Privacy Policy 33zk —
Malaysian User Data Protection

Introduction & Scope of This Policy

This Privacy Policy applies to all users who register, browse, or use any service provided by 33zk — including the main website, Android and iOS mobile apps, and all systems integrated with our platform. It covers how we handle your personal data from the moment you first visit the platform through any interaction that occurs after registration.

33zk operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We are committed to handling your data responsibly, transparently, and strictly within the scope necessary to deliver our services effectively.

Types of Personal Data We Collect

We only collect data that is strictly necessary to manage your account, process transactions securely, meet legal requirements, and deliver a better experience. Below are the main categories of data we collect:

How We Collect Your Information

Directly From You

Most of the data we hold comes directly from you — when you fill in the registration form, complete the KYC verification process, make your first deposit, contact our support team, or update your profile information. This data is provided consciously and voluntarily.

Automatically Through Platform Usage

When you use the 33zk platform, our systems automatically log certain technical information such as your IP address, browser type and version, operating system, screen resolution, and session activity records. This information is essential for security purposes, detecting unauthorised access attempts, and ensuring the platform functions correctly across all device types.

Through Cookies and Similar Technologies

33zk uses session cookies and preference cookies to maintain your login status, save your preferred settings, and improve platform performance. You can manage cookie settings through your browser settings, though disabling certain cookies may affect platform functionality. We do not use third-party cookies for marketing without your consent.

How We Use Your Information

The data we collect is used solely for legitimate and transparent purposes. Below is the full list of data usage purposes at 33zk:

• Managing Your Account: Creates and manages user accounts, verifies identity, and securely processes all financial transactions.
• Delivering Our Services: Grants access to all games and platform features, processes deposits and withdrawals, and provides technical support.
• Security & Fraud Prevention: Detects and prevents fraudulent activity, money laundering, unauthorised access, and any activity that violates the platform's terms.
• Legal Compliance: Fulfils applicable legal and regulatory obligations, including KYC requirements, financial reporting, and cooperation with authorities where legally required.
• Service Communications: Sends important notifications related to your account, security updates, transaction confirmations, and responses to your support enquiries.
• Personalisation: Personalises game recommendations and the platform interface based on your preferences and usage patterns.
• Continuous Improvement: Analyses usage patterns in aggregate (without identifying individuals) to improve platform features, technical performance, and overall user experience.

Third-Party Data Sharing

33zk does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where data sharing is necessary and lawful:

• Game Software Providers: Minimum necessary data is shared with registered game providers (such as Pragmatic Play, Evolution Gaming, and others) solely for the technical purpose of enabling games to function within your account.
• Payment Processors: Required financial information is shared with accredited payment gateways to process deposits and withdrawals. All our payment processors comply with PCI DSS security standards.
• Authorities: We will disclose your data to authorities if required by law, court order, or in the course of a legitimate criminal investigation.
• Technical Service Providers: Third parties that assist us in operating our technical infrastructure, such as cloud services and security monitoring, are bound by strict confidentiality agreements.

All third parties that receive 33zk user data are bound by data protection agreements and are prohibited from using that information for any purpose other than what has been agreed upon.

Data Security at 33zk

Data security is not just an added feature at 33zk — it is at the core of how we build and operate our platform. We continuously invest in the latest security technologies and procedures:

• 256-bit SSL Encryption: All data transmitted between your device and 33zk's servers is protected by 256-bit SSL encryption, the same standard used by banking institutions.
• Data Encryption at Rest: Sensitive data stored in our databases, particularly financial information and identification details, is encrypted using modern encryption algorithms.
• Two-Factor Authentication (2FA): We provide and encourage the use of 2FA on all accounts as an effective additional layer of security.
• 24/7 Monitoring: Our automated monitoring system runs around the clock to detect any unusual activity or unauthorized access attempts on user accounts.
• Regular Security Assessments: Our platform undergoes regular penetration testing and security audits conducted by independent third parties.
• Internal Access Controls: 33zk staff only have access to user data required for their specific job functions, based on the principle of least privilege.

Data Retention Period

33zk does not retain your personal data longer than necessary. Retention periods depend on the type of data and the relevant operational or legal requirements:

• Active Account Data: For as long as your account is active, we retain all information necessary to provide our services to you.
• Financial Transaction Records: Financial records are retained for a minimum of 7 years in accordance with Malaysia's accounting and financial compliance requirements.
• Security Logs: System and security logs are retained for 12 months for the purpose of security incident investigation.
• After Account Closure: When an account is closed, personal data will be anonymised or deleted within 90 days, except for records that must be retained under legal obligations.

Your Rights Regarding Personal Data

As a 33zk user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via live chat or email.

Cookies and Tracking Technologies

33zk uses cookies and similar technologies to keep the platform running smoothly and to deliver a better experience for you. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining login status and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferred settings such as display language and interface preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand how users interact with the platform for continuous improvement purposes. This data is processed in aggregate and does not identify individuals.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may cause some platform features to not function correctly.

Child Protection

The 33zk platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Should we discover that a minor's data has been collected without our knowledge, we will take immediate action to delete that information and close the account in question.

If you are a parent or guardian and become aware that your child has registered an account at 33zk, please contact our support team immediately so that appropriate action can be taken.

Amendments to This Privacy Policy

33zk reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When significant changes are made, we will notify you via an in-platform notification or your registered email at least 7 days before the changes take effect.

The "Last Updated" date at the top of this document always reflects the latest version. We encourage you to review this page periodically. Continued use of the 33zk platform after any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to help. You can reach us via:

• Live Chat: Available directly on the 33zk platform, 24 hours a day, 7 days a week. Our representatives are fluent in Malay and English and will assist you promptly.
• Email: Send your enquiry to [email protected]. We aim to respond to all privacy enquiries within 48 business hours.

For official requests relating to data rights such as access, correction, or deletion, please clearly state the type of request and include sufficient proof of identity so we can process your request securely and accurately.