Privacy Policy WD33 – Personal Data Protection for Malaysian Users

1WD33 Introduction & Commitment

WD33 (wd33.im) is an online Sports Betting and casino platform operating in Malaysia. We take our responsibility to protect every member's personal data seriously, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international data protection best practices.

This Privacy Policy sets out in detail how WD33 collects your personal information, the purposes for which it is used, who it may be shared with, how we protect it, and what rights you hold as a data subject. We believe transparency is the foundation of trust — which is why this document is written in clear, plain language rather than confusing legal jargon.

By registering an account or using any WD33 service, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2Types of Personal Data We Collect

WD33 collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect and the purposes for which they are collected:

2.1 Data You Provide Directly

• Identity information: Full name as per MyKad, date of birth, gender, Malaysian identification card number.
• Contact information: Active Malaysian phone number, email address, current residential address.
• Financial information: Payment method details (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX accounts such as Maybank2u or CIMB Clicks), deposit and withdrawal transaction history.
• Verification documents (KYC): MyKad copy, selfie with identification document, bank statement or proof of address.

2.2 Data Collected Automatically

• Device data: Device type, operating system, phone model, screen resolution, unique device identifier.
• Network data: IP address, internet service provider (ISP), and general location based on IP.
• Usage data: Pages visited, session duration, games played, bets placed, click records and in-platform navigation history.
• Cookie data: Session cookies, preference cookies, and analytics data to understand usage patterns.

3How We Use Your Personal Data

WD33 uses collected personal data only for lawful, specified purposes. We will not use your data for any other purpose without obtaining fresh consent from you.

• Account management: Creating, verifying and managing your WD33 member account.
• Transaction processing: Verifying and processing all deposits via TNG, GrabPay, DuitNow, Boost, ShopeePay or FPX, as well as withdrawals to the same methods.
• Legal compliance: Fulfilling KYC (Know Your Customer), anti-money laundering (AML) and other statutory reporting requirements.
• Platform security: Detecting and preventing fraud, unauthorised access, bonus abuse, and other illicit activities.
• Service enhancements: Analysing usage patterns to improve the interface, performance and overall experience of the WD33 platform.
• Customer support: Handling enquiries, complaints, and support requests from members.
• Communications: Sending important notifications regarding your account, transactions, promotions you have subscribed to, and updates to our terms.
• VIP Programme & promotions: Determining eligibility for and managing VIP Rewards, cashback and personalised promotional offers.

4Data Sharing & Disclosure

WD33 does not sell members' personal data to any third party. However, in certain circumstances, we may need to share your information with specific parties:

4.1 Third-Party Service Providers

We share necessary data with service providers that support WD33's operations, including payment gateway providers (to process TNG, GrabPay, DuitNow, and other transactions), KYC and identity verification service providers, data analytics companies that help us understand platform usage, and hosting and cloud infrastructure providers. All these providers are bound by strict confidentiality agreements and are only permitted to use data for specified purposes.

4.2 Legal Requirements

WD33 may disclose personal data to Malaysian government authorities or law enforcement bodies when required by law, court order, or in the course of an official investigation involving fraud, money laundering or other serious offences.

4.3 Business Transfers

In the event of a merger, acquisition or business asset transfer, member data may be transferred as part of those assets. You will be notified in advance and given the option to delete your account if you do not agree.

5Data Security & Technical Protection

WD33 invests seriously in security infrastructure to ensure the personal data of Malaysian members is protected to the highest practicable standard. The technical and organisational measures we implement include:

• 256-bit SSL/TLS Encryption: All communications between your browser and WD33 servers are encrypted using bank-grade encryption.
• Data encryption at rest: Sensitive data is stored in encrypted form in our databases.
• Two-factor authentication (2FA): Available and recommended for all WD33 member accounts.
• Role-based access control: Only WD33 staff who require data access to perform their duties are permitted to do so — with a full audit trail maintained.
• 24/7 Monitoring: Our automated security monitoring system detects and responds to suspicious activity in real time.
• Regular security audits: Penetration testing and security audits are conducted regularly by independent third parties.
• Secure data backup: Data is regularly backed up to separate, secure locations for disaster recovery purposes.

6Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and WD33's policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact us by email at privacy@wd33.im or via 24/7 live chat support. WD33 will respond to your request within 14 business days.

7Cookies & Tracking Technologies

WD33 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

You can manage optional cookies through your browser settings or the cookie management panel in your WD33 account. Please note that disabling essential cookies may affect platform functionality.

8Data Retention Period

WD33 does not retain personal data longer than necessary for its stated purposes, or as required under Malaysian law.

• Active account data: Retained for the duration of the active account and for 5 years following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• KYC Documents: Retained for 5 years after the last verification date or account closure.
• Security logs: Retained for 2 years for security investigation purposes.
• Analytical cookie data: Deleted after 13 months.

9Child Protection

The WD33 platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from children under the age of 18. Should we discover or be notified that a child's data has been collected without parental or guardian knowledge, we will take immediate steps to delete that data and close the account in question.

Parents and guardians who believe their child may have registered on WD33 are urged to contact us immediately at privacy@wd33.im for immediate action.

10Amendments to This Privacy Policy

WD33 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. When we make material changes, we will notify you via:

• Notification email sent to the address registered on your account.
• A clear notification will appear on the WD33 platform the next time you log in.
• Update the "Last Updated" date at the top of this document.

Continued use of the WD33 platform after any amendments take effect constitutes your acceptance of the latest version of this Privacy Policy. If you do not agree with the changes, you have the right to close your account.

11Contact WD33's Data Controller

For any enquiries, concerns, or requests relating to your privacy and personal data protection, please contact the WD33 privacy team:

If you are not satisfied with how WD33 has handled your personal data after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under PDPA 2010.