Privacy Policy ap33 – Personal Data Protection for Malaysian Users

Ap33 (operating under the domain ap33.express) is fully committed to protecting the privacy of every user on our online betting and casino platform. This Privacy Policy explains in detail how we manage the personal information we collect when you register, use, and interact with ap33.

This Policy applies to all personal information collected through:

• The ap33.express website and all associated pages.
• The account registration and verification (KYC) process.
• Deposit and withdrawal transactions in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks.
• Game activity — including football, live casino, slots, virtual sports, and blackjack.
• Communications with the ap33 customer support team.
• Participation in ap33 bonus programmes, promotions, and loyalty programmes.

This Privacy Policy has been drafted and enforced in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and applicable international data protection standards. ap33 acts as both data processor and data controller for all personal information collected from our Malaysian users.

Ap33 collects different types of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data we collect:

Ap33 only collects data that is strictly necessary to operate our services safely and effectively. We do not collect sensitive personal data such as medical information, political views, or religious beliefs unless required by applicable law.

Ap33 uses collected personal information solely for legitimate, stated purposes. Below is a full list of the purposes for which ap33 user data is used:

Ap33 does not sell, rent, or disclose user personal data to third parties for marketing or commercial purposes without your explicit consent. However, there are limited circumstances in which ap33 may share data with certain parties in order to operate our services:

• Payment service providers — information required to process deposit and withdrawal transactions is shared with payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks. This data is limited strictly to what is necessary to complete the transaction.
• Game providers — providers such as Evolution Gaming, Pragmatic Play, and SA Gaming receive only the minimum data necessary to operate games and process betting results. This data is not used for any other purpose by these providers.
• Technology service providers — companies providing ap33 with technical infrastructure, cloud services, and cybersecurity may process personal data on our behalf, subject to strict data processing agreements.
• Legal authorities — ap33 will disclose user data to the relevant authorities where required by court order, Malaysian legal obligations, or a valid official investigation.

All third parties granted access to ap33 user data are bound by legally enforceable confidentiality agreements and are required to use that data solely for the agreed purposes. ap33 periodically audits the data protection practices of third parties we work with.

Ap33 implements a range of technical and organisational security measures to protect user personal data from unauthorised access, loss, alteration, or unintended disclosure:

• 256-bit SSL/TLS Encryption for all communications between the user's device and ap33's servers — data in transit cannot be read by third parties even if intercepted.
• Data encryption at rest — sensitive personal data stored in ap33's databases is encrypted using strong encryption algorithms.
• Role-based access control (RBAC) — only ap33 staff with a specific operational need are permitted to access user data, and their access is restricted strictly to what is required.
• 24/7 security monitoring — ap33's cybersecurity team monitors platform activity around the clock to detect and respond to any threats or suspicious activity.
• Two-factor authentication (2FA) — available and recommended for all ap33 user accounts to add an extra layer of protection against unauthorised access.
• Regular security audits — ap33 conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Staff training — all ap33 staff with access to user data undergo regular data protection training and security protocol reviews.

The ap33 platform uses cookies and similar tracking technologies to enhance user experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit the ap33 website.

Ap33 uses several types of cookies:

• Essential Cookies — required for core ap33 platform functions such as login session management and security. Without these cookies, the ap33 platform will not function properly. These cookies cannot be disabled.
• Performance Cookies — collects aggregated information on how users interact with the ap33 platform without identifying any individual. This information is used to improve platform performance and usability.
• Functionality Cookies — allows the ap33 platform to remember your preferences such as language, display settings, and other options to deliver a more personalised experience.
• Analytics cookies — helps ap33 understand overall platform usage patterns for continuous improvement purposes. Data collected through analytics cookies is not linked to any user's personal identity.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality or your experience on the ap33 platform. For more information on how to manage cookies in your browser, refer to your web browser's help documentation.

Ap33 retains user personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required under applicable Malaysian law.

Ap33 data retention guidelines:

• Active account data — retained for as long as the user's account remains active on the ap33 platform.
• Financial and betting records — retained for a minimum of five (5) years following the transaction, in compliance with Malaysia's financial compliance and anti-money laundering (AML) legal requirements.
• KYC data (identity verification) — retained for the duration of the active account and for a minimum of five (5) years following account closure, in line with regulatory compliance requirements.
• Customer support communication logs — retained for two (2) years for reference and service quality assurance purposes.
• Cookie and analytics data — stored for the duration specified for each cookie type, typically between 30 days and 2 years depending on the cookie.

Once data is no longer needed and there is no legal requirement to retain it, ap33 will securely delete or anonymise that data using appropriate procedures to prevent any possibility of recovery.

As an ap33 user residing in Malaysia, you have the following rights regarding your personal data under PDPA 2010 and this Privacy Policy. ap33 is committed to respecting and facilitating the exercise of these rights:

The ap33 platform is exclusively intended for individuals aged 18 years and above only. ap33 strictly does not collect, process, or store the personal data of children or underage individuals intentionally.

Should ap33 discover that personal data belonging to an individual under 18 years of age has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who believe their child has registered for or used the ap33 platform are urged to contact our support team immediately at support@ap33.express so that appropriate action can be taken without delay.

Ap33 employs age verification mechanisms during registration and reserves the right to request identity verification documents (including a copy of your Malaysian MyKad) to confirm a user's age eligibility at any time, particularly before processing any withdrawal.

Ap33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, applicable legislation, or technological developments that affect how we process data.

Any material amendments to this Privacy Policy will be communicated to ap33 users via:

• A clear notice displayed on the ap33 platform at the point of login.
• A notification email to the email address registered to your ap33 account.
• Update the "Last Updated" date shown at the top of this document.

Continued use of the ap33 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy terms. If you do not agree with the changes made, you may close your ap33 account before the new terms take effect by contacting our support team.

Previous versions of this Privacy Policy are kept in ap33's internal archives and can be requested by users who have a legitimate need to refer to an earlier version.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ap33 handles your personal data, please reach out to us through the following channels:

Ap33 takes every privacy enquiry and complaint seriously. We are committed to handling all privacy-related issues thoroughly, fairly, and within a reasonable timeframe. If you are not satisfied with ap33's response to your privacy complaint, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia for further consideration.