🔒 Your Personal Data Protection

Privacy Policy visa33 — Our Commitment to Protecting the Personal Data of Malaysian Members

Your privacy is visa33's top priority. This document clearly explains how we collect, use, store and protect your personal information when you register and use the visa33 platform. We are committed to keeping your data safe and ensuring it is never misused.

🗄️ Data Collection 🔐 Information Security 📤 Data Disclosure ✅ Your Rights 🍪 Cookies & Tracking
Updated: January 2026 Version 2.4 — Effective immediately
Data Protection Summary
Key things you need to know
Encryption: 256-bit SSL every transaction
Data not sold to third parties
Right of access, rectification & data deletion
Compliance Malaysia PDPA
Security monitoring 24/7
Two-factor authentication (2FA) available
Contact us: support@visa33.asia

By registering or using the visa33 platform, you agree to the collection and use of data as described in this Privacy Policy.

Visa33's Six Data Protection Principles

How we keep your personal information safe at all times

Minimal & Purpose-Driven Data Collection
visa33 only collects personal information that is strictly necessary to provide our services — nothing more. Every piece of data collected has a clear, stated purpose as outlined in this Privacy Policy. We do not collect data simply to accumulate it or sell it to advertisers.
Secure Data Storage
All visa33 member personal data is stored on servers protected with AES-256 encryption and multi-layered firewalls. Access to personal data is strictly limited to staff who require it to perform their duties, and every access is logged for audit purposes.
No Sale of Data to Third Parties
visa33 has never and will never sell, rent or transfer members' personal data to any third party for marketing or any other purpose without your explicit consent. Your data belongs to you — we use it solely to provide and improve visa33's services for you.
Full Data Control Rights
You have the right to access, amend, transfer, or request the deletion of your personal data held by visa33 at any time. Data requests may be submitted to our support team and will be processed within a reasonable timeframe in accordance with applicable legal requirements.
Data Protection Act Compliance
The visa33 Privacy Policy has been developed with reference to Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. We continually update this Policy to ensure it remains in line with changes to applicable laws and regulations.
Data Breach Notification
In the event of any security breach involving your personal data, visa33 is committed to notifying affected members within the timeframe required by law. We have a comprehensive incident response procedure in place to ensure that the impact of any breach is contained swiftly and effectively.
1

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes the practices of visa33, the platform operator at visa33.asia ("we", "visa33"). This Policy applies to all users and registered members of the visa33 platform without exception.

By registering an account, accessing or using any part of the visa33 platform — including but not limited to Sports Betting, Live Casino, table games and all related services — you acknowledge that you have read, understood and agreed to this Privacy Policy. If you do not agree with any aspect of this Policy, please discontinue use of the platform and contact us to discuss the options available to you.

Our Commitment: visa33 believes privacy is more than a legal obligation — it is a fundamental right of every digital user. We take our responsibility as custodians of your data seriously and are committed to handling it with the highest standards of integrity and transparency.

This Privacy Policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable privacy laws. We will update this policy from time to time and will notify you of any material changes via registered email or a prominent notice on the platform.

2

Types of Personal Data We Collect

Visa33 collects several categories of personal information when you interact with our platform. Below is a full breakdown of the data we may collect:

Data Category Sample Information Purpose of Collection
Identity Data Full name, MyKad number, date of birth, gender KYC verification, legal compliance
Contact Information Email address, Malaysian phone number, residential address Account communications, OTP verification
Financial Data Deposit & withdrawal history, payment methods (Touch 'n Go, GrabPay, DuitNow, etc.) Payment processing, fraud prevention
Activity Data Betting history, games played, session duration Account management, responsible gaming
Technical Data IP address, device type, web browser, operating system Security, fraud detection, and optimisation
Usage Data Pages visited, features used, interaction timestamps Platform improvement, internal analytics
visa33 never collect passwords in plain text, full credit card information (we do not store card numbers), or sensitive information such as medical records. All passwords are encrypted using a one-way hashing algorithm that cannot be reversed by anyone, including the visa33 technical team.

Your data may also be collected indirectly through cookies and tracking technologies described in Section 6 of this document, as well as through legitimate third-party sources such as identity verification providers used in the KYC process.

