications: Your email address and phone number are used to send you important information about platform updates, policy changes, bonus notifications you have opted in to receive, and customer support communications you have initiated.
• Platform Improvements: Anonymised technical and usage data is used to understand how players interact with the platform, identify technical issues and make improvements that enhance the club33 experience over time.

Club33 does not use your personal data to make automated decisions that have a legal or significant effect on you without human involvement. Every important decision affecting your account is subject to review by our staff.

Club33 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, there are limited circumstances in which we need to share certain data with trusted parties in order to operate the platform effectively.

• Payment Service Providers: To process your deposit and withdrawal transactions via Touch 'n Go, GrabPay, DuitNow, FPX, and other methods, we are required to share the necessary transaction details with the relevant payment providers. They receive only the minimum data needed to process the transaction and are bound by strict privacy agreements.
• Third-Party Game Providers: The club33 platform offers games from providers such as Pragmatic Play, Evolution Gaming and others. For Live Casino and slots games, necessary session data may be shared with these providers for technical purposes only, and not for marketing.
• Legal Requirements: Club33 may be required to disclose certain data to government authorities or regulatory bodies when mandated by law, court order, or directive from a competent authority. In such cases, we will notify you where permitted to do so by law.
• Technical Service Providers: We work with trusted third-party providers for services such as cloud computing, platform analytics, and technical support. All these providers are bound by data processing agreements that ensure they use your data only in accordance with our instructions and for no other purpose.

In all cases where your data is shared, we ensure that the receiving party maintains a level of data protection equal to or higher than our own. Club33 remains accountable for how your data is used, even when it is processed by third parties on our behalf.

Club33 continually invests in robust security infrastructure to protect our players' personal data from unauthorised access, loss, misuse, or accidental disclosure.

• 256-bit SSL Encryption: All communications between your browser or app and Club33's servers are protected with 256-bit SSL encryption. This means data in transit — including login credentials and transaction details — cannot be intercepted or read by third parties during transmission.
• Encrypted Password Storage: club33 account passwords are never stored in plain text. We use strong hashing algorithms with a unique salt for each password, ensuring your password cannot be recovered — even by our own staff.
• Two-Factor Authentication (2FA): club33 provides and encourages the use of 2FA for all accounts. With 2FA enabled, any login attempt from a new device requires additional verification via your Malaysian phone number, adding a critical second layer of security.
• 24/7 Monitoring: Our security system continuously monitors account activity to detect unusual patterns that may indicate unauthorised access or fraud attempts. Automated alerts are triggered whenever suspicious activity is detected.
• Internal Access Limits: Access to players' personal data within Club33 is restricted to staff who need it to carry out their specific job functions. All access is logged for audit purposes. Every staff member undergoes data protection training and signs a confidentiality agreement.
• Regular Security Testing: club33 conducts regular security audits and penetration testing by qualified independent parties to identify and address any security vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system is 100% impenetrable. In the unlikely event of a data breach affecting your information, Club33 will take immediate action and notify you and the relevant authorities as required by law.

As the owner of your personal data, you have the following rights, which you may exercise at any time by contacting the Club33 team. We are committed to processing all requests within a reasonable timeframe.

• Right to Access: You have the right to know what personal data we hold about you and how it is used. Data access requests will be processed within 30 days of receiving your application.
• Right to Rectification: If you find that your personal information in the Club33 system is inaccurate or incomplete, you have the right to request a correction. You may also update certain details directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that we may be required to retain certain data to meet legal obligations (such as transaction records for AML compliance) even where a deletion request has been made.
• Right to Restrict Processing: In certain circumstances, you may ask us to restrict how we use your data — for example, while you are disputing the accuracy of data we hold.
• Right to Object: You have the right to object to the processing of your data for specific purposes, particularly direct marketing. If you have previously consented to receiving marketing communications, you may withdraw that consent at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and to transfer it to another party should you choose to do so.

