Privacy Policy

1. Who We Are

1.1 The mt33 platform, accessible at mt33.win, is operated by the mt33 entity licensed under international gaming authority standards (the "Data Controller" or "we"). For all matters relating to data privacy, mt33 acts as the data controller in respect of personal data collected through the Platform.

1.2 This Privacy Policy applies to all individuals who register an account on mt33, visit the Platform, use any Services, or otherwise interact with mt33 in any capacity. It covers data collected via the website, any mobile-optimised interface, and through correspondence with our support team.

1.3 This Policy should be read alongside the mt33 Terms & Conditions, which govern the contractual relationship between mt33 and its Members.

2. Data We Collect

2.1 Registration & Account Data. When you register an account on mt33, we collect the following information:

• Full legal name (as it appears on your national identity document or passport);
• Date of birth (for age verification);
• Malaysian mobile number or email address;
• Residential address;
• Username and password (password stored in hashed form only).

2.2 KYC & Identity Verification Data. To comply with anti-money laundering and age verification obligations, mt33 collects:

• Scanned or photographed copies of government-issued identity documents (MyKad, passport);
• Selfie or live photo for identity matching;
• Proof of address documents where applicable.

2.3 Financial Data. mt33 collects transaction data including deposit amounts, withdrawal amounts, payment methods used (e.g. FPX bank reference, Touch 'n Go eWallet account identifier, Boost account identifier), and transaction timestamps. mt33 does not store full bank account numbers or card details — payment processing is handled by certified third-party payment processors.

2.4 Gaming Activity Data. We record your betting and gaming activity on the Platform, including wagers placed, games played, bet amounts, outcomes, and account balance changes. This data is necessary for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical & Device Data. When you access the Platform, we automatically collect:

2.6 Communications Data. If you contact mt33 support via live chat or email, we retain records of those communications, including chat transcripts, the content of email correspondence, and associated timestamps.

3. How We Use Your Data

3.1 mt33 uses collected personal data for the following purposes:

• Account management: Creating, maintaining, and managing your mt33 account, including processing deposits, withdrawals, and bonus allocations.
• Identity & age verification: Verifying that you meet the 21+ age requirement and that your identity is genuine, as required by our operating licence.
• Fraud prevention & security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the Platform.
• Regulatory compliance: Meeting our obligations under international gaming licensing requirements, anti-money laundering regulations, and applicable data protection standards.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance with account-related matters.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the mt33 platform, optimise mobile performance, and enhance the Member experience.
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, and taking appropriate action including triggering responsible gaming prompts or self-exclusion processes where necessary.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about mt33 offers relevant to Malaysian Members.

3.2 mt33 does not use personal data for automated decision-making that produces legal or similarly significant effects on individuals, except where required by our fraud prevention or KYC systems — in which case, you have the right to request human review of any automated decision affecting your account.

4. Legal Basis for Processing

4.1 mt33 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between mt33 and the Member — including account creation, transaction processing, and provision of gaming services.
• Legal obligation: Processing required to comply with applicable law — including KYC verification, anti-money laundering record-keeping, and regulatory reporting obligations under our operating licence.
• Legitimate interests: Processing necessary for mt33's legitimate business interests — including fraud detection, platform security, and responsible gaming monitoring — where these interests are not overridden by the Member's privacy rights.
• Consent: Where no other legal basis applies — such as for optional marketing communications — processing is based on your explicit consent, which you may withdraw at any time by contacting support.

5. Data Sharing & Disclosure

5.1 mt33 does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: Transaction data is shared with our certified payment service providers (including FPX, Touch 'n Go eWallet, and Boost infrastructure operators) to facilitate deposits and withdrawals. These providers are contractually bound to process data only as instructed by mt33.
• KYC & identity verification providers: Identity documents and biometric data collected during KYC are processed by specialised third-party identity verification services operating under strict data processing agreements.
• Game providers: Limited session and account data is shared with licensed game providers (such as Pragmatic Play, PG Soft, Evolution Gaming) to enable game functionality and audit trails. Game providers do not receive your identity or financial data beyond what is technically necessary.
• Regulatory authorities: Where required by law or by the terms of our operating licence, mt33 may disclose personal data to relevant regulatory bodies, law enforcement agencies, or gaming authorities.
• Professional advisors: In limited circumstances, data may be shared with legal, accounting, or auditing professionals under binding confidentiality obligations.

6. Cookies & Tracking Technologies

6.1 mt33 uses cookies and similar technologies (including session tokens and local storage) to operate the Platform effectively and deliver a consistent experience across sessions.

