Myc33 Privacy Policy — Personal Data Protection for Malaysian Players

1Introduction

Welcome to the myc33 Privacy Policy. This document explains in detail how the myc33 platform — accessible at myc33.net — collects, uses, stores, protects, and discloses your personal information.

Myc33 is an online entertainment platform committed to protecting every player's privacy. We understand that trust is the foundation of our relationship with you. That is why we ensure every action involving your personal data is carried out with full transparency, based on meaningful consent, and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

By using the myc33 platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

2Information We Collect

Myc33 collects various categories of personal information depending on your interaction with our platform. Below is a full breakdown of the data we collect:

Data Categories	Example Information	Primary Purpose
Identity Data	Full name, identity card number, date of birth, gender	KYC verification & legal compliance
Contact Data	Email address, phone number, residential address	Account communications & verification
Financial Data	Bank account number, e-wallet details, transaction records	Deposit & withdrawal processing
Technical Data	IP address, device type, web browser, operating system	Security & technical troubleshooting
Usage Data	Game history, wagering records, login timestamps	Service improvement & responsible gaming
Cookie Data	Platform preferences, login sessions, language settings	Enhanced user experience

Myc33 does not collect sensitive data categories such as health information, criminal records, or political views, unless required by law or necessary for anti-money laundering (AML) compliance.

3How We Use Your Data

Every piece of data we collect is used for a clear and legitimate purpose. myc33 uses your personal information for the following purposes:

• Account management: Creating, verifying and managing your player account, including the required KYC process.
• Transaction processing: Processing all deposits, withdrawals and any promotion- or reward-related payments securely and accurately.
• Platform security: Detecting and preventing fraud, hacking, account abuse and illegal activities such as money laundering.
• Customer support: Responding to enquiries, resolving complaints and providing the technical assistance you need.
• Legal compliance: Meeting reporting obligations to relevant authorities in accordance with applicable Malaysian law.
• Platform improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve platform features and experience.
• Marketing communications: Sending updates about promotions, bonuses and the latest offers — only if you have given consent to receive such communications.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need support in managing their gaming habits.

Myc33 will not use your data for any purpose beyond those stated above without first obtaining your additional consent.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), myc33 processes your personal data on one or more of the following valid legal bases:

• Consent: You have provided explicit consent for the processing of your data during registration or through your communication preference settings.
• Contract execution: Processing is necessary to perform the service contract between myc33 and you as a registered player.
• Legal obligation: Processing is necessary to comply with legal obligations imposed on myc33, including AML and KYC requirements.
• Legitimate interest: Processing is necessary for the legitimate interests of myc33 or a third party, such as preventing fraud and ensuring platform security, provided those interests do not override your fundamental rights.

5Data Sharing & Disclosure

Myc33 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in the following limited circumstances, we may share your data:

• Payment service providers: Financial details required to be shared with trusted payment processors such as FPX, DuitNow, and e-wallet providers to process your transactions.
• Technical service providers: Companies that help us operate the platform, including cloud computing services and IT infrastructure — all bound by strict confidentiality agreements.
• Regulatory authority: When required by Malaysian law or a valid court order, we will disclose the necessary data to government agencies or law enforcement authorities.
• Game providers: Third-party game providers that integrate their content into the myc33 platform may receive minimal technical data necessary to ensure smooth game functionality.

In all data sharing cases above, myc33 ensures that recipient parties comply with data protection standards equivalent to or higher than those we apply ourselves.

6Personal Data Security

Myc33 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All communications between your device and myc33 servers are encrypted using 256-bit SSL/TLS protocols, ensuring your data cannot be intercepted during transmission.
• Layered access control: Internal access to player data is restricted on a need-to-know basis. Only authorised staff may access personal data, and all access is logged and monitored.
• 24/7 security monitoring: Automated monitoring systems operate around the clock to detect and respond to any suspicious activity or unauthorised access attempts.
• Regular data backups: Your data is regularly backed up to a secure, separate location to ensure full recovery in the event of a system failure.
• Regular security testing: myc33 conducts regular security audits and penetration testing to identify and address any system vulnerabilities.

While we take all reasonable precautions, no data transmission system over the internet can be guaranteed 100% secure. You are also responsible for keeping your password and account login credentials safe.

7Data Retention Period

Myc33 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable Malaysian law.

• Active account data: Retained for the duration your account is active and for the required period following account closure to fulfil legal obligations.
• Financial transaction records: Retained for a minimum of seven (7) years in line with Malaysia's financial reporting and AML compliance requirements.
• Support communication logs: Retained for three (3) years from the date of interaction for reference and dispute resolution purposes.
• Cookie data: Session cookies are deleted automatically when you close your browser; persistent cookies are stored for a set validity period, typically no longer than 12 months.

When your personal data is no longer required, myc33 will securely delete or anonymise it using methods that ensure the data cannot be recovered or read again.

8Cookies & Tracking Technologies

Myc33 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions optimally. There are three main categories of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining login sessions and security preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use the platform, such as the most frequently visited pages and time spent in each section. All data is collected in aggregate and anonymised form.
• Functional cookies: Allows the platform to remember your preferences such as language settings and display options to deliver a more personalised experience.

You can manage cookie usage through your web browser settings. Please note, however, that disabling certain cookies may affect your experience on the myc33 platform.

9Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

• Right to Access: You have the right to request a copy of the personal data we hold about you and information on how it is used.
• Right to rectification: If your data is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure: You may request that we delete your personal data in certain circumstances, such as when the data is no longer needed for its original collection purpose.
• Right to Restrict Processing: You may request that we limit or restrict the processing of your data under certain circumstances.
• Right to Withdraw Consent: Where processing of your data is based on consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) if you believe your data has been processed unlawfully.

To exercise any of the above rights, please contact the myc33 privacy team via our support email. We will endeavour to respond to your request within 30 business days of receipt.

10Children's Data

The myc33 platform is strictly for adults aged 18 and above. myc33 does not knowingly collect or process personal data of individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you are aware or suspect that someone under the age of 18 has registered a myc33 account, please notify us immediately.

11Amendments to the Privacy Policy

Myc33 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations.

You will be notified of any material amendments through:

• A prominent notice on the myc33 platform's home page.
• Email notice to the address registered in your account, at least 14 days before changes take effect.
• An in-account notice upon your next login.

Your continued use of the myc33 platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy. The version date is always stated at the top of this document for your reference.

12Contact Us for Privacy Matters

For any enquiries, concerns, or requests relating to your privacy and personal data, please contact our team through the following channels:

• Live Chat: The fastest channel — available 24/7 directly within the platform after login.
• Privacy Email: [email protected] (text display only)
• FAQ: Visit page FAQ us for answers to our most frequently asked questions.

The myc33 privacy team will respond to all enquiries within 3 to 5 business days. For formal requests relating to data rights under the PDPA, we will provide a written response within 30 business days in line with legal requirements.