3

How We Use Your Personal Data

Every use of personal data by visa33 rests on a valid legal basis — whether that is your consent, contractual necessity, a legal obligation, or a legitimate interest that does not override your rights. The following are the primary purposes for which your data is used:

  • Account Management: To register, verify and manage your member account at visa33, including the processing of deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX
  • Service Provision: To enable you to access and use all visa33 services, including Sports Betting, Live Casino, Table Games and slots
  • Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and platform abuse
  • Legal Compliance: To fulfil legal obligations relating to KYC, AML (Anti-Money Laundering), and other applicable reporting requirements
  • Service Communications: To send important information regarding your account, transactions, policy changes, and security updates
  • Responsible Gambling: To monitor gameplay patterns and identify members who may need support with gambling control
  • Platform Improvements: To analyse usage patterns and improve the user experience at visa33
  • Marketing Communications: To send you information about relevant promotions and bonuses — only with your consent, and you may unsubscribe at any time
You have the right to object to the use of your data for direct marketing purposes at any time, without providing any reason. To withdraw your marketing consent, contact the visa33 support team or update your communication preferences in your account panel.
4

Third-Party Data Sharing & Disclosure

Visa33 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share data with certain parties in order to provide our services to you:

  • Payment Service Providers: Required transaction information is shared with e-wallet and banking providers (Touch 'n Go, GrabPay, DuitNow, FPX, and others) to process your deposits and withdrawals
  • Identity Verification Provider: Required KYC data is shared with third-party identity verification service providers engaged to ensure regulatory compliance
  • Game Providers: Minimal technical data required to ensure games from providers such as Evolution Gaming and Pragmatic Play function correctly within the visa33 platform
  • Statutory Authorities: Data required by law will be shared with the relevant authorities — for example, in criminal investigations or pursuant to a valid court order
  • Analytics Services: Anonymised usage data (containing no personally identifiable information) may be shared with analytics providers for platform improvement purposes
All third parties that receive personal data from visa33 are required to comply with strict data protection standards and to use that data solely for the purposes specified in their data processing agreements with visa33. We are not responsible for the privacy practices of third parties that are outside our control.

In the event that visa33 undergoes a corporate restructuring, merger, or acquisition, members' personal data may be transferred to the receiving entity as part of the business assets. We will notify members of any such change in ownership and inform them of their rights in that situation.

5

Data Security Measures at visa33

Protecting your personal data is a responsibility we take seriously. visa33 implements multiple layers of technical and organisational security measures to safeguard your information against unauthorised access, loss, destruction, or accidental disclosure:

  • Transmission Encryption: All communications between your browser and visa33's servers are protected by 256-bit TLS/SSL encryption — the padlock icon in your browser confirms this secure connection
  • Storage Encryption: Sensitive personal data is stored in databases encrypted with AES-256 — the same standard used by financial institutions and national security agencies
  • Strict Access Controls: Only staff who require access to your personal data to carry out their authorised duties are permitted to do so — and every access is logged for audit purposes
  • Two-Factor Authentication (2FA): Two-factor authentication is available for all member accounts, adding an extra layer of protection against unauthorised access
  • 24/7 Security Monitoring: Our automated monitoring system continuously watches for suspicious activity and will alert the security team whenever an unusual pattern is detected
  • Regular Penetration Testing: visa33 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited
Shared Responsibility: While visa33 takes all reasonable steps to protect your data, account security also depends on your own actions. Use a strong and unique password, enable 2FA, never share your login details, and log out when using a shared device.
6

Cookies, Analytics & Tracking Technologies

Visa33 uses cookies and similar tracking technologies to enhance your user experience, maintain account security, and understand how our platform is used. The types of cookies we use are as follows:

  • Essential Cookies (Required): Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality
  • Preference Cookies: Storing your preferences such as language, display settings and game preferences to enhance your browsing experience
  • Analytics Cookies: Helps us understand how users interact with the platform for improvement purposes — this data is anonymised and aggregated, not linked to your personal identity
  • Security Cookies: Used to detect fraudulent activity, verify user identity and protect accounts from unauthorised access
You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect your ability to fully access and use visa33's services. We recommend accepting at least essential and security cookies for the best experience.

In addition to cookies, visa33 uses technologies such as web beacons and tracking pixels in email communications to verify whether emails have been opened and links have been clicked. This helps us ensure members receive relevant communications and allows us to improve our messaging content over time.

