Privacy Policy fortune33 — Your Personal Data Protection

1Scope and Application of This Privacy Policy

This Privacy Policy is published by fortune33 and applies to all users who register, log in, or use any services offered through the fortune33 web platform at fortune33.win, including the fortune33 mobile app where applicable.

This document describes our practices for the collection, processing, storage, and disclosure of personal data in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and all applicable laws currently in force.

By registering a fortune33 account or continuing to use our platform after the effective date of this Privacy Policy update, you are deemed to have read, understood, and agreed to all terms contained in this document.

2Personal Data We Collect

Fortune33 only collects personal data that is strictly necessary to provide you with a safe, legitimate, and high-quality service. We practise the principle of minimum collection — no additional data is collected beyond the defined operational requirements.

Data you provide directly:

• Registration information: full name, identification card number, date of birth, email address, and mobile phone number.
• KYC verification documents: a copy of your national ID, passport, or valid travel document, along with proof of address.
• Financial information: bank account number, bank name, and digital wallet details (Touch 'n Go eWallet, Boost, GrabPay) used for deposits and withdrawals.
• Communications with the fortune33 support team via Live Chat or email.

Data collected automatically:

• Your IP address, device type, operating system, and web browser version.
• Login and logout activity logs including timestamps and geographic location.
• Game history, betting activity, deposits and withdrawals within the fortune33 platform.
• Cookie data and device identifiers for security purposes and an improved user experience.

3How We Use Your Personal Data

Every piece of data collected by fortune33 has a clear and legitimate purpose. We do not process your data for purposes unrelated to the services you use.

• Account management: Opening, verifying, and maintaining your fortune33 account, including the KYC process required by law.
• Transaction processing: Processing deposits via DuitNow, FPX, and digital wallets, and ensuring withdrawals are credited safely to the correct account.
• Security and fraud prevention: Detecting suspicious activity, unauthorised access attempts, and any form of fraud or money laundering.
• Legal compliance: Fulfilling reporting obligations to the relevant authorities in accordance with applicable Malaysian law.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and recommending appropriate self-control tools to members who need them.
• Service communications: Sending important account-related notices, security updates, and transaction information via email or SMS.
• Marketing (with consent): Sending promotional information, bonuses, and exclusive fortune33 offers only to members who have given their marketing consent.
• Platform improvements: Analysing usage behaviour to improve the design, functionality, and overall experience of the fortune33 platform.

4Data Sharing and Disclosure to Third Parties

Fortune33 takes your data privacy seriously. We do not sell, rent, or disclose your personal information to third parties for commercial gain. However, there are limited situations where data sharing is necessary and legally permitted:

• Payment processors: fortune33 shares only the minimum transaction information required with DuitNow, FPX, and authorised digital wallet operators solely to securely process your financial transactions.
• Legal compliance: fortune33 will disclose your personal data to Malaysian legal authorities, courts, or regulatory bodies if required by a valid court order or applicable law.
• Financial crime prevention: In cases involving suspected money laundering, fraud, or terrorism financing, fortune33 may report to the relevant authorities in accordance with our legal obligations.
• Technical service providers: Server hosting providers, analytics platforms, and security software providers involved in fortune33's technical operations may have limited access to certain data within the strict scope of their service contracts with fortune33.

All third parties that fortune33 works with are required to uphold data protection standards no less stringent than those in this Privacy Policy and applicable data protection laws.

5fortune33 Cookie Policy

Fortune33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse the fortune33 website.

Types of cookies used:

• Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance cookies: Collecting data on how you use the fortune33 platform (pages visited, session duration) to help us improve the user experience.
• Functionality cookies: Remembering your preferences such as language, display settings, and region to deliver a more personalised experience.
• Analytics cookies: Used to analyze platform usage patterns in aggregate (without identifying individuals) for service improvement purposes.

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of certain parts of the fortune33 platform.

6Data Security and Technical Protection Measures

Fortune33 continuously invests in cutting-edge security infrastructure to ensure your personal data is protected at all times. The technical and organisational measures we maintain include:

• 256-bit SSL/TLS encryption for all data communications between your device and fortune33's servers.
• At-rest encryption for all sensitive data stored in our databases.
• Multi-layered firewall and intrusion detection and prevention systems (IDS/IPS) operating 24 hours a day.
• Role-based access control (RBAC) ensuring staff can only access data within the scope of their job responsibilities.
• Regular internal security audits and vulnerability assessments (penetration testing) conducted by independent security teams.
• Automated encrypted data backups to separate locations to ensure service continuity.
• A comprehensive security incident response plan is in place to ensure any data breach is addressed promptly and effectively.

7Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by fortune33:

• Right to access: You have the right to request a copy of the personal data fortune33 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data under certain conditions, subject to fortune33's legal retention obligations.
• Right to restrict processing: You may request that fortune33 restrict how we process your data in certain circumstances.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the rights above, please contact the fortune33 data protection team via Live Chat on the platform or by email at [email protected]. fortune33 will process your request within 30 calendar days.

8Cross-Border Data Transfers

In certain operational cases, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. fortune33 ensures that any such data transfers are carried out with adequate safeguards, including:

• Use of approved standard contractual clauses to protect data transferred to third parties outside Malaysia.
• Selection of service providers holding internationally recognised data protection compliance certifications.
• A Data Protection Impact Assessment (DPIA) is conducted before any new cross-border data transfer is implemented.

Fortune33 only transfers personal data to jurisdictions with a level of data protection equivalent to or exceeding Malaysia's PDPA standards.

9Children's Privacy

The fortune33 platform is strictly prohibited for individuals under the age of 18. fortune33 does not knowingly collect, store, or process personal data of minors.

Should fortune33 discover that personal data of an underage minor has been collected without proper age verification, we will take immediate action to delete that data and close the associated account.

10Changes to This Privacy Policy

Fortune33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. The latest version of the Privacy Policy will always be available on this page with a refreshed update date at the top of the document.

For material changes that significantly affect how we process your data, fortune33 will notify you via an in-platform notice or email to your registered address at least 14 days before the changes take effect.

Your continued use of the fortune33 platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes, please stop using the platform and contact our support team to close your account.

11Contact the fortune33 Data Protection Officer

Fortune33 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy and Malaysia's PDPA. If you have any questions, concerns, or complaints regarding the processing of your personal data, please contact us via:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the fortune33 platform.
• Response time: fortune33 is committed to responding to all data protection enquiries within 3 business days.

If you are not satisfied with how fortune33 handles your data protection complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia through their official channels.