Privacy Policy ge33 – Personal Data Protection for Malaysian Members

01. Personal Data Collected by ge33

Ge33 collects the personal information necessary to manage member accounts, process financial transactions, provide customer support services, and maintain platform security. The following outlines the categories of data we collect and the purposes for which they are collected.

Data ge33 does not collect:

• Full credit or debit card numbers — card transactions are processed directly by certified payment providers.
• Biometric information such as fingerprints or facial recognition — ge33 does not use biometric technology on its platform.
• Sensitive information relating to religion, political views, or medical records — this data is irrelevant to our services and is never collected.
• Precise real-time location data (GPS) — ge33 only logs your IP address for security purposes, not your actual physical location.

02. How ge33 Uses Your Personal Data

Ge33 uses collected personal data solely for purposes related to delivering platform services and ensuring member security. We do not use your data for unrelated purposes without your consent.

ge33's primary purposes for using your data:

• Member account management — handles registration, identity verification, login, and the management of your account settings.
• Financial transaction processing — handles deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX (Maybank2u, CIMB Clicks), and processes your winnings withdrawals.
• Gaming service provision — manages your game sessions, stores your betting history, calculates your VIP Points, and administers your ge33 VIP Rewards programme.
• Service communications — sends verification OTPs, transaction notifications, account security alerts, and important updates related to platform policies.
• Customer Support — enables the ge33 support team to verify your identity and provide accurate assistance when you contact us via live chat or email.
• Security and fraud prevention — detects and prevents fraudulent activity, money laundering, multiple account registrations, and unauthorized access attempts.
• Platform enhancements — analyses usage patterns on an aggregated (non-individual) basis to improve the user experience, fix bugs, and plan new features.
• Legal compliance — fulfils the reporting and documentation obligations required under applicable law.

Marketing communications: ge33 may send information about promotions, new bonuses, and platform updates to members who have given consent to marketing communications during registration. You may withdraw this consent at any time through your account settings or by contacting the support team.

03. Data Sharing & Disclosure to Third Parties

Ge33 does not sell, rent, or trade members' personal data to any third party for their own commercial or marketing purposes. This is an absolute commitment ge33 makes to every member. However, there are limited situations where ge33 needs to share certain information to enable the platform to operate safely and properly.

Third parties that may receive limited data from ge33:

• Payment service providers — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX providers receive the transaction information necessary to process your deposits and withdrawals. These providers are bound by strict data protection agreements and are not permitted to use your data for any other purpose.
• Game software providers — companies that supply slots, Live Casino, and Sports Betting platforms to ge33 may receive game session data necessary to operate the games technically. They do not receive your personally identifiable information.
• Cloud service provider — ge33 uses server infrastructure from certified cloud providers that process and store data under strict security agreements.
• Regulatory authorities — ge33 may disclose member information to Malaysian authorities or law enforcement bodies if required by a valid court order, search warrant, or other legal obligation. ge33 will notify the relevant member should such disclosure occur, unless prohibited by law.

Ge33 ensures that all third parties who receive member data are bound by legally enforceable data protection agreements. They may only use that data for the specific agreed purposes and are not permitted to disclose it further without ge33's consent.

04. Security & Data Protection at ge33

Ge33 invests seriously in security infrastructure to ensure that members' personal and financial data is protected against unauthorised access, data breaches, and all forms of cyber threats. ge33's security approach is multi-layered and comprehensive.

Technical security measures implemented by ge33:

