Personal Data Protection

Privacy Policy ap33my

Your privacy is our priority. This privacy policy explains how ap33my collects, uses and protects your personal information using the latest encryption and compliance with international security standards.

Effective: 1 January 2026
This privacy policy applies to all users of the ap33my platform in Malaysia. By using our services, you agree to the data collection and usage practices described in this document.

1 Introduction

Ap33my is committed to protecting the privacy and security of personal information of all our members. As a trusted online gaming platform in Malaysia, we understand that your trust is the foundation of our relationship. Therefore, we have developed a comprehensive privacy policy to ensure your personal data is handled with full responsibility and transparency.

This privacy policy clearly explains the types of information we collect from users, how it is used, who has access to it, and the security measures we implement to protect it from unauthorised access, loss, or misuse.

This document aims to give you a comprehensive understanding of your rights as a user regarding your personal data, including the right to access, correct, delete, or transfer your data. We also explain the options available to you for controlling the information you share with us.

Ap33my operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international data protection standards such as GDPR to ensure your privacy is protected at the highest level regardless of your location.

2 Information Collected

Ap33my collects various types of information to provide the best service to our members. This data collection is necessary to process registrations, verify identities, process financial transactions and deliver effective customer support. The following are the categories of information we collect:

Type of Information Details Collected Purpose
Identity Information Full name, date of birth, identity card / passport number Identity verification (KYC)
Contact Information Email address, phone number, mailing address Account communication & support
Financial Information Bank account number, bank name, e-wallet information Deposit & withdrawal processing
Activity Data Game records, betting history, transaction logs Security monitoring & responsible gaming
Technical Data IP address, device type, operating system, web browser Account security & platform improvements
Cookie Data Session cookies, preference cookies, analytics cookies User experience & traffic analytics

We only collect information that is genuinely necessary for the stated purposes. We do not collect sensitive information such as biometric data, political views, or religious beliefs unless specifically required for legal compliance verification purposes.

3 Data Collection Purpose

Every piece of information we collect has a clear and legitimate purpose. ap33my does not collect data purely for commercial gain without direct benefit to users. The following are the primary purposes for which your data is used:

  • Account Management: Creating, verifying and managing your user account, including the KYC process required by international financial compliance standards.
  • Transaction Processing: Processing deposits and withdrawals securely, verifying payment method ownership and maintaining accurate financial records.
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and suspicious activities that could compromise your account security.
  • Customer Support: Providing relevant and effective assistance when you contact our support team via live chat or email.
  • Service Improvements: Analysing platform usage patterns in aggregate to improve our performance, user interface and game offerings.
  • Responsible Gaming: Monitoring wagering patterns to identify members who may need assistance with their playing habits and proactively reaching out to them.
  • Legal Compliance: Fulfilling legal, regulatory and reporting obligations imposed by the relevant Malaysian authorities.

Ap33my does not use your data for third-party marketing purposes without your explicit consent. You can opt out of marketing communications at any time through your account settings.

4 Data Sharing

Ap33my upholds a strict data sharing policy. We do not sell, rent or disclose your personal information to third parties for their own commercial purposes. However, there are certain situations where data sharing is necessary and legally justified:

  • Service Providers: We share necessary data with payment service providers (such as FPX, Touch 'n Go, Boost), identity verification providers, and cloud computing infrastructure used to operate our platform. All such providers are bound by strict confidentiality agreements.
  • Game Providers: Required game session information is shared with licensed game providers to enable seamless gameplay. These providers do not receive your full identity information.
  • Legal Authorities: We will disclose information to government authorities, law enforcement agencies, or regulatory bodies where required by law, court order, or to comply with valid legal process.
  • Business Transfers: In the event ap33my undergoes a merger, acquisition or asset sale, user data may be transferred to the new entity. You will be notified in advance in such a situation.
In all data sharing instances, we ensure that receiving parties maintain security protections equal to or exceeding our own standards. We never share your password, full bank card number, or identity documents with any third party.

5 Data Security

Ap33my continuously invests in the latest security technology to ensure your personal data is always protected. Our approach to data security encompasses multiple layers of protection working simultaneously:

  • 256-bit SSL Encryption: All data transferred between your device and ap33my servers is encrypted using the latest TLS protocol, ensuring no third party can intercept or read your information in transit.
  • Encrypted Data Storage: Sensitive data such as payment information and identity documents is stored in encrypted databases with file-level encryption using the AES-256 standard.
  • Two-Factor Authentication (2FA): We provide an additional security layer through 2FA to protect your account from unauthorised access even if your password is known to others.
  • 24/7 Monitoring: Our automated security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
  • Regular Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity firms.
  • Internal Access Control: Access to user data within our organisation is restricted to staff who genuinely require it to perform their duties, with the principle of least privilege fully enforced.

While we take all reasonable steps to protect your data, no system is 100% secure against all threats. In the event of a data breach that may affect you, we will notify you within 72 hours and take immediate remediation action.

6 Your Rights

As an ap33my user, you have the following rights regarding your personal data held by us, in accordance with the provisions of Malaysia's Personal Data Protection Act 2010:

  • Right of Access: You have the right to request a copy of the personal data we hold about you at any time. Requests will be processed within 14 business days.
  • Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request prompt correction or an update.
  • Right to Erasure: You may request deletion of your personal data in certain circumstances, such as when the data is no longer needed for its original purpose, subject to our legal obligations to retain certain records.
  • Right to Restriction of Processing: You may request that we restrict the processing of your data in certain situations, such as while you are disputing the accuracy of that data.
  • Right to Data Portability: You have the right to receive your personal data in a machine-readable format and transfer it to another service provider of your choice.
  • Right to Object: You may object to the processing of your data for direct marketing purposes at any time without providing any reason.
  • Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of processing carried out before withdrawal.

