🔒 UPDATED JANUARY 2026

Club33 Privacy Policy – Malaysia Personal Data Protection

Club33 is committed to protecting your privacy. Find out how we collect, use, and safeguard your personal data as a member of our platform.

Club33's Data Protection Commitment

Six core principles that shape how Club33 handles your personal data

256-bit SSL Encryption

All information you submit to the Club33 platform is protected with 256-bit SSL encryption — the same security standard used by major Malaysian banking institutions such as Maybank and CIMB. Your data is never transmitted in an exposed state.

No Data Sales

Club33 does not sell, rent, or commercialise members' personal data to any third party under any circumstances. Your information belongs to you – we only use it for purposes to which you have given explicit consent.

Data Control in Your Hands

As a Club33 member, you have the full right to access, correct, transfer, or request deletion of your personal data at any time. Such requests are processed within 14 business days at no charge.

Financial Data Segregation

Your bank account details, e-wallet information (Touch 'n Go, GrabPay, Boost, ShopeePay), and DuitNow details are not stored in Club33's systems. All transactions are processed directly through approved payment gateways that comply with PCI-DSS standards.

Malaysian PDPA Compliance

Club33's Privacy Policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all applicable local legal requirements governing the collection, processing, and storage of personal data belonging to Malaysian citizens.

Data Breach Notification

In the event of any security incident involving member personal data, Club33 is committed to notifying affected members within 72 hours of confirming the incident, along with details of the remedial steps taken.

Last updated: 1 January 2026  |  Version: 3.1  |  Applicable law: Malaysia PDPA 2010
The Importance of This Privacy Policy

This Privacy Policy explains how Club33 collects, uses, stores, and protects your personal data as a member of our platform. By registering or using Club33, you confirm that you have read and agreed to this Privacy Policy. Please read it carefully — you have the right to know how your information is handled.

1Introduction & Scope of This Policy

Club33 ("we", "the Company") is the operator of an online betting and casino platform accessible at club33.best. We take our responsibility to protect every member's privacy seriously, and we are grateful for the trust you place in us by sharing your personal information.

This Privacy Policy has been drafted in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) and applies to all personal data we collect, process, and store in connection with providing you with the Club33 platform services.

This policy covers all channels of interaction between you and club33, including:

  • The club33.best website and all associated subdomains
  • The Club33 mobile app (iOS and Android)
  • Communications via email, live chat, and customer support channels
  • Any new products or services offered by Club33 in the future
Important Note

This Privacy Policy does not cover third-party websites or services that you may access via links within the club33 platform. We encourage you to read the respective privacy policies of those third parties separately.

2Personal Data We Collect

Club33 collects various types of personal data depending on your relationship with our platform. Below is a full breakdown of the data collected and how it is gathered:

2.1 Data You Provide Directly

Data Category Examples of Information Time Collected
Identity Information Full name, date of birth, MyKad/passport number, gender During registration & KYC
Contact Information Email address, phone number, residential address At registration
Account Information Username, password (stored in hashed form), security questions At registration
Verification Documents Copy of MyKad, utility bill, bank statement (for the KYC process) When requested for KYC
Feedback & Communications Support email content, live chat transcripts, complaints When interacting with support

2.2 Automatically Collected Data

  • Device & Technical Data: IP address, device type, operating system, web browser type, screen resolution, time zone.
  • Usage Data: Pages visited, time spent, games played, betting records, and login and logout history.
  • Cookie Data: Session information, user preferences, platform usage analytics data (see Section 8 for details).
  • Geolocation Data: General location based on IP address, for legal compliance verification and fraud detection purposes.

2.3 Financial Data (Handled on a Restricted Basis)

Club33 does not store credit/debit card numbers, full bank account numbers, or sensitive e-wallet information directly in our systems. All financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX are processed by third-party payment gateways that comply with PCI-DSS standards. We only store the transaction reference (transaction ID) and transaction amount for account record purposes.

