Privacy Policy

This Privacy Policy ("Policy") is issued by MT33 ("MT33", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://mt33.cam (the "Platform"). This Policy describes how MT33 collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the Platform.

MT33 is committed to handling personal data responsibly, in accordance with applicable data protection legislation and internationally recognised privacy principles. We collect only the data that is necessary to operate the Platform, fulfil our legal obligations, and provide you with a secure and functional gaming experience.

By registering an Account on MT33 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms shall carry the meanings ascribed below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — MT33, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" — a third party engaged by MT33 to process Personal Data on MT33's behalf, subject to contractual data protection obligations.
• "Cookies" — small text files placed on your device by the Platform to facilitate functionality, session management, and analytics.
• "KYC" — Know Your Customer; the identity and age verification process required by MT33 for regulatory compliance.
• "Account" — a registered personal account created by a Player on the MT33 Platform.
• "Third Party" — any organisation or individual that is not MT33 or the Player.

MT33 collects the following categories of personal data, limited to what is strictly necessary for the purposes described in this Policy:

• Full legal name as it appears on official identification documents
• Date of birth (for mandatory age verification — MT33 requires players to be aged 21 or above)
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address
• Mobile phone number
• National identity document number (MyKad for Malaysian residents) collected during KYC

• Deposit and withdrawal amounts and dates
• Payment method identifiers — such as the last four digits of a linked bank card, Touch 'n Go eWallet account reference, Boost account, GrabPay account, DuitNow registered details, or FPX bank account reference
• Transaction reference numbers and processing timestamps
• Cryptocurrency wallet addresses used for deposits or withdrawals, where applicable
• Winnings, losses, and bonus transaction history

• Username and Account registration date
• Game play history, including games accessed, bet amounts, session duration, and results
• Sports betting history, including markets accessed and wager outcomes
• Bonus and promotion redemption history
• Responsible gambling settings, including any deposit limits or self-exclusion periods applied
• Customer support interaction records and live chat transcripts

• IP address at time of registration and each login
• Device type, operating system, and browser version
• Session timestamps and duration
• Geolocation data (country and region level) derived from IP address
• Cookie identifiers and related tracking data (see Section 9)

MT33 collects personal data through the following primary channels:

1. Direct Registration: Information you provide when creating an Account, completing the registration form, or responding to identity verification requests.
2. Platform Interaction: Data generated automatically as you use the Platform — including game sessions, sports bets placed, deposits and withdrawals initiated, and support interactions.
3. Payment Processing: Data received from payment service providers — including Malaysian e-wallet operators, FPX participating banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services — in connection with your financial transactions on MT33.
4. KYC Verification Services: Data returned by our authorised identity verification providers after you submit KYC documentation.
5. Cookies & Technical Tracking: Automatically collected device and session data through cookies, server logs, and similar tracking mechanisms when you access the Platform.

MT33 processes your personal data only for specific, legitimate purposes and always on an identified legal basis. The table below summarises the principal purposes for which your data is used:

MT33 does not use your personal data for purposes other than those listed above without first obtaining your explicit consent or as otherwise required by law.

MT33 does not sell, rent, or trade your personal data. Data is shared with third parties only in the following circumstances, and always subject to appropriate confidentiality and data protection safeguards:

MT33 engages authorised third-party service providers to assist in operating the Platform. These include:

• Payment processors — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services — who receive transaction data necessary to process your deposits and withdrawals.
• KYC verification providers — authorised identity verification services that process your identification documents to confirm your eligibility to hold an MT33 Account.
• Game content providers — third-party game studios whose software is integrated into the MT33 Platform. These providers may receive anonymised session data for RTP calculation and game integrity purposes.
• Technology infrastructure providers — cloud hosting and server infrastructure partners who store Platform data under strict contractual data security obligations.

All service providers are contractually bound to process personal data only on MT33's instructions and to maintain appropriate security standards.

MT33 may be required to disclose personal data to competent governmental, regulatory, or law enforcement authorities in response to lawful requests, court orders, or to comply with mandatory reporting obligations. Such disclosures are made strictly within the scope of applicable legal requirements.

