Official Document

Ap33 Privacy Policy – Protection of Your Personal Data

Ap33 takes the privacy of every member seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your personal information in accordance with the Malaysia Personal Data Protection Act (PDPA) 2010.

Updated: January 2026 Compliant with Malaysia's PDPA SSL 256-bit Encryption

ap33's Commitment to Your Privacy: Your personal data is a trust we safeguard wholeheartedly. We never sell, rent, or exploit your data for third-party gain. Every detail you share with ap33 is used solely to provide you with a safe, seamless, and personalised gaming experience.

1

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by ap33 ("we", "Platform") and applies to all individuals who access or use the ap33 platform, including the official website at ap33.top and our mobile app. This Policy describes our personal data processing practices and complements the ap33 Terms and Conditions.

By registering as a member, accessing the platform, or using any ap33 services, you confirm that you have read, understood, and fully agree to this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of our platform.

This Policy is subject to the Malaysia Personal Data Protection Act 2010 (PDPA) and all regulations in force thereunder. ap33 is a "data user" as defined under the PDPA and bears full responsibility for the processing of members' personal data on our platform.

Scope: This Policy covers all data collected through registration, platform use, financial transactions, customer support interactions, and use of the ap33 mobile app.

2

Types of Personal Data We Collect

Ap33 collects your personal data through various means throughout your use of our platform. The following are the categories of data we may collect:

Data Categories Example Information Collection Method
Identity Information Full name, date of birth, identification card number, KYC selfie photo Registration form, KYC process
Contact Information Phone number, email address, username Account registration
Financial Information Bank account number, bank name, deposit and withdrawal transaction history Payment processing
Technical Data IP address, device type, operating system, web browser, session data Automatically during use
Behavioural Data Gaming history, wagering activity, active session duration, game preferences In-platform activity
Communication Support chat logs, emails, feedback Customer support interactions

Ap33 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical records, political affiliations, or religious beliefs.

3

Purpose of Personal Data Use

Every piece of personal data we collect is used for defined and legitimate purposes. ap33 processes your data on the following bases:

  • Contract fulfilment: To process registration, verify identity, handle deposits and withdrawals, and provide access to games and platform services.
  • Legitimate interests: To detect and prevent fraud, money laundering, and other illegal activities that could compromise the security of the platform and its members.
  • Legal compliance: To fulfil KYC and AML (Anti-Money Laundering) requirements, and to meet reporting obligations to relevant authorities as required by law.
  • Your permissions: To send marketing communications, promotional offers, and bonus information — only where you have given your consent.
  • Service improvement: To analyse platform usage patterns for the purpose of improving user experience, enhancing the interface, and optimising technical performance.

Marketing Communications: You may withdraw consent to receive marketing communications at any time by contacting our support team. Withdrawing this consent does not affect your right to continue using the ap33 platform.

4

Third-Party Data Sharing & Disclosure

Ap33 does not sell your personal data to any third party for marketing or commercial purposes. However, we may share your personal data in the following limited circumstances:

  • Payment service provider: Payment gateway providers such as DuitNow, FPX, and authorised e-wallets for securely processing your deposit and withdrawal transactions.
  • Gaming software provider: Game providers integrated with the ap33 platform receive only the minimum session data required to run the games.
  • KYC service provider: A third-party identity verification platform used to securely verify members' identification documents and age.
  • Government authorities: When required by Malaysian law, court order, or directive from a legitimate regulatory authority.
  • Technical infrastructure provider: Cloud hosting and cybersecurity services that help us operate the platform securely and reliably.

All third parties we work with are bound by strict data confidentiality agreements and are only permitted to process your data for specific, agreed purposes.

Cross-Border Data Transfer: If data needs to be transferred outside Malaysia, ap33 ensures that equivalent protections aligned with PDPA standards are applied through valid data transfer agreements.

5

Data Storage & Security Measures

Ap33 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

  • Data encryption: All data transmitted between your device and ap33 servers is protected with 256-bit SSL/TLS encryption. Sensitive data stored on our systems is also encrypted using the latest algorithms.
  • Access control: Only ap33 staff with specific authorisation and a legitimate business need may access member personal data. All access is continuously logged and monitored.
  • Data segregation: Member funds and financial data are stored separately from the company's operational systems with multiple layers of security controls.
  • Regular auditing: ap33 conducts regular security testing and vulnerability assessments on the platform infrastructure to identify and address risks early.
  • Incident response plan: We have tested security incident response procedures in place, including notification to affected members within the timeframe prescribed by law.

