Privacy Policy AP33 — Malaysian User Data Protection

AP33 collects your personal information through several touchpoints throughout your use of the platform. Below are the categories of information we collect and the reasons we collect them:

All information you provide during registration — including your name, phone number, and email address — must be accurate and up to date. You are responsible for updating this information whenever changes occur. AP33 may also collect additional information during the identity verification (KYC) process, including copies of government-issued identification documents.

AP33 uses the personal information collected for the following purposes, all within the scope of platform operational requirements and legal compliance:

• Account Management: To create, verify, and manage your account, including secure login and identity verification during registration and withdrawals.
• Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, DuitNow, FPX Maybank2u, FPX CIMB Clicks, GrabPay, Boost, and ShopeePay, and to manage your winnings withdrawals in Malaysian Ringgit (RM).
• Gaming Service Delivery: To give you access to all AP33 games — jackpot slots, Live Casino (baccarat, blackjack, roulette), table games, EPL and Malaysia Super League Sports Betting, virtual sports, and more.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account usage, or any activity that violates ap33's Terms & Conditions.
• Responsible Gaming: To monitor usage patterns and provide appropriate responsible gambling tools, including deposit limits, loss limits, and self-exclusion options based on analysis of your account activity.
• Customer Support: To handle enquiries, complaints, and support requests you submit via live chat, WhatsApp, or email to the AP33 team.
• Service Communications: To send you important notifications about your account, changes to our terms, security updates, and promotional communications you have subscribed to.
• Legal Compliance: To fulfil the reporting and compliance obligations required under applicable Malaysian law.

AP33 does not sell, rent, or trade your personal data to any party for marketing purposes. However, in the course of operating the platform, AP33 may share your data with the following categories of third parties under limited and controlled circumstances:

• Payment Service Providers: AP33 shares the necessary transaction information with approved payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and banks that support FPX (Maybank, CIMB) and DuitNow services in order to process your deposits and withdrawals. Such sharing is kept to a minimum and limited strictly to what is required to complete the transaction.
• Game Software Providers: Licensed game providers, such as those supplying slots, Live Casino, and Sports Betting platforms, may receive the session information needed to run games correctly. This data does not include financial details or full identification information.
• Statutory Authorities: AP33 will disclose information to Malaysian authorities when required by law, court order, or in the context of a legitimate criminal investigation. We will not disclose information beyond what is legally required.
• Technical Service Providers: Technical infrastructure service providers (such as hosting and cybersecurity services) bound by strict confidentiality agreements and prohibited from using your data for any other purpose.

Ap33 implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or disclosure. Key security measures we have in place include:

• Encryption in Transit: All communication between your browser and ap33's servers is secured using TLS/SSL 256-bit protocols. This ensures that the information you submit — including login credentials, payment details, and account data — cannot be intercepted.
• Encryption at Rest: Sensitive data stored in AP33's databases — including identity information and financial data — is encrypted using robust data encryption standards.
• Strict Access Controls: Access to AP33's internal systems containing user data is restricted on a need-to-know basis. All access is logged, monitored, and regularly audited.
• Two-Factor Authentication: ap33's internal systems require multi-factor authentication for all staff with access to user data.
• 24/7 Security Monitoring: Our automated monitoring system tracks platform traffic and activity around the clock to detect and respond to any security threats or unusual access.
• Regular Security Testing: ap33 conducts regular vulnerability assessments and penetration testing to identify and address any security weaknesses before they can be exploited.

You also play an important role in keeping your data secure. Please ensure your AP33 account password is strong and unique, never shared with anyone, and changed regularly. If you suspect your account has been accessed without your authorisation, contact AP33 support immediately.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and AP33's privacy practices, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request and receive a copy of the personal data AP33 holds about you. AP33 will provide this information in a readable format within 21 days of the date of request.
• Right to Rectification: If you find that any personal data we hold is inaccurate or outdated, you have the right to request a correction. We will process correction requests within 14 days.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data. However, we may not be able to fulfil such requests in full if we remain under a legal obligation to retain that data.
• Right to Restriction of Processing: You may ask us to restrict how we use your data in certain circumstances — for example, while we are verifying the accuracy of your data or reviewing your dispute request.
• Right to Object: You may object to the processing of your data for specific purposes, particularly for direct marketing. ap33 will cease processing for those purposes promptly upon receiving a valid objection.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider where applicable.

To exercise any of the rights above, please contact ap33's privacy team by email at support@ap33.cash by clearly stating your request. AP33 may require identity verification before processing your request in order to protect your privacy.

AP33 uses cookies and similar tracking technologies to enhance your experience on the platform. The following outlines the types of cookies we use:

• Essential Cookies: These cookies are required for core AP33 platform functions such as maintaining your login session, remembering language preferences, and ensuring security while you use the platform. They cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Helps us understand how users interact with the platform — which pages are visited most frequently, how long sessions last, and where users encounter technical issues. This data is used in aggregate and without personally identifiable information to improve the AP33 platform.
• Functional Cookies: Allows the platform to remember your preferences — such as display size, favourite games, and other interface settings — to deliver a more personalised experience each time you log in to AP33.

You can control and manage cookies through your web browser settings. Please note, however, that disabling certain cookies may negatively affect the functionality of the AP33 platform. Cookies do not contain information that can be used to directly identify you.

AP33 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. The following provides a general overview of our data retention periods:

• Active Account Data: Retained for as long as your account remains active, plus an additional period following account closure as required by law.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date as required under Malaysian financial laws relating to anti-money laundering (AML).
• Identity Verification (KYC) Data: Retained for the period required under Malaysia's anti-fraud and AML legislation, typically between 5 and 7 years.
• Support Communication Logs: Retained for a period of 2 years to support ongoing case management and service quality auditing purposes.
• Technical Data (Access Logs): Retained for a maximum of 90 days for security monitoring and technical troubleshooting purposes.

Once the defined retention period has elapsed, data will be securely deleted or anonymised in such a way that it can no longer be linked to any specific individual.

AP33 is a platform designed exclusively for individuals aged 21 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

If ap33 discovers that we have inadvertently collected personal data from an individual who does not meet the minimum age requirement, we will take immediate steps to:

• Closing the account in question immediately.
• Delete all data associated with the account within a reasonable timeframe.
• Refunding any deposits made prior to age verification being completed, in accordance with established procedures.

The AP33 platform may contain links or references to third-party websites or services in certain contexts. AP33's Privacy Policy does not apply to those third-party websites or services.

Ap33 is not responsible for the privacy practices or content of third-party websites. We recommend reading the privacy policy of each website you visit separately to understand how they handle your personal data.

It's important to note that AP33 does not link our platform to any other gambling sites or external financial services. All transactions and interactions take place directly between you and AP33 through approved Malaysian local payment methods only.

If you have any questions, concerns, or requests regarding this Privacy Policy or how AP33 handles your personal data, please reach out to us via:

• Privacy Email: support@ap33.cash — for all privacy and data protection enquiries.
• Live Chat: Directly via the AP33 platform — for urgent enquiries requiring a response within 2 minutes.
• WhatsApp: AP33's support number listed in the platform's contact section — for communications in Bahasa Melayu.

AP33 is committed to responding to all privacy-related enquiries within 5 business days. For more complex requests, such as full data access or deletion requests, processing may take up to 21 days in accordance with legal requirements.