1. Introduction
ab33 ("we", "us", "our", "the Platform") operates the online casino and sports betting services accessible at https://ab33.cam. We are committed to handling the personal information of our Members — and prospective Members — with transparency, care, and in accordance with recognised data protection principles.
This Privacy Policy ("Policy") describes the categories of personal data we process, the purposes and legal bases for that processing, the parties with whom data may be shared, the retention periods that apply, and the rights you hold as a data subject. It applies to all individuals who access or interact with the ab33 platform, including registered Members across Malaysia — whether in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. By registering an account or using our services, you acknowledge that you have read and understood the practices described in this Policy.
2. Definitions
| Term | Definition |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, directly or indirectly, including name, identification number, contact details, financial records, and online identifiers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| Data Controller | ab33, which determines the purposes and means of processing personal data collected through the platform. |
| Data Processor | A third party that processes personal data on behalf of ab33 under a documented contractual arrangement. |
| Member | A natural person who has registered and holds an active or previously active account on the ab33 platform. |
| KYC | Know Your Customer — the identity verification process requiring Members to submit documentary proof of identity and address. |
| Sensitive Data | Special categories of personal data that warrant heightened protection, such as financial account details, government-issued identification numbers, and health-related information. |
3. Data We Collect
ab33 collects personal data that is necessary, proportionate, and relevant to the purposes set out in this Policy. The categories of data we collect include, but are not limited to, the following:
Identity Data
Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., MyKad number or passport number).
Contact Data
Email address, mobile phone number, and residential or mailing address including city and postcode.
Financial Data
Bank account details, e-wallet identifiers (e.g., Touch 'n Go, Boost, GrabPay), cryptocurrency wallet addresses, transaction histories, deposit and withdrawal records in MYR.
Gaming Data
Betting history, game session records, wagering patterns, promotional eligibility history, bonus usage, and win/loss records.
Technical Data
IP address, device type and model, browser type and version, operating system, session timestamps, and geolocation data at login.
Communications Data
Records of your correspondence with our support team via live chat, WhatsApp, email, and any feedback or complaint submissions.
4. How We Collect Your Data
ab33 collects personal data through the following primary channels:
- Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
- Automated collection: Technical and behavioural data gathered automatically as you navigate and interact with the platform, including session logs, click-stream data, and device fingerprinting for fraud detection.
- Payment processors: Financial data shared by third-party payment providers (such as DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency network confirmations) in connection with deposit and withdrawal transactions.
- Identity verification providers: Data returned by KYC and fraud screening services when we verify your identity documents or assess your account risk profile.
- Cookies and tracking technologies: Data collected via cookies, pixels, and similar technologies as described in Section 11 of this Policy.
5. Purposes of Processing
ab33 processes personal data for the following documented purposes:
5.1 Account Administration
To register and maintain your ab33 account, verify your identity, process your login credentials securely, and enable you to access the full suite of platform services including the sportsbook, live casino, and slot games.
5.2 Transaction Processing
To process deposits and withdrawals denominated in MYR, facilitate payments through supported channels including Touch 'n Go eWallet, DuitNow, FPX, and USDT, verify transaction legitimacy, and maintain accurate financial records.
5.3 Legal and Regulatory Compliance
To fulfil our obligations under applicable anti-money laundering (AML) frameworks, know-your-customer (KYC) requirements, responsible gambling regulations, and any other legal or regulatory obligations to which ab33 is subject.
5.4 Fraud Prevention and Security
To detect, investigate, and prevent unauthorised account access, fraudulent transactions, identity theft, money laundering, bonus abuse, and other prohibited activities as defined in our Terms & Conditions.
5.5 Customer Support
To respond to your enquiries, resolve account issues, process complaints, and provide general assistance through our 24/7 live chat, WhatsApp, and email support channels.
5.6 Responsible Gambling
To monitor gaming patterns, administer deposit limits and self-exclusion requests, and fulfil our duty of care obligations toward Members who may be experiencing gambling-related harm.
5.7 Marketing and Promotions
To communicate relevant promotions, bonus offers, and product updates to Members who have not opted out of marketing communications. You may withdraw consent for marketing at any time by contacting support.
5.8 Platform Improvement
To analyse aggregated usage patterns, assess platform performance during high-traffic events (such as EPL match nights or Liga Super Malaysia fixtures), and improve the overall Member experience.
6. Legal Bases for Processing
ab33 processes personal data only where a recognised legal basis exists. The applicable bases for our processing activities are as follows:
- Contractual necessity: Processing required to perform the account registration contract, process transactions, and deliver the services you have requested.
- Legal obligation: Processing necessary for compliance with applicable laws and regulations, including AML, KYC, and responsible gambling obligations.
- Legitimate interests: Processing carried out to pursue legitimate operational interests, including fraud prevention, platform security, and product improvement, where those interests are not overridden by your fundamental rights.
- Consent: Processing based on your freely given, specific, and informed consent, such as for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
7. Data Sharing & Disclosure
ab33 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with the following categories of recipients under documented agreements or legal obligations:
- Payment service providers: Banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow/FPX infrastructure, and cryptocurrency processors, for the purpose of executing financial transactions.
