Malaysia PDPA Compliance

Town33 Privacy Policy
– Malaysia Player Data Protection

Your privacy is our priority. town33 is committed to protecting every piece of personal information you share with us, in accordance with Malaysian law.

Updated: 1 January 2026
Compliance
PDPA 2010
Encryption
SSL 256-bit
Data Disclosure
Zero Data Sharing with Advertisers
Privacy Support
24/7
Important Note: This Privacy Policy document explains how Town33 collects, uses, stores, and protects your personal data. By using our platform, you agree to the practices described in this policy. We encourage you to read this document carefully in full.
Our Data Protection Commitment
Six core principles behind how Town33 safeguards your privacy
Military-Grade Encryption

All data transmitted between your device and town33's servers is protected by SSL 256-bit encryption technology — the same standard used by leading financial institutions worldwide.

Full PDPA Compliance

The Town33 Privacy Policy is fully designed and implemented in accordance with the Malaysia Personal Data Protection Act (PDPA) 2010. All our data handling processes have been reviewed by local legal compliance experts.

Your Data, Your Control

Town33 players have full rights to access, correct, or request deletion of their personal data at any time. Our request process is straightforward and resolved within 14 business days.

No Sale of Data to Third Parties

Town33 has never and will never sell, rent, or exchange players' personal data to any third party for marketing or other business purposes without your express consent.

Secure Data Storage

Your data is stored in high-grade data centres with strict physical and digital access controls. Regular backups ensure your data remains secure even in the event of a technical emergency.

Marketing Communications Control

You can choose the types of communications you wish to receive from Town33 and may unsubscribe at any time through your account settings or by contacting our support team.

1 Introduction and Scope of This Policy

Town33 ("we", "our platform") is an online gaming platform operating in Malaysia and serving players from across the country. This Privacy Policy explains in detail how we manage your personal data when you register, login, make a deposit, play, or simply browse our website at town33.win.

This policy applies to all users of the Town33 platform, including registered players, guest players, and anyone who visits our website. It covers all interaction channels — website, mobile app, customer support services, and any written or digital communication between you and Town33.

By continuing to use our platform after the latest amendment date of this policy, you are deemed to have read, understood, and agreed to all terms stated herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the platform and contact us for further enquiries.

Our Commitment: town33 never collects personal data beyond what is required for service purposes. Our data minimisation principle ensures your privacy is always protected.

2 Types of Personal Data We Collect

Town33 collects your personal data through several means depending on how you interact with our platform. The following are the categories of data we collect:

Data Categories Example Information Purpose of Collection
Identity Data Full name, date of birth, identity card / passport number Identity verification (KYC), legal compliance
Contact Data Email address, phone number, residential address Account communications, customer support
Financial Data Bank name, account number (partial), transaction history Deposit and withdrawal processing
Technical Data IP address, browser type, operating system, device ID Account security, fraud detection
Activity Data Game history, betting records, usage patterns Service improvement, responsible gaming
Preference Data Preferred language, notification settings, favourite games Personalisation of user experience

All identity verification document data (KYC), such as images of identity cards or passports, is encrypted and stored in a system separate from regular account data. Access to this sensitive data is restricted to authorised personnel only and solely for identity verification purposes.

Warning: Never share your account password, OTP codes, or any sensitive account information with anyone, including staff claiming to be from Town33. Our team will never ask for such information via chat or email.

