club333 Privacy Policy

1. About This Policy

This Privacy Policy is issued by club333, the operator of the online betting and casino platform accessible at club333.co (the "Platform"). For the purposes of this Policy, "club333", "we", "us", and "our" refer to the licensed operator of the Platform. "Member", "you", and "your" refer to any individual who registers an Account or otherwise accesses and uses the Platform.

This Policy describes how we collect, use, share, and protect personal data in connection with your use of club333. It applies to all Members and visitors of the Platform, including those accessing club333 from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Ipoh, and all other locations in Malaysia.

By registering a club333 Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data We Collect

Club333 collects personal data through the registration process, your ongoing use of the Platform, and through automated technical means. The categories of personal data we collect include:

We do not collect special category data (such as health data, ethnic origin, or political opinions) unless strictly required by applicable regulatory obligations, for example in the context of a responsible gaming intervention.

3. How We Use Your Data

Club333 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, verify, and administer your club333 Account, including processing deposits and withdrawals in MYR.
• Service Delivery: To provide access to all club333 products — sportsbook, live casino, slots, Mix Parlay, and Baccarat — and to personalise your Platform experience.
• Identity Verification (KYC): To comply with our gaming licence obligations, we verify the identity and age of all Members. This is required before the first withdrawal is processed and may be required at registration.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: To meet reporting and record-keeping obligations imposed by our gaming licence and applicable law, including anti-money laundering (AML) requirements.
• Responsible Gaming: To monitor gameplay patterns and identify Members who may be experiencing gambling-related harm, and to deliver responsible gaming interventions where appropriate.
• Customer Support: To respond to enquiries, resolve complaints, and deliver service improvements based on feedback from Malaysian Members.
• Marketing Communications: To send Members information about club333 promotions, bonuses, and platform updates, subject to the Member's communication preferences and applicable marketing consent requirements.

4. Legal Basis for Processing

Club333 processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Member Agreement — including account operation, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with our gaming licence conditions, AML legislation, and other applicable legal requirements.
• Legitimate Interests: Processing carried out for fraud prevention, security, platform improvement, and responsible gaming monitoring, where these interests do not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, where you have expressly opted in to receive such communications. You may withdraw this consent at any time by contacting club333 support.

5. Data Sharing & Disclosure

Club333 does not sell personal data to third parties. We may share your data with the following categories of recipient, strictly for the purposes set out in this Policy:

• Payment Processors: Malaysian payment service providers including Touch n Go eWallet, Boost, Maybank FPX, CIMB Clicks, Public Bank, and DuitNow — to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC and AML screening providers engaged to verify Member identities and screen against sanctions and PEP lists.
• Gaming Software Providers: Game studios and platform providers (such as Pragmatic Play, PG Soft, Evolution) receive anonymised session data necessary to deliver their services within club333.
• Regulatory Authorities: Relevant gaming regulatory bodies and law enforcement agencies, where disclosure is required by law or by the terms of our gaming licence.
• Customer Support Platforms: Third-party live chat and communication tools used to deliver support to club333 Members. These providers are contractually bound to process data only as instructed by club333.

All third-party service providers are subject to contractual data processing agreements that restrict their use of personal data to the specific purposes for which it was shared.

6. Cookies & Tracking Technologies

Club333 uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that help us deliver a functional, secure, and personalised experience.

• Essential Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings and login state — to provide a consistent experience across sessions.
• Analytics Cookies: Collect anonymised usage data to help us understand how Members navigate and use the Platform, enabling ongoing improvements to the club333 product suite.
• Security Cookies: Used for fraud detection, device fingerprinting, and the identification of suspicious activity patterns associated with bonus abuse or prohibited conduct.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing club333, but certain Platform features may be affected.

7. Data Retention

Club333 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy and to comply with applicable legal and regulatory retention requirements. The following general retention periods apply:

• Active Accounts: Personal data is retained for the duration of the Member relationship and for a minimum of five (5) years following account closure, as required by AML regulations.
• Financial Records: Transaction records, deposit and withdrawal history, and MYR wallet statements are retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• Support Communications: Live Chat transcripts and support tickets are retained for a period of three (3) years following the resolution of the relevant interaction.
• Marketing Data: Communication preference records are retained until you withdraw consent or request deletion, plus a reasonable period thereafter to evidence compliance.

Data that is no longer required for any legitimate purpose will be securely deleted or anonymised in accordance with club333's data lifecycle management procedures.

8. Security Measures

Club333 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all pages of the Platform, including the login, cashier, and account management sections.
• Access controls and role-based permissions limiting staff access to personal data to those with a legitimate operational need.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent third-party security firms.
• Multi-factor authentication options available to all club333 Members to protect Account access.
• Incident response procedures and data breach notification protocols aligned with our licensing obligations.

9. Your Data Rights

As a club333 Member, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you. We will respond to such requests within thirty (30) days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Some corrections can be made directly within your club333 account settings.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations. Certain data must be retained regardless of a deletion request in order to comply with AML and licensing requirements.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, where you contest the accuracy of the data.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though club333 may be required to continue processing in some cases.
• Right to Data Portability: You may request a copy of the personal data you provided to club333 in a commonly used, machine-readable format.

To exercise any of these rights, contact the club333 Data Protection contact via the support channels listed in Section 14. We will verify your identity before processing any data rights request.

10. Minors

The club333 Platform is strictly intended for adults aged 21 years or older. Club333 does not knowingly collect personal data from individuals under 21 years of age. Age verification checks are performed as part of the Member registration and KYC process.

If club333 becomes aware that personal data has been collected from a minor, we will take immediate steps to delete the data and close the associated Account. If you have reason to believe that a minor has registered a club333 Account, please contact our support team immediately.

11. Third-Party Services

The club333 Platform integrates third-party services — including game providers, payment processors, live chat platforms, and analytics tools. These third parties operate under their own privacy policies and terms of service. Club333 is not responsible for the data practices of third-party providers beyond the contractual obligations imposed upon them as data processors acting on club333's instructions.

The Platform does not contain links to external third-party websites. All services accessible through club333 are delivered within the club333 Platform environment.

12. International Data Transfers

Club333 operates internationally and may transfer personal data to service providers located outside Malaysia. Where such transfers occur, club333 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to protect the data in accordance with applicable data protection standards.

If you have questions about the specific safeguards applicable to international transfers of your personal data, please contact us using the details in Section 14.

13. Changes to This Policy

Club333 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. Material changes will be communicated to registered Members via email or in-Platform notification prior to the effective date of the change.

The most current version of this Privacy Policy will always be available at club333.co/privacy-policy. The date at the top of this document indicates when the Policy was last revised. Continued use of the Platform following notification of a revised Policy constitutes your acceptance of the updated terms.

14. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or the personal data club333 holds about you, please contact us through any of the following channels:

• Live Chat: Available 24/7 on club333.co — our support agents are real people trained to handle data-related enquiries. Average response time is under 5 minutes.
• Email: [email protected]

Club333 targets a response to data-related enquiries within five (5) business days. Complex requests — such as Subject Access Requests — will be acknowledged within 72 hours and fulfilled within thirty (30) calendar days.