7

Data Retention Period

Visa33 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Our general principles are as follows:

  • Active Account Data: Retained for as long as your account remains active and for a set period following account closure
  • Financial & Transaction Records: Retained for a minimum of 7 years from the transaction date to comply with tax legislation and financial audit requirements
  • KYC Records: Retained for the period required under applicable anti-money laundering laws — typically no less than 5 years
  • Security Logs: Retained for 12 to 24 months for security investigation and fraud detection purposes
  • Marketing Data: Retained until you withdraw consent for marketing communications

When data is no longer needed and there is no legal requirement to retain it, visa33 will securely delete or anonymise it. You may request details on the specific retention periods applicable to your account by contacting our support team.

Following account closure, visa33 will retain the minimum records necessary to fulfil its legal obligations. Information no longer required for this purpose will be deleted within a reasonable timeframe. You may request a detailed statement of the data we hold about you at any time.
8

Your Personal Data Rights

As a data subject, you have a range of rights protected under Malaysia's PDPA and applicable privacy laws. visa33 respects and facilitates the exercise of these rights:

Right to Access
You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 30 business days.
Right to Rectification
If any data we hold about you is inaccurate or out of date, you have the right to request its correction without delay.
Right to Erasure
In certain circumstances, you have the right to request the deletion of your personal data — subject to any applicable legal retention obligations.
Right to Object
You have the right to object to the processing of your data for specific purposes such as direct marketing, at any time and without needing to provide a reason.
Data Portability
You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
Right to Restrict Processing
In certain circumstances, you may request that we restrict the processing of your data while a matter or request is being resolved.

To exercise any of the rights listed above, please contact the visa33 support team by email at support@visa33.asia with the subject line "Personal Data Rights Request", specifying the right you wish to exercise along with the details required to verify your identity. We will acknowledge receipt of your request within 3 business days and aim to resolve it within 30 days.

9

Children's Privacy

The visa33 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process the personal data of anyone under the age of 18.

Should we discover that we have inadvertently collected personal data from anyone under the age of 18, we will take immediate steps to delete that data and close the account in question. If you are aware that a minor has registered on the visa33 platform, please notify us at support@visa33.asia.

Parents and guardians concerned about minors in their care accessing online casino platforms are encouraged to use parental control software and to have open conversations with their children about the risks of gambling. visa33 fully supports efforts to protect young people from exposure to gambling in any form.

10

Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal data, please do not hesitate to get in touch. We take every privacy inquiry seriously and are committed to providing a thorough and satisfactory response.

  • Privacy Email: support@visa33.asia (use the subject line "Privacy Enquiry")
  • Live Chat: Available 24/7 within the visa33 platform
  • Response Time: Privacy-related enquiries will receive a response within 3 business days
We encourage you to review this Privacy Policy periodically — especially when we send notifications about changes. The "Updated" date at the top of this page indicates when the latest revision was made. Continued use of the platform after a policy change takes effect will be considered acceptance of those changes.

If you are not satisfied with how we have handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection under the Malaysian Ministry of Communications and Digital, or the relevant regulatory body. Information on how to contact these bodies is available through the official Malaysian government website.

🎁 Your Data Is Safe with visa33 — Register & Claim Your RM 588 Bonus

Now you know how visa33 protects your privacy. Register a free account with confidence and claim your Welcome Bonus of up to RM 588 to start the best online casino experience in Malaysia!

Understanding visa33's Privacy Policy — Why It Matters to You as a Malaysian Player

In today's digital age, personal data is a valuable asset. Every time you register on an online platform — whether a social media platform, an e-commerce app, or an online casino — you are entrusting them with your personal information. The question is always: can they be trusted with your data? At visa33, we understand the weight of that trust and do not take lightly our responsibility to protect every piece of information you share with us.

As an online casino platform involving financial transactions — deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX and other Malaysian payment methods — trust is the foundation of our relationship with every member. You deserve to know exactly what happens to your phone number, email address and financial information when you register at visa33. The short answer: your information is stored securely, used only for purposes you have agreed to, and never sold or shared without your consent with any unrelated third party.

Malaysia's PDPA and How visa33 Complies

Malaysia's Personal Data Protection Act 2010 (PDPA) is the primary legislation governing how organisations handle the personal data of Malaysian citizens and permanent residents. The Act establishes seven core principles — the General Principle, Purpose Principle, Use Principle, Disclosure Principle, Security Principle, Retention Principle and Data Integrity Principle. The visa33 Privacy Policy has been developed with all seven principles in mind to ensure full compliance with Malaysian legal requirements.