3Purposes for Using Personal Data

Club33 uses your personal data solely for lawful purposes directly related to the provision of our services. The following outlines those purposes along with the legal basis permitting each type of processing:

3.1 Account Management & Services

  • Processing your account registration and verifying your identity (basis: performance of contract).
  • Processing deposits and withdrawals via approved Malaysian payment methods (basis: performance of contract).
  • Providing access to games and Sports Betting on the Club33 platform (basis: contract performance).
  • Managing the VIP Rewards programme and distributing bonuses to eligible members (basis: performance of contract).

3.2 Security & Compliance

  • Verifying that members meet the minimum age requirement of 21 years (basis: legal obligation).
  • Carrying out mandatory KYC (Know Your Customer) and AML (Anti-Money Laundering) procedures (basis: legal obligation).
  • Detecting and preventing fraud, account takeovers, multiple account usage, and bonus manipulation (basis: legitimate interests).
  • Complying with any data disclosure requirements mandated by Malaysian authorities (basis: legal obligation).

3.3 Service Improvement & Communications

  • Analysing platform usage patterns to improve the user experience (basis: legitimate interests).
  • Sending essential service communications such as transaction notifications, terms updates, and security alerts (basis: legitimate interests).
  • Sending marketing communications about offers, promotions, and new games only where you have provided explicit consent at registration or at any point thereafter (basis: consent).
  • Providing responsive and relevant customer support (basis: legitimate interests).
Marketing Communications Opt-Out

You can opt out of marketing emails at any time by clicking the "Unsubscribe" link in any email we send, or by contacting the club33 support team. Unsubscribe requests will be processed within 5 working days. Your choice to unsubscribe will not affect essential service communications.

4Data Sharing & Disclosure

Club33 does not sell or transfer members' personal data to third parties for marketing or commercial purposes. However, there are limited situations where we may need to share your data with certain parties:

4.1 Third-Party Service Providers

We work with trusted service providers to help us operate the club33 platform. All providers are bound by strict data processing agreements:

  • Payment Gateway: Providers such as the DuitNow and FPX platforms that process your financial transactions – they receive only the data required to process the relevant transaction.
  • Gaming Platform Providers: Companies that supply live casino, slots, and lottery gaming software – they receive anonymised session ID numbers and not full identity data.
  • Cloud Service Provider: Cloud computing platforms that store our platform data in a secure, encrypted environment.
  • Analytics Services: Analytics tools that help us understand platform usage patterns — data shared is in aggregate form and cannot be used to identify any individual.

4.2 Legal Requirements & Authorities

Club33 may be required to disclose your personal data to Malaysian authorities where mandated by law, court order, or a lawful regulatory request. In such circumstances, we will:

  • Verifying the legitimacy of the request before disclosing any data.
  • Disclosing only the minimum data necessary to fulfil the relevant request.
  • Notify you of the disclosure where permitted by applicable law.

4.3 Business Transfers

In the event of a merger, acquisition, or transfer of Club33's assets, members' personal data may be transferred to the new entity. In such cases, you will be notified in advance and the receiving entity will be required to uphold a privacy policy of equivalent or higher standard.

5Data Security – How We Protect Your Information

The security of your personal data is club33's top priority. We continually invest in security infrastructure to ensure your data is protected at every level:

5.1 Technical Security Measures

  • Data Encryption in Transit: All communications between your device and club33's servers are protected with TLS 1.3 and AES-256 encryption – no data is ever transmitted unencrypted.
  • Encryption of Stored Data: Sensitive data stored in our databases is encrypted to industry standards. Passwords are never stored in plain text – they are hashed using an irreversible algorithm.
  • Two-Factor Authentication (2FA): We offer 2FA as an additional security layer for all member accounts, which we strongly encourage all members to enable.
  • 24/7 Security Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
  • Regular Penetration Testing: club33 conducts regular security testing and external audits to identify and address any vulnerabilities before they can be exploited.

5.2 Organisational Security Measures

  • Access to members' personal data is restricted to club33 staff who require it to perform their duties only (principle of need-to-know).
  • All staff with access to personal data undergo regular privacy and data security training.
  • Internal access to systems containing personal data is monitored and logged for audit purposes.
Shared Responsibility

While Club33 takes every reasonable measure to protect your data, account security also depends on your own actions. Please use a strong, unique password, never share your login details with anyone, and contact us immediately if you suspect any unauthorised activity on your account.

