King33 Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as the "Policy") is issued by King33 (hereinafter referred to as "King33", "we", "us", or "the Company"), the operator of the online gaming and sports betting platform accessible at king33.casa and any related subdomains or interfaces (collectively, the "Platform").

This Policy describes how King33 collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform, including registered players, visitors to the website, and individuals who contact King33's support team (hereinafter collectively referred to as "Users", "you", or "your").

King33 is committed to handling personal data responsibly, lawfully, and transparently, in accordance with applicable data protection principles. This Policy should be read together with King33's Terms and Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

By creating an account on the Platform, depositing funds, or continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Definitions

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, identification number, contact details, financial information, device identifiers, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration, transfer, or deletion.
• "Data Controller" means King33, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party service provider that processes personal data on King33's behalf, subject to contractual data protection obligations.
• "KYC Data" means identity verification documentation submitted by a Player for the purposes of Know Your Customer compliance, including copies of government-issued identity documents, proof of address, and selfie photographs.
• "Cookies" means small text files placed on your device by the Platform to facilitate its operation, personalise your experience, and collect usage analytics.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, health conditions, financial circumstances, or other categories afforded heightened protection under applicable data protection law.

3 Categories of Personal Data We Collect

King33 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (for age verification — players must be 21 or above).
• Email address and contact telephone number.
• Residential address, including city and postcode (e.g., addresses in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, or any other Malaysian city).
• Username and encrypted account password.

3.2 KYC Verification Data

• Copy of a valid Malaysian government-issued identity document — MyKad (NRIC), Driver's License, or Passport.
• Proof of residential address — utility bill, bank statement, or official correspondence dated within three months.
• Selfie photograph of the User holding their identity document.
• Proof of ownership of payment methods used to deposit funds.

3.3 Financial and Transaction Data

• Details of deposits and withdrawals processed via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and cryptocurrency wallets (Bitcoin, Ethereum, Tether USDT, Litecoin).
• Transaction amounts, currency (MYR), timestamps, and payment reference numbers.
• Bank account details or e-wallet identifiers associated with your registered payment methods.

3.4 Gameplay and Platform Activity Data

• Game session logs, bet amounts, outcomes, and game history.
• Sportsbook wager history, markets selected, odds accepted, and settlement records.
• Bonus activation records, wagering progress, and promotion utilisation history.
• Login and logout timestamps and session durations.

3.5 Technical and Device Data

• IP address, device type, operating system, browser type and version.
• Geolocation data derived from your IP address (general regional location, not precise GPS).
• Cookies, session tokens, and device fingerprint identifiers.
• Platform error logs and performance diagnostics.

3.6 Communications Data

• Content of communications with King33 customer support, including live chat transcripts, email correspondence, and any support ticket exchanges.
• Records of your consent to marketing communications and your preference settings.

4 How We Collect Personal Data

King33 collects personal data through the following means:

• Directly from you — when you create an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or adjust your platform preferences.
• Automatically — through cookies, server logs, session tracking, and analytics tools that operate when you access or interact with the Platform.
• From third-party verification providers — when you submit KYC documentation, certain identity checks may be processed by a third-party verification service operating under contractual obligations consistent with this Policy.
• From payment processors — transaction confirmation data is received from our integrated Malaysian payment partners, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong, as a necessary part of processing your deposits and withdrawals.
• From fraud prevention and risk management services — limited data may be cross-referenced with fraud prevention databases to protect the platform and its users from financial crime.

5 Purposes of Data Processing

King33 processes your personal data for the following specific purposes:

Purpose	Data Categories Used
Account creation, maintenance, and authentication	Registration data, device data, communications data
Age and identity verification (KYC compliance)	Registration data, KYC verification data
Processing deposits and withdrawals in MYR	Financial and transaction data, registration data
Delivering casino games, sportsbook, and platform services	Gameplay data, technical and device data
Fraud detection, AML compliance, and security monitoring	All categories, with emphasis on financial and device data
Responsible gambling monitoring and player protection	Gameplay data, financial data, communications data
Customer support and dispute resolution	Registration data, gameplay data, communications data
Legal and regulatory compliance	All categories as required by applicable law
Platform improvement and analytics	Technical and device data, gameplay data (aggregated/anonymised)
Marketing and promotional communications (where consented)	Registration data, communications data, gameplay data

6 Legal Bases for Processing

King33 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms and Conditions between you and King33, including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, KYC requirements, age verification obligations, and any other regulatory mandates.
• Legitimate interests: Processing undertaken to protect the security and integrity of the Platform, prevent fraud, conduct analytics for product improvement, and manage risk — where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional activities such as marketing communications, where your prior consent has been obtained. You may withdraw consent at any time through your account settings or by contacting support.

7 Data Sharing and Disclosure

King33 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network processors — to facilitate deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Third-party services contracted to assist with identity document verification and age checks. All such providers operate under contractual data protection obligations consistent with this Policy.
• Fraud Prevention and AML Services: Specialist data services used to screen transactions and account activity against known fraud patterns and sanctions lists.
• Technology and Infrastructure Providers: Cloud hosting providers, cybersecurity services, and platform maintenance contractors who access data only under strict confidentiality obligations.
• Game Software Providers: Certain gameplay data may be shared with our licensed game software providers for the purposes of game delivery, fairness verification, and technical support.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or regulatory directive, King33 may disclose personal data to competent authorities without prior notice to the Player.
• Group Companies: Where King33 is part of a corporate group, data may be shared with affiliated entities for internal administrative purposes, subject to equivalent data protection standards.