6.2 Types of cookies used:

• Essential cookies: Required for core Platform functionality — including maintaining login sessions, processing transactions, and applying account preferences. The Platform cannot function correctly without these.
• Analytics cookies: Used to collect aggregated, anonymised data about how Members navigate and use the Platform. This helps mt33 identify performance issues and improve the user experience.
• Security cookies: Used for fraud detection, CSRF protection, and monitoring for unusual login activity.
• Preference cookies: Store your language, display preferences, and other personalisation settings between sessions.

6.3 Managing cookies. You may control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies may impair or prevent access to certain features of the mt33 platform, including the ability to maintain a logged-in session.

6.4 mt33 does not use third-party advertising or retargeting cookies. We do not participate in cross-site advertising networks.

7. Data Retention

7.1 mt33 retains personal data for as long as is necessary for the purpose for which it was collected and to comply with applicable legal and regulatory obligations. General retention guidelines are as follows:

• Account data: Retained for the duration of your active membership and for a minimum period following account closure as required by our operating licence and anti-money laundering obligations (typically 5 years post-closure).
• KYC documents: Retained for the minimum period required by applicable anti-money laundering regulations from the date of the last transaction, unless a longer period is required by law.
• Transaction records: Retained for a minimum of 5 years following the transaction date.
• Support communications: Retained for up to 3 years following the resolution of the relevant enquiry.
• Technical logs: Retained for up to 12 months from the date of collection for security and fraud investigation purposes.

7.2 Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with an individual Member.

8. Data Security

8.1 mt33 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Member devices and mt33 servers;
• Encrypted storage of sensitive data at rest, including identity documents and financial records;
• Cryptographic hashing of Member passwords — passwords are never stored in plain text and cannot be retrieved by mt33 staff;
• Role-based access controls limiting internal access to personal data to employees with a legitimate operational need;
• Regular security reviews and vulnerability assessments of Platform infrastructure;
• Automatic session expiry and device-level session monitoring for suspicious login activity.

8.2 While mt33 takes reasonable steps to secure your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of Members, mt33 will notify affected individuals and relevant authorities in accordance with applicable law.

8.3 You are responsible for maintaining the confidentiality of your mt33 login credentials. If you suspect your account has been compromised, contact mt33 support immediately via live chat.

9. Your Rights

9.1 Malaysian Members have the following rights with respect to personal data held by mt33, subject to applicable legal limitations:

• Right of access: You may request a copy of the personal data mt33 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some data corrections (such as name changes) require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention.
• Right to restrict processing: In certain circumstances, you may request that mt33 restrict the processing of your personal data while a correction or erasure request is being evaluated.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests where your particular circumstances justify objection. mt33 will assess the objection and respond within a reasonable period.

9.2 To exercise any of the above rights, contact the mt33 support team via live chat or by email at [email protected]. mt33 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, a 60-day extension may apply with prior notification.

9.3 Identity verification may be required before mt33 can process a data rights request, to ensure data is not disclosed to an unauthorised third party.

10. International Data Transfers

10.1 As an internationally licensed platform, mt33 may transfer personal data to third-party service providers located outside Malaysia — including identity verification providers, game software providers, and cloud infrastructure operators.

10.2 Where such transfers occur, mt33 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses and data processing agreements that impose equivalent data security obligations on the recipient.

10.3 By using the mt33 platform, you acknowledge and consent to the international transfer of your personal data under the safeguards described in this section.

11. Children's Privacy

11.1 The mt33 platform is strictly intended for individuals aged 21 years or older. mt33 does not knowingly collect personal data from individuals under the age of 21. Age is verified during the KYC process for all registered Members.

11.2 If mt33 becomes aware that it has inadvertently collected personal data from an individual under 21, the relevant account will be immediately closed, data associated with the underage individual will be deleted (subject to any mandatory retention obligations), and any balance held in the account will be returned to the depositing payment method where technically feasible.

11.3 If you believe an individual under 21 has registered on the mt33 platform, please contact our support team immediately so we can investigate and take appropriate action.

12. Changes to This Privacy Policy

12.1 mt33 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material, mt33 will take reasonable steps to notify affected Members — including via Platform notification or email where a valid address is held.

12.2 Continued use of the mt33 platform following notification of a material change to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you should cease use of the Platform and request account closure.

13. Contact & Data Enquiries

For all privacy-related enquiries, data rights requests, or concerns about how mt33 handles your personal data, please contact the mt33 support team:

• Live Chat: Available 24/7 via the mt33 platform. Average response time: 3–5 minutes. Recommended for urgent account matters.
• Email: [email protected] — for formal data rights requests and written enquiries. Please include "Privacy Enquiry" in your subject line.

mt33 targets a response to all written privacy enquiries within 5 business days of receipt. Complex data requests (such as Subject Access Requests involving large volumes of data) may take up to 30 calendar days.