- Identity verification and KYC providers: Third-party services that assist in verifying identity documents, screening against sanctions lists, and assessing fraud risk.
- Game content and technology providers: Licensed game studios and platform infrastructure suppliers who process data necessary to deliver gaming services on behalf of ab33.
- Customer support platforms: Service providers who host or manage our live chat, email ticketing, or WhatsApp business communication systems.
- Regulatory and law enforcement authorities: Where required by applicable law, court order, regulatory direction, or to protect the safety and rights of ab33 or its Members.
8. International Data Transfers
Due to the global nature of payment infrastructure, cloud services, and gaming technology, your personal data may be transferred to, and processed in, countries outside Malaysia. Where such transfers occur, ab33 ensures that appropriate safeguards are in place — including contractual obligations equivalent to recognised data protection standards — to protect your data to a level at least equivalent to that provided within Malaysia.
By using the ab33 platform, you acknowledge that your data may be processed in jurisdictions where data protection laws differ from those in Malaysia. ab33 takes reasonable steps to ensure that any international transfer is conducted lawfully and securely.
9. Data Retention
ab33 retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in accordance with applicable legal and regulatory obligations. The following indicative retention periods apply:
- Account records and transaction data: Retained for a minimum of seven (7) years from account closure or last transaction date, to satisfy AML and financial compliance requirements.
- KYC documents: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure.
- Support communications: Retained for up to three (3) years from the date of the last interaction, to support complaint resolution and account history enquiries.
- Marketing consent records: Retained until consent is withdrawn, and for a further reasonable period to demonstrate compliance with consent obligations.
- Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.
10. Security Measures
ab33 implements a layered approach to data security, combining technical and organisational controls to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
- Encrypted storage of sensitive data fields including financial account identifiers and authentication credentials;
- Role-based access controls limiting internal access to personal data to authorised personnel only;
- Continuous automated monitoring for suspicious login patterns, unusual transaction activity, and potential account compromises;
- Regular security reviews and vulnerability assessments of platform infrastructure;
- Two-factor authentication options for Member accounts.
11. Cookies & Tracking Technologies
The ab33 platform uses cookies — small text files placed on your device — and similar tracking technologies to support essential platform functions, improve your experience, and gather aggregated analytics data. The categories of cookies we use include:
- Strictly necessary cookies: Required for the platform to function correctly, including session management, login authentication, and security token validation. These cannot be disabled without impairing platform functionality.
- Functional cookies: Used to remember your preferences such as language settings, currency display, and odds format selection, so you do not have to reconfigure them on each visit.
- Analytics cookies: Used to collect aggregated, anonymised data about how Members navigate and interact with the platform, enabling us to identify usage patterns and improve performance during busy periods such as EPL or Liga Super Malaysia match days.
- Security and fraud detection cookies: Used to identify unusual device or behaviour patterns that may indicate fraudulent account activity or bot traffic.
You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your ability to use some platform features. ab33 does not use cookies for cross-site advertising tracking or to create commercial profiles for sale to third parties.
12. Your Rights as a Data Subject
Subject to applicable law and the verification of your identity, you may exercise the following rights in relation to your personal data held by ab33:
- Right of access: You may request confirmation of whether ab33 holds personal data about you and obtain a copy of that data in a readable format.
- Right to rectification: You may request the correction of inaccurate or incomplete personal data. You can update basic account information directly through your account settings.
- Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
- Right to restrict processing: You may request that we restrict the processing of your data while a dispute or accuracy concern is being resolved.
- Right to data portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to us.
- Right to withdraw consent: Where processing is based on consent (e.g., marketing), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to object: You may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes.
13. Children's Privacy
The ab33 platform is strictly restricted to adults aged 21 years and above. We do not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has accessed the ab33 platform or provided personal data without your consent, please contact our support team immediately at [email protected] (plain text — not a clickable link).
14. Third-Party Services and Links
The ab33 platform may display or reference third-party services, particularly in the context of payment methods and game content providers. ab33 is not responsible for the privacy practices of third-party operators whose services you access independently of the ab33 platform. We encourage you to read the privacy policies of any third party whose services you use.
Where ab33 engages third-party Data Processors (as defined in Section 2), those parties are contractually bound to process your data only for the purpose specified by ab33, to maintain appropriate security standards, and to return or destroy data upon the conclusion of the engagement.
15. Amendments to This Policy
ab33 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. Where material changes are made, we will endeavour to notify registered Members by email or through a prominent in-platform notification prior to the changes taking effect.
The version of this Policy published on the ab33 website at https://ab33.cam/privacy-policy at any given time constitutes the current and binding version. Your continued use of the platform after an updated Policy has been published constitutes your acknowledgement of the changes.
16. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the ab33 data team using the following channels:
- Email: [email protected] — plain text; not a clickable link
- Live Chat: Available 24/7 through the ab33 platform — average response within 3–5 minutes
- WhatsApp: Available 24/7 in English, Bahasa Melayu, and Chinese
We will acknowledge privacy-related requests within five (5) business days and provide a substantive response within thirty (30) calendar days, unless the complexity of the request requires a reasonable extension, of which you will be notified in advance.