To exercise any of the rights above, contact us by email at support@club33.im with the subject line "PERSONAL DATA REQUEST" and state the type of request you are making. We may need to verify your identity before processing your request to ensure the security of your data.

Club33 uses cookies and similar tracking technologies to keep the platform running smoothly and to give you a better experience. Below is an explanation of the types of cookies we use and how you can manage them.

• Essential Cookies (Required): These cookies are essential for the core functions of the club33 platform — including login authentication, maintaining your game session, and processing transactions. Without them, the platform will not function properly. Essential cookies cannot be disabled.
• Preference Cookies: These cookies store your preferences such as display language, theme selection and other personal settings so you do not need to reconfigure them on every visit. They improve usability but have no effect on core functionality.
• Analytics Cookies: club33 uses anonymised analytics data to understand how players use our platform — which pages are visited most frequently, average session duration, and where users encounter difficulties. This information is used solely for platform improvement and is never linked to individual identities.
• Security Cookies: These cookies help us detect suspicious activity, prevent fraud, and protect your account from unauthorised access by identifying unusual login patterns.

You can manage cookies through your web browser settings. However, disabling essential cookies will affect the functionality of the Club33 platform and may prevent you from logging in or completing transactions. We recommend keeping at least essential cookies and security cookies enabled for the best experience and optimal security.

Club33 has a zero-tolerance policy on the use of our platform by anyone under the age of 18. This is a non-negotiable position for both legal and social responsibility reasons.

• Club33 does not knowingly collect, store, or process personal data from individuals under the age of 18.
• Every new account goes through an age verification process at the point of registration. Accounts suspected of belonging to underage individuals will be suspended immediately while an investigation is carried out.
• If we determine that we have inadvertently collected data from an underage individual, that data will be deleted immediately and the account in question will be closed.
• Parents or guardians who discover that their minor child has registered a Club33 account are urged to contact our support team immediately at support@club33.im for prompt action.

In the context of online platform operations, your data may be processed or stored on servers located outside Malaysia. This occurs primarily in connection with the cloud computing services and third-party game providers we work with.

• Whenever your data is transferred outside Malaysia, club33 ensures that a level of protection equivalent to that provided under Malaysian data protection law is maintained through appropriate transfer mechanisms.
• We only work with third-party providers that operate in countries with adequate data protection standards, or that have signed contractual agreements requiring an equivalent level of protection.
• You have the right to obtain more information about the countries where your data may be processed and the safeguards in place there by contacting us via our support email.

Club33 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law.

• Active Account Data: For as long as your account is active, we retain all data necessary to operate that account and provide you with Club33's services.
• After Account Closure: Upon account closure, personal data that is no longer required for legal compliance will be deleted or anonymised within a reasonable timeframe. Data that must be retained for legal compliance purposes (such as financial transaction records) will be kept for the period required under the applicable law.
• Financial Records: Under Malaysia's AML legal requirements, financial transaction records must be retained for a specified minimum period. These records are kept in a secure format and are accessible only by authorised personnel for audit or compliance purposes.
• Security Log Data: Security-related technical logs are retained for the period necessary for fraud detection and prevention purposes, after which they are automatically deleted or anonymised.

If you have any questions, concerns, or complaints about how Club33 handles your personal data, we encourage you to reach out to us directly. We take all privacy-related concerns seriously and will work to resolve them within a reasonable timeframe.

• Privacy Email: Send your enquiry to support@club33.im with the subject line "PRIVACY ENQUIRY" to ensure it reaches the right team.
• Live Chat: For immediate enquiries, use the live chat feature within the Club33 platform. Our support team is available 24/7 in Bahasa Melayu and can direct your privacy enquiries to the appropriate person.
• Response Time: We are committed to responding to all privacy-related enquiries within 5 business days. Formal requests for data access, correction, or deletion will be processed within 30 days.
• Complaints to the Relevant Authority: If you are not satisfied with how we have handled your privacy complaint after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection in Malaysia or the relevant regulatory body in your jurisdiction.