Privacy Policy grab333 – Your Personal Data Protection

Grab333 is an online entertainment platform operating exclusively for the Malaysian market, offering a wide range of gaming options including video slots, Live Casino, table games, Sports Betting, e-sports and digital lottery. As part of running the platform, grab333 needs to collect and process certain personal data from its members and users.

Grab333 understands that privacy is a trust that must never be taken lightly. We respect every individual's right to privacy and are committed to managing your personal data with integrity, transparency, and responsibility. This Privacy Policy is designed to ensure you have a full understanding of how your personal data is handled on the grab333 platform.

Grab333 collects various categories of personal data from platform members and users. The table below outlines the data categories collected and the purpose of each:

Grab333 does not collect sensitive data categories such as health information, biometric data (except where required for identity verification), political views, or religious information.

Grab333 collects your personal data through the following methods:

• Account Registration: Information you provide during the grab333 account registration process, including your name, email address, phone number, and Malaysian bank account or e-wallet details.
• KYC Verification: Identity documents submitted during the Know Your Customer verification process, such as a copy of your Malaysian identity card or passport, and bank statements.
• Financial Transactions: Data automatically generated when you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and when processing withdrawals to your Malaysian bank account.
• Platform Usage: Activity data automatically generated when you use the grab333 platform, including games played, session duration, and betting patterns.
• Tracking Technology: Data collected through cookies, web beacons and other tracking technologies while you browse the grab333 platform.
• Support Interactions: Data you provide when contacting the grab333 support team via live chat or email.
• Authorised Third Parties: Data received from authorised Malaysian payment service providers, identity verification providers, and fraud prevention agencies that partner with grab333.

Grab333 uses the personal data it collects solely for legitimate, stated purposes. The following are the primary purposes for which grab333 member personal data is used:

• Account Management: Creating, verifying, and maintaining your grab333 member account, including identity verification and KYC processing.
• Transaction Processing: Processing deposits from your chosen Malaysian payment method and handling withdrawals to your bank account or e-wallet.
• Platform Security: Identifying and preventing fraud, money laundering, unauthorised access, and any activity that violates grab333's Terms & Conditions.
• Legal Compliance: To fulfil Malaysia's legal compliance obligations, including AML (Anti-Money Laundering) and KYC requirements as stipulated by the relevant authorities.
• Customer Support: Providing effective customer support in Bahasa Melayu and resolving any issues or complaints you report.
• Responsible Gaming: Monitoring usage patterns to identify members who may need responsible gaming support and to enforce the limits you have set for yourself.
• Service Communications: Sending important account notifications, platform updates, policy changes, and security alerts.
• Platform Improvement: To analyse aggregated usage patterns (without identifying individuals) in order to improve the performance, features and overall user experience of the grab333 platform.
• Marketing (with your consent): To send you information about grab333 promotions, bonuses and special offers, where you have given consent to receive marketing communications.

Grab333 does not sell, rent or commercialise member personal data to any third party under any circumstances. However, there are limited situations where grab333 needs to share your personal data with certain parties for legitimate platform operational purposes:

• Payment Service Provider: Required transaction information is shared with the Malaysian payment service providers you use, such as DuitNow, FPX operators, and approved e-wallet providers — solely for the purpose of processing transactions.
• Identity Verification Provider: Required identity data is shared with accredited KYC service providers strictly for identity verification and AML compliance purposes.
• Game Providers: Limited game session data is shared with accredited game providers such as Pragmatic Play, Evolution, Playtech, and other partners for the purposes of game operation and technical dispute resolution.
• Malaysian Authorities: grab333 will disclose personal data to the relevant Malaysian authorities — such as the police, the Insolvency Department or the Securities Commission — when required to do so by law, court order or valid legal process.
• Professional Advisor: Lawyers, accountants, or auditors bound by professional confidentiality obligations, where required for legitimate business operational purposes.

