Privacy Policy 33BMW — Your Personal Data Protection

33BMW ("we", "our platform") is the data controller responsible for the personal information you provide while using our online entertainment platform. This Privacy Policy applies to all users of the 33BMW platform, including those who access the official website, Android and iOS mobile apps, and any integrated services we offer.

We take data privacy extremely seriously because it is the foundation of trust between our platform and our members. Every decision regarding data collection and management is made on the principle of data minimisation — we only collect what is genuinely necessary to deliver quality service to you.

We collect various types of personal data depending on how you interact with the 33BMW platform. The following are the categories of data we collect:

We do not collect sensitive data such as medical information, religious beliefs, or political views unless required by law in very limited circumstances.

Your personal data is collected through the following channels:

• Account registration: Information you provide when creating a new account on the 33BMW platform.
• KYC process: Identity verification documents you upload to complete account verification.
• Financial transactions: Information provided when making a deposit or withdrawal, including bank account and eWallet details.
• Platform usage: Data generated automatically as you browse and use platform features, such as game history and activity logs.
• Support communication: Information you share when contacting our customer support team via live chat or email.
• Cookies and tracking technologies: Technical data collected automatically via cookies and tracking pixels to improve the user experience.

33BMW uses your personal data solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Account management: Creating, verifying, and managing your member account on the 33BMW platform.
• Transaction processing: Processing deposits, withdrawals, and all other financial activities accurately and securely.
• Identity verification (KYC): Verifying member identity in compliance with anti-money laundering (AML) requirements.
• Customer support: Providing assistance and resolving any issues or inquiries you encounter.
• Platform security: Detecting and preventing fraud, unlawful activity, and protecting the integrity of the platform.
• Service improvement: Analyzing usage patterns to improve features and the overall user experience.
• Marketing communication: Sending promotional information and exclusive offers — only if you have agreed to receive them.
• Legal compliance: Meeting the reporting and documentation obligations required under applicable Malaysian law.

33BMW does not sell your personal data to any party. However, under certain circumstances, we may need to share your information with the following parties:

• Payment providers: Required transaction details are shared with payment processors such as banks and eWallet providers to facilitate deposits and withdrawals.
• Technical service providers: Cloud infrastructure and security service providers that help us operate the platform — subject to strict confidentiality agreements.
• Statutory authorities: When required by Malaysian law, a court order, or instructions from a legitimate enforcement agency.
• Fraud investigators: In cases where there is reasonable suspicion of fraudulent activity or money laundering requiring further investigation.

Every third party with whom we share data is bound by a contractual agreement requiring them to protect your data and use it only for the specified purpose. We do not permit third parties to use your data for their own marketing purposes.

We invest seriously in security infrastructure to ensure your personal data is always protected. The security measures we implement include:

• 256-bit SSL/TLS encryption for all communications between your device and our servers.
• Hashed password storage using the bcrypt algorithm — your original password is not stored in any readable form.
• Multi-layered access control which ensures that only authorised personnel can access member data, and every access is logged for audit purposes.
• 24/7 security monitoring by an automated intrusion detection system that detects and blocks suspicious activity in real time.
• Regular penetration testing by independent security experts to identify and close any system vulnerabilities before they can be exploited.
• Encrypted data backups to ensure rapid service recovery in the event of unexpected technical disruptions.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by us:

To exercise any of the above rights, please contact the 33bmw support team via live chat or email. We will process your request within 21 business days in accordance with PDPA requirements.

The 33bmw platform uses cookies and similar tracking technologies to enhance the user experience and understand how the platform is used. The types of cookies we use are:

• Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymized information about how users interact with the platform to help us improve it.
• Functional cookies: Saving your preferences such as language and display settings to provide a more personalized experience.
• Analytics cookies: Helping us understand aggregate traffic patterns and platform usage without identifying individual users.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Our general data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and for a minimum of three (3) years after account closure for legal compliance purposes.
• Financial transaction records: Retained for seven (7) years in line with Malaysia's financial reporting and anti-money laundering requirements.
• KYC Documents: Retained for five (5) years after the end of the business relationship, or longer if required by the authorities.
• Support communication records: Retained for two (2) years for service quality and dispute resolution purposes.
• Technical log data: Retained for one (1) year for security and technical diagnostic purposes.

Once the specified retention period has ended, your data will be securely deleted or fully anonymised in accordance with our internal procedures.

33BMW reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. When we make material changes, we will notify you via:

• In-platform notification upon your next login.
• Email to the address registered to your account.
• Update the "Last Updated" date at the top of this document.

Your continued use of the 33BMW platform after any Privacy Policy changes take effect will be considered your acceptance of the updated terms. We recommend reviewing this page periodically.

If you have any questions, concerns, or complaints regarding how we handle your personal data, the 33bmw privacy compliance team is ready to assist.

How to contact us:

• Live Chat: The fastest channel — available 24 hours a day, 7 days a week directly via the chat icon on the platform.
• Privacy email: [email protected] — for written enquiries that require documentation.
• Frequently asked questions: Check FAQ page which may already have the answer to your question.

We are committed to responding to all privacy enquiries within three (3) business days. For requests involving data access, correction, or deletion, please refer to section 7 of this document for further details on the process and timelines involved.

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection of Malaysia, which is responsible for overseeing PDPA compliance in the country.