3 How We Use Your Data

Town33 uses your personal data solely for lawful purposes that were stated at the time of collection. We do not process your data for any other purpose without first notifying you and obtaining your consent. The primary purposes for which data is used are as follows:

  • Account Management: Registering, verifying, and maintaining your player account, including security settings and personal preferences.
  • Transaction Processing: Processing all deposits, withdrawals, and fund movements within your account securely and accurately.
  • Identity Verification (KYC): Meeting legal compliance requirements related to player identity verification and anti-money laundering.
  • Platform Security: Detecting and preventing fraudulent activity and unauthorised access, and protecting the platform's integrity against security threats.
  • Customer Support: Processing enquiries, complaints, and assistance requests submitted to our support team.
  • Product Improvement: Analysing usage patterns in aggregated and anonymised form to improve platform features, game offerings, and the overall user experience.
  • Responsible Gaming: Monitoring wagering patterns to identify players who may need assistance, in line with our responsible gaming programme.
  • Marketing Communications: Sending information about promotions, bonuses, and special events — only to players who have consented to receive such communications.
Legal Basis: All data processing by town33 is supported by at least one valid legal basis — whether fulfilment of contract, legal obligation, legitimate platform interest, or your explicit consent.

4 Data Sharing with Third Parties

Town33 does not sell your personal data to any third party. However, in the course of operating the platform, we may share certain data with the following parties for limited and specific purposes:

  • Payment Providers: Information required to process transactions is shared with payment service providers such as banks, DuitNow, FPX, Touch 'n Go, Boost, and GrabPay. This data is limited strictly to what is necessary to complete the transaction.
  • KYC Service Providers: Identity verification data is shared with our accredited KYC partners who assist in the identity verification process in accordance with industry standards.
  • Technology Providers: IT infrastructure, cloud hosting, and cybersecurity providers that help us operate the platform securely. All such providers are bound by strict data confidentiality agreements.
  • Relevant Authorities: Law enforcement agencies, courts, or regulatory bodies where required by Malaysian law or a valid court order.
  • Auditors and Legal Advisors: Independent audit firms and legal counsel involved in compliance reviews and corporate governance, subject to professional confidentiality obligations.

All third parties who receive your data are required to protect that information to the same or higher standard that we uphold. We conduct regular reviews of our partners to ensure ongoing compliance.

Our Commitment: town33 has never shared player data with advertising companies, data brokers, or any entity for third-party marketing purposes without your explicit consent.

5 Cookies and Tracking Technologies

Town33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information about how you use our website — pages visited, time spent, and errors encountered. This data is used to improve platform performance.
  • Functional Cookies: Storing your preferences such as language, time zone, and display settings to deliver a more personalised experience.
  • Analytics Cookies: Helping us understand overall usage patterns in aggregated and anonymised form for continuous platform improvement.

You can manage cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality and your experience on the Town33 platform. We recommend allowing essential and functional cookies for the best experience.

6 Data Security and Protection Measures

The security of your personal data is a responsibility we take extremely seriously. town33 implements multiple layers of technical and organisational measures to protect your data from unauthorised access, loss, or misuse:

  • 256-bit SSL/TLS encryption for all data communications between your browser and our servers.
  • Encryption of sensitive data in databases using the AES-256 algorithm.
  • Two-factor authentication (2FA) is available and encouraged for all player accounts.
  • Real-time security threat monitoring, 24 hours a day, 7 days a week.
  • Role-based access control (RBAC) ensures staff can only access data relevant to their assigned duties.
  • Regular penetration testing conducted by certified independent cybersecurity firms.
  • Encrypted data backups automatically synced to a secure, geographically separate location.
  • Mandatory cybersecurity training programme for all staff who handle player data.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. Should any security incident materially affect your data, we will notify you within the timeframe required by applicable law.

7 Your Rights as a Data Subject

Under Malaysia's PDPA and international data protection best practices, you have the following rights regarding your personal data held by Town33:

Right of Access

You have the right to obtain a copy of the personal data we hold about you in a readable format.

Right to Rectification

You may request a correction to any inaccurate or incomplete data at any time.

Right to Erasure

You may request the deletion of your personal data, subject to legal retention requirements.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format.

Right to Restriction of Processing

You may request that we restrict the processing of your data in certain situations as provided by law.

To submit any request relating to the rights above, please contact our privacy team via email at [email protected] by clearly stating the type of request and the information required to verify your identity. We will process your request within 14 business days.

