Api33 takes your privacy seriously. This document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Before reading the full document, here is a summary of api33's key privacy commitments to our Malaysian members.
All personal data collection and processing at api33 complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We do not collect data beyond what is necessary to provide our services to you.
All data transmitted between your device and api33's servers is encrypted using 256-bit SSL — the same security standard used by international banking institutions. Your data cannot be intercepted in transit.
Api33 has never and will never sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you — it is not a commodity for our business.
You have the right to access all personal data we hold about you, request correction of any inaccurate data, and request deletion of your data in certain circumstances. Requests can be made through our customer support.
Your bank account details, card numbers, and e-wallet information (Touch 'n Go, GrabPay, DuitNow, and others) are processed through a secure payment gateway and are not stored directly on api33's servers.
You may opt out of marketing communications from api33 at any time through your account settings or by contacting customer support. Your preference will be honoured within 5 business days.
This Privacy Policy describes api33's privacy practices regarding the collection, use, storage, and disclosure of your personal data. By registering for or using the api33 platform, you agree to the terms of this Privacy Policy. Please read this document carefully. If you do not agree, please stop using our platform.
Api33 (referred to herein as "api33", "we", "us", or "the platform") operates an online casino platform accessible at https://api33.my. In providing our services to members in Malaysia, we process certain personal data that is necessary to deliver, maintain, and improve those services.
This Privacy Policy has been drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out:
Api33 acts as the data controller for all personal data collected through our platform. If you have any questions about how we handle your personal data, please contact our Data Protection Officer at support@api33.my.
Api33 collects your personal data through various means as you use our platform. The types of data we collect are as follows:
| Data Category | Data Examples | How Collected |
|---|---|---|
| Identity Information | Full name, MyKad number, date of birth | Registration form, KYC verification |
| Contact Information | Phone number, email address | Registration forms, profile updates |
| Financial Information | Bank account number, e-wallet type, transaction records | Deposit and withdrawal processes |
| Platform Usage Data | Gaming history, betting history, login timestamps | Automatically collected during platform use |
| Technical Data | IP address, browser type, device type, operating system | Server logs, cookies |
| Communication Data | Live chat transcripts, emails sent to support | Interactions with the support team |
| Geolocation Data | Approximate location based on IP address | Automatically upon login |
Api33 does not collect credit or debit card numbers directly — all payments are processed through third-party gateways that comply with PCI-DSS standards. We also do not collect biometric data, health information, or your political or religious affiliations.
Personal data collected is used by api33 solely for legitimate purposes directly related to the provision of our services, including:
Under Malaysia's PDPA, every instance of personal data processing must have a valid legal basis. api33 processes your data on the following grounds:
Where the processing of your data is based on consent, you may withdraw that consent at any time by contacting api33's customer support. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.
Api33 does not sell, rent, or trade your personal data. However, in the course of operating our business, we do need to share data with a limited and carefully selected set of third parties:
All third parties who receive api33 members' personal data are bound by contractual agreements that require them to protect that data to a standard equal to or higher than our own.
Api33 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure:
In the event of a data breach that may affect your rights or freedoms, api33 will notify you within a reasonable timeframe in accordance with Malaysia's PDPA requirements. Notification will be sent via email to the address registered to your account.
Api33 does not retain your personal data for longer than is necessary for the purpose for which it was processed, or beyond the period required by law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | For as long as the account is active | Service Provision |
| Financial transaction records | 7 years after the transaction | Malaysian legal requirements |
| KYC Documents | 5 years after account closure | AML Compliance |
| Game activity logs | 3 years | Dispute Resolution |
| Support communication records | 2 years | Service references |
| Technical logs (IP, access) | 90 days | System security |
| Marketing data (with consent) | Until consent is withdrawn | Marketing communications |
Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.
Api33 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The types of cookies we use are:
You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality or user experience of the api33 platform.
Most modern web browsers allow you to view, manage, and delete cookies through your browser settings. Refer to your browser's help documentation for detailed guidance on managing cookies. You may also use "Private Browsing" or "Incognito" mode for sessions that do not store cookies.
As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by api33:
You have the right to obtain a copy of the personal data we hold about you, along with information on how it is being processed.
You have the right to request the correction of any personal data that is inaccurate, incomplete, or out of date.
You may request the deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose.
You may object to the processing of your personal data for direct marketing purposes at any time, with no obligation to provide a reason.
You may request that we restrict the processing of your data under certain circumstances, such as while you are verifying the accuracy of the data.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
To exercise any of these rights, please submit a written request to support@api33.my, including your account details and the specific right you wish to exercise. api33 will respond to your request within 30 days. For complex requests, this period may be extended, and you will be notified accordingly.