6Data Retention Period

Club33 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law.

Data Type Retention Period Reason
Active account data Throughout the active account period Service requirements
Financial transaction records 7 years from the transaction date Malaysian legal requirements (AML)
KYC Documents 5 years after account closure Compliance obligations
Support communication logs 2 years from last interaction Service improvement & auditing
Game & betting data 3 years from the date of gameplay Dispute resolution
Marketing data (with consent) Until consent is withdrawn Member consent
Security & system logs 12 months Fraud detection & audit

Once the applicable retention period has lapsed, your data will be securely deleted or anonymised using industry-standard methods.

7Your Rights as a Data Subject

Under Malaysia's PDPA and Club33's Privacy Policy, you have the following rights regarding your personal data. All requests may be submitted to support@club33.best and will be processed within 14 business days:

Your Data Protection Rights at Club33

These rights are guaranteed under Malaysia's PDPA and Club33's Privacy Policy

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide a complete summary in a readable format within 14 business days of your request.

Right to Rectification

If the personal data we hold about you is inaccurate or outdated, you have the right to request a correction. We will update your records within 7 business days following verification of your identity.

Right to Erasure

You may request deletion of your personal data when it is no longer needed, provided there is no legal obligation requiring us to retain it (for example, 7-year financial records under AML law).

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes, or where processing is based on our legitimate interests. All objections will be actioned and enforced promptly.

Right to Data Portability

You have the right to receive a copy of the personal data you have provided to us in a machine-readable format (such as JSON or CSV) for the purpose of transferring it to another service provider of your choice.

Right to Restriction of Processing

In certain situations – for example, where there is a dispute regarding the accuracy of your data – you may request that we restrict the processing of your personal data until the matter is resolved.

8Cookies & Tracking Technologies

The club33 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Club33 platform. To remove all Club33 cookies, you can clear your browser's cache and cookies or use the cookie management feature in our platform settings.

9Children's Privacy

The club33 platform is strictly for individuals aged 21 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 21.

Should we discover or be notified that we have collected data from an underage individual, we will take immediate steps to:

  • Suspends the account immediately.
  • Deleting all data associated with that account from our systems.
  • Returning any funds to the original payment method once identity verification is complete.

Parents or guardians who suspect that their child or dependent has registered an account with Club33 are encouraged to contact us immediately at support@club33.best so that appropriate action can be taken.

10Privacy Policy Amendments

Club33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. We will provide reasonable notice of any material amendments through:

  • An email to your registered address at least 14 days before the amendment takes effect (for material changes).
  • A clear notice on the main page of the Club33 platform.
  • An in-account notification when you first log in after the amendment takes effect.

Your continued use of the Club33 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. Previous versions of our Privacy Policy are available upon request — please contact us if you need a record of an earlier version.

11Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

  • Privacy Email: support@club33.best (please include "Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24/7 via the club33 platform – select the "Privacy & Data" category
  • Response Time: Privacy enquiries are prioritised — we aim to respond within 2 hours for live chat and within 24 hours for email
  • Processing of Data Rights Requests: Up to 14 working days from the date your identity is verified
Complaints to the Authorities

If you are dissatisfied with how Club33 has handled your privacy request or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority under applicable Malaysian law.

Why Your Privacy Matters to Club33

When it comes to online betting platforms in Malaysia, trust is everything. Many Malaysian players have experienced uncomfortable situations where their personal information was used without consent, or worse, exposed to irresponsible parties. That is why Club33 approaches privacy not merely as a legal obligation, but as the foundation of trust we build with each of our members.

When you register with Club33 and share your name, phone number, or MyKad details, you are placing a great deal of trust in us. We understand the weight of that responsibility. Every system, every process, and every policy we build is guided by one question: "Is this the right way to handle our members' information?" A simple answer is never enough – we must be able to justify every decision we make with sound reasoning.

One thing we are particularly proud of is our decision not to store payment details directly. When you make a deposit using Touch 'n Go eWallet or DuitNow, that information goes straight to an approved payment gateway — not to Club33's database. This means that even in the highly unlikely worst-case scenario where our systems were compromised, an attacker would have no access to your e-wallet or bank account details. Design decisions like this are an example of how we build privacy into the way our platform works, not just into the documents we write.

