Privacy Policy

kami33 takes data protection seriously. Our practices are designed to ensure that personal data is handled transparently, lawfully, and only to the extent necessary to deliver our services to Malaysian players. By creating akami33 account or by continuing to use the Platform after this Policy has been updated, you acknowledge and accept the data practices described herein.

This Policy is to be read in conjunction with kami33's Terms & Conditions, which are incorporated by reference and form part of the complete agreement between kami33 and each Player.

The following terms carry the meanings assigned below throughout this Privacy Policy:

Term	Meaning
"Personal Data"	Any information that identifies or can be used to identify a living individual, directly or in combination with other data. This includes names, identification numbers, contact details, financial information, and device identifiers.
"Processing"	Any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
"Data Controller"	kami33, as the entity that determines the purposes and means of processing personal data submitted through the Platform.
"Data Processor"	A third party that processes personal data on behalf of kami33 under a formal data processing agreement (e.g., payment processors, KYC service providers).
"Consent"	A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.
"KYC"	Know Your Customer — the identity and address verification process conducted by kami33 prior to processing withdrawals or as otherwise required for regulatory compliance.
"Platform"	The kami33 website at kami33.cam including all games, betting markets, account management features, and support functions accessible through it.

kami33 collects personal data only to the extent necessary to provide its services, fulfil regulatory obligations, and maintain a secure and compliant platform. The categories of data we collect include the following:

3.1 Registration Data

When you create a kami33 account, we collect:

• Full legal name;
• Date of birth (for age verification — players must be 21 or above);
• Email address;
• Malaysian mobile phone number;
• Residential address (including city — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia);
• Username and encrypted password credential.

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to process withdrawals, we may request:

• Copy of Malaysian government-issued identity document (e.g., MyKad or Passport);
• Proof of residential address (e.g., utility bill or bank statement dated within 90 days);
• Proof of payment method ownership (e.g., screenshot of registered e-wallet or bank account).

3.3 Financial Transaction Data

We collect data associated with deposits and withdrawals, including:

• Payment method type (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, GrabPay, Boost, BTC/USDT);
• Transaction amounts in MYR or cryptocurrency equivalent;
• Transaction timestamps and reference numbers;
• Bank account or e-wallet identifiers used for withdrawal.

3.4 Gameplay & Behavioural Data

In the course of your use of the Platform, we automatically collect:

• Game session records, bet histories, and wagering patterns;
• Sports betting selections including Liga Super Malaysia fixtures, EPL matches, and other events;
• Bonus and promotional offer usage;
• Login timestamps, session durations, and navigation patterns.

3.5 Technical & Device Data

• IP address and approximate geolocation (country/region level);
• Device type, browser version, and operating system;
• Cookie identifiers and similar tracking technologies (see Section 10).

3.6 Communication Data

When you contact our support team via live chat, Telegram, or email, we retain records of those communications including the content of messages, timestamps, and any attachments you provide.

kami33 collects personal data through the following mechanisms:

• Directly from you — when you register an account, complete KYC verification, initiate a deposit or withdrawal, contact our support team, or participate in a promotion;
• Automatically — through cookies, web beacons, server logs, and similar technologies that record your interactions with the Platform;
• From third-party service providers — including payment processors, KYC verification platforms, and fraud detection services that share data with us in the course of facilitating your transactions;
• From publicly available sources — where reasonably necessary for identity verification or fraud prevention purposes.

kami33 processes your personal data for the following specific and legitimate purposes:

Purpose	Details
Account Management	Creating, maintaining, and administering your kami33 account; authentication of login sessions; account security monitoring.
Service Delivery	Processing deposits and withdrawals; crediting winnings; managing bonus allocations; enabling access to games and betting markets.
Identity Verification	Conducting KYC checks to verify your identity, age (21+ requirement), and address in accordance with our regulatory obligations.
Fraud & AML Prevention	Detecting and preventing fraudulent activity, money laundering, duplicate account creation, and other prohibited conduct under our Terms.
Legal Compliance	Fulfilling our legal and regulatory obligations, including record-keeping requirements and responding to lawful authority requests.
Customer Support	Handling and resolving enquiries, disputes, and complaints submitted through live chat, Telegram, or email support channels.
Platform Improvement	Analysing aggregated usage data to improve Platform performance, game selection, and user experience for Malaysian players.
Marketing	Sending promotional communications (with your consent) regarding bonuses, new game launches, and kami33 offers relevant to your profile. You may opt out at any time.
Responsible Gambling	Monitoring gameplay patterns to identify potential problem gambling behaviour and to administer voluntary self-exclusion or deposit limit requests.

kami33 processes your personal data one or more of the following legal grounds:

• Contractual necessity — processing is required to perform the contract between you and kami33 (i.e., our Terms & Conditions), including account management, payment processing, and service delivery;
• Legal obligation — processing is necessary to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and record-keeping obligations;
• Legitimate interests — processing is in kami33's legitimate interests (and does not unduly override your interests), including fraud prevention, platform security, and business analytics;
• Consent — where processing is based on consent (such as marketing communications), you retain the right to withdraw that consent at any time without affecting prior lawful processing.

kami33 does not sell, rent, or trade your personal data to third parties. We disclose personal data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment processors (for MYR banking and cryptocurrency transactions), KYC and identity verification platforms, customer support software providers, fraud detection services, and cloud infrastructure providers. All processors are required to handle data onlykami33's instructions and with appropriate security measures in place.

