Privacy Policy Rega33 –
Malaysia Player Data Protection

This Privacy Policy ("Policy") is published by rega33 ("we", "Platform") and applies to all users who access or register on the rega33 online casino platform via rega33.pro and our official mobile app. This Policy outlines our privacy practices in a comprehensive and transparent manner.

Rega33 acts as the data controller for all personal information collected through our platform. This means we are fully responsible for ensuring your data is processed in accordance with applicable laws and regulations, in particular Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account or using any rega33 service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use our platform. Any enquiries may be directed to our support team at any time.

Rega33 only collects data that is strictly necessary to provide you with a safe, fair and high-quality service. The following are the categories of data we collect and the reasons for doing so:

We also collect information you voluntarily provide when contacting our support team, completing feedback forms, or participating in promotional programmes. All data collection is conducted transparently and you are always informed of the reason your data is required.

The personal data we collect is used solely for legitimate and transparent purposes. We never use your data for purposes unrelated to delivering rega33 platform services. The following are the primary purposes for which your data is used:

• Identity Verification & KYC: To verify your identity in compliance with anti-money laundering (AML) legal requirements and to prevent identity fraud.
• Transaction Processing: To process deposits, withdrawals, and any financial transactions you make on the rega33 platform securely and accurately.
• Service Provision: To manage your account, enabling you to access games and enjoy all features of the rega33 platform.
• Account Communications: To send you important account-related notifications such as transaction confirmations, security alerts, and service updates.
• Customer Support: To help you resolve any issues, queries, or complaints related to your use of the platform.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, platform abuse, and any security threats.
• Responsible Gaming: To monitor gaming patterns and identify players who may need support related to responsible gaming.
• Legal Compliance: To fulfil the legal and regulatory obligations imposed on rega33 by the relevant authorities.
• Platform Improvements: To analyse aggregate usage patterns in order to improve the user experience and platform features.
• Marketing (with consent): To send you promotional information and exclusive offers where you have given consent to receive marketing communications.

Rega33 processes your data on lawful legal bases including contract performance, legal obligations, the platform's legitimate interests, and your consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before that withdrawal.

Rega33 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are specific situations where we need to share your data with certain trusted parties for platform operational purposes:

• Payment Service Providers: Financial institutions, banks, and digital wallet providers that process your transactions require relevant information to complete payments securely.
• Game Software Providers: Game development companies that supply game content to rega33 receive only the minimum technical data required for game functionality.
• KYC Service Providers: A third-party identity verification platform that helps us securely and efficiently verify your identity documents.
• Cloud Service Providers: The server infrastructure and data storage used by rega33 to operate the platform securely and reliably.
• Authorities & Law Enforcement: When required by law, court order, or a valid request from law enforcement authorities.

All third parties who receive your data are bound by strict data protection agreements and are only permitted to use that data for the specific purposes defined in those agreements. rega33 continuously monitors third-party compliance.

Rega33 implements the highest technical and organisational security standards to protect your personal data from unauthorised access, loss, destruction or accidental disclosure. The following are the layers of protection we employ:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and rega33's servers is protected by military-grade encryption, the same standard used by the world's leading financial institutions.
• Stored Data Encryption: Sensitive data stored in our databases, particularly financial information and identity documents, is encrypted using AES-256 algorithms.
• Strict Access Control: Only authorised rega33 staff with a legitimate business need may access user data, and all access is logged and regularly audited.
• Two-Factor Authentication (2FA): rega33's internal systems use multi-factor authentication to protect access to user data from both internal and external threats.
• Regular Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity firms.
• 24/7 Monitoring: Our threat monitoring system operates around the clock to detect and respond to any suspicious activity in real time.

Data Retention Period: rega33 retains your personal data for as long as necessary for the purposes stated in this policy. After account closure, core account data is kept for 5 years to meet anti-money laundering and financial record-keeping requirements. Data that is no longer needed will be securely deleted.

The rega33 platform uses cookies and similar tracking technologies to enhance your browsing experience, ensure account security and understand how users interact with our platform. The following are the types of cookies we use:

You can control and manage cookie settings through your browser preferences. However, please note that disabling essential cookies may affect platform functionality and your gaming experience. Analytics and functional cookies can be disabled without impacting core platform functions.

As a rega33 player, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). We fully respect and uphold these rights:

To exercise any of the above rights, please contact our data protection team via Live Chat or support email. We will respond within the timeframe required by law. No fee is charged for reasonable requests; however, rega33 reserves the right to charge a nominal fee for repetitive or unreasonable requests.

The rega33 platform is intended for adult users aged 18 and above only. rega33 does not knowingly collect or process personal data of individuals under the age of 18. Should we discover that we have inadvertently collected personal data of an underage individual, we will take immediate action to delete that data and close the relevant account.

Parents and guardians who believe their child may have registered on the rega33 platform without consent are urged to contact our support team immediately. We will handle the matter with the highest priority and full sensitivity.

As an online platform operating globally, your personal data may be processed or stored on servers located outside Malaysia. rega33 ensures that any cross-border data transfer is carried out with adequate safeguards equivalent to Malaysia's PDPA standards.

The steps we take include:

• Ensuring all overseas data recipients are subject to equivalent or stricter data protection laws.
• Implementing standard contractual clauses that bind data recipients to protect your information in accordance with our standards.
• Conducting data protection impact assessments before initiating any new data transfers outside Malaysia.

Rega33 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or technological developments. Any material amendments will be communicated to you via:

• In-platform notifications when you log in after the amendment takes effect.
• Notification emails are sent to your registered email address.
• A clear notice on the rega33 website homepage for a minimum period of 30 days.

Continued use of the rega33 platform after such amendments take effect will be considered as your acceptance of the revised policy. The effective date of each version of this Privacy Policy will be clearly stated at the top of the document.

Rega33 has appointed a Data Protection Officer (DPO) responsible for ensuring full compliance with the PDPA and this Privacy Policy. If you have any questions, concerns, or wish to exercise your privacy rights, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the rega33 platform — the fastest way to get a response.
• DPO Email: [email protected] — for specific enquiries related to privacy and data protection.
• FAQ: Visit the page FAQ us for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or data deletion, the maximum processing period is 21 business days, in line with Malaysia's PDPA requirements.