A Personalised Gaming Experience, Without Compromising Your Privacy

Club33 uses usage data to personalise your experience on the platform — suggesting slots you might enjoy, reminding you of upcoming EPL fixtures, or surfacing bonus offers relevant to your playing patterns. This is one of the ways data helps you get more value from our platform. That said, we operate within clear boundaries — we do not share your gaming profile with external advertisers, and we do not build a "personal profile" that goes beyond what is necessary to deliver our services.

Club33 VIP members enjoy a more personalised level of service – a dedicated account manager who understands your preferences, tailored offers, and more frequent communications. To deliver this standard of service, we need to retain additional information about your preferences and history. In all cases, this data is used solely to enhance your experience as a Club33 member and is never shared with any third party for other purposes.

Data Security and the KYC Process at club33

The Know Your Customer (KYC) process is a requirement we cannot avoid as a responsible financial platform. When we request a copy of your MyKad or bank statement – typically for withdrawals exceeding RM 5,000 – these documents are transmitted and stored in an encrypted environment that is segregated from the main platform system. Only trained staff with specific authorisation can access KYC documents, and every instance of access is logged for audit purposes.

We understand that many Malaysian players feel uncomfortable with the KYC process — it can feel like a lot of personal information to hand over. We respect that. That's why we only request KYC documents when they are genuinely required, not as a routine step for every member. We are also committed to making the KYC process at Club33 as smooth and swift as possible — typically completed within one business day.

As a Malaysian user who is informed about digital rights, you should know that under the PDPA 2010 you have the right to access and correct the personal data that companies like Club33 hold about you. We do not merely accept this right – we actively encourage it. If you would like to know what data we have on you, simply send a request to our email and we will provide a full report within 14 business days, free of charge.

Your Privacy, Our Responsibility

Club33 is committed to being fully transparent about how we handle members' personal data. This Privacy Policy is more than a legal document – it is our promise to every Malaysian member who has chosen to trust club33 as their online entertainment platform.

If you have any privacy concerns, do not hesitate to reach out to us. Club33's Malay-speaking support team is available 24 hours a day, 7 days a week at support@club33.best.

FAQ – Club33 Privacy Policy

Frequently asked questions about privacy and data protection

No. club33 does not store your full bank account numbers, credit/debit card details, or sensitive e-wallet information (Touch 'n Go, GrabPay, Boost, ShopeePay) directly in our systems. All transactions are processed through third-party payment gateways that comply with PCI-DSS security standards. We only retain the transaction reference number (transaction ID) and transaction amount for account record purposes and the resolution of any disputes.

Yes, you have the right to request the deletion of your personal data. However, there are certain exceptions where Malaysian law requires us to retain specific data – for example, financial transaction records must be kept for 7 years under Anti-Money Laundering (AML) legislation. For data not subject to such legal obligations, we will process deletion requests within 14 working days after you have verified your identity and closed your account. Please submit your request to support@club33.best with the subject line "Data Deletion Request".

Club33 only sends marketing communications — such as bonus offers, new game promotions, or updates on Malaysia Super League and EPL football tournaments — to members who have given explicit consent at registration or through their account settings. We do not sell or share your data with third-party advertisers. If you no longer wish to receive marketing emails, you can unsubscribe via the link in any of our emails or through your account settings, and your request will be processed within 5 business days.

When you close your club33 account, your access to the platform will be terminated immediately. Your personal data will be handled in accordance with our retention policy – financial records are kept for 7 years (AML legal requirement), KYC documents for 5 years, while other data such as profile information and communication logs will be deleted or anonymised after the designated retention period. If you wish to expedite the deletion of data not subject to legal obligations, please send a written request to support@club33.best after closing your account.

Trust Club33 for a Safe Gaming Experience

Your privacy and data security are our top priority. Register today and enjoy Malaysia's most secure online Sports Betting and casino platform — deposits from RM 20, with 24/7 Bahasa Malaysia support.

SSL
256-bit Encryption
PDPA
Malaysia Compliant 2010
24/7
Privacy Support
14 days
Data Rights Process
Bahasa Melayu