Privacy Policy

Club333 ("Club333", "we", "us", "our") operates the online gaming platform accessible at https://club333.cam and all associated subdomains, mobile-optimised versions, and related applications (the "Platform"). This Privacy Policy ("Policy") describes how Club333 collects, uses, stores, shares, and protects the personal data of individuals who access or use our Platform, including registered members and site visitors.

Club333 is committed to protecting the privacy of every individual who entrusts us with their personal information. We operate primarily for the Malaysian market and handle personal data in accordance with applicable data-protection legislation and the standards expected of a licensed international gaming operator.

This Policy should be read in conjunction with Club333's Terms & Conditions and Responsible Gambling Policy, all of which together govern your relationship with the Club333 Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Club333 collects personal data from you in the following categories, depending on how you interact with the Platform:

3.1 Registration and Account Data

• Full legal name, date of birth, and nationality.
• Residential address (street, city, postcode) — commonly cities across Malaysia including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and others.
• Email address and mobile phone number.
• Username and encrypted password.
• Preferred language and currency (MYR / RM).

3.2 Identity Verification (KYC) Data

• Government-issued identification documents: Malaysian MyKad, passport, or equivalent.
• Proof of residential address documents: utility bills, bank statements, official correspondence.
• Proof of payment method ownership.
• Source of funds documentation where required by our compliance obligations.

3.3 Financial Transaction Data

• Deposit and withdrawal records, including amounts, dates, and payment methods used (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX via Maybank2u / CIMB Clicks / Public Bank / Hong Leong, USDT TRC20, Bitcoin).
• Partial payment account identifiers (e.g., masked e-wallet account numbers) — we do not store full card or bank account numbers directly.
• Currency conversion records where applicable.

3.4 Gaming Activity Data

• Game history, bet amounts, wagering activity, and outcomes across all Platform products (live casino, slots, sports betting, lottery).
• Session durations, login timestamps, and activity patterns.
• Responsible gambling settings and self-exclusion status.

3.5 Technical and Device Data

• IP address, browser type and version, operating system, device type.
• Geolocation data (country/region level) derived from IP address.
• Cookie identifiers and session tokens.
• Referral URLs and navigation paths within the Platform.

3.6 Communications Data

• Records of correspondence with Club333's customer support team via live chat and email.
• Feedback, complaints, and dispute records.

Club333 processes personal data on the following legal bases:

Club333 uses the personal data we collect for the following purposes:

• Account Management: Creating, verifying, maintaining, and administering your Club333 Account, including processing deposits and withdrawals in MYR via your chosen payment methods.
• Identity Verification & KYC Compliance: Confirming your identity and age (minimum 21 years), verifying source of funds, and meeting regulatory obligations designed to prevent money laundering and underage gambling.
• Gaming Services Delivery: Enabling your access to all Club333 gaming products — live casino, slots, sports betting markets (including EPL, Liga Super Malaysia, UFC), lottery, and esports — and maintaining accurate betting and gaming records.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, identity theft, account compromise, collusion, and other illegal activities on the Platform.
• Responsible Gambling: Monitoring account activity for signs of problem gambling behaviour, enforcing deposit and loss limits, processing self-exclusion requests, and delivering responsible-gambling notifications and reality checks.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and maintaining records of communications for quality and training purposes.
• Promotional Communications: Sending personalised offers, bonus notifications, and platform updates where you have provided consent. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, game selection, user interface, and payment processing efficiency.
• Legal Compliance: Complying with applicable laws, regulations, court orders, and regulatory requests, including record retention obligations.

Club333 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. We may share personal data only in the following strictly defined circumstances:

• Payment Service Providers: We share necessary transaction data with your chosen payment processor (e.g., Touch 'n Go eWallet, DuitNow, FPX banking partners including Maybank, CIMB, Public Bank, Hong Leong) solely to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and applicable financial regulations.
• Identity Verification Services: We may engage third-party KYC and identity verification providers to authenticate documents submitted by Members as part of our compliance obligations.
• Gaming Platform & Software Providers: Our game providers and live-streaming studios may receive necessary session data to deliver games and resolve disputes. All providers are bound by contractual data-protection obligations.
• Fraud Prevention Networks: We may share data with industry-standard fraud and money-laundering prevention databases where required to protect the Platform and its Members.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent regulatory, governmental, or law enforcement authorities where required by law, court order, or where we believe disclosure is necessary to protect the safety of any person.
• Corporate Transactions: In the event of a merger, acquisition, or sale of Club333's business or assets, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

Club333 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

You may manage your cookie preferences via your browser settings. Please note that disabling certain cookies may affect Platform functionality, including the ability to log in or access games. Club333 does not use cookies for third-party advertising or cross-site behavioural tracking.

Club333 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account membership and for a minimum of five (5) years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later, in compliance with applicable financial crime regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years for regulatory audit and compliance purposes.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution and responsible gambling monitoring purposes.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last communication.
• Marketing Preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that permanently prevents re-identification.

Club333 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your Device and the Club333 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data and financial records stored on Club333 infrastructure are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: Members are strongly encouraged to enable two-factor authentication (2FA) on their accounts. Club333 staff access to administrative systems requires mandatory multi-factor authentication.
• Penetration Testing & Security Audits: The Platform undergoes regular independent security assessments to identify and remediate vulnerabilities.
• Incident Response: Club333 maintains a documented data breach response procedure. In the event of a personal data breach that poses a significant risk to Members' rights, we will notify affected individuals and relevant authorities in accordance with applicable obligations.

Subject to applicable legal limitations and identity verification requirements, you have the following rights in respect of the personal data Club333 holds about you:

To exercise any of the above rights, please contact Club333's support team via live chat or at the email address provided in Section 14. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. We may require identity verification before processing any request.

Club333 strictly prohibits the use of the Platform by any individual under the age of 21 years. We do not knowingly collect personal data from persons under 21. Age verification is a mandatory step in our KYC process, and we implement automated checks during registration to identify potential underage users.

If Club333 becomes aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent, we will immediately close the associated Account and delete or anonymise all collected data, returning any deposited funds in accordance with applicable regulatory requirements.

Parents and guardians who believe their child under the age of 21 may have registered on the Club333 Platform should contact us immediately via live chat or the support email address in Section 14. We take such reports extremely seriously and will act promptly upon notification.

Club333 operates infrastructure and engages service providers that may be located in jurisdictions outside Malaysia. As a result, your personal data may be transferred to, stored in, and processed in countries other than your country of residence.

Where such transfers occur, Club333 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy. Safeguards may include:

• Contractual data-processing agreements incorporating standard data protection clauses.
• Transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable law.
• Binding corporate rules where transfers occur within a corporate group.

By using the Club333 Platform and providing your personal data, you acknowledge and consent to the international transfer of your data as described in this section.

Club333 may update this Privacy Policy from time to time to reflect changes in our data-processing practices, applicable legal or regulatory requirements, or the introduction of new Platform features. Material changes will be communicated to Members via a prominent notice on the Platform and, where reasonably practicable, by email notification to the address registered with your Account.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to a revised Policy, you must cease using the Platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Club333, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week — including all Malaysian public holidays — via the Club333 Platform dashboard. This is the fastest route for urgent queries.
• Email: [email protected] (this address is displayed as plain text only — please copy it manually into your email client; it is not a clickable link).
• Correspondence: Data protection enquiries may also be submitted in writing via the Club333 Platform's internal messaging system.

For data subject rights requests (access, rectification, erasure, objection), please include "Data Rights Request" in your subject line and provide your registered Account username and the email address associated with your Account. We will verify your identity before processing any request.