My33 understands that user trust is the foundation of everything we do. When you register and use our platform, you entrust us with sensitive personal information — and we do not take that responsibility lightly.
This Privacy Policy outlines our commitment to user data protection in a clear and accessible manner for all Malaysian users. It applies to all users who access the my33 platform via the website or mobile app, whether as a guest or a registered member.
Note: This Privacy Policy should be read together with Terms and Conditions my33. Both documents together form the complete agreement between you and our platform regarding the use of our services and the handling of your personal data.
By using the my33 platform, you agree to the data collection and usage practices described in this document. If you do not agree with any part of this policy, please stop using our platform immediately.
1 Who We Are and the Scope of This Policy
My33 is an online sports betting and casino gaming platform operating under a valid licence and in compliance with all applicable legal requirements. As the platform operator, my33 acts as the controller of personal data collected from users when they use our services.
This Privacy Policy covers all data processing activities that occur when you:
- Visiting the my33 website or downloading our mobile app.
- Registering and opening a new account on our platform.
- Performing any financial transactions, including deposits and withdrawals.
- Using our sports betting, slot games, or online casino services.
- Contacting our customer support team through any available channel.
- Participating in any of our promotions, lucky draws, or loyalty programs.
2 Types of Personal Data We Collect
My33 only collects data necessary to provide users with a safe, efficient, and responsible service. The following are the categories of data we collect:
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, identification card number | KYC verification and legal compliance |
| Contact Data | Phone number, email address, state/city | Account communications and customer support |
| Financial Data | Bank account number, bank name, account holder name | Deposit and withdrawal processing |
| Technical Data | IP address, device type, web browser, operating system | Account security and fraud prevention |
| Usage Data | Betting records, game history, login activity | Responsible gaming monitoring |
| Communications Data | Support chat records, emails, feedback | Complaint resolution and service improvement |
my33 no store credit or debit card details directly. All card transactions are processed by PCI-DSS certified third-party payment processors, ensuring your sensitive financial data is never stored in our systems.
3 Purpose of Data Collection and Use
Every piece of information we collect has a clear and legitimate purpose. my33 does not collect data excessively or for purposes unrelated to the services provided. The following are the primary purposes for which your personal data is used:
- Account Management: To create, verify, and maintain your user account, including a secure login process using two-factor authentication.
- KYC Processing: To fulfil the required Know Your Customer (KYC) obligations in order to ensure platform security and compliance with anti-money laundering laws.
- Financial Transactions: To securely process deposits and withdrawals, including verification of the bank account holder's identity.
- Service Communications: To send account notifications, transaction updates, security alerts, and relevant promotional information.
- Fraud Prevention: To identify and prevent fraudulent activity, money laundering, and platform abuse.
- Responsible Gaming: To monitor gambling patterns and intervene where signs of problem gambling are identified, as set out in the Responsible Gaming us.
- Service Improvement: To analyse aggregated usage data in order to improve the user experience, platform performance, and the variety of games offered.
- Legal Compliance: To fulfil any legal obligations or directives from the relevant authorities.
4 Lawful Basis for Data Processing
My33 processes your personal data on the basis of one or more of the following lawful grounds, depending on the relevant purpose of processing:
- Contract Performance: Processing required to provide the services you have requested, including account opening and transaction processing.
- Legitimate Interest: Processing for fraud prevention, platform security, and service improvement purposes that do not affect your fundamental rights.
- Legal Obligation: Processing required to comply with applicable laws, including reporting obligations to relevant authorities.
- Consent: For direct marketing and promotional communications, we rely on your consent, which may be withdrawn at any time through your account settings or by contacting our support team.
You have the right to withdraw your consent to marketing communications at any time without affecting the validity of any processing carried out prior to that withdrawal.
5 Data Sharing with Third Parties
My33 does not sell, rent, or trade users' personal data to third parties for marketing purposes. However, we share data in the following limited circumstances only:
- Service Providers: Technical partners such as payment processors, cloud service providers, and gaming software vendors that help operate our platform. All third parties are bound by strict data protection agreements and are not permitted to use your data for any other purpose.
- Relevant Authorities: Where required by law, court order, or a valid directive from a law enforcement authority, my33 will disclose the necessary information.
- Fraud Prevention: In cases involving confirmed fraud or financial crime, information may be shared with relevant financial institutions or authorities.
my33 never shares your personal data with advertisers, data brokers, or any third party for marketing purposes without first obtaining your explicit consent.
6 Data Security Measures
The security of your data is my33's top priority. We implement multiple layers of technical and organisational protection to keep your personal data safe at all times:
- End-to-End Encryption: All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption — the same standard used by leading banking institutions.
