Privacy Policy acce33 – Your Personal Data Protection

1 Privacy Policy Introduction & Scope

Acce33 ("we", "our platform") is an online gaming platform operating under a valid licence and fully committed to protecting the privacy of every individual who uses our services. This Privacy Policy applies to all users of the acce33 website, including visitors, registered members, and any individual who interacts with our platform via any device or channel.

This policy clearly outlines:

• What personal information we collect and how it is collected.
• The purposes for which that information is used and processed.
• Who your information may be shared with and under what circumstances.
• The security measures we take to protect your information.
• Your rights regarding your personal data under Malaysian law.

This Privacy Policy is to be read together with acce33 Terms and Conditions and forms part of the agreement between you and acce33. In the event of any conflict between the two documents regarding data privacy, this Privacy Policy shall prevail.

2 Personal Data We Collect

Acce33 collects only the personal data genuinely necessary to deliver quality services that are secure and compliant with legal requirements. The following are the categories of data we collect:

2.1 Data You Provide Directly

• Identity Information: Full name, identity card number (MyKad), date of birth, gender, and nationality.
• Contact Information: Email address, mobile number and current residential address.
• Financial Information: Bank account number, bank name, and digital wallet details (Touch 'n Go, GrabPay, ShopeePay) used for deposits and withdrawals.
• Verification Documents (KYC): MyKad copy, bank statements, proof of address, and other documents required for the identity verification process.
• Account Information: Username, password (stored as a non-reversible hash), and account preferences.

2.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, device type, operating system and screen resolution.
• Usage Data: Pages visited, visit duration, games played, total wagering amounts, and navigation patterns.
• Transaction Data: Deposit and withdrawal history, bonuses received, and gaming activity records.
• Location Data: General location information based on IP address for geographic verification and fraud prevention purposes.

2.3 Data Category Schedule

3 How We Use Your Personal Data

Every piece of data we collect is used for lawful, specific, and transparent purposes. acce33 does not process your personal data beyond the purposes stated below:

• Service Provision: Processing account registrations, verifying identities, processing deposits and withdrawals, and ensuring a smooth and secure gaming experience.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account abuse, and any other illegal activity on the platform.
• Legal Compliance: Fulfilling legal obligations including KYC/AML (Anti-Money Laundering) requirements, reporting to regulatory bodies, and complying with court orders where applicable.
• Service Communications: Sending important account notices, transaction confirmations, security alerts, and policy updates.
• Marketing (With Consent): Sending promotional offers, bonus information, and new game notices — only if you opted in during registration or through your account settings.
• Platform Improvement: Analysing usage patterns to improve the platform's design, performance, and features in order to enhance member satisfaction.
• Dispute Resolution: Using transaction records and activity logs to resolve any complaints or disputes between members and acce33.

4 Legal Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), acce33 only processes your personal data on a valid legal basis. Depending on the purpose of processing, the applicable basis is:

• Consent: For direct marketing activities and promotional communications, we rely on the explicit consent you provided during registration or through the communication preferences in your account settings. You may withdraw this consent at any time.
• Contract Performance: Processing required to fulfil the agreement between you and acce33 – including account verification, transaction processing, and the provision of gaming services.
• Legal Obligation: Processing required under Malaysian law, such as KYC requirements, suspicious transaction reporting, and compliance with regulatory directives.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement – where these interests do not override your fundamental rights.

5 Sharing & Disclosure of Personal Data

Acce33 takes its responsibility to protect your personal data from improper disclosure seriously. We do not sell or rent your personal data to any party. However, there are limited situations in which your data may be shared:

5.1 Third-Party Service Providers

Acce33 works with trusted service providers to operate the platform. These providers include payment processors, licensed game providers, KYC service providers, and cloud infrastructure providers. All providers are required to comply with strict data protection standards and may only use your data for the purposes we specify.

5.2 Legal Requirements

Acce33 may disclose your personal data when required by Malaysian law, including in response to lawful requests from law enforcement agencies, courts, or regulatory bodies with valid jurisdiction.

5.3 Rights & Safety Protection

In situations where there is a serious threat to the security of the platform or other users, acce33 reserves the right to share necessary information with the relevant authorities for crime prevention and public safety purposes.

6 Data Security Measures

Acce33 continually invests in the latest security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we implement include:

• Data in Transit Encryption: All communications between your browser and acce33 servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Stored Data Encryption: Sensitive data stored in our databases is encrypted using the internationally recognised AES-256 encryption algorithm.
• Two-Factor Authentication (2FA): Two-factor authentication is available and encouraged for all accounts to add an extra layer of security.
• Role-Based Access Control: Only staff with a legitimate job requirement are permitted to access user personal data, with access restricted according to each individual's role and responsibilities.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to any threats or suspicious activity.
• Regular Security Audits: acce33 conducts regular penetration testing and security audits by independent security experts.
• Incident Response Plan: We have comprehensive incident response procedures in place to address any data breaches swiftly and effectively.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and never sharing your login credentials with anyone.

7 Personal Data Retention Period

Acce33 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. The following are our data retention guidelines:

Upon expiry of the relevant retention period, your personal data will be securely deleted or anonymised using methods that ensure the data cannot be recovered or re-identified.

8 Cookies & Tracking Technologies

Acce33 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and deliver more relevant content. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform (pages visited, time spent) to help us improve website performance.
• Functional Cookies: Saving your preferences such as language, display settings, and stored login information to make return visits more convenient.
• Analytics Cookies: Used to understand aggregate user behaviour and help us make data-driven decisions for platform improvements.

You can manage and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the acce33 platform.

9 Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data processed by acce33:

To exercise any of the above rights, please contact our privacy team by email or via live chat on the platform. We will acknowledge your request within 3 business days and resolve it within 21 business days.

10 International Data Transfers

In the course of its operations, acce33 may need to transfer your personal data to servers or parties operating outside Malaysia. This occurs primarily in the context of cloud infrastructure services and licensed international gaming software providers.

Acce33 ensures that any international data transfers are carried out with adequate safeguards, including:

• Ensuring that recipient countries maintain a level of data protection equivalent to or higher than Malaysia's.
• Executing data processing agreements with all international service providers.
• Applying recognised standard contractual clauses to safeguard your rights during data transfers.

All personal data of Malaysian members is stored in an environment that meets international security standards, and we take appropriate measures to ensure your data protection is not diminished even when data is processed outside Malaysia.

11 Children's Privacy

The acce33 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store the personal data of children under 18. If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete the information and close the account in question.

If you are a parent or guardian and discover that your child has registered on the acce33 platform, please contact us immediately so we can take the appropriate action without delay.

12 Privacy Policy Amendments

Acce33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or relevant technological developments. The "Last Updated" date at the top of this page will be revised whenever changes are made.

For material amendments that directly affect your rights, acce33 will notify you via your registered email or a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the acce33 platform after the effective date constitutes acceptance of the revised policy.

We encourage you to review this Privacy Policy page periodically so you are always informed of how we protect your information.

13 Contact the acce33 Privacy Officer

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, the acce33 privacy team is ready to assist you. Please reach us through the following channels :

• Live Chat: Available 24 hours a day, 7 days a week, directly within the acce33 platform.
• Privacy Email: [email protected] (response within 2–3 business days)
• General Support Email: [email protected]
• FAQ: Browse FAQ page for answers to frequently asked questions about privacy and account security.

For complaints that acce33 is unable to resolve within a reasonable timeframe, you have the right to refer the matter to the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.