Personal Data Protection

Reef33 Privacy Policy – Member Personal Data Protection

At reef33, your privacy is our priority. This Privacy Policy clearly explains how we collect, use, store, and protect the personal information of every member using our gaming platform in Malaysia.

Last Updated: 1 January 2026
Region: Malaysia
SSL: 256-bit

The reef33 Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA). Your data will not be sold, rented, or shared with third parties without your consent, except as stated in this policy.

Privacy Commitment reef33

Six core data protection principles we uphold to ensure your personal information remains safe with us

Advanced Encryption

All data transmitted between your device and reef33's servers is protected by 256-bit SSL encryption. This means sensitive information such as payment details and account data cannot be read by unauthorized parties in transit.

No Data Sales

Reef33 has never and will never sell, rent, or trade members' personal information to any third party for commercial purposes. Your data belongs to you, not to us as a business asset.

Member Data Controls

Every reef33 member has the full right to access, correct, transfer, or request deletion of their personal data. You can manage your privacy settings directly through your reef33 account at any time.

Secure Data Storage

Member personal data is stored on servers protected by multi-layered security systems including firewalls, intrusion detection systems, and strict access controls. Only authorised personnel may access this data.

Malaysia PDPA Compliance

All data processing operations at reef33 fully comply with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). We undergo regular compliance reviews to ensure our practices remain aligned with evolving legislation.

Breach Notification

In the event of any security incident involving your personal data, reef33 is committed to notifying you within 72 hours of becoming aware of the incident, along with the response measures that have been taken.

This Privacy Policy applies to all members and visitors of the reef33 platform, including reef33.win and the reef33 mobile app. By registering or using our services, you agree to the terms of this Privacy Policy. It is updated and effective as of 1 January 2026.

Personal Information We Collect

Reef33 collects your personal information directly when you register an account, carry out transactions, or interact with our platform. We also collect certain information automatically through the technologies used within our platform.

Below are the categories of information we collect and their purposes:

Data Category Examples of Information Purpose of Collection
Identity Information Full name, date of birth, MyKad/passport number Identity verification (KYC), fraud prevention
Contact Information Email address, phone number, residential address Account communications, transaction confirmations
Financial Information Bank account number, digital wallet details Deposit and withdrawal processing
Usage Data Game history, betting records, login timestamps Service improvement, fraud detection
Technical Data IP address, device type, operating system, browser Security & platform optimization
Communication Data Support chat records, inquiry emails Issue resolution, service improvement

We do not collect sensitive data such as health information, religious beliefs, or political affiliations. All data collection is based on legitimate need and aligned with the stated purposes.

How We Use Your Information

Reef33 uses collected personal information solely for legitimate purposes directly related to providing the best service to our members. The following are the primary purposes for which data is used:

  • Account Management: To create and maintain your member account, process registration, and verify identity through the required KYC process.
  • Transaction Processing: To securely and accurately process deposits, withdrawals, and all financial transactions carried out through the reef33 platform.
  • Platform Security: To detect and prevent fraudulent activity, money laundering, multi-account abuse, and any security threats against the platform and its members.
  • Customer Support: To provide effective technical assistance and customer support when you contact our team.
  • Service Communications: To send important notifications regarding your account, transactions, security updates, and policy changes that require your attention.
  • Platform Improvement: To analyze usage patterns and continuously improve the design, performance, and functionality of the reef33 platform.
  • Legal Compliance: To meet compliance and reporting obligations required under applicable Malaysian law.
  • Marketing (with consent): To send promotional information, bonus offers, and the latest reef33 news exclusively to members who have given explicit consent to receive such communications.

Reef33 will not use your data for any purpose beyond those stated above without first obtaining your consent.

Data Sharing & Disclosure

Reef33 takes data sharing responsibilities seriously. We only share your personal information in the limited situations outlined below:

  • Payment Service Providers: Transaction details shared with banks, payment processors, and digital wallet providers to facilitate your deposits and withdrawals.
  • Game Providers: Account information required by our gaming software providers to grant access to the games offered on the platform.
  • KYC Compliance Services: Third-party identity verification service providers who assist us in validating the authenticity of members' identity documents.
  • Legal Requirements: When required by a court order, government authority, or any regulatory body with valid jurisdiction over reef33.
  • reef33 Rights Protection: Where necessary to protect the legal rights, property, or safety of reef33, its members, or the public.