- Two-Factor Authentication (2FA): We support 2FA for all accounts to ensure only you can access your account, even if your password is compromised.
- Continuous Monitoring: Our security system monitors account activity in real time to detect and prevent any unauthorised access attempts.
- Internal Access Controls: Only authorised personnel may access users' personal data, and every access is recorded in a secure audit log.
- Secure Data Backup: User data is regularly backed up to a secure, separate location to ensure data availability and integrity under all circumstances.
While we take all reasonable steps to protect your data, no system is completely secure. If you suspect your account has been compromised, please contact our support team immediately.
7 Data Retention Period
My33 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required by applicable law.
- Active Account Data: For as long as your account remains active, and for the required period following account closure for audit and legal compliance purposes.
- Financial Transaction Records: A minimum of 7 years from the transaction date, in line with applicable financial and taxation legal requirements.
- KYC Records: A minimum of 5 years after the business relationship with the user ends, as required by anti-money laundering legislation.
- Support Communication Logs: Retained for 2 years for reference and resolution of any disputes that may arise at a later stage.
- Technical & Log Data: Retained for 12 months for security and fraud detection purposes.
Once the specified retention period has expired, your data will be securely deleted or anonymised in accordance with our standard procedures.
8 Your Rights as a User
You have clear rights regarding your personal data. my33 respects and facilitates the exercise of these rights:
Right of Access
Requesting a copy of the personal data we hold about you at any time.
Right to Rectification
Requesting correction of inaccurate or incomplete data in our records.
Right to Erasure
Requesting deletion of your data under certain circumstances permitted by law.
Right to Restriction
Requesting restriction of your data processing under certain specified circumstances.
Right to Portability
Receiving your data in a structured, machine-readable format.
Right to Object
Objecting to the processing of your data for direct marketing purposes at any time.
To exercise any of the above rights, please contact our privacy team through our customer support channels. We will process your request within a reasonable timeframe not exceeding 30 calendar days from the date of receipt of a complete request.
9 Cookies and Tracking Technologies
My33 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:
- Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled as they are critical to platform operations.
- Performance Cookies: Collecting aggregated and anonymized information on how users interact with our platform for improvement purposes.
- Preference Cookies: Storing your preferences such as language, display theme, and other settings to ensure a more comfortable experience on every visit.
- Security Cookies: Helping detect and prevent suspicious activity, including unauthorized login attempts and cyberattacks.
You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality and security of your account on the my33 platform.
10 Third-Party Links and Services
The my33 platform may contain links or integrations with third-party services such as game providers and payment processors. This Privacy Policy applies solely to the my33 platform.
Every third-party provider that works with my33 has undergone a rigorous security assessment and is required to meet data protection standards equivalent to our own policy. However, my33 is not responsible for the privacy practices of third parties that operate independently of our platform.
We recommend reading the privacy policy of any third party before interacting with their services, even when access is made through the my33 platform.
11 Amendments to the Privacy Policy
My33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The "Last Updated" date at the top of this document will always reflect the most current version.
For material changes that significantly affect your privacy rights, we will notify you via an in-platform notification or by email to the address registered to your account at least 14 days before the changes take effect.
Your continued use of the my33 platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy. We recommend that you review this page periodically.
12 Contact Us for Privacy Enquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist:
- Email: Reach us via the support email address listed in the footer of this website.
- Live Chat: Use the live chat feature available 24/7 within the my33 platform for immediate assistance.
- Response Time: We will respond within 3 business days for general enquiries, and within 30 days for formal user rights requests.
For frequently asked questions relating to privacy and your account, you may also refer to the FAQ page, which contains answers to most common questions from Malaysian users.
Six Principles Data Protection my33
Bank-Level Encryption
All your data is protected with 256-bit SSL encryption — the same technology used by major Malaysian banks to secure online transactions.
Minimum Data Collection
We only collect data that is strictly necessary to provide our services. There is no excessive data collection or information irrelevant to your account.
Secure & Efficient KYC
Our identity verification process is conducted through secure, encrypted channels. Your identification documents are stored with strict access controls.
Transparent Data Use
We are always transparent about how and why your data is used. No hidden agendas — every use of data has a justification you can review.
Control is in Your Hands
You may access, amend, and request deletion of your data at any time. Full control over your personal information remains in your hands as a user.
Full Legal Compliance
All our data handling practices comply with applicable data protection laws in Malaysia, ensuring your rights are always protected under the law.
Your Data is Safe with my33 – Register with Confidence
Your privacy and data security are our priority. Join millions of Malaysian players who trust my33 as their transparent and reliable online betting platform.