x33 Privacy Policy for Malaysian Players

Scope and Data Controller

This Privacy Policy applies to personal information processed when you browse x33.cam, open or manage an x33 account, deposit or withdraw MYR, use casino or sports betting services, contact support, claim promotions, or activate responsible gambling controls.

For the purposes of this policy, x33 is responsible for determining why and how personal information is processed in connection with the platform. References to “you” and “your” mean a visitor, prospective member or registered x33 player. References to “processing” include collecting, recording, organising, storing, reviewing, using, sharing, restricting, deleting and anonymising personal data.

Information x33 Collects

x33 may collect information directly from you, automatically from your device, and from payment, identity-verification or technical service providers. The exact information depends on how you use x33 and which services you select.

x33 does not require you to disclose more information than is reasonably necessary for the relevant purpose. However, if required information is not supplied, x33 may be unable to register an account, complete a withdrawal, verify ownership, investigate a security concern or provide a requested service.

How Personal Information Is Collected

Information Provided by You

x33 collects information you enter during registration, identity verification, payment requests, account updates and support conversations. This includes information submitted when you request a deposit limit, cooling-off period or self-exclusion. You are responsible for ensuring that information supplied to x33 is accurate and current.

Information Collected Automatically

When you visit x33, technical information may be generated automatically. This can include your IP address, browser, device identifier, preferred language, approximate location, pages viewed, session duration and error records. x33 uses this information to secure the platform, diagnose faults and understand whether services work correctly on Malaysian mobile networks and devices.

Information from Service Providers

x33 may receive limited information from payment processors, verification providers and fraud-prevention tools. For example, a payment service may confirm whether an FPX, DuitNow, Touch 'n Go eWallet, Boost or GrabPay transaction succeeded. A verification service may confirm whether submitted identity details are valid without providing unrelated information.

Purposes and Legal Grounds for Processing

x33 processes personal information only where there is an appropriate purpose and lawful basis. Depending on the activity and applicable law, processing may be necessary to perform the agreement between you and x33, comply with a legal obligation, protect legitimate business and security interests, establish or defend legal claims, protect vital interests, or act on your consent.

• Account administration: opening, maintaining, authenticating and closing an x33 account.
• Service delivery: providing slots, live dealer games, poker, lottery and sports markets such as EPL, Liga Super Malaysia and UFC.
• Payment processing: receiving deposits, settling withdrawals and maintaining accurate MYR transaction records.
• Security and fraud prevention: identifying duplicate accounts, account takeover attempts, payment abuse, collusion and suspicious transactions.
• Responsible gambling: operating deposit limits, loss limits, session reminders, cooling-off periods and self-exclusion controls.
• Customer support: answering questions, investigating disputes and responding to complaints.
• Platform improvement: analysing performance, fixing technical problems and making x33 easier to use on desktop and mobile devices.
• Communications: sending essential account notices and, where permitted, optional information about x33 promotions.

Where x33 relies on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that was lawful before consent was withdrawn, and it does not prevent x33 from processing information under another valid basis.

KYC, Age Verification and Account Security

x33 may require identity and age verification before account activation, during account reviews, before a withdrawal, or when activity presents a security concern. Verification may involve checking your legal name, date of birth, address, identity document and ownership of the payment method used.

KYC information helps x33 enforce its strict 21+ rule and reduces identity theft, payment fraud and unauthorised account use. Documents are restricted to authorised personnel and approved verification systems. x33 does not use identity documents for unrelated advertising.

If submitted details do not match an account or payment record, x33 may request clarification or additional evidence. The account may be temporarily restricted while checks are completed. x33 will not ask players to publish identity documents or account passwords in a public area.

Payment and Financial Information

x33 supports Malaysian payment channels such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong Bank, together with supported cryptocurrencies. Payment information is processed to complete transactions, verify ownership, prevent fraud and maintain financial records.

x33 generally receives transaction references, payment status, payment method, amount and account-holder confirmation rather than complete banking credentials. External payment processors may independently process information under their own operational and legal requirements. x33 limits access to transaction records to personnel who need them for payments, risk management, support or compliance.

Cryptocurrency records may include a wallet address, transaction hash, network, amount and confirmation status. Blockchain transactions are recorded on public distributed ledgers and cannot ordinarily be deleted by x33. Such records are linked to an x33 account only where necessary to process or investigate a transaction.

Cookies and Similar Technologies

x33 may use cookies, local storage and similar technologies to keep sessions secure, remember preferences, maintain login status, prevent abuse and understand platform performance. Some technologies are essential because x33 cannot provide secure account functions without them.

Performance information may help x33 identify slow page loading in Kuala Lumpur, Penang or other Malaysian locations, determine whether a browser feature is working, and fix errors affecting casino or sportsbook use. Analytics are used in aggregated or limited form where reasonably possible.