8 Data Retention Period

Town33 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with relevant legal requirements. Our data retention schedule is as follows:

  • Active Account Data: For the duration of your active account plus 2 years after the last activity.
  • Financial Transaction Records: Minimum 7 years, in line with Malaysia's financial and tax legal requirements.
  • KYC Documents: For the duration of the active account and 5 years after account closure, in accordance with anti-money laundering legal requirements.
  • Security Logs: 12 months for standard access logs, up to 7 years for logs related to security investigations.
  • Customer Support Data: 3 years from the date of case resolution for reference and quality audit purposes.
  • Marketing Data: Until you withdraw consent or close your account, whichever comes first.

Once the designated retention period has elapsed, your data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

9 International Data Transfers

Town33 operates primarily in Malaysia and player data is stored in data centres located in Malaysia. In limited circumstances, data may be processed or stored outside Malaysia — for example, when using global cloud infrastructure services or international security providers.

Should any international data transfer occur, we ensure that:

  • The recipient country maintains an equivalent or stricter level of data protection.
  • Appropriate data transfer agreements, such as Standard Contractual Clauses, are applied.
  • All data transfers comply with Malaysia's PDPA and guidelines issued by the Personal Data Protection Commissioner of Malaysia.
Local Preferences: As a platform that puts Malaysian players first, we consistently prioritise local service providers and infrastructure where practical and where it meets our security standards.

10 Minors and Young Player Protection

Town33 is a gaming platform exclusively for adult players aged 18 and above. We do not intentionally collect, process, or store personal data of individuals under the age of 18.

Should we discover that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate action to delete that data and close the account in question. Parents or guardians who find that a minor has registered on our platform are advised to contact our support team immediately.

Important: If you suspect a minor is using your account or has independently registered an account on Town33, please contact us immediately via live chat or email at [email protected] for prompt action.

11 Privacy Policy Amendments

Town33 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any significant amendments will be communicated to registered players via in-platform notifications or email at least 14 days before the amendments take effect.

The latest version of the Privacy Policy will always be available on this page with a clear update date. We encourage you to check this page periodically. Should you continue using the platform after any amendments, that action will be considered your acceptance of the updated terms.

Latest Version: This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions.

Compliance and Certifications

Malaysia Personal Data Protection Act (PDPA) 2010
Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA)
Payment Card Industry Data Security Standard (PCI DSS)
Malaysia National Cyber Security Framework (NCSF)
FAQ — Privacy Policy

Absolutely not. town33 has never sold, rented, or exchanged players' personal data to any third party for marketing or commercial purposes. Your data is only shared with service providers directly involved in platform operations — such as payment processors and KYC providers — and only for limited, specific purposes.

You may submit a data deletion request by contacting our privacy team via email at [email protected] with the subject line "Data Deletion Request". Please include your full name and account email for verification purposes. We will process your request within 14 business days. Please note that certain data may need to be retained for a specific period to comply with legal requirements.

When you close your Town33 account, your active account data will be deactivated immediately. However, certain data will be retained for a specified period in accordance with legal requirements — for example, financial transaction records for 7 years and KYC documents for 5 years after account closure. After the designated retention period, all data will be securely and permanently deleted or anonymised.

Yes. town33 uses SSL 256-bit encryption for all financial transactions and complies with PCI DSS standards for the handling of payment card data. Bank account numbers are stored in encrypted format and partially masked in the platform display. We do not store your full credit or debit card details in our systems.

Yes, you can unsubscribe from marketing communications at any time in two ways: (1) Click the "Unsubscribe" link found at the bottom of any of our marketing emails, or (2) Login to your account and adjust your notification settings under the Profile section. Unsubscribe requests will be processed within 5 business days. Please note that important transactional emails such as deposit confirmations and security notifications will continue to be sent as they relate to the security of your account.

Join town33 with Complete Confidence

Your privacy and data security are always protected. Register now and enjoy a safe, fair, and enjoyable gaming experience alongside thousands of Malaysian players who trust town33.

Bahasa Melayu