MT33 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

• Active Accounts: Personal data is retained for the full duration of your Account's active status.
• Closed Accounts: Following Account closure, MT33 retains core identity and transaction data for a minimum of five (5) years to comply with AML legislation and financial record-keeping requirements.
• KYC Documents: Identity documents submitted during verification are retained for the period required by applicable gaming regulatory obligations, typically five (5) years post-Account closure.
• Marketing Consent Data: Records of marketing consent and opt-out preferences are retained for three (3) years from the date of the relevant consent action.
• Technical Logs: Server and access logs are retained for a rolling period of twelve (12) months and then securely deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

MT33 implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Encryption: All data transmitted between your device and MT33's servers is encrypted using 256-bit SSL/TLS protocols. No personal or financial data is ever transmitted in plain text.
• Storage Encryption: Sensitive personal data stored on MT33's servers — including identity documents and payment method references — is encrypted at rest.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised MT33 personnel with a legitimate operational requirement may access identifiable player data, and all access is logged and auditable.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their MT33 Account to prevent unauthorised access even if login credentials are compromised.
• Fraud Detection Systems: MT33 operates automated systems that monitor Account activity for suspicious patterns indicative of account takeover, fraudulent transactions, or identity theft.
• Regular Security Audits: The MT33 Platform is subject to periodic security assessments and penetration testing by independent third parties.

MT33 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session while logged in, and to collect anonymised analytics about how the Platform is used. Cookies do not contain your name, financial data, or other directly identifying personal information.

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit. They cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Store your preferences such as language selection, display settings, and responsible gambling reminder configurations.
• Analytics Cookies: Used to collect aggregate, anonymised information about how players navigate and use the Platform. This data informs product improvement decisions and does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery.

You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the MT33 Platform, as session management depends on them.

As an MT33 player, you hold the following rights with respect to your personal data. These rights may be subject to applicable legal limitations, including MT33's obligations under AML and regulatory frameworks.

MT33 will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is complex or MT33 receives a high volume of requests, this period may be extended by a further two (2) months, with notification provided within the initial thirty-day window.

MT33 strictly prohibits the use of the Platform by any person under the age of 21. The Platform is designed for and marketed exclusively to adults aged 21 and above in Malaysia. MT33 does not knowingly collect, process, or retain personal data from individuals under this age.

All players are required to complete age verification as part of the Account registration and KYC process. Where MT33 has reasonable grounds to believe that personal data has been submitted by or on behalf of a person under the age of 21, MT33 will:

• Immediately suspend the relevant Account pending investigation;
• Decline to process any pending withdrawals associated with the Account;
• Delete all personal data associated with the underage individual as soon as practicable, subject to any mandatory retention obligations.

Parents and guardians who believe that their child has registered on the MT33 Platform should contact us immediately at [email protected] so that we can take prompt action.

MT33's Platform is operated globally, and your personal data may be transferred to and processed by servers or service providers located in jurisdictions outside Malaysia. Where such transfers occur, MT33 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses binding receiving parties to equivalent data protection standards;
• Transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable authority;
• Binding corporate rules where data is transferred within an affiliated group of companies.

MT33 will not transfer personal data to a third country without ensuring that one of the above safeguards is in place and documented.

MT33 reviews this Privacy Policy periodically and updates it as necessary to reflect changes in our data practices, applicable legislation, Platform features, or regulatory requirements. The "Last Updated" date at the top of this page will reflect the most current version.

Where changes to this Policy are material — meaning they significantly affect how we use your data or reduce your privacy protections — MT33 will notify active players via email or an in-Platform notification at least fourteen (14) days before the changes take effect. For non-material updates, the revised Policy will be published on this page without individual notification.

Your continued use of the MT33 Platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and request Account closure.

For any questions, concerns, or requests related to this Privacy Policy or MT33's handling of your personal data, please contact our support team through the following channels:

• Privacy Enquiry Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly from the MT33 Platform. Average response under 5 minutes for general queries; privacy-specific requests are escalated to a dedicated team member.
• Languages: English, Bahasa Melayu, and Mandarin — all three supported for privacy enquiries.
• Response Timeframe: MT33 acknowledges all privacy-related enquiries within 48 hours and provides a substantive response within 30 calendar days.