etiqa33 Privacy Policy
Your Data, Our Responsibility

1. Introduction & Scope

This Privacy Policy ("Policy") governs how etiqa33 ("we", "us", "our") collects, processes, stores, and protects personal data belonging to users ("you", "the Player") who access or use the etiqa33 online betting and casino platform available at https://etiqa33.lat and any associated mobile applications or services (collectively, the "Platform").

This Policy applies to all registered members, guest visitors, and any individual whose personal data is processed in connection with the use of our Platform, including players based in Malaysia and other permitted jurisdictions. By registering an account, accessing the Platform, or providing any personal information, you acknowledge that you have read, understood, and consent to the data practices described herein.

2. Information We Collect

We collect personal data in the following categories, depending on how you interact with the Platform:

2.1 Information You Provide Directly

• Registration Data: Full name, date of birth, Malaysian IC number or passport number, nationality, residential address, email address, and mobile phone number.
• Identity Verification Documents: Copies of government-issued identification (MyKad, passport) and proof of address submitted during the Know Your Customer (KYC) verification process.
• Payment Information: Bank account details, e-wallet identifiers (such as Touch n Go eWallet or Boost), and transaction references necessary to process deposits and withdrawals. We do not store full card numbers on our servers.
• Communications: Records of correspondence when you contact our customer support team via live chat, email, or any other channel.
• Preferences & Settings: Responsible gaming limits, notification preferences, and any self-exclusion requests you submit through your account.

2.2 Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage Data: Pages visited, games played, betting history, session duration, click paths, and features accessed on the Platform.
• Location Data: General geographic location derived from your IP address for regulatory compliance purposes. We do not collect precise GPS coordinates unless you explicitly grant permission.
• Cookies & Tracking Technologies: As detailed in Section 5 below.

2.3 Information from Third Parties

• Identity verification and fraud-screening services that we engage for KYC compliance.
• Payment processors and financial institutions such as Maybank, CIMB, and Public Bank, to confirm transaction status.
• Publicly available sources and regulatory databases used to screen against sanction lists and politically exposed persons (PEP) lists.

3. How We Use Your Information

etiqa33 processes your personal data for the following purposes and on the following legal bases:

• Account Management: To create, verify, and maintain your player account, including age verification to ensure compliance with the 21+ age requirement.
• Service Delivery: To process your bets, deposits, withdrawals, and any other transactions you initiate on the Platform.
• Identity & Fraud Verification: To comply with our KYC obligations, prevent money laundering, detect fraudulent activity, and verify that you meet eligibility requirements.
• Regulatory Compliance: To meet our obligations under applicable international gaming regulations, anti-money laundering (AML) laws, and any requirements imposed by our licensing authority.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance in English, Bahasa Melayu, or 中文 as requested.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, troubleshoot issues, and enhance the performance and security of our Platform.
• Responsible Gaming: To monitor your gaming behaviour, enforce deposit and session limits you have set, apply self-exclusion measures, and identify potential signs of problem gambling.
• Marketing Communications: To send you promotional offers, welcome bonus updates, and personalised recommendations — but only where you have given explicit consent or where we have a legitimate interest and you have not opted out.
• Legal Proceedings: To establish, exercise, or defend legal claims, and to comply with court orders or lawful requests from regulatory authorities.

4. Disclosure to Third Parties

etiqa33 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

• Payment Service Providers: Banks and e-wallet operators (including Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, and Visa/Mastercard processing partners) require certain personal and payment data to process your transactions securely.
• Identity Verification Providers: Third-party KYC and AML screening services engaged to verify your identity and comply with regulatory obligations. These providers are contractually bound to process your data solely for these purposes.
• Technology & Infrastructure Partners: Cloud hosting providers, content delivery networks, and cybersecurity vendors that support the operation of our Platform. All such partners are subject to strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or a legitimate request from a government body or regulator, we may disclose information necessary to comply with our legal obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to the same level of protection described in this Policy.
• Group Companies: Where etiqa33 operates within a group structure, data may be shared with affiliated entities solely for internal administrative, compliance, and service-delivery purposes.

