cekap33 Privacy Policy

§1 Who We Are

cekap33 operates the online gaming platform accessible at cekap33.one and all associated subdomains, mobile applications, and services (the "Platform"). In this Privacy Policy, "cekap33", "we", "us", and "our" refer to the operator of the cekap33 Platform.

cekap33 acts as the data controller in respect of the personal data of Members and visitors to the Platform. This means we determine the purposes for which, and the manner in which, personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as data processors under our instruction and are bound by appropriate data processing agreements.

This Privacy Policy applies to all personal data collected through the cekap33 Platform, including data provided at registration, data generated through Platform use, and data collected through cookies and similar technologies. It does not apply to third-party websites or services to which the Platform may link.

§2 Data We Collect

cekap33 collects personal data through several means: directly from you when you register and use the Platform, automatically when you interact with the Platform, and from third parties in limited circumstances such as payment processing and identity verification.

2.1 Data You Are Not Required to Provide

You are not required to provide data beyond what is necessary for account registration and verification. However, withholding certain categories of data (particularly identity and financial data) may prevent cekap33 from processing deposits, withdrawals, or maintaining your account in accordance with our regulatory obligations.

§3 How We Use Your Data

cekap33 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and managing your cekap33 member account, including authentication, security, and account settings;
• Payment Processing: Processing deposits and withdrawals in MYR via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other accepted payment methods;
• Identity Verification (KYC): Verifying your identity in compliance with anti-money laundering (AML) and know-your-customer (KYC) regulatory requirements;
• Regulatory Compliance: Fulfilling obligations under applicable gaming regulations, AML laws, data protection laws, and international gaming authority standards;
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling, operating deposit and loss limit systems, and processing self-exclusion requests;
• Customer Support: Responding to queries, complaints, and requests submitted through live chat, email, or other support channels;
• Platform Security: Detecting, investigating, and preventing fraud, cheating, unauthorised access, and other prohibited conduct on the Platform;
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, game selection, and user experience;
• Communications: Sending transactional notifications (login alerts, withdrawal confirmations, verification requests) and, where you have given consent, promotional communications about cekap33 offers and promotions.

§4 Legal Basis for Processing

cekap33 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and cekap33, including account operation, payment processing, and game provision;
• Legal Obligation: Processing required to comply with applicable law, including AML/KYC regulations, tax reporting obligations, and gaming regulatory requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and Platform improvement where such interests are not overridden by your fundamental rights;
• Consent: Where we rely on consent (for example, for marketing communications), you may withdraw consent at any time by contacting us or using the unsubscribe option in any marketing communication.

§5 Data Sharing & Disclosure

cekap33 does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: Payment service providers facilitating deposits and withdrawals (including Touch 'n Go, Boost, GrabPay, DuitNow, and FPX-connected banks) receive transactional data necessary to process your payments. These providers operate under their own privacy policies and are bound by applicable payment industry data security standards;
• Identity Verification Services: Third-party KYC and identity verification providers may process your identity documents and biometric data solely for the purpose of verifying your identity in compliance with regulatory requirements;
• Game Software Providers: Licensed third-party game studios (such as Evolution Gaming and Pragmatic Play) may receive your username and gaming session data for the purpose of operating game outcomes. These providers do not receive your full identity or financial data;
• Regulatory Authorities: cekap33 will disclose personal data to relevant regulatory authorities, law enforcement agencies, or gaming regulators where required by law or court order;
• Fraud Prevention: Where necessary for the prevention and detection of fraud, cheating, or money laundering, cekap33 may share data with industry fraud prevention bodies or relevant law enforcement.

§6 Cookies & Tracking Technologies

The cekap33 Platform uses cookies and similar technologies to operate core Platform functions. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for session management, authentication, security (CSRF protection), and keeping you logged in during a session. These cannot be disabled without affecting Platform functionality;
• Performance Cookies: Anonymised analytics data used to understand how members interact with the Platform, which pages are visited most, and where errors occur. This data is aggregated and not linked to individual members;
• Functional Cookies: Cookies that remember your preferences (such as language settings and responsible gaming limit configurations) to provide a consistent experience.

cekap33 does not use third-party advertising cookies, tracking pixels, or retargeting cookies. You can manage and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to the cekap33 Platform.

§7 Data Retention

cekap33 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your membership and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction in compliance with applicable financial record-keeping obligations;
• Communication records: Retained for two (2) years from the date of the communication, unless the communication is relevant to an ongoing dispute or investigation;
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with cekap33's data disposal procedures.

§8 Data Security

cekap33 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the cekap33 Platform;
• Encryption of sensitive data at rest, including identity documents, financial data, and password hashes;
• Role-based access controls limiting staff access to personal data strictly to what is required for their function;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) available to all Members and mandatory for internal staff systems;
• Incident response procedures for detecting, containing, and notifying affected parties of any data breach within legally required timeframes.

§9 Your Data Rights

As a cekap33 Member, you have the following rights in respect of your personal data, subject to applicable law and certain exemptions:

• Right of Access: Request a copy of the personal data cekap33 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where we have no lawful basis for continued processing. Note that data subject to regulatory retention obligations cannot be deleted until the retention period expires;
• Right to Restriction: Request that we restrict processing of your data in certain circumstances, for example while a correction request is pending;
• Right to Data Portability: Request a machine-readable copy of your personal data in circumstances where processing is based on consent or contract;
• Right to Object: Object to processing based on legitimate interests, including for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact cekap33's Data Protection team at [email protected]. We will respond to all legitimate requests within thirty (30) days. Identity verification may be required before processing a request.

§10 Children & Minors

The cekap33 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If cekap33 becomes aware that personal data has been collected from an individual under 21, we will take immediate steps to delete such data and close the associated account.

If you have reason to believe that a minor has registered on the cekap33 Platform, please notify us immediately at [email protected]. cekap33 takes underage gambling prevention seriously and cooperates fully with investigations in this regard.

§11 International Data Transfers

In the course of providing the cekap33 Platform, your personal data may be transferred to and processed in countries outside Malaysia, particularly in connection with game software providers, identity verification services, and cloud infrastructure providers. Where such transfers occur, cekap33 ensures that appropriate safeguards are in place to protect your data, including standard contractual clauses, data processing agreements, and assessments of the data protection standards applicable in the destination country.

By using the cekap33 Platform, you acknowledge and consent to the transfer of your personal data in the manner described in this section.

§12 Changes to This Policy

cekap33 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable notice via the Platform or by email to your registered address prior to the changes taking effect. The current version of this Privacy Policy, together with the effective date, is always accessible at cekap33.one/privacy-policy.

Continued use of the cekap33 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you should cease using the Platform and contact us to close your account.

§13 Contact Us

For any queries, complaints, or requests relating to this Privacy Policy or cekap33's data protection practices, please contact our Data Protection team:

cekap33 takes all privacy complaints seriously. We will acknowledge your request promptly and investigate any concerns thoroughly. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.