In certain circumstances, your personal data may be transferred to, or processed in, countries outside Malaysia. This occurs primarily in the context of:
When your personal data is transferred outside of Malaysia, api33 ensures that:
The api33 platform is intended for individuals aged 18 and above only. api33 does not knowingly collect or process personal data of individuals under the age of 18. If you become aware that your child who is under age has registered for or used the api33 platform, please contact us immediately at support@api33.my.
Should api33 confirm that personal data of an underage individual has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.
Api33 employs multiple mechanisms to verify that our members are aged 18 and above, including verification during registration and KYC procedures for withdrawals. We are committed to preventing minors from accessing our gambling platform.
Api33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements. When we make material changes, we will:
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the api33 platform after any updates to this Privacy Policy are published will be considered acceptance of the revised policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or how api33 handles your personal data, please contact our Data Protection Officer through the following channels:
If you are dissatisfied with how api33 has handled your privacy enquiry, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner or the relevant regulatory authority.
This Privacy Policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable laws in Malaysia. Any disputes relating to this Privacy Policy shall be resolved in accordance with Malaysian law.
In today's digital age, personal data has become incredibly valuable — and unfortunately, something that irresponsible parties frequently misuse. api33 understands that when you register and play on our platform, you are entrusting us not only with your money but also with your personal information. That trust is something we do not take lightly, and protecting your privacy is not merely something we do because the law requires it — it is a core value that drives every decision we make about how we handle data.
Many Malaysians are unaware of their rights under the Personal Data Protection Act 2010 (PDPA). The PDPA grants you real, enforceable rights — the right to know what data is held about you, the right to correct inaccurate data, and in certain circumstances, the right to request deletion of your data. api33 is fully committed to upholding these rights. You should never have to fight to exercise them — simply contact us and we will process your request promptly, no questions asked.
One of the most common concerns we hear from new players is about the security of their financial information — particularly when it involves bank accounts and e-wallets such as Touch 'n Go, GrabPay, or DuitNow. We want to be absolutely clear: api33 does not store your bank account details, card numbers, or digital wallet login credentials on our servers. All financial transactions are processed through third-party payment gateways that comply with international financial security standards (PCI-DSS). What we do retain are transaction records required for legal compliance and dispute resolution — not sensitive details that could be used to initiate new transactions.
Another question that often comes up is whether api33 uses members' personal data for third-party marketing. The answer is a firm no. api33 has never and will never sell, rent, or trade members' personal data to any advertiser, marketing company, or other party for external marketing purposes. If you receive marketing communications from api33, it is because you opted in during registration or at a later point. And if you decide you no longer wish to receive such communications, you can unsubscribe easily via the link provided in any promotional email, or by contacting our support team.
Technical security is another area where api33 invests seriously. The 256-bit SSL encryption we use means that every bit of data transmitted between your phone or computer and api33's servers is fully encrypted — even if someone were to intercept the communication, they would be unable to read anything meaningful. In addition, our security monitoring systems operate around the clock to detect any unauthorised access attempts or suspicious activity. When we detect something unusual, we act immediately — this may mean temporarily locking your account as a precaution, and we will contact you to verify your identity before restoring access.
Cookie management is a more technical matter, but no less important. The cookies api33 uses serve legitimate purposes — keeping your login session active so you don't have to sign in again every time you open a new page, remembering your language preferences and settings, and helping us understand which features are used most. We do not use cookies to track your activity on other websites or to build an advertising profile about you. The analytics cookies we use produce aggregated data that cannot identify you as an individual.
One commitment api33 holds firmly is privacy in the context of responsible gaming. We monitor members' gambling patterns not to exploit their vulnerabilities, but to identify early signs of problem gambling and offer assistance before the situation becomes serious. This monitoring is conducted internally and strictly — no information about your gambling patterns is shared with any third party without your consent, except where required by law.
Ultimately, the trust you place in api33 when you register and play on our platform is something we deeply value and take seriously. Your privacy is not an administrative burden to us — it is a fundamental part of the relationship we want to build with every api33 member. If you have any questions, concerns, or feedback about how we handle your personal data, our door is always open. Reach out to api33's Bahasa Malaysia-speaking support team via live chat, WhatsApp, or email at support@api33.my, and we will ensure your enquiry is handled with care and without delay.
Answers to the most frequently asked questions about how api33 handles members' personal data.
Api33 takes your privacy seriously in full compliance with Malaysia's PDPA. Register for free today, enjoy a 100% welcome bonus of up to RM 500, and play with peace of mind knowing your personal data is in safe hands.