EG33 takes the privacy and security of your personal data seriously. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights available to you as a registered user.
This Privacy Policy (hereinafter referred to as "Policy") sets out the basis on which EG33 (hereinafter referred to as "EG33", "we", "us", or "our") collects, processes, stores, and shares personal data in connection with your use of the EG33 online gaming and sports betting platform, accessible at eg33.casa and any associated mobile-optimised interfaces (collectively, the "Platform").
EG33 is committed to handling personal data responsibly and in accordance with applicable data protection principles, including those reflected in internationally recognised frameworks such as the General Data Protection Regulation (GDPR) and the Personal Data Protection Act 2010 (PDPA) of Malaysia, where applicable to data subjects located in Malaysia.
This Policy applies to all individuals who access the Platform, including registered players, prospective users who browse without registration, and individuals who contact our support team. It should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are available on the Platform.
We do not sell, rent, or otherwise commercially exploit your personal data to third parties for their own independent marketing purposes. Any sharing of data, as described in Section 6 of this Policy, is limited to what is strictly necessary for the operation of the Platform and fulfilment of our legal obligations.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
EG33 collects personal data through several channels, including direct provision by the User, automated collection through use of the Platform, and from third-party verification and payment service providers. The categories of data we collect are set out below.
| Category | Data Collected | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (e.g., Malaysian MyKad or Passport number) | Provided by User; KYC verification |
| Contact Data | Email address, phone number, residential address (city, state, postcode, country) | Provided by User during registration |
| Financial Data | Payment method details (e-wallet identifiers, bank account prefixes, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records in MYR | Payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Connect) and User |
| Technical Data | IP address, device type and operating system, browser type and version, unique device identifiers, time zone, session timestamps, login history | Automatically collected via Platform systems |
| Behavioural Data | Game play history, bet sizes, win/loss records, session duration, bonus redemption history, responsible gambling tool usage | Automatically collected via Platform systems |
| Communications Data | Customer support chat transcripts, email correspondence, feedback submissions | Provided by User via support channels |
| KYC Documentation | Scanned or photographed copies of identity documents and proof of address, selfie verification images | Provided by User; processed by KYC provider |
EG33 does not knowingly collect sensitive personal data beyond what is strictly required for KYC and anti-money laundering (AML) compliance purposes. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health conditions for any purpose.
EG33 processes personal data only where a lawful basis exists for doing so. The legal bases applicable to our processing activities are as follows:
Processing of identity, contact, financial, and behavioural data is necessary for the performance of the contract between you and EG33 — specifically, to operate your Account, accept deposits, process withdrawals, provide gaming services, and administer promotions and VIP rewards.
EG33 is required under its international gaming licence and applicable AML legislation to conduct KYC verification, maintain transaction records, and report suspicious activity to relevant authorities. Processing of identity, financial, and KYC documentation data for these purposes is mandatory and cannot be withdrawn by the User without resulting in account closure.
EG33 processes technical and behavioural data on the basis of its legitimate interest in maintaining Platform security, detecting and preventing fraud, improving service quality, and conducting analytics to better understand how Malaysian players use the Platform. Where we rely on legitimate interests, we have assessed that such interests are not overridden by your fundamental rights and freedoms.
Where we send direct marketing communications by email or push notification, we do so on the basis of your prior consent. You may withdraw consent to marketing communications at any time by contacting our support team via live chat or emailing us at the address in Section 15. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
EG33 uses the personal data we collect for the following purposes:
EG33 does not sell, trade, or rent your personal data to third parties for their independent use. We may share your data with the following categories of recipient strictly as necessary for the purposes described in this Policy:
We share financial and identity data with approved payment processors — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency processing partners — to facilitate deposits and withdrawals. These providers operate under their own privacy frameworks and are subject to contractual data protection obligations with EG33.
Identity documents and verification data are processed by our contracted KYC provider to carry out identity verification checks required by our licensing obligations. Such providers are bound by strict data processing agreements and are not permitted to retain or use your data beyond the scope of verification.
The Platform and associated data are hosted on secure cloud infrastructure. Our technology partners process data as Data Processors on our behalf, acting solely on EG33's documented instructions and subject to appropriate contractual safeguards.
EG33 will disclose personal data to regulators, licensing authorities, and law enforcement agencies where required to do so by law, court order, or in furtherance of our anti-fraud and AML obligations. We will endeavour to notify you of such disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, or sale of all or substantially all of EG33's assets, your personal data may be transferred to the acquiring entity, subject to the acquiring entity assuming obligations no less protective than those set out in this Policy. You will be notified of any such transfer prior to your data being transferred and becoming subject to a materially different privacy policy.
EG33 uses cookies and similar tracking technologies on the Platform for the purposes of maintaining session state, personalising your experience, conducting internal analytics, and detecting fraud. The categories of cookies we use are as follows:
These cookies are essential for the Platform to function correctly. They enable core features including login session management, Account balance display, and security enforcement. These cookies cannot be disabled without substantially impairing the functionality of the Platform.
Functional cookies store your preferences — such as language settings, preferred game categories, and responsible gambling notification intervals — so that these settings persist across sessions without requiring re-entry.
We use analytics cookies to collect aggregated, anonymised data about how users navigate the Platform. This data is used solely for internal product improvement purposes and is not shared with third-party advertising networks.