Data Retention Period: ap33 retains members' personal data for as long as your account remains active. Following account closure, data is retained for a minimum of 7 years to fulfil AML/KYC legal requirements, after which the data is securely deleted.

6

Cookies, Tracking Technologies & Analytics

The ap33 platform uses cookies and similar tracking technologies to enhance your user experience. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as maintaining login sessions, remembering language preferences, and ensuring account security. These cookies cannot be disabled.
  • Performance cookies: Collecting information about how you use the platform — which pages you visit, time spent, and links clicked — to help us improve platform functionality.
  • Functional cookies: Remembering your personal preferences such as display settings, favourite game selections, and account settings for your convenience.
  • Analytics cookies: Used by our internal analytics tools to understand overall platform usage patterns in aggregate and anonymised form for improvement purposes.

You can manage and disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the ap33 platform. The ap33 mobile app may use device recognition technology similar to cookies for the same purposes.

7

Your Rights as a Data Subject

Under Malaysia's PDPA, you have certain rights regarding the personal data held by ap33. We fully respect and facilitate the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete data.

Right to Erasure

You may request deletion of your data under certain circumstances, subject to our legal obligations.

Right to Restriction

You may request that we restrict the processing of your data under certain prescribed circumstances.

Right to Data Portability

You have the right to receive your data in a structured format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact our privacy team by email at [email protected] by stating the right you wish to exercise. We will process your request within 30 working days and may require identity verification before processing the relevant request.

8

Child Data Protection

Ap33 is a platform exclusively for users aged 18 years and above only. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete the data and close the account in question. Parents or guardians who find that their child has registered on the ap33 platform are requested to contact our support team immediately.

Important Notice: ap33 employs a rigorous KYC process, including age verification based on official Malaysian identity documents, to ensure no underage individuals can access our platform.

9

Privacy Policy Amendments

Ap33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle personal data. Any significant changes will be communicated to members via:

  • In-platform notification upon your next login.
  • Email the address registered to your account.
  • Announcement on the ap33 website homepage.

The "Updated" date at the top of this page reflects when this Policy was last reviewed. Your continued use of the ap33 platform after the effective date of any amendments constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.

10

Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how ap33 handles your personal data, or wish to exercise any of your rights under the PDPA, please contact us through the following channels:

  • Privacy Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the ap33 platform.
  • Response time: We aim to respond to all privacy-related enquiries within 3 working days.

If you are not satisfied with our response, you have the right to submit a complaint to Department of Personal Data Protection (JPDP) Malaysia which is the PDPA regulatory body in this country.

ap33's Privacy Commitment: We are always open and transparent about how we handle your data. Your trust is our most valuable asset — and we will continue working every day to earn it.


The Six Pillars of ap33 Data Protection

Privacy is more than a document — it is our work culture. Here are ap33's six concrete commitments to protecting every member's personal data.

256-bit SSL Encryption

All data transmitted between your device and ap33 servers is encrypted to bank-grade security standards. No one can intercept or misuse your data in transit.

Full PDPA Compliance

Ap33 operates in compliance with the Malaysia Personal Data Protection Act 2010. We adhere to all PDPA principles including notice, consent, data integrity, and data subject rights.

Layered Access Control

Member data is accessible only to authorised staff with a legitimate business need. All access is logged, monitored, and periodically audited to detect any misuse.

No Data Sales

Ap33 has never sold and will never sell members' personal data to advertisers or third-party data brokers. Your data is only used for purposes to which you have given consent.

Regular Security Audits

The ap33 platform undergoes regular security assessments and penetration testing by independent cybersecurity experts to ensure our infrastructure remains robust at all times.

Rapid Incident Response

In the event of any security incident involving your data, ap33 has tested response procedures in place to notify affected members as quickly as possible.


Join the Trusted ap33 Community

With a transparent privacy policy and the highest level of data security, you can play on ap33 with complete peace of mind and confidence. Register now and experience the difference of a platform that truly cares about your privacy.

PDPA Compliant SSL 256-bit No Data Selling 24/7 Support

Bahasa Melayu