PDPA compliance is not simply a box to tick — it requires a cultural shift in how an organisation views and handles data. At visa33, we conduct regular data protection training for all staff with access to members' personal data, carry out Data Protection Impact Assessments (DPIAs) for new projects involving sensitive data, and maintain comprehensive records of processing activities for accountability purposes. This is not just best practice — it is an operational commitment we uphold every day in running the visa33 platform.

Your Data Protection While Playing at visa33

When you play at visa33 — whether betting on Malaysia Super League or EPL football, playing Baccarat in Live Casino, spinning Roulette, or trying your hand at Blackjack in Table Games — our systems record your gaming activity. These records serve several legitimate purposes: to verify bet outcomes, to accurately process wins and losses, to detect patterns that may indicate problem gambling, and to meet regulatory reporting requirements related to betting activity.

One aspect of data protection that players often overlook is the security of their own devices. While visa33 protects your data server-side with 256-bit SSL encryption and advanced security measures, the security of your account also depends on the steps you take yourself. Make sure you use a strong, unique password for your visa33 account that differs from your other passwords, enable two-factor authentication (2FA) available in your account panel, never log in to your visa33 account over unsecured public WiFi, and always log out fully after each session — especially when using a device shared with others.

Your privacy is more than a technical matter — it is about trust and feeling secure in every interaction you have with visa33. We hope this Privacy Policy gives you the confidence that visa33 is a platform you can rely on, not only for an enjoyable gaming experience, but also for the responsible and transparent handling of your personal information. If you have questions not addressed in this document, the visa33 support team is available around the clock to help you get the answers you need. Happy playing, and thank you for trusting visa33.

This Privacy Policy Should Be Read Together with the visa33 Terms & Conditions

This Privacy Policy forms part of the overall agreement between you and visa33. For a full understanding of your rights and responsibilities, please also read the Terms & Conditions and page Responsible Gambling us. Any enquiries may be directed to our support team at support@visa33.asia.

PDPA Compliant
256-bit SSL
Data Never Sold
24/7 Support
Guaranteed Data Rights
Responsible Gaming

FAQ — visa33 Privacy Policy

The most frequently asked questions from Malaysian members regarding data protection at visa33

No. visa33 has never sold, rented or transferred members' personal data to advertisers or any third party for their own marketing purposes. Your information is only shared with parties directly involved in delivering services to you — such as payment providers (Touch 'n Go, GrabPay, DuitNow, FPX) required to process your transactions, or statutory authorities where required by law. Any such data sharing has a valid legal basis and is limited strictly to the information necessary for that specific purpose.

To request access to your personal data or apply for data deletion, send an email to support@visa33.asia with the subject line "Personal Data Rights Request". Clearly state the right you wish to exercise — whether access to data, correction, deletion, or any other right set out in Section 8 of this Privacy Policy. Include sufficient information to verify your identity, so that data is accessed or deleted from the correct account. We will acknowledge receipt of your request within 3 business days and aim to resolve it within 30 days. For complex requests, we may require additional time and will notify you accordingly.

When you close your visa33 account, we will retain the minimum records necessary to meet our legal obligations — primarily financial and transaction records required under Malaysian tax and anti-money laundering laws (typically at least 5 to 7 years). Data that is not required for these legal purposes will be deleted or anonymised within a reasonable time after account closure. Before closing your account, you may request specific details on what data will be retained and for how long by contacting the visa33 support team. Please note that closing your account does not erase records of your betting activity that may be required for regulatory compliance.

There are several ways to stop receiving marketing communications from visa33. The easiest is to click the "Unsubscribe" link at the bottom of any promotional email you receive from us. You can also update your communication preferences through the account settings in the visa33 platform, or contact our support team via live chat or email to request removal from the promotional mailing list. Such requests will be processed within 10 business days. Please note that even if you withdraw consent for promotional emails, we will still need to send you important account-related communications such as transaction notifications, policy updates, and security information — these are necessary service communications and not marketing.

Your Data Is Safe — Join visa33 with Complete Confidence

Now you know just how seriously visa33 takes your privacy. Register a free account today, claim your Welcome Bonus of up to RM 588, and enjoy Malaysia's premier online casino experience with complete peace of mind.

Play responsibly. Minimum age 18. Terms & conditions apply.

Bahasa Melayu