These cookies assist in identifying unusual behaviour patterns that may indicate fraud, account takeover attempts, or the use of automated bots. They form part of our Platform security infrastructure and cannot be disabled.
You may manage cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect certain features of the Platform. EG33 does not use third-party advertising cookies or behavioural tracking for the purpose of serving targeted advertisements.
EG33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised aggregate data may be retained indefinitely for statistical purposes, as it no longer constitutes personal data.
EG33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:
While EG33 takes all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely impenetrable. In the event of a personal data breach that poses a risk to your rights and freedoms, EG33 will notify affected Users and relevant regulatory authorities in accordance with applicable legal requirements.
Subject to applicable data protection law and any overriding legal obligations on EG33 (such as AML record-keeping requirements), you have the following rights in relation to your personal data:
To exercise any of the above rights, please contact us via live chat or at the email address set out in Section 15. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. Requests that are manifestly unfounded, repetitive, or excessive may be declined or subject to a reasonable administrative fee.
EG33 operates under an international gaming licence and maintains data infrastructure in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries other than your country of residence, including countries that may not have data protection laws equivalent to those applicable in Malaysia.
Where such international transfers occur, EG33 ensures that appropriate safeguards are in place to protect your personal data, including the execution of standard contractual clauses with data processors, binding corporate rules where applicable, and contractual requirements for data security standards equivalent to those described in Section 9 of this Policy.
By registering an Account and using the EG33 Platform, you acknowledge and consent to the international transfer of your personal data as described in this Section.
The EG33 Platform is strictly intended for persons aged 21 years and above. EG33 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as a mandatory part of the KYC process, and all Accounts that cannot be verified as belonging to a person of eligible age will be suspended immediately.
If you believe that EG33 has inadvertently collected personal data from a person under 21 years of age, please contact us immediately via the channels set out in Section 15. Upon confirmation, such data will be deleted without undue delay and the account permanently closed.
Parents and guardians who are concerned about access to gambling platforms by minors are encouraged to make use of parental control software and internet filtering tools, and to visit our Responsible Gambling page for further guidance.
The EG33 Platform does not contain links to external third-party websites. Any game content delivered through the Platform may be supplied by third-party game providers operating under licence agreements with EG33. Such providers may process limited technical and transactional data as part of game delivery under data processing agreements with EG33.
EG33 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external entity, except to the extent that such entities process data as Data Processors on EG33's behalf under contract. We encourage Users to review the privacy policies of any third-party services they access independently.
EG33 reserves the right to update this Privacy Policy at any time to reflect changes in law, regulatory requirements, our business practices, or technological developments. Where changes are material, we will provide reasonable advance notice by displaying a prominent notice on the Platform or by sending an email notification to the address registered on your Account.
The effective date at the top of this Policy indicates when the current version came into force. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy. We recommend reviewing this Policy periodically to remain informed of how EG33 handles your personal data.
Previous versions of this Privacy Policy are available upon request by contacting Customer Support via live chat.
If you have any questions, concerns, or formal requests relating to this Privacy Policy or EG33's handling of your personal data, please contact our Data Protection team through the following channels:
We will acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline and the reasons for it.
If you are a Malaysian resident and believe that EG33 has breached applicable data protection requirements, you may also contact the Department of Personal Data Protection (PDPD) of Malaysia for guidance, although we encourage you to first attempt to resolve the matter directly with us.
Your Data Rights at a Glance
A plain summary of your key rights under EG33's Privacy Policy. Full details are in Section 10 above.
Request a full copy of the personal data EG33 holds about you, along with details of how and why it is being processed.
Ask us to correct any inaccurate or outdated information in your account. Many updates can be made directly through your account settings.
Request deletion of your data where it is no longer necessary — subject to mandatory AML and KYC retention requirements that cannot be waived.
Obtain your data in a structured, machine-readable format where processing is based on your consent or contractual necessity.
Object to data processing based on legitimate interests. You also have an unconditional right to opt out of all direct marketing communications.
Request a temporary pause on processing of your data — for example, while an accuracy dispute is under review — without requiring full deletion.
Our Security Commitments
Security is not a checkbox for EG33 — it is a foundational commitment built into every layer of the Platform.
All data transmitted between your device and the EG33 Platform is encrypted using bank-grade 256-bit SSL/TLS. Your login credentials, payment details, and personal information are protected in transit at all times.
Before any withdrawal is processed, every account undergoes KYC identity verification. This protects both you and the Platform from fraud and ensures only you can access your funds.
EG33 does not sell, rent, or commercially exploit your personal data to third parties. Any data sharing is strictly limited to what is necessary for payment processing, KYC, and regulatory compliance.
Personal data is accessible only to authorised EG33 staff and contracted processors who require it to perform their specific functions. Role-based access controls are strictly enforced.
Our infrastructure undergoes regular penetration testing and vulnerability assessments by independent specialists to identify and address potential security weaknesses before they can be exploited.
In the event of a data breach that poses a risk to your rights, EG33 will notify affected users and relevant authorities promptly, in accordance with applicable data protection legislation.
Confident in Your Privacy?
Your data is protected, your identity is secure, and your rights are clearly defined. Experience Malaysia's premier online gaming platform knowing that your privacy is taken seriously at every step.
For players aged 21 and above only. See our Terms & Conditions and Responsible Gambling pages for full details.