Privacy Policy WC33 — Your Data Protection

Wc33 is an online sports betting and casino platform serving users in Malaysia. We place the utmost importance on the trust you place in us when you register and use our services. For this reason, personal data protection is not merely a legal obligation for us — it is a core value of wc33.

This Privacy Policy was established to comply with Malaysia's Personal Data Protection Act (PDPA) 2010 and international standards for personal data management. This document clearly outlines what data we collect, why it is needed, how it is used, and the rights you hold in relation to that data.

This policy applies to all users of the wc33 platform, including those accessing our website, mobile app, and any related services we provide. If you have any questions about this Privacy Policy, please contact our privacy team via the email address listed at the end of this document.

Wc33 only collects data that is strictly necessary to deliver our services safely and efficiently. We do not collect excessive or irrelevant data beyond what is required for platform operations. The categories of data we collect are as follows:

All sensitive financial data such as credit card numbers or bank account information is processed through accredited payment providers and not stored directly on wc33 servers. This means your payment information receives an additional layer of protection from our PCI-DSS certified payment provider's security systems.

Wc33 uses your personal data responsibly and only for legitimate purposes. Every use of data is grounded in an appropriate legal basis — whether to fulfil a contractual agreement with you, comply with legal obligations, or serve our legitimate interests as a platform operator. The purposes for which we use your data are as follows:

• Account Management: Creating, verifying, and maintaining your user account including mandatory KYC processes
• Transaction Processing: Processing your deposits and withdrawals securely and promptly through trusted payment channels
• Fraud Prevention: Detecting and investigating suspicious activity, money laundering, or violations of the terms of use
• Customer Support: Effectively responding to your enquiries, complaints, and requests for assistance
• Platform Communications: Sending important notifications related to your account, promotions (with your consent), and service updates
• Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and offer appropriate assistance
• Platform Enhancement: Analyzing aggregated usage data to improve the design, performance, and user experience of the wc33 platform
• Legal Compliance: Maintaining records as required by law and responding to enquiries from competent authorities

Wc33 will not use your data for purposes unrelated to the services you use without first obtaining your explicit consent. Whenever we need your data for a new purpose, you will be informed and asked to provide the appropriate consent.

Wc33 does not sell or disclose your personal data to third parties for marketing or commercial purposes without your consent. However, in the course of platform operations, we may share certain data with selected and trusted third parties in the following circumstances:

• Payment Providers: Information required to process your deposits and withdrawals is shared with approved payment providers that comply with PCI-DSS security standards
• Game Providers: Minimum technical data required to enable game functionality is shared with our registered game software providers
• KYC Services: Identity information is shared with accredited third-party identity verification providers for regulatory compliance purposes
• Legal Authorities: wc33 will disclose information to government authorities or law enforcement when required by court order or applicable law
• Auditors and Professional Advisors: Audit, legal, or accounting firms bound by strict professional confidentiality obligations

Wc33 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Preference Cookies: Allowing the platform to remember your preferences such as language, display settings, and game choices for a more personalized experience.
• Analytics Cookies: Collecting information on how users interact with our platform. This data is used in aggregate for continuous improvement and does not identify individual users.
• Security Cookies: Helping detect suspicious login attempts, bot activity, and fraud attempts to protect your account.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies may affect the functionality and security of the wc33 platform. For detailed guidance on managing cookies in your browser, please refer to your browser's support documentation.

Wc33 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. Once data is no longer needed, it will be securely deleted or anonymised without delay.

• Active Account Data: Retained for the entire period your account is active on wc33 and for the required period after account closure for audit compliance purposes
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction occurs, in line with Malaysia's anti-money laundering legal requirements
• KYC Records: Retained for the duration the account is active plus 5 years after account closure, or longer if required by regulatory authorities
• Support Communication Logs: Retained for 3 years from the date of last interaction for reference and service quality audit purposes
• Technical Usage Data: Retained for 13 months for analytics and platform improvement purposes

As a wc33 user subject to Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the wc33 privacy team. We will respond to all valid requests within 21 calendar days of receiving your request.

Wc33 continuously invests in robust security infrastructure to protect your personal data from unauthorised access, loss, destruction, or disclosure. Key technical and organisational measures we employ include:

• End-to-End Encryption: All data in transit is protected with TLS 1.3 — the latest encryption protocol ensuring communications between you and our servers cannot be intercepted
• Two-Factor Authentication (2FA): We fully support 2FA for all user accounts as an additional security layer, which we strongly recommend enabling
• 24/7 Monitoring: Our security systems are monitored around the clock by an experienced cybersecurity team to detect and respond to any threats promptly
• Regular Security Audits: Penetration testing and independent security audits are conducted periodically by accredited third-party firms
• Staff Training: All wc33 staff undergo regular data protection and privacy training as part of our organisation's security culture
• Incident Response Plan: wc33 maintains a tested incident response procedure to ensure any data breach is detected, contained, and reported within the timeframes stipulated by law

The wc33 platform may from time to time contain links to third-party websites or services, such as game providers or payment partners. Please be aware that:

• wc33 is not responsible for the privacy practices or content of third-party websites
• Each third-party website has its own privacy policy that you should review separately
• Clicking on external links is at your own risk and beyond the direct control of wc33

We recommend that you always review the privacy policy of every site you visit, even if you accessed it through the wc33 platform.

Wc33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal developments, or technological advancements. Whenever changes are made, the "Updated" date at the top of this document will be revised.

For material changes that significantly affect your privacy rights, wc33 will provide clear notice via your registered email or in-platform notification at least 7 days before the changes take effect. Continued use of the wc33 platform after changes take effect constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data by wc33, our privacy team is ready to assist you.

You can reach us via the platform's official email at [email protected] with the subject line "Privacy Request" and we will respond within 3 business days. For more formal complaints regarding personal data breaches, you also have the right to submit a complaint directly to the Personal Data Protection Commissioner of Malaysia.