To exercise any of the above rights, please contact our privacy team via email at [email protected] by clearly stating your request. We will verify your identity before processing any data-related request.

7 Cookies & Tracking Technologies

Ap33my uses cookies and similar tracking technologies to enhance your user experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use four main types of cookies:

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they affect essential platform functionality.
  • Preference Cookies: Saving your preferences such as language, display settings and game preferences to deliver a more personalised experience.
  • Analytics Cookies: Helping us understand how users interact with our platform through aggregated and anonymised data. This information is used to improve platform performance and content.
  • Security Cookies: Used to detect fraudulent activity, bots, and other security threats that could compromise the security of the platform and your account.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of our platform. Visiting our platform with default cookie settings is considered your consent to cookie use as described above.

8 Data Storage & Transfer

Your personal data is stored on servers located in the Asia Pacific region with comprehensive physical and digital security protections. ap33my uses certified cloud computing infrastructure that meets ISO 27001 security standards.

Our data retention periods are as follows:

  • Active account data is retained for as long as your account remains active on our platform.
  • Financial transaction records are retained for a minimum of 7 years in compliance with Malaysia's anti-money laundering legal requirements.
  • Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
  • After account closure, personal data not required by law will be deleted or anonymised within 90 days.
For cross-border data transfers required for the operation of our platform, ap33my ensures that recipients have equivalent privacy protections through legally binding data processing agreements.

9 Children's Privacy

Ap33my is a platform intended exclusively for adults aged 21 and above. We do not knowingly collect, process or store personal data of individuals under the age of 21.

If we determine that someone below the required minimum age has registered an account on our platform, we will immediately take the following actions:

  • Suspending and closing the account in question immediately.
  • Deleting all personal data collected from the individual.
  • Returning any valid cash balance to the original payment method.
  • Reporting the case to the relevant authorities where necessary.

If you have reason to believe that a child or minor has used our platform, please contact our security team immediately at [email protected] so that immediate action can be taken.

10 Privacy Policy Amendments

Ap33my reserves the right to update or amend this privacy policy from time to time to reflect changes in our practices, technology, legal requirements or legitimate business needs. Each updated version of the privacy policy will be published on this page with a clear effective date.

For significant and material amendments, we will notify active members via:

  • In-app notifications displayed upon next login.
  • A notification email will be sent to your registered email address.
  • A clear notice on our platform's homepage for at least 30 days.

Continued use of the ap33my platform after the effective date of any amendment constitutes your acceptance of the updated terms. If you do not agree with any amendment, you have the right to close your account and stop using our services.

11 Contact Us

If you have any questions, concerns or complaints regarding this privacy policy or how we handle your personal data, do not hesitate to contact our privacy team. We are committed to responding within a reasonable timeframe.

For privacy rights requests, please clearly state your full name, your ap33my account number (if applicable) and the nature of your request. This helps us process your request more quickly and accurately.

You may also refer to the FAQ our team for answers to frequently asked questions about privacy and data security. For more serious matters involving data breaches, we have an incident response team on standby 24 hours a day, 7 days a week.

Protection Multi-Layer for You

Ap33my uses the latest security technology and industry best practices to ensure every piece of your personal information is handled securely and responsibly.

256-bit SSL Encryption

All data transmitted across the network between your device and ap33my servers is fully encrypted using the latest TLS protocol — the same standard used by leading banking institutions.

Secure KYC Verification

Our KYC process uses advanced document verification technology. All submitted identification documents are stored with file-level encryption and are never shared with third parties.

Two-Factor Authentication

Enable 2FA to add an extra layer of protection to your account. Even if your password is compromised, your account stays secure without the second verification code.

Strict Access Control

Only staff with specific authorisation may access user data, and every access is logged and audited. The principle of least privilege ensures no excessive access is granted.

Independent Security Audit

The ap33my platform undergoes regular penetration testing and comprehensive security audits by independent cybersecurity firms to detect and close any vulnerabilities before they can be exploited.

Account Activity Notifications

Receive instant notifications via email or SMS whenever important activity occurs on your account — including new logins, password changes and withdrawal requests.

Rights You Protected

As an ap33my member, you have full control over your personal data. Exercise these rights by contacting our privacy team.

Request a Copy of Your Data You are entitled to a complete copy of all personal data we hold about you. Requests are processed within 14 business days via your registered email.
Correct Inaccurate Information If there is any inaccurate information in your account, you can request a correction directly through your account settings or our support team.
Delete Your Data After account closure, data not required by law will be deleted within 90 days upon your request.
Unsubscribe from Marketing Unsubscribe from marketing communications at any time via the link at the bottom of each promotional email or through your account settings.
Question Common Privacy

Here are answers to the most frequently asked questions by ap33my members regarding our privacy policy and data protection.

Not at all. ap33my has never sold, rented or disclosed your personal data to third parties for their commercial purposes. Data sharing only occurs with service providers directly involved in the operation of our platform, and all of them are bound by strict confidentiality agreements.

Retention periods depend on the type of data. Financial transaction records are retained for 7 years under Malaysian law. Active account data is retained for as long as your account remains active. After account closure, data not required by law will be deleted within 90 days.

In the event of a data breach that may affect your information, we will notify you within 72 hours via your registered email. We will explain the data involved, potential risks and the steps we are taking to remediate the situation.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality such as staying logged in and personal preferences. Analytics and marketing cookies can be disabled without affecting core functionality.
Join the Platform That Protecting Your Privacy

With ap33my, you play in a safe, transparent environment that respects your privacy. Your data is protected with the latest technology — so you can focus entirely on the gaming experience.

PDPA Data Protection 256-bit SSL Encryption Regular Independent Audits
Bahasa Melayu