Grab333 continually invests in the latest security infrastructure to protect the personal data of all members. The key security measures employed by grab333 are as follows:

• 256-bit SSL Encryption: All communications between your device and grab333's servers are encrypted using TLS 1.3 with 256-bit encryption keys, ensuring no third party can read your data in transit.
• Secure Data Storage: Personal data is stored in databases protected with encryption at rest. grab333 servers are secured by multiple layers of firewalls and intrusion detection systems.
• Strict Access Controls: Access to member personal data within grab333's internal systems is restricted strictly on a need-to-know basis. All internal access is logged and monitored.
• Two-Factor Authentication (2FA): grab333 member accounts can be secured with two-factor authentication for an added layer of protection. grab333 also enforces 2FA for all internal access to systems containing member data.
• Regular Security Audits: grab333 undergoes periodic independent security audits conducted by certified cybersecurity firms to identify and address any vulnerabilities before they can be exploited.
• Incident Response Plan: grab333 maintains a comprehensive security incident response plan to ensure any data breach is swiftly identified, contained, and reported in accordance with the requirements of PDPA 2010.

Grab333 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by Malaysian law. grab333's data retention policy is as follows:

• Active Account Data: For as long as your account remains active and you continue to be a member of the grab333 platform. This data is retained to allow you to access your account history and for customer support purposes.
• Financial Transaction Data: A minimum of 7 years from the transaction date, in accordance with the financial compliance and AML retention requirements set out under Malaysian law. This covers all deposit and withdrawal records, whether made via e-wallet or FPX.
• KYC Verification Data: Minimum 5 years after account closure or after the last business relationship, in accordance with Malaysia's AML legal requirements.
• Activity Log Data: 12 months for standard activity logs and 5 years for logs related to security incidents or fraud investigations.
• Support Communication Data: 3 years after the last interaction for reference purposes and resolution of any disputes that may arise.
• Marketing Data: Until you withdraw your consent to receive marketing communications from grab333.

Once the retention period has ended and there is no legal requirement to keep the data any longer, grab333 will securely delete or anonymise your personal data so that it cannot be recovered.

The grab333 platform uses cookies and similar tracking technologies to enhance the user experience and ensure account security. The following are the types of cookies used by grab333:

• Essential Cookies (Required): These cookies are required for the basic functionality of the grab333 platform, such as maintaining your login session, remembering your language preferences, and ensuring session security. The platform cannot function properly without them.
• Performance Cookies: Cookies that collect information about how you use the grab333 platform — such as the most frequently visited pages and error messages received — to help us improve the platform. All information collected is non-identifiable.
• Functional Cookies: These cookies allow the grab333 platform to remember your preferences — such as text size and favourite game selections — to deliver a more personalised experience.
• Security Cookies: Cookies used to detect and prevent fraudulent activity, unauthorised access, and cyberattacks against member accounts.

You can manage and control cookie settings through your web browser settings. Please note, however, that blocking essential cookies may affect the functionality of the grab333 platform and prevent you from logging in or using certain features fully.

Under the Personal Data Protection Act (PDPA) 2010 of Malaysia, you as a grab333 member have the following rights in relation to your personal data:

The grab333 platform is exclusively for individuals aged 18 and above. grab333 does not knowingly collect, store or process any personal data from individuals under the age of 18.

Grab333 applies age verification measures during the registration process to ensure that only individuals who meet the minimum age requirement can register and use the platform. Should grab333 discover that personal data of an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

Grab333 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, new Malaysian legal requirements, the addition of new platform features or services, or improvements to the clarity of the existing Policy.

If there are material changes to this Privacy Policy, grab333 will notify members through the following methods:

• In-platform notification on the grab333 platform during your next login session.
• An email to the registered email address on your account.
• A notice displayed on the grab333 platform's main page for at least 7 days before the changes take effect.

The "Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. Your continued use of the grab333 platform after any changes are published will be considered your acceptance of the updated Privacy Policy. We recommend that you review this page periodically to stay informed of grab333's latest privacy practices.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how grab333 handles your personal data, please contact grab333's Privacy Officer via:

• Official Email: support@grab333.site (Subject: "Data Privacy Inquiry")
• Live Chat: Available on the grab333 platform, 24 hours a day, 7 days a week
• Support Language: Bahasa Melayu and English
• Email Response Time: Within 14 business days for PDPA rights-related requests
• Live Chat Response Time: Typically under 2 minutes for general enquiries

If you are not satisfied with grab333's response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital, which is the authority responsible for overseeing PDPA 2010 compliance in Malaysia.