Api33 Privacy Policy —
Protecting Your Personal Data Is Our Priority

Welcome to the api33 Privacy Policy. This document represents our written commitment to every member and visitor of the api33 platform regarding how your personal data is handled with full trust and responsibility.

Api33 is an online gaming platform operating in Malaysia, offering a wide range of game categories including slot games, live casino, sports betting, and fish shooting games. In operating this platform, we collect certain personal data from members and visitors to ensure a smooth, secure, and personalised gaming experience for every user.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international online gambling industry best practices. By registering for or using the api33 platform, you agree to the terms set out in this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact our support team before continuing to use the platform.

Api33 only collects data that is genuinely necessary to provide you with a quality service. We do not collect excessive or irrelevant data beyond our platform's operational needs. The following are the categories of data we collect:

All data we collect is stored on servers protected with high-level encryption. Sensitive information such as identification numbers and financial data is stored in encrypted format and is only accessible by authorised personnel with a legitimate business need.

• api33 does not collect credit or debit card information directly — all payments are processed through third-party payment providers that comply with PCI-DSS standards.
• Identity verification documents (identification card images, selfies) submitted for the KYC process are stored in a separate system with restricted access and deleted when no longer required in accordance with our data retention schedule.
• Data belonging to individuals under the age of 18 will not be knowingly collected. If we determine that a person under 18 has registered, the account will be closed immediately.

Your personal data is collected through several different channels as you interact with the api33 platform. Understanding how data is collected helps you make more informed decisions about your use of our platform.

• Account registration: When you register as a new member, you are required to complete a registration form providing your name, phone number, email address, and other basic information. This data is collected directly from you.
• KYC Process: To meet legal compliance requirements, you may be asked to submit identity verification documents such as a copy of your identification card or passport, along with proof of current address.
• Financial transactions: When you make a deposit or withdrawal, transaction-related information such as account name, bank account number, and transaction amount is automatically recorded for compliance and audit purposes.
• Gaming activity: Every game session, wager, win, and loss is automatically logged to ensure the accuracy of your account and to detect any unusual activity.
• Web technology: Cookies, web beacons, and similar tracking technologies are used to collect technical and browsing behaviour data on our platform to improve the user experience.
• Support communications: Every conversation you have with our customer support team — whether via live chat, email, or other channels — is recorded for quality assurance and future reference purposes.

Every piece of data we collect has a clear and legitimate purpose. api33 does not use your data for purposes unrelated to platform operations without first obtaining your specific consent.

• Account management: Creating, verifying and managing your member account, including processing deposits and withdrawals in MYR quickly and accurately.
• Identity verification (KYC): Meeting legal obligations under the PDPA and anti-money laundering (AML) regulations that require identity verification for all members prior to significant financial transactions.
• Service improvement: Analysing aggregated usage data to understand platform usage patterns and continuously improve the user experience, game performance and platform interface.
• Marketing communications: Sending you notifications about relevant promotions, bonuses and exclusive offers — only if you have agreed to receive marketing communications during registration or subsequently in your account settings.
• Fraud detection: Monitoring account activity to detect and prevent unauthorised access, financial fraud, money laundering and breaches of terms of service.
• Customer support: Providing effective and personalised assistance when you contact our support team, by accessing relevant account records and interaction history.
• Legal compliance: Complying with court orders, regulatory body investigations or other legitimate legal requirements under Malaysian law.

Api33 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, there are limited situations where we need to share certain data with trusted partners to enable the platform to operate properly.

• Payment processors: Required transaction information is shared with FPX, e-wallet providers (Touch 'n Go eWallet, GrabPay, Boost) and cryptocurrency platforms solely to process your deposits and withdrawals.
• KYC providers: Identity verification documents are processed by accredited KYC providers who comply with strict data security standards and do not retain your data longer than necessary.
• Game providers: Usernames and account IDs are shared with licensed game providers (such as slot and live casino providers) solely to enable gaming sessions to function correctly.
• Regulatory body: api33 will disclose required data to the relevant authorities when mandated by law, court order, or a legitimate official investigation.

All third-party partners involved in data sharing are bound by strict confidentiality agreements and are required to protect your data to a standard equal to or exceeding our own data protection standards. We conduct regular assessments of these partners to ensure ongoing compliance.

Protecting your personal data is among api33's highest technical and operational priorities. We continuously invest in cutting-edge security infrastructure to ensure your data remains safe from both internal and external threats.

• 256-bit SSL encryption: All data transmitted between your device and the api33 servers is encrypted using TLS 1.3 protocol with AES-256 encryption. This means no one can intercept or read your data in transit.
• Data-at-rest encryption: Sensitive data stored in our databases — including identity and financial information — is encrypted at rest using the latest industry standards.
• Layered access controls: Access to member data is restricted on a least-privilege basis. Only staff with a legitimate business need who have passed the required background checks are permitted to access members' personal data.
• 24/7 Monitoring: Automated threat detection monitors all activity on the api33 platform around the clock to identify and respond to any suspicious access attempts.
• Periodic backups: Member data is regularly backed up to geographically separate server locations to ensure service continuity in the event of a technical failure.
• Independent security audit: api33's security infrastructure undergoes periodic independent security audits by certified cybersecurity firms to identify and patch any potential vulnerabilities.

Api33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as the platform will not function properly without them.
• Analytics cookies: Helping us understand how visitors use our platform — the most frequently visited pages, time spent and navigation patterns — so we can continuously improve the user experience.
• Preference cookies: Saving your personal settings and preferences such as preferred language, display settings and game preferences so you do not need to reconfigure them every time you log in.
• Marketing cookies: Used to display relevant promotions and offers to you based on your interests and activity on the platform. You may opt out of these cookies through your browser settings.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some api33 platform features. For detailed guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 and api33's internal policies, you have the following rights regarding your personal data. api33 is committed to respecting and facilitating the exercise of these rights in a straightforward and unobstructed manner.

Api33 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable Malaysian law. Once the data is no longer needed, it will be securely deleted or anonymised.

• Active account data: Retained for the duration of your active account plus 7 years after account closure, in line with Malaysia's anti-money laundering legal requirements.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date for audit, tax compliance, and related legal requirements.
• KYC documents: Retained for the duration of the active account period and 5 years after account closure. Documents that fail verification will be deleted within 30 days.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes. These logs help us deliver better service and resolve any disputes that may arise.
• Analytics data: Anonymised usage data is retained indefinitely as it no longer contains any personally identifiable information.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format (if any), documents will be destroyed using security-grade shredding machines.

If you have any questions, concerns or complaints about how api33 handles your personal data, our data protection team is ready to help. We take every privacy complaint seriously and are committed to resolving each issue within a reasonable timeframe.

You may reach us through the following channels for matters relating to privacy and data protection:

• Data Protection Email: [email protected] — for privacy enquiries, data access requests, and complaints requiring a more detailed written response.
• Live Chat: Available 24/7 on the api33 platform for general enquiries and issues requiring immediate resolution.

We aim to respond to all privacy-related enquiries within 5 business days. For more complex requests such as full data access or data deletion requests, processing may take up to 14 business days.