8 International Data Transfers

Given the global nature of our payment infrastructure and technology providers, personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, King33 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses binding the recipient to standards equivalent to those in this Policy.
• Transfers only to jurisdictions or organisations that provide an adequate level of data protection as determined by relevant authorities.
• Encryption of data in transit and at rest, regardless of the jurisdiction in which it is processed.

9 Data Retention

King33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Indicative retention periods are as follows:

• Account and registration data: Retained for the duration of your active account and for a period of five (5) years following account closure, in accordance with standard AML and compliance record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of collection or account closure, whichever is later, to satisfy anti-money laundering regulatory requirements.
• Financial and transaction records: Retained for seven (7) years from the date of each transaction in accordance with financial record-keeping requirements.
• Gameplay and platform activity logs: Retained for three (3) years for fraud prevention, dispute resolution, and responsible gambling monitoring purposes.
• Customer support communications: Retained for two (2) years from the date of the interaction, or longer where relevant to an ongoing dispute or legal matter.
• Marketing consent records: Retained for the duration of your consent and for two (2) years thereafter to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for aggregated analytics purposes and does not constitute personal data.

10 Cookies and Tracking Technologies

King33 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your logged-in session, and analyse how players interact with our services. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences, such as your preferred language, currency display, or game lobby sorting preferences, to improve your experience on return visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is used internally to improve the platform experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and account security threats.

You may control cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. King33 does not use third-party advertising cookies or behavioural profiling cookies for the benefit of external advertisers.

11 Your Data Subject Rights

Subject to applicable law and certain limitations inherent to our compliance obligations, you hold the following rights in respect of your personal data held by King33:

• Right of Access: You may request a copy of the personal data King33 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any personal data held by King33 that is inaccurate, incomplete, or out of date.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal and compliance obligations to retain certain data.
• Right to Restriction: You may request that King33 restrict the processing of your personal data in certain circumstances, such as whilst a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including processing for direct marketing purposes. Upon receipt of a valid objection, King33 will cease the relevant processing unless it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact King33 using the details in Section 16. We will respond to all verified requests within thirty (30) calendar days. We may require proof of identity before processing any data subject request.

12 Children and Minors

The King33 Platform is strictly intended for persons aged 21 and above. King33 does not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor in your care has provided personal data to King33 or has accessed the Platform, please contact us immediately at the details provided in Section 16.

Upon receiving credible notification that an account belongs to a minor, King33 will immediately suspend the account, initiate a full review, and delete or quarantine any associated personal data in accordance with applicable law. Any funds deposited by a minor will be handled in accordance with King33's Terms and Conditions and applicable legal requirements.

13 Security Measures

King33 implements a comprehensive set of technical and organisational security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your browser and the King33 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Personal data at rest, including KYC documents and financial records, is stored in encrypted form on secured servers with access restricted to authorised personnel only.
• Two-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Access Controls: Personal data is accessible only to King33 staff and authorised contractors whose role requires such access. Access rights are reviewed regularly and revoked upon change of role or departure.
• Regular Security Audits: King33 conducts periodic internal and third-party security reviews to identify and remediate potential vulnerabilities.
• Incident Response: King33 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, King33 will notify relevant parties in accordance with applicable legal obligations and as promptly as practicable.

Whilst King33 employs these and other measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their accounts, enable two-factor authentication where available, and report any suspicious activity immediately to our support team.

14 Third-Party Links and Services

The King33 Platform may contain references or indirect links to third-party websites or services, including those of our payment partners. King33 is not responsible for the privacy practices of any third-party service provider. Once you navigate away from the King33 Platform to a third-party site, this Privacy Policy no longer applies. We encourage you to review the privacy policy of any third-party service you access in connection with your use of King33.

The names and brands of payment services referenced on the Platform — including DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, Public Bank, and Hong Leong — are the property of their respective owners. Their inclusion is solely to inform Players of available payment methods and does not constitute an endorsement of their privacy practices.

15 Updates to This Privacy Policy

King33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the operation of the Platform. Material changes to this Policy will be communicated to registered Players via in-platform notification or by email to the address associated with your account, with at least seven (7) days' notice before the updated Policy takes effect.

Where changes are required immediately by law or regulatory directive, King33 may implement them without prior notice and will inform Players as promptly as practicable. The current version of this Policy, including the effective date, will always be available on this page. We encourage you to review this Policy periodically.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgment of the changes and your agreement to be bound by the updated terms.

16 Contact Us & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by King33, please contact us through any of the following channels:

• Live Chat: Available 24/7 on the King33 Platform. Select "Privacy" or "Data Request" as the enquiry category. Average response time: under 5 minutes.
• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line. We aim to respond to all privacy-related email enquiries within 3 business days.

For requests to exercise your data subject rights (access, rectification, erasure, portability, or objection), please include your registered email address and a description of your request. We may require additional verification before processing any data subject request to ensure we release information only to the authorised account holder.