Any third party that receives personal data from etiqa33 is contractually required to implement appropriate technical and organisational security measures and to use the data only for the specific, agreed purpose.

5. Cookies & Tracking Technologies

etiqa33 uses cookies and similar technologies — including web beacons and local storage — to operate the Platform efficiently and deliver a personalised experience. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable secure login sessions, maintain your account state across page loads, and support fraud detection. They cannot be disabled without breaking core functionality.
• Performance & Analytics Cookies: Collect anonymised data about how players navigate the Platform — pages visited, errors encountered, and session length — so we can identify areas for improvement.
• Functionality Cookies: Remember your preferences such as language selection, preferred sports markets, and responsible gaming settings, so you don't need to re-enter them each visit.
• Marketing Cookies: Used only where you have consented, to measure the effectiveness of our own promotional campaigns on the Platform. We do not permit third-party advertising networks to place tracking cookies on etiqa33.

You can manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair the functionality of your account. For details on managing cookies in common browsers, refer to your browser's help documentation.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, to satisfy AML and gaming regulatory requirements.
• Transaction Records: Retained for a minimum of seven (7) years in accordance with financial record-keeping obligations applicable to gaming operators.
• KYC & Identity Documents: Retained for five (5) years following the end of the business relationship, as required under applicable AML regulations.
• Customer Support Records: Retained for three (3) years from the date of your last interaction with our support team, unless a longer period is required to resolve an ongoing dispute.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

7. Security Measures

etiqa33 takes the security of your personal data seriously and has implemented a range of technical and organisational safeguards proportionate to the risks involved, including:

• 256-bit SSL/TLS encryption for all data in transit between your browser or app and our servers.
• Encryption of sensitive data at rest, including payment information and identity documents.
• Two-factor authentication (2FA) options available to all registered players.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity firms.
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
• Comprehensive staff training on data protection and information security best practices.
• An incident response plan to detect, contain, and notify affected individuals of any data breach within the timeframes required by applicable regulations.

8. Your Privacy Rights

Depending on your jurisdiction and the applicable data protection laws, you may have the following rights in relation to your personal data held by etiqa33:

• Right of Access: Request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to Restriction: Request that we limit the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format to transfer to another service provider, where technically feasible.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team using the contact details in Section 11. We will respond to all verified requests within thirty (30) days, and within fourteen (14) days for straightforward requests. We may need to verify your identity before processing your request.

9. Minors & Age Verification

The etiqa33 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. As part of our registration and KYC process, all players are required to provide valid proof of age before an account is activated and before any real-money transactions are permitted.

If we become aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that information and close the associated account. If you believe a minor has created an account on our Platform, please contact us immediately at the email address in Section 11 so we can investigate and act without delay.

Parents and guardians in Malaysia are encouraged to use parental control software to restrict access to online gambling platforms for minors in their household. We support all responsible gaming initiatives aimed at protecting young people from the harms associated with gambling.

10. Changes to This Policy

etiqa33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for any other operational reason. When we make material changes, we will:

• Post the updated Policy on this page with a revised "Last Updated" date.
• Display a prominent notice on the Platform or send a notification to your registered email address, giving you at least fourteen (14) days' advance notice before the changes take effect.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the Platform and may request account closure in accordance with our standard procedures.

We encourage you to review this Policy periodically so you remain informed about how etiqa33 handles your personal data. Previous versions of this Policy are available upon request from our Data Protection team.

11. Contact & Data Requests

If you have any questions, concerns, or requests regarding this Privacy Policy or the way etiqa33 processes your personal data, please contact our Data Protection team. We are committed to addressing all enquiries promptly and transparently.

Data Protection Contact:

• Email: [email protected]
• Subject Line: "Privacy Request – [Your Registered Name]"
• Response Time: Within 14–30 business days depending on complexity
• Languages Supported: English, Bahasa Melayu, 中文

When submitting a data access, rectification, or erasure request, please include your full registered name, account username, and a description of your request. We may ask for additional information to verify your identity before processing the request, to ensure we do not disclose data to the wrong person.