Privacy Policy xyz33 —
Your Data, Our Responsibility

1 Introduction

Xyz33 ("Company", "we") is committed to protecting the privacy of all users on our platform. This Privacy Policy explains in detail how we handle your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

When you register an account, make a deposit, play games, or simply browse the xyz33 website, you share certain information with us. We understand the trust you place in us, and we take this responsibility very seriously.

This policy applies to all xyz33 services, including the official website, mobile app, and any other platforms operating under the xyz33 brand. In the event of any conflict between a translated version and the original, the original version shall prevail.

2 Data We Collect

Xyz33 collects several categories of personal information depending on how you interact with our platform. Below is a summary of the types of data we collect:

We only collect information that is strictly necessary for the stated purposes. You need not worry about excessive data being collected without clear justification.

3 How We Use Your Data

Every piece of information we collect has a specific and legitimate purpose. xyz33 uses your personal data for the following purposes:

• Account Management: Creating, verifying, and managing your user account, including required KYC processes.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Service Delivery: Allowing you to access all games, promotions, and features on the xyz33 platform.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorized access.
• Communication: Sending important notifications related to your account, security updates, and promotional information (with your consent).
• Service Improvement: Analyzing usage patterns to improve the user experience and platform performance.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to our operations.
• Responsible Gaming: Monitoring gameplay patterns to identify users who may need responsible gaming support.

4 Data Sharing with Third Parties

Xyz33 does not sell or rent your personal data to any third party for marketing purposes. However, there are limited situations where we may share your information with certain parties:

• Payment Providers: Information required to process transactions is shared with licensed payment providers such as FPX, DuitNow, and e-wallet processors operating in Malaysia.
• Game Providers: Minimum technical data required to run games is shared with our licensed game providers.
• Authorities: We will disclose information to government authorities or law enforcement when required by law or court order.
• KYC Services: Identity data is shared with licensed third-party identity verification service providers who are bound by strict confidentiality agreements.

All third parties who receive your data are bound by robust confidentiality and data protection agreements. They are only permitted to use that data for the specified purposes.

5 Data Security

Protecting your data is our highest priority. xyz33 implements multiple layers of security to ensure your personal information remains protected at all times:

• Data Encryption: All data in transit is protected with 256-bit SSL/TLS encryption. Stored data is also encrypted using AES-256 standards.
• Access Controls: A role-based access control (RBAC) system ensures that only authorized staff can access user data, and only to the extent required for their responsibilities.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all user accounts to add an extra layer of protection.
• Regular Security Audits: xyz33 conducts regular security audits and penetration testing to identify and address any system vulnerabilities.
• Staff Training: All xyz33 staff receive ongoing training on data protection best practices and information security.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. You also play an important role by keeping your password and login credentials secure.

6 Cookies & Tracking Technologies

Xyz33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use our website to help us improve performance and the user experience.
• Functional Cookies: Remembering your preferences and settings such as language, currency, and game preferences for a more personalized experience.
• Analytics Cookies: Helping us understand traffic patterns and platform usage to make data-driven decisions.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the xyz33 platform.

7 Your Rights as a Data Subject

Under Malaysia's PDPA and international data protection principles, you have the following rights regarding your personal data held by xyz33:

To exercise any of the above rights, please contact our Data Privacy Officer team. We will endeavor to fulfill your request within 30 business days. In complex cases, this period may be extended with appropriate notice.

8 Data Retention

Xyz33 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account is active and for a reasonable period after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering and tax requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, as required by AML/CFT regulations.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Communication Data: Retained for 3 years for dispute resolution and customer support purposes.

Once the retention period expires, your data will be securely deleted or anonymized in accordance with our established data deletion procedures.

9 Changes to the Privacy Policy

Xyz33 reserves the right to update or modify this Privacy Policy at any time. Any significant changes will be communicated to you via:

• A prominent notice on the xyz33 platform's home page.
• Notification email to the address registered to your account.
• An in-account notice upon your next login.

We recommend reviewing this Privacy Policy page periodically. The "Updated" date at the top of this page always reflects the latest version of our policy. Continued use of the xyz33 platform after any changes take effect will be considered your acceptance of the revised policy.

10 Contact Our Data Privacy Officer

If you have any questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact our Data Privacy Officer (DPO) through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the xyz33 platform or app.
• FAQ: Browse FAQ page us for an immediate response.

We are committed to handling all privacy complaints seriously and will endeavour to respond within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.