Privacy Policy rega33 — Malaysian Player Data Security

1Information Collected

Rega33 collects several categories of personal information from users to ensure the platform operates smoothly, securely and in compliance with applicable legal requirements. The information we collect can be divided into three main categories:

1.1 Information You Provide Directly

When you register an account, complete the KYC process, or contact our support team, you provide us with the following information:

• Identity Information: Full name as shown on your identity card or passport, identity card number (MyKad) or passport number, date of birth, and gender.
• Contact Information: An active Malaysian mobile number and email address (if applicable).
• Financial Information: Bank account or eWallet details (bank name, account number) for deposit and withdrawal processing. rega33 does not store full credit or debit card information — only the details necessary to process transactions are retained.
• Verification Documents: Copies of your identity card, passport or other official identification documents submitted during the KYC process.

1.2 Information Collected Automatically

When you use the rega33 platform — whether via web browser or mobile app — our systems automatically record the following technical information:

• IP address and general geographic location (state/region level, not exact address).
• Device type, operating system, and browser or app version used.
• The date, time and duration of each login session.
• Gaming activity records including game type, betting amounts and game outcomes.
• Records of all financial transactions including deposits, withdrawals and bonuses claimed.

1.3 Information From Third-Party Sources

In certain circumstances, we may receive information about you from trusted third parties, including identity verification service providers, payment service providers such as FPX, DuitNow, Touch 'n Go eWallet, Boost, ShopeePay, and GrabPay, as well as fraud prevention agencies that help us detect and prevent fraudulent activity.

2How We Use Your Data

Rega33 uses collected personal information solely for legitimate and transparent purposes. Below is the full list of purposes for which your data is used:

• Account Management: Creates, verifies, and maintains your rega33 account, including a secure login process and account recovery when needed.
• Transaction Processing: Processes all your deposits and withdrawals via your chosen payment method quickly and securely.
• Identity Verification: Conducts KYC checks required by law to verify your identity and ensure you meet the platform's eligibility requirements.
• Platform Security: Detects and prevents fraud, money laundering, bot usage, duplicate accounts, and any activity that violates our Terms and Conditions.
• Customer Support: Provides effective and relevant assistance when you contact our support team via live chat.
• Legal Compliance: Fulfils reporting obligations required under Malaysian law, including anti-money laundering (AML) requirements.
• Platform Communications: Sends important account notifications, promotions you have consented to receive, and relevant policy updates.
• Service Improvement: Analyses usage patterns in aggregate and anonymised form to improve overall user experience and platform performance.

3Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), rega33 processes your personal data only on valid legal grounds. Depending on the type of data and its purpose, the legal bases we rely on are as follows:

• Consent: For optional marketing and promotional communications, we only process your data with your explicit consent. You may withdraw this consent at any time.
• Contract Performance: Processing required to deliver rega33 services to you, including account management and financial transaction processing.
• Legal Obligation: Processing required under Malaysian law, including KYC requirements and AML reporting.
• Legitimate Interest: Processing for platform security, fraud prevention and service improvement purposes that does not affect your fundamental privacy rights.

4Information Sharing

Rega33 does not sell, rent or disclose your personal data to third parties for commercial purposes. However, in the course of operating the platform, we may share necessary information with the following categories of parties, subject to strict confidentiality agreements:

• Payment Service Providers: FPX, DuitNow, Touch 'n Go eWallet, Boost, ShopeePay, and GrabPay receive only the information necessary to process your transactions.
• Game Providers: Third-party game providers integrated into the rega33 platform receive only the minimum session data necessary to ensure games function correctly.
• Authorities: rega33 will disclose required information to Malaysian legal authorities when mandated by a court order, warrant or other legal requirement.
• Identity Verification Services: Trusted third-party KYC providers assist us in verifying the identities of new users in accordance with legal requirements.

All third parties working with rega33 are required to uphold data protection standards equal to or higher than those we apply ourselves.

5Cookies & Tracking Technologies

Rega33 uses cookies and similar tracking technologies to enhance your experience on our platform. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and ensuring the platform operates correctly. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform so we can improve the overall experience. This information is collected in aggregate and anonymised form.
• Functional Cookies: Allows the platform to remember your preferences such as preferred language and display settings to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of the rega33 platform. The rega33 mobile app uses equivalent tracking technologies for the same purposes.

6Data Security

Rega33 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure:

• 256-bit SSL encryption applied to all data transmitted between your device and our servers.
• Encryption of sensitive data stored in our databases using industry-recognised encryption algorithms.
• Role-based access control ensuring only authorised staff can access user data.
• Continuous 24/7 security monitoring with automated intrusion detection systems.
• Periodic security audits conducted by independent parties to identify and address potential vulnerabilities.
• Established security incident response procedures to address any data breach swiftly and effectively.

Although rega33 implements all reasonable security measures, no system can guarantee 100% security at all times. You also play an important role in protecting your account by using a strong password and not sharing your login credentials with anyone.

7Data Retention Period

Rega33 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. The following are the data retention guidelines we follow:

• Active Account Data: Retained for as long as your account remains active at rega33, plus the period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian legal requirements for financial records and AML compliance.
• KYC Documents: Retained for a minimum of 5 years after the end of the business relationship, in accordance with PDPA and AML legal requirements.
• Security Logs: Retained for 2 years for security investigation and fraud prevention purposes.
• Customer Support Records: Retained for 3 years after the last interaction for service quality reference and improvement.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures.

8Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by rega33:

To exercise any of the rights above, please contact the rega33 customer support team via live chat. We will process your request within 30 business days. In some cases, we may require additional identity verification before processing your request to ensure the security of your data.

9Children's Data

The rega33 platform is strictly for individuals aged 18 and above. rega33 does not knowingly collect, store or process personal data of anyone under the age of 18. Should we discover that a minor's information has been collected without our knowledge, we will take immediate steps to delete that data and terminate the associated account.

If you believe we may have collected information relating to an individual under the age of 18, please contact us immediately via live chat so we can take appropriate action.

10Privacy Policy Amendments

Rega33 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform features. Any material changes will be communicated to you via in-platform notifications or through your registered phone number.

The "Last Updated" date at the top of this document will be revised whenever amendments are made. Your continued use of the rega33 platform following any changes to this Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rega33 handles your personal data, our team is ready to assist:

• Live Chat: Reach us directly via the live chat feature on the rega33 platform — available 24/7 in Bahasa Melayu.
• Email: Send your enquiry to [email protected] and we will respond within 1 business day.

For official complaints regarding personal data protection in Malaysia, you may also contact Department of Personal Data Protection (JPDP) which falls under the Ministry of Digital Malaysia.