7.2 Regulatory & Law Enforcement Authorities

kami33 may disclose personal data to competent regulatory, law enforcement, or governmental authorities where required to do so by applicable law, court order, or in response to a lawful authority request. We will notify you of such disclosure where we are legally permitted to do so.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of kami33's assets, personal data held by kami33 may be transferred to the relevant successor entity as part of that transaction. Affected Players will be notified in advance of any such transfer where practicable.

kami33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention practices are as follows:

• Account data — retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations;
• KYC documents — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Financial transaction records — retained for a minimum of five (5) years in compliance with financial record-keeping requirements;
• Support communications — retained for up to three (3) years from the date of the communication for dispute resolution and quality assurance purposes;
• Marketing consent records — retained for as long as necessary to evidence your consent and, following withdrawal, for a further period sufficient to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised and aggregated data that can no longer identify any individual may be retained indefinitely for analytical purposes.

kami33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security practices include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest using industry-standard algorithms;
• Multi-factor authentication for sensitive account operations;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Continuous automated monitoring and intrusion detection across Platform infrastructure;
• Regular penetration testing and security audits conducted by qualified third-party security professionals.

Notwithstanding the foregoing, no digital security system is completely impenetrable. In the event of a data breach that is likely to result in significant risk to affected individuals, kami33 will notify affected Players as soon as reasonably practicable in accordance with applicable notification obligations.

kami33 uses cookies and similar tracking technologies (collectively "Cookies") to operate the Platform, enhance your user experience, and collect analytical information about Platform usage.

10.1 Types of Cookies Used

Cookie Type	Purpose
Strictly Necessary	Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing Platform functionality.
Functional	Used to remember your preferences, language settings, and account customisations. Enhance your experience without being essential to basic functionality.
Analytical	Used to collect aggregated statistical data about how Players navigate the Platform (e.g., page visits, session lengths). Helps us identify performance issues and improve user experience.
Security	Used to detect and prevent fraudulent activity, bot access, and suspicious login patterns.

10.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may impair the functionality of the Platform or prevent you from accessing some features. Strictly Necessary cookies cannot be disabled as they are essential to secure Platform operation.

Subject to applicable law and any overiding legal obligationskami33 may have (such as AML record-keeping requirements), you hold the following rights in respect of your personal data processed by kami33:

• Right of Access — you have the right to request a copy of the personal data kami33 holds about you;
• Right to Rectification — you may request correction of inaccurate or incomplete personal data;
• Right to Erasure — you may request deletion of your personal data where we no longer have a lawful basis to retain it, subject to legal record-keeping obligations;
• Right to Restriction — you may request that we restrict our processing of your data in certain circumstances (e.g., while an accuracy dispute is being resolved);
• Right to Data Portability — where processing is based on consent or contractual necessity and carried out automatically, you may request your data in a structured, commonly used, machine-readable format;
• Right to Object — you may object to processing based on our legitimate interests, including the use of your data for direct marketing purposes;
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, please submit a written request to our support team at [email protected]. We will acknowledge your request within 10 business days and provide a substantive response within 30 calendar days. We may request proof of identity before processing your request.

The kami33 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process personal data belonging to persons under the age of 21. If we become aware that personal data has been submitted by or on behalf of an individual under 21, we will take immediate steps to delete that data and permanently close the associated account.

The Platform may integrate with or reference third-party payment services (such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian bank services including Maybank, CIMB, Public Bank, and Hong Leong). These third-party providers operate under their own privacy policies and data practices, which are independent of and not governed by this Privacy Policy.kami33 is not responsible for the data practices of any third-party service provider.

We encourage you to review the privacy policies of all third-party payment providers and services you use in connection with yourkami33 account.

kami33 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, we will notify registered Players by posting a prominent notice on the Platform or by email to your registered address at least 14 days before the changes take effect.

The "Last Reviewed" date at the top of this document will be updated to reflect the most recent revision. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data rights, please contact the kami33 Data & Privacy team through the following channels. Our support team is available daily from 9:00 AM to 2:00 AM Malaysian Standard Time (MST).

All formal data rights requests must be submitted in writing.kami33 will verify your identity before processing any request involving access to or deletion of personal data. We aim to respond to all substantive data rights requests within 30 calendar days of receipt of a complete and verified request.