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for agreed purposes. They are not allowed to disclose or use your data for any other purpose.

Reef33 never sell, rent, or trade members' personal data to advertisers, data brokers, or any third party for marketing purposes.

Security & Data Protection

The security of your personal data is something we take extremely seriously. reef33 continuously invests in the latest security infrastructure to ensure your data is always protected against unauthorized access, loss, or misuse.

Key security measures we employ include:

  • 256-bit SSL/TLS encryption for all data communications between the server and members' devices.
  • Encryption of sensitive data in databases using AES-256 standards.
  • Two-factor authentication (2FA) is available to all members for an added layer of protection.
  • 24/7 security monitoring with an always-on automated threat detection system.
  • Strict role-based access controls — only authorised personnel who require access for work purposes may view member personal data.
  • Regular security audits conducted by independent cybersecurity firms appointed by reef33.
  • Tested incident response procedures to ensure swift action in the event of any security breach.

While we take all reasonable precautions, no security system is entirely foolproof. We encourage members to also take personal protective measures such as using strong passwords, enabling 2FA, and never sharing login credentials with anyone.

Cookies & Tracking Technologies

Reef33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use three main categories of cookies:

  • Essential Cookies: Required for core platform functions such as maintaining login sessions and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Helps us understand how visitors interact with the platform, which pages are most frequently visited, and where any technical issues occur. All data is collected anonymously.
  • Functional Cookies: Allows the platform to remember your preferences, such as selected language and display settings, to deliver a more personalized experience.

You can manage cookie settings through your browser. However, disabling certain cookies may affect the functionality and your experience on the reef33 platform. For more information on managing cookies, please refer to your browser settings.

Your Rights as a Data Subject

As a reef33 member residing in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). reef33 fully respects these rights and provides straightforward mechanisms for you to exercise them.

Right of Access

You have the right to obtain a copy of the personal data we hold about you at any time through your account.

Right to Rectification

You may correct any inaccurate or outdated personal information we hold about you.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations to retain certain records.

Right to Withdraw Consent

You may withdraw consent for data processing at any time, including opting out of marketing communications.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Object

You may object to the processing of your data for direct marketing purposes or profiling unrelated to our core services.

To exercise any of the rights above, you may contact our data protection team through the platform. We will process your request within 14 business days. In some cases involving complex requests, this period may be extended with prior notice to you.

Data Retention & Deletion

Reef33 retains your personal data only for as long as necessary, in line with the original purpose of collection and applicable legal obligations. The following are our data retention guidelines:

  • Active Account Data: Retained for the duration your account is active and up to 7 years after account closure for financial compliance purposes.
  • Transaction Records: Retained for a minimum of 7 years in line with financial and tax reporting requirements under Malaysian law.
  • Security Logs: Retained for 12 months to support security incident investigations if required.
  • Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.
  • Customer Support Records: Retained for 3 years for reference and service improvement purposes.

Once the retention period expires or upon a valid request, data will be securely deleted using methods that prevent recovery. For data that cannot be fully deleted for technical reasons, it will be anonymised immediately.

Changes to This Privacy Policy

Reef33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to the services we offer.

When we make material changes to this policy, we will:

  • Updating the "Last Updated" date shown at the top of this page.
  • By displaying a clear notice on the reef33 platform homepage for at least 14 days before the changes take effect.
  • To notify registered members via email or in-app notifications about important changes.

Your continued use of the reef33 platform after any Privacy Policy changes take effect constitutes your acceptance of the latest version of this policy. We encourage you to review this page periodically to stay informed about how we protect your data.

Contact Our Data Protection Officer

If you have any questions, concerns, or wish to exercise your data rights, the reef33 Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

  • Email: [email protected] (displayed as plain text only, not a link)
  • Platform: Via the live support chat function within your reef33 account, available 24/7.
  • Response Time: We aim to respond to all privacy enquiries within 3 business days.

If you are dissatisfied with how reef33 handles your personal data or our response to your request, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia through the designated official channels.

Your privacy matters to us. Every inquiry you submit to the reef33 DPO team will be handled with full confidentiality and will not be shared with any unrelated parties.

🔐

Your Data Is Safe With reef33

With 256-bit SSL encryption, full PDPA compliance, and a strict no data-selling policy, you can play with peace of mind knowing your privacy is always protected at reef33.

Bahasa Melayu