You may adjust cookie controls through your browser. Blocking essential cookies may prevent login, payment verification, preference storage or other x33 features from operating correctly. x33 does not use cookies to obtain information stored elsewhere on your device.

Disclosure of Personal Information

x33 does not sell player information. Personal information may be disclosed only where reasonably necessary to operate the platform, protect players, comply with valid legal requirements or support the purposes described in this Privacy Policy.

• Payment providers: to process deposits, withdrawals, refunds and disputed transactions.
• Identity and security providers: to conduct KYC checks, detect fraud and protect x33 accounts.
• Technology providers: to host, maintain, monitor and secure platform infrastructure.
• Game and betting providers: to record sessions, settle game results and investigate technical disputes.
• Professional advisers: where legal, audit, accounting or security advice is required.
• Competent authorities: where disclosure is required by applicable law, court order or a valid official request.
• Business successors: where x33 undergoes a genuine restructuring, merger or transfer, subject to appropriate confidentiality protections.

Service providers are expected to use information only for authorised purposes and to apply suitable confidentiality and security safeguards. x33 seeks to disclose only the information necessary for each recipient's role.

International Processing and Data Transfers

Because x33 uses technology, payment and gaming infrastructure that may operate across more than one jurisdiction, personal information may be processed outside Malaysia. Privacy and data protection rules can differ between locations.

Where an international transfer occurs, x33 takes reasonable steps to use appropriate contractual, organisational or technical safeguards. Access is limited according to operational need, and transfers are assessed with regard to the type of information, destination, purpose and security measures available.

Data Retention

x33 keeps personal information only for as long as reasonably required for the purpose for which it was collected and for legitimate security, legal, financial, dispute-resolution and responsible gambling needs. Different categories may be retained for different periods.

Account and transaction records may need to be retained after account closure to resolve disputes, identify repeated fraud attempts, maintain self-exclusion protections and satisfy applicable record-keeping duties. Support conversations may be retained to document complaints and service decisions. Technical logs are generally held for shorter periods unless they form part of a security investigation.

When information is no longer required, x33 takes reasonable steps to delete, securely dispose of or anonymise it. Anonymous information that can no longer identify a player may be retained for statistical and platform-improvement purposes.

Security Measures

x33 applies administrative, technical and organisational safeguards intended to protect personal information against accidental loss, unlawful use, alteration, disclosure and unauthorised access. Measures may include encryption in transit, access controls, authentication procedures, activity monitoring, secure backups, staff confidentiality requirements and incident-response processes.

No internet service can guarantee absolute security. Players also have an important role in protecting their x33 accounts. You should use a unique password, enable available security controls, keep your device updated and sign out when using a shared device. Any suspected account compromise should be reported to x33 promptly.

If x33 identifies a personal data incident that creates a material risk, x33 will investigate, contain and document the incident. Affected individuals and relevant authorities will be notified where required by applicable law.

Your Privacy Rights and Choices

Subject to identity verification, applicable law and permitted exceptions, you may contact x33 to make a request concerning personal information connected with your account. x33 may ask for information needed to confirm that the request comes from the account holder.

A request to delete an account does not automatically override an active self-exclusion record. x33 may retain limited information required to prevent an excluded player from reopening an account during the exclusion period. This protects the player's stated responsible gambling choice.

Responsible Gambling and Sensitive Account Controls

x33 processes information related to deposit limits, session reminders, cooling-off periods and self-exclusion so that those controls can be applied effectively. Such information is accessible only where needed to administer safer gambling measures, respond to support requests or protect player wellbeing.

Gaming patterns may be reviewed to identify indicators of harmful or unusual activity, such as rapid changes in deposits, extended sessions or repeated attempts to bypass limits. A review may result in a responsible gambling message, account contact, temporary restriction or request for further information. These steps are designed to support safer play and do not guarantee that every risk will be identified.

Players can learn more about limits, budgeting and self-exclusion on the Responsible Gambling page. x33 is strictly for players aged 21 and above.

Information About Other People

You must not provide personal information about another person to x33 unless you are authorised to do so and the disclosure is lawful. An x33 account must be opened and used only by the named account holder. Payment methods must belong to that account holder unless x33 has expressly approved an alternative after verification.

If you believe another person has used your identity or payment information on x33 without permission, contact support promptly. x33 may request evidence needed to investigate while limiting disclosure of information belonging to other account holders.

Changes to This Privacy Policy

x33 may update this Privacy Policy to reflect changes in services, technology, security practices or applicable requirements. The revised policy will be published on this page with a new “Last updated” date.

Where a change materially affects how x33 uses personal information, reasonable notice may be provided through an account message or other appropriate communication. Continued use of x33 after the effective date means the updated policy will apply to subsequent processing, subject to rights provided by applicable law.