ap33 Privacy Policy

Introduction

ap33 operates the website accessible at ap33.buzz and provides online gaming services including sports betting, esports markets, live casino and slot titles for adult players in Malaysia. This Privacy Policy applies to all users of the ap33 website, account holders and anyone who communicates with ap33 through the support channels listed on the website.

By creating an ap33 account, making a deposit using any Malaysian payment channel including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow or FPX, or otherwise using the ap33 service, a user accepts the practices described in this policy. If any section is not acceptable, the user should not access ap33 and should contact support to discuss account status.

This policy should be read together with the ap33 Terms & Conditions. Where a specific product, promotion or service has supplementary privacy information, that supplementary notice applies alongside this document.

Definitions

"Personal data" means any information that identifies or can reasonably be used to identify a living individual. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure and deletion. "Controller" refers to ap33 in its capacity as the entity that determines the purposes and means of processing personal data.

"Processor" means a third party that processes personal data on ap33's behalf, such as a payment gateway or game provider. "User" or "player" means the individual whose data is being processed. "Account" means the registered profile created by an eligible Malaysian or regional adult user on the ap33 platform.

Data We Collect

ap33 may collect the following categories of personal information depending on the nature of a user's interaction with the platform:

• Identity data: full name, date of birth, gender and nationality as supplied at registration.
• Contact data: email address, Malaysian mobile number and correspondence address including city references such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam.
• Identity verification data: copies of a Malaysian identity document, passport or other government-issued evidence submitted during KYC review.
• Financial data: bank account name, account number and payment method details associated with MYR deposits and withdrawals, as well as transaction reference numbers and amounts.
• Technical data: IP address, device identifiers, browser type, operating system, session timestamps and approximate geolocation derived from network signals.
• Usage data: browsing behaviour within the ap33 website, pages viewed, search terms entered, betting and gaming activity records, wager amounts, game outcomes and session duration.
• Communications data: content of messages sent to ap33 support through live chat, email or other documented channels.
• Preference data: language settings, notification preferences and responsible gambling tool selections applied to the account.

How Data Is Collected

Most personal data held by ap33 is provided directly by the user during registration, verification, deposit, withdrawal or a support interaction. Additional information arises automatically from the technical infrastructure as the user navigates, loads pages, places bets or plays games.

ap33 may also receive information from third-party processors involved in payment handling, fraud screening, KYC verification or game provision. In these cases, ap33 receives only the data necessary for the relevant function and uses it only for that stated purpose.

Data Processing and Purposes

ap33 processes personal data for the following lawful purposes:

Payment Data and MYR Transactions

Financial data associated with MYR deposits and withdrawals is handled through approved payment processors. Where a player uses DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost or GrabPay, the relevant transaction is processed by the respective provider under that provider's own terms and security standards. ap33 receives transaction references and status information necessary to credit or debit the correct ap33 account.

Full card numbers, complete bank credentials and eWallet authentication tokens are not stored by ap33. Payment ownership verification may involve confirmation of the name and account registered with the payment method. Where a deposit appears to originate from a method not registered in the account holder's name, the transaction may be held pending further confirmation. This is a protective measure, not a punitive one.

Data Sharing and International Transfers

ap33 does not sell personal data. Information may be shared with the following categories of recipient only where necessary and under appropriate safeguards:

• Payment processors: to execute and verify MYR deposits, withdrawals and associated fraud screening.
• KYC and identity verification providers: to confirm a player's identity, age and document authenticity.
• Game content providers: to deliver sports, esports and casino titles, which may involve passing a session token and an anonymised player reference.
• Fraud and security tools: to detect unusual account access, suspicious wagering patterns or payment irregularities.
• Professional advisors: legal, compliance and audit professionals bound by confidentiality obligations.
• Regulatory or law enforcement bodies: where disclosure is required by applicable law, court order or regulatory obligation.

Where data is transferred to a processor whose systems are outside Malaysia, ap33 requires that appropriate transfer safeguards and contractual protections are in place before the transfer occurs.