• Data-in-transit encryption (SSL/TLS 256-bit) — all data transmitted between your device and ge33's servers is encrypted using the latest TLS 1.3 standards, ensuring that no third party can read or alter your data in transit.
• Data-at-rest encryption — sensitive personal data stored in ge33's databases is encrypted using the AES-256 algorithm. Even if the database were accessed without authorisation, the stored data cannot be read without the correct encryption key.
• Two-factor authentication (2FA) — ge33 uses OTP via your registered Malaysian phone number to verify every new login from an unrecognised device, adding an extra layer of security to your account.
• Suspicious activity monitoring — ge33's systems continuously monitor for unusual login patterns, transactions, and gaming activity. Any anomaly will trigger an automated security review and, where necessary, a notification to the member concerned.
• Financial data segregation — member funds are held in accounts separate from ge33's operational accounts. This ensures that member funds remain available for withdrawal at all times and are not affected by any internal financial matters.
• Regular security audits — ge33 undergoes regular penetration testing and security audits conducted by independent cybersecurity experts to identify and address any vulnerabilities.
• Internal access controls — ge33 staff may only access member data on a strict need-to-know basis. Access to sensitive data is logged and monitored internally.

Data retention period: ge33 retains members' personal data for the duration of the active account and for a defined period following account closure, in accordance with legal and audit requirements. Data that is no longer needed is securely deleted using industry-recognised data disposal procedures.

05. Cookies, Server Logs & Tracking Technologies

Ge33 uses cookies and similar tracking technologies to keep essential platform functions running smoothly, remember your settings, and understand how members use the platform for continuous improvement. No cookies are used to track your activity on external websites outside of ge33.

Types of cookies used by ge33:

• Essential Cookies (Required) — required for core platform functions such as login sessions, CSRF protection, and form integrity. These cookies cannot be disabled without affecting the overall functionality of the platform.
• Preference Cookies — stores your preferences such as display language, theme, and account configuration so you do not need to reconfigure them each time you log in.
• Analytics Cookies (Aggregate) — collects anonymous usage data to help ge33 understand which parts of the platform are used most, where users encounter difficulties, and how the user journey can be improved. This data is used in aggregate form only and cannot be used to identify any individual.

Server logs: Like most online platforms, ge33's servers automatically log certain information when you access the platform, including IP address, browser type, operating system, referring URL, and access timestamp. These logs are used solely for security and technical troubleshooting purposes, and are retained for a limited period before being deleted.

06. Your Rights as a ge33 User

As a ge33 member, you have a range of rights regarding your personal data. ge33 respects and facilitates the exercise of these rights. Below are your key rights and how to use them.

To exercise any of the rights above, please contact the ge33 privacy team by email at support@ge33.world with the email subject line "Privacy Rights Request", along with your full name and registered phone number. ge33 will verify your identity before processing any data-related request to ensure the security of your information.

07. Protection of Children & Minors

Ge33 is a platform designed exclusively for adults aged 18 and above. ge33 does not intentionally collect, store, or process the personal data of individuals under the age of 18 in any form.

• All prospective members are required to confirm that they are 18 years of age or older during the registration process. Providing false information about age constitutes a breach of ge33's Terms & Conditions and may result in immediate account termination.
• Ge33 reserves the right to request proof of age (such as a MyKad) from any member at any time if there is reasonable doubt regarding age eligibility.
• If ge33 discovers, or has reasonable grounds to believe, that personal data belonging to a minor has been inadvertently collected, the account in question will be suspended immediately and all related data will be promptly deleted.
• Parents or guardians who discover that their minor child has registered a ge33 account should contact us immediately at support@ge33.world for prompt action.

08. Privacy Policy Amendments & How to Contact ge33

Ge33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. All material amendments will be communicated to registered members via email or in-platform notification at least 14 days before the changes take effect.

• The "Last Updated" date at the top of this page will always reflect the date of the most recent version of ge33's Privacy Policy.
• Continued use of the ge33 platform after the effective date of any amendment constitutes acceptance of the updated privacy terms.
• Where a proposed amendment is material and requires fresh consent, ge33 will seek active agreement from members before it takes effect.
• Previous versions of the Privacy Policy are kept in ge33's internal archive and can be requested by members who wish to compare the current version with an earlier one.

This Privacy Policy should be read together with Terms & Conditions ge33. In the event of any inconsistency between the Privacy Policy and the Terms & Conditions regarding data protection, the Privacy Policy shall prevail specifically on matters of privacy and personal data protection.

Last updated: 1 January 2026. This version supersedes all previous versions of the ge33 Privacy Policy.