Mymy33 Privacy Policy – Our Commitment to Protecting Your Data

1Personal Data We Collect

Mymy33 collects various types of personal information during the registration process, platform usage and account management. We only collect data that is genuinely necessary to provide you with the best service — no excessive or irrelevant data collection.

a) Personal Identification Information

• Full name as stated on your Malaysian identity card (MyKad) or passport
• Valid national identity card number (NRIC) or passport number
• Date of birth for age verification (must be 18 years of age or above)
• Full current residential address
• Images of identity documents for the KYC (Know Your Customer) process

b) Contact Information

• Active Malaysian mobile number registered in your own name
• An active and accessible personal email address

c) Financial Information

• Malaysian bank account number registered in your own name
• Bank name and branch code (if applicable)
• Deposit and withdrawal transaction records
• Betting history and gaming activity on the platform

d) Technical & Usage Data

• IP address of the device used to access the platform
• Web browser type and device operating system
• Cookie data and login session data
• Date, time and duration of each platform usage session
• In-app activity logs for security and technical support purposes

2Data Collection & Usage Purpose

Mymy33 uses your personal data solely for the purposes stated below. We will not process your data for any other purpose not previously communicated without first obtaining your consent.

For promotional notices and marketing communications, you may unsubscribe at any time by contacting the mymy33 support team. Unsubscribing from marketing will not affect the receipt of essential service communications such as account security notices or transaction confirmations.

3Data Sharing With Third Parties

Mymy33 does not sell, rent or share your personal data with third parties for their own marketing purposes. However, there are limited situations where we need to share certain data to ensure the platform operates properly and complies with legal requirements.

Trusted Service Providers

Mymy33 works with selected third-party service providers to help us operate the platform. These providers may only access the data necessary for their specific tasks and are bound by strict confidentiality agreements:

• Payment processors (FPX, DuitNow, Touch 'n Go, Boost, GrabPay) to facilitate financial transactions
• Identity verification service providers for the KYC process
• Licensed game software providers for operating games on the platform
• Cloud infrastructure providers that store and manage data to high security standards
• Customer support service providers to help resolve member enquiries

Disclosure Based on Legal Obligations

Under certain circumstances, mymy33 may be legally required to disclose your personal information to authorities, including:

• The Royal Malaysia Police (PDRM) or other law enforcement authorities upon a valid request or court order
• Bank Negara Malaysia or other financial regulatory bodies in the context of AML/CFT compliance
• Courts or tribunals with jurisdiction over mymy33 or its members

4Data Security Measures

Mymy33 continuously invests in the latest information security technologies and procedures to ensure your personal data is always protected against unauthorised access, loss, alteration or unintended disclosure.

The following are the security layers we have implemented:

• Data Encryption in Transit: All communication between your browser and mymy33's servers is encrypted using TLS 1.3 protocol with a 128-bit SSL certificate, rendering data unreadable to any intercepting party.
• Data Encryption at Rest: Sensitive data such as banking information and identity documents are encrypted using AES-256 standards when stored on our servers.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication on their accounts as an additional layer of protection beyond their password.
• Real-Time Threat Monitoring: Our systems are monitored 24 hours a day, 7 days a week by a dedicated cybersecurity team to detect and respond to any threats.
• Penetration Testing: mymy33 conducts regular security testing by independent security experts to identify and close any system vulnerabilities before they can be exploited.
• Automatic Data Backup: Member data is automatically backed up daily to a geographically separate secondary data centre to ensure service continuity.

5Cookies & Tracking Technologies

Mymy33 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security and analyse platform usage patterns in aggregate (without personally identifying individuals).

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login session verification, transaction security and language preferences. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collecting anonymous information about how users interact with the platform to help us identify areas for improvement. All data is aggregated and contains no personally identifiable information.
• Functional Cookies: Remembering your preferences and settings, such as display language and other personal configurations, to provide a more personalised experience.

You can control and manage cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the mymy33 platform and prevent you from logging in or making transactions.

6Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by mymy33. We are committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request a copy of the personal data we hold about you. Data access requests will be processed within 21 business days.
• Right to Rectification: If the personal data held by mymy33 is inaccurate, incomplete or outdated, you have the right to request a correction. You may also update basic information such as your phone number and address directly through your account settings.
• Right to Withdraw Consent: For data processed based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the legal validity of processing carried out prior to withdrawal.
• Right to Object: You may object to the processing of your personal data under certain circumstances, particularly for direct marketing purposes.
• Right to Lodge a Complaint: If you believe that mymy33 has violated your privacy rights, you are entitled to file a complaint with the Department of Personal Data Protection Malaysia.

To submit any request relating to the above rights, please contact the mymy33 Data Protection Officer (DPO) team via email: [email protected]. Please include a copy of a valid identification document with your request for identity verification purposes. All requests will be acknowledged within 3 business days.

7Personal Data Retention Period

Mymy33 retains your personal data for as long as your account is active or as long as necessary to provide the services you have requested. Once an account is closed, we will retain your data for the period required by applicable legal obligations before it is securely deleted or anonymised.

• Identity verification data (KYC): Retained for a minimum of 7 years after account closure in line with Malaysia's AML/CFT compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years for audit, tax and financial compliance purposes.
• Activity and security logs: Retained for 2 years for security incident investigation purposes if required.
• Customer support communication data: Retained for 3 years for reference and service improvement.
• Cookie and session data: Session cookies expire automatically when you log out; persistent cookies expire according to the specified settings.

Once the designated retention period has expired, your data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. Our data deletion procedures are audited regularly to ensure compliance.

8Children & Minors Privacy

The mymy33 platform is an online entertainment service that exclusively for individuals aged 18 years and above. We do not intentionally collect, store or process any personal data from individuals under the age of 18.

Mymy33 employs a rigorous KYC verification system including identity document checks to confirm that all members meet the minimum age requirement. Any account suspected of belonging to a minor will be suspended immediately while an investigation is conducted.

9Amendments to This Privacy Policy

Mymy33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or service improvements. Any changes will take effect immediately upon publication of the latest version on this page.

We will notify you of significant changes through one of the following methods:

• Clear pop-up notices or banners on the mymy33 platform homepage
• Notification emails are sent to the email address registered to your account
• Push notifications via the mymy33 mobile app (iOS & Android)

We encourage you to review this page periodically to stay informed about how we protect your personal data. The "Updated" date at the top of this page indicates when the current version came into effect.

Your continued use of the mymy33 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account by contacting our support team.