Cookies and Similar Technologies

The ap33 website uses cookies and comparable tracking technologies to support core session functions, maintain login state, apply language preferences and collect aggregate traffic analytics. Cookies also help the platform apply responsible gambling session controls.

Session cookies are deleted when a browser closes. Persistent cookies may remain for a defined period to improve the continuity of a return visit. Most common browsers provide settings to manage, block or delete cookies. Blocking essential cookies may prevent certain ap33 features from working correctly.

Analytics tools used by ap33 process technical and usage data in aggregated or pseudonymised form. They are not used to build personally identifiable advertising profiles or to track players across unrelated websites.

Retention Periods

ap33 retains personal data for as long as the account is active, and for a reasonable further period after closure to satisfy legitimate operational, financial and legal record-keeping purposes. Transaction records, including MYR deposit and withdrawal histories, may need to be retained for longer periods to meet financial compliance requirements.

Where personal data is no longer needed and retention is not required, ap33 will delete or anonymise it. A user who requests account closure may still have certain records retained under this policy for the applicable retention window. Specific retention queries may be directed to the contact details in Section 14 of this policy.

User Rights

Subject to applicable law and the specific circumstances of a request, ap33 account holders in Malaysia may exercise the following rights in relation to their personal data:

• Right of access: to obtain a copy of the personal data ap33 holds about you and relevant processing information.
• Right to correction: to request inaccurate or incomplete personal data be updated.
• Right to erasure: to request deletion of personal data where it is no longer necessary, subject to retention obligations.
• Right to restriction: to request that certain processing be suspended while a query or dispute is being resolved.
• Right to object: to object to processing carried out on the basis of legitimate interests, particularly direct marketing.
• Right to data portability: to receive personal data in a structured, common format where processing is based on consent or contractual performance.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time without this affecting the lawfulness of prior processing.

Requests should be made through the ap33 support channel. ap33 will acknowledge a request promptly and aim to respond substantively within a reasonable period. In some cases, identity confirmation will be required before a request is actioned.

Minors and Age Verification

ap33 services are strictly for adults aged 21 and above. ap33 does not knowingly collect personal data from anyone under that age. Age verification is a standard step in the account review process. Where ap33 becomes aware that an account has been registered by a person under 21, the account will be suspended and any funds handled in accordance with the circumstances and applicable rules.

If a parent or guardian suspects that a minor has created an ap33 account, they should contact support immediately using the website email address. Any related data will be reviewed and handled appropriately following that notification.

Information Security

ap33 applies technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration and loss. These include encrypted communications, access control on internal systems, verified-identity authentication for sensitive account actions and ongoing monitoring for anomalous activity.

No internet transmission is completely immune from risk. Users are also responsible for protecting their own account credentials. A player who suspects their ap33 credentials have been compromised should notify support promptly and change their password immediately.

Changes to This Privacy Policy

ap33 may update this Privacy Policy from time to time to reflect changes in the platform, payment infrastructure, applicable obligations or data processing practices. The current version will always be published on this page with an updated effective date at the top.

Material changes that significantly affect how personal data is used may also be communicated through an account notice or a registered contact channel. Continued use of ap33 after a revised policy takes effect indicates that the updated terms are accepted. If a user does not accept a material change, they should stop using ap33 and request account closure.

Contact Us

Questions, correction requests, erasure requests or complaints about how ap33 handles personal data may be sent to the ap33 support team using the live chat, WhatsApp or email channels displayed on the website. The ap33 website email is [email protected].

When raising a data-related request or concern, please include a clear description of the subject matter and your registered account email address so the query can be matched to the correct account record. Do not include your account password in any written correspondence.

ap33 acknowledges all data-related requests as promptly as practicable and will follow up with a substantive response within a reasonable period. If a user feels a concern has not been resolved satisfactorily, they may also review the general guidance available on the Responsible Gambling and FAQ pages.