Privacy Policy xyz33 – Your Personal Data Protection

In operating the xyz33 platform, we collect various types of personal information from our members. This information is collected only when necessary and for legitimate purposes. The types of data we collect include:

All data we collect is directly relevant to the operational needs of the platform. We do not collect excessive or irrelevant information beyond the stated purposes.

Xyz33 collects personal data through several different channels, depending on the type of information and the context of collection:

• Account Registration: When you register, we collect basic information required to create your account and verify your identity.
• KYC Process: During identity verification, you are required to submit supporting documents such as a copy of your ID and bank statement for confirmation.
• Financial Transactions: Data is collected automatically each time you make a deposit or withdrawal through the xyz33 platform.
• Platform Usage: Technical and usage data is collected automatically via cookies, server logs, and similar tracking technologies each time you access our platform.
• Communications: When you contact our support team via live chat, email, or other channels, we record the conversation for service quality and future reference purposes.
• Third-Party Sources: In certain cases, we may receive information about you from registered and trusted third-party identity verification service providers.

Xyz33 uses the personal data collected for the following purposes, all of which are directly related to the operation of the platform and the delivery of services to you:

• Account Management: Creating, verifying, and maintaining your account on the xyz33 platform.
• Transaction Processing: Processing all deposits, withdrawals, and other financial activities related to your account.
• KYC/AML Compliance: Fulfilling legal obligations related to identity verification and anti-money laundering.
• Platform Security: Detecting and preventing fraud, unauthorised access, and activities that violate the terms of use.
• Service Improvement: Analysing usage habits to improve the user experience and offer more relevant content.
• Service Communications: Sending important notifications related to your account, transactions, security, and platform changes.
• Customer Support: Providing technical assistance and resolving complaints or inquiries you submit.
• Responsible Gaming: Monitoring gambling patterns to identify signs of addiction and offer appropriate support.

Xyz33 does not sell, rent, or transfer your personal data to third parties for their own commercial or marketing purposes. However, in operating the platform, we share necessary information with the following categories of third parties, subject to strict confidentiality agreements:

• Payment Providers: Transaction information that is required to be shared with payment processors and partner banks to facilitate your deposits and withdrawals.
• KYC Service Providers: Identity data is shared with trusted third-party identity verification services solely for verification purposes.
• Game Providers: Game session information that must be shared with third-party game providers to ensure smooth gameplay.
• Legal Authority: xyz33 will disclose information when required by law, court order, or a valid request from law enforcement agencies.
• Technology Providers: Technical infrastructure providers such as cloud computing services involved in operating the platform, subject to strict data processing agreements.

All third parties we work with are required to meet data security and confidentiality standards equal to or higher than our own.

Xyz33 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, or damage:

• Data Encryption: All sensitive data is encrypted in transit using 256-bit TLS/SSL protocols and at rest using AES-256 encryption.
• Access Control: Access to member data is strictly limited to staff who require it to perform their duties, enforced through a role-based access control (RBAC) system.
• Continuous Monitoring: Threat detection and security monitoring systems operate 24/7 to identify and respond to any suspicious activity.
• Security Audit: We conduct regular penetration testing and security audits to identify and address any system vulnerabilities.
• Data Backup: Your data is regularly backed up to secure locations to ensure recovery is possible in the event of a system failure.

Xyz33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions including login sessions and security. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as language, display settings, and information that makes repeat use easier.
• Analytics Cookies: Collecting data on how you use the platform to help us improve our services. This data is processed in aggregate and anonymised form.
• Performance Cookies: Helping us understand which areas of the platform are most used in order to optimise the user experience.

You can manage your cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the xyz33 platform.

To exercise any of the rights mentioned in this policy, you may submit a request to us through the following methods:

• Live Chat: Reach the xyz33 support team directly via live chat on the platform for urgent requests.
• Support Email: Submit a written request to our support email at [email protected] and clearly state the type of request you are making.
• Account Settings: Certain rights, such as data correction and withdrawal of marketing consent, can be exercised directly through your account settings panel.

We will endeavour to process all valid requests within 30 days from the date of receipt. In complex cases, this period may be extended by up to 60 days with notice to you. We reserve the right to request identity verification before processing any request related to personal data.

The xyz33 platform is unsuitable and not permitted for individuals under the age of 18. We do not knowingly collect, process, or store any personal data from children or minors.

If we become aware that personal data of a minor has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

If you believe a minor may have registered on our platform, please contact our support team immediately so that appropriate action can be taken.

In operating the xyz33 platform, your personal data may be transferred to and processed in countries outside Malaysia. Such transfers occur when necessary for the purposes stated in this policy, including the use of international cloud computing services.

Xyz33 ensures that any cross-border data transfers are carried out with adequate safeguards through:

• Data processing agreements compliant with international standards apply to all data recipients outside Malaysia.
• Use of approved standard contractual clauses to ensure an equivalent level of protection.
• Selection of partners and service providers operating in countries with equivalent or stricter data protection laws.

Xyz33 only retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration of your active account plus 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial and taxation legal requirements.
• KYC Data: Retained for the duration of the active account plus 5 years after closure, or longer if required by applicable AML legislation.
• Technical Logs: Typically retained for 12 months for security monitoring and technical troubleshooting purposes.
• Support Communication Records: Retained for 3 years for quality management and complaint reference purposes.

When data is no longer needed, xyz33 will securely delete it using methods that ensure the data cannot be recovered.

If you have any questions, concerns, or complaints regarding how xyz33 handles your personal data, we encourage you to contact us directly first:

• Live Chat: Available 24/7 directly on the xyz33 platform for immediate assistance.
• Privacy Email: [email protected] — state "Privacy Inquiry" in your email subject line.
• Response Time: We are committed to responding to all privacy inquiries within 5 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant data protection authority in your country.

Xyz33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Any significant amendments will be communicated to you via:

• A notice prominently displayed on the xyz33 platform homepage for at least 7 days before the amendments take effect.
• Email notification to the address registered on your account.
• Push notification via the xyz33 mobile app if you have enabled that feature.

The "Updated" date at the top of this page will always reflect the date of the latest amendment. We encourage you to review this page periodically. Continued use of the platform after the amendment effective date constitutes acceptance of the updated policy.

If you disagree with any amendments to this Privacy Policy, you have the right to close your account and stop using the xyz33 platform before the amendments take effect. Any eligible balance will be processed for withdrawal in accordance with our standard procedures.