King33 Privacy Policy — Your Personal Data Protection

1 Introduction

King33 ("we", "Platform", "King33.ng") is fully committed to protecting the privacy and security of every member's personal data when using our services. This Privacy Policy clearly and transparently explains how we collect, process, store, and protect your personal information while you use the king33 platform.

As a platform serving users in Malaysia, king33 fully complies with the Personal Data Protection Act 2010 (PDPA). We believe your trust is our most valuable asset, and we will never handle your data arbitrarily without a legitimate and clear justification.

This policy applies to all information collected through the King33 website, mobile app, live chat, email, and all other communication channels related to our platform. Please read this document carefully and contact our support team if you have any questions.

2 Types of Personal Data We Collect

King33 only collects personal data necessary to provide quality services and comply with legal requirements. The following are the categories of data we may collect from you:

We do not collect sensitive data categories such as health information, religious beliefs, or political views unless specifically required for responsible gaming purposes such as problem gambling detection.

3 How We Collect Your Data

King33 collects your personal data through several different channels, depending on how you interact with our platform:

• Account registration: When you register as a new member, you provide basic information such as your name, email, phone number, and date of birth directly.
• KYC verification: To meet anti-money laundering legal requirements, we collect identity verification documents such as a copy of your ID card or passport during the verification process.
• Financial transactions: Each time you make a deposit or withdrawal, the relevant payment information is automatically recorded in our system.
• Platform usage: Technical and usage data are collected automatically via cookies, server logs, and similar tracking technologies as you browse the platform.
• Communications with us: When you contact our customer support team via live chat, email, or any other channel, the information you share will be recorded for reference.
• Third-party sources: In certain cases, we may receive additional information from third-party identity verification service providers that we use for KYC purposes.

4 Purpose of Using Your Personal Data

Every piece of data we collect has a specific and legitimate purpose. king33 uses your personal data for the following purposes:

• Account management: Create, maintain, and manage your member account, including the login process, account security, and identity verification.
• Transaction processing: Process all deposits, withdrawals, and financial transactions related to your account securely and accurately.
• Service Provisioning: Provide access to all games and services available on the king33 platform, including casino, sports, bingo, and wagering.
• Fraud detection: Monitor account activity to detect and prevent fraud, money laundering, and other suspicious activities.
• Legal compliance: Fulfil legal and regulatory obligations, including reporting to authorities when required.
• Service Improvements: Analyse usage patterns to improve the platform, personalise your experience, and develop new features.
• Communications: Send important account-related notifications, promotions you have subscribed to, and relevant policy updates.
• Responsible gaming: Monitor gaming patterns to identify members who may need responsible gaming support.

5 Data Sharing with Third Parties

King33 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where we need to share certain information with trusted parties:

• Payment service providers: To process deposits and withdrawals, the necessary transaction information is shared with trusted payment gateway providers. All such providers are subject to strict confidentiality agreements.
• KYC service providers: For identity verification purposes, we work with licensed identity verification service providers that comply with international data security standards.
• Game providers: Limited game information is shared with third-party game providers to ensure game integrity and proper account management.
• Legal authority: king33 will disclose personal data to the relevant authorities when required by law, court order, or to support financial crime investigations.
• Group of companies: Within the King33 group of companies, data may be shared for internal management, financial reporting, and integrated security purposes.

All third parties that receive your personal data from king33 are required to comply with applicable data protection laws and may only use that data for specifically authorised purposes.

6 Cookies and Tracking Technologies

King33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential cookies: Required for core platform operations such as login authentication and session security. These cookies cannot be disabled without affecting basic platform functionality.
• Performance cookies: Collect information about how you use the platform, such as the most frequently visited pages and time spent. This data is used to improve platform performance.
• Functional cookies: Save your preferences such as language, display settings, and gaming preferences to deliver a more personalised experience.
• Analytics cookies: Help us understand how users interact with the platform as a whole. This information is used in aggregate form and cannot be individually identified.

7 Data Security Measures

Protecting your personal data is king33's top priority. We implement a comprehensive range of technical and organisational security measures to keep your data safe at all times:

• Data Encryption: All data transmitted through our platform is protected using 256-bit SSL/TLS encryption protocols. Sensitive data stored in our databases is also encrypted using the latest industry standards.
• Layered access control: Access to members' personal data is restricted to staff who require it to perform their duties. A role-based access control (RBAC) system is in place to enforce the principle of least privilege.
• Continuous monitoring: Our security systems operate 24/7 to detect any suspicious activity or unauthorised access attempts on your data.
• Regular security audits: king33 conducts regular security audits and penetration testing by independent security experts to identify and address any potential vulnerabilities.
• Staff training: All king33 staff with access to personal data undergo regular data protection training to ensure strict compliance with privacy policies.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% free from threats. Should any security breach affecting your data occur, king33 will notify you within the timeframe required by law.

8 Your Rights Regarding Personal Data

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

To exercise any of the above rights, please contact our data protection team via live chat on the king33 platform or through the email address stated in the "Contact Us" section. We will process your request within 21 business days.

9 Data Retention and Deletion Period

King33 only retains your personal data for as long as necessary to fulfil the purposes stated in this policy or as required by applicable laws and regulations.

• Active account data: Retained for the duration of your active account and used to provide you with continuous service.
• Data after account closure: Upon account closure, King33 retains your personal data for a minimum of 7 years to meet anti-money laundering and financial reporting legal requirements.
• Transaction records: All financial transaction records are retained for 7 years in accordance with Malaysia's tax and financial regulatory requirements.
• Communication logs: Customer support communication records are retained for 2 years for reference and dispute resolution purposes.
• Marketing data: If you withdraw your marketing consent, your information will be removed from our marketing list within 30 days.

Once the specified retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked to your identity.

10 Changes to This Privacy Policy

King33 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform operations. All changes take effect immediately upon publication of the updated version on this website.

For changes that are material and significantly affect the way we process your personal data, king33 will:

• Display a clear notice on the platform's home page at least 14 days before the changes take effect.
• Send notifications via your registered email or through in-app notifications.
• Update the "Last Updated" date at the top of this document to reflect the date of the latest revision.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way king33 handles your personal data, we encourage you to contact us. Our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• Live Chat: The fastest channel — our support team operates 24 hours a day, 7 days a week via the king33 platform.
• Email: [email protected] — for specific enquiries related to privacy and data protection.
• General Support: [email protected] — for general enquiries related to your account and services.

We are committed to responding to all privacy-related enquiries within 5 business days. For official requests related to personal data rights, please clearly state the type of request and include the required identity verification information.