Personal Data Protection

Privacy Policy grap33 — Your Data Security Is Our Priority

Grap33 takes your privacy and personal data protection seriously. This document transparently explains how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act (PDPA).

Last updated: 1 January 2026
Important Note: By registering and using the grap33 platform, you agree to the collection and use of your personal data as outlined in this Privacy Policy. Please read this entire document carefully.

1Introduction & Privacy Commitment

Grap33 ("we", "Platform", or "Company") respects and protects the privacy of every user who uses our services. This Privacy Policy forms part of our commitment to transparency in personal data management and compliance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA).

As a responsible online casino platform, we recognise that your trust is our most valuable asset. Therefore, grap33 has implemented strict policies and procedures to ensure your personal data is handled with full integrity, used only for legitimate purposes, and protected from any unauthorised access, disclosure, or misuse.

This Privacy Policy applies to all users of the grap33 platform, including website visitors, registered members, and anyone who interacts with our services through our website or mobile app. By using the grap33 platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2Types of Personal Data We Collect

Grap33 collects your personal data through various channels in the course of providing our services. Data collected is intended to ensure a smooth, secure, and personalized user experience. The following is a summary of the types of data we collect:

Data Category Example Information Purpose of Collection
Identity Data Full name, identification card number, date of birth Identity verification & KYC
Contact Data Email address, phone number, home address Communication & account verification
Financial Data Bank details, e-wallet info, transaction records Deposit & withdrawal processing
Technical Data IP address, device type, web browser, cookies Platform security & improvement
Usage Data Gaming records, wagering habits, login frequency Service improvement & responsible gaming
Communication Data Customer support logs, feedback, complaints Issue resolution & quality improvement

We do not collect sensitive data such as health information, religious beliefs, or political affiliations unless specifically required by relevant legal regulations.

3How We Use Your Personal Data

Every piece of data we collect is used responsibly and only for specific, legitimate purposes aligned with the needs of the grap33 platform. The following are the primary purposes for which your data is used:

  • Account Verification & Registration: Processing new member registrations and verifying user identities through a rigorous KYC process to ensure platform security.
  • Financial Transaction Processing: Facilitating safe and accurate deposits and withdrawals using local payment methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay.
  • Game Service Delivery: Ensuring all slot games, fish shooting games, live casino, and bingo run smoothly and in accordance with user preferences.
  • Customer Support: Providing efficient and accurate assistance when you contact our support team via live chat or email.
  • Security & Fraud Prevention: Detecting and preventing fraud, hacking, money laundering, or any misuse of the platform.
  • Marketing Communications: Sending promotional information, bonus offers, and the latest news about grap33 — subject to your consent and withdrawable at any time.
  • Responsible Gaming: Monitoring gaming habits to identify signs of problem gambling and providing appropriate support to users who need it.
  • Legal Compliance: Fulfilling applicable legal and regulatory obligations, including reporting requirements to relevant authorities.
grap33 will not sell your personal data to any third party for marketing purposes without your explicit consent. Your privacy is not a commodity to us.

4Data Storage & Security

Grap33 employs a multi-layered security infrastructure to protect your personal data from unauthorized access, loss, or damage. The key security measures we implement include:

  • 256-bit SSL Encryption: All data transmitted between your device and grap33's servers is protected with industry-grade 256-bit SSL encryption, ensuring no third party can intercept your information in transit.
  • Two-Factor Authentication (2FA): An additional security layer through two-factor authentication to protect your account from unauthorised access.
  • Secure Storage: Data is stored on servers protected by advanced firewalls, intrusion detection systems, and strict physical and digital access controls.
  • Stored Data Encryption: Sensitive data such as financial information and identification details are stored in encrypted format even within our internal systems.
  • Regular Security Reviews: Our IT security team conducts regular penetration testing and security audits to identify and address any vulnerabilities.

Your personal data will be retained for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the data is no longer needed, we will securely delete or anonymise it in accordance with established procedures.

5Data Sharing & Disclosure

Grap33 does not share your personal data with external parties except in the following limited and controlled circumstances:

  • Payment Service Providers: Required financial information is shared with licensed and trusted payment processors to facilitate your deposit and withdrawal transactions.
  • Game Software Providers: Minimum required technical data is shared with licensed game providers to ensure a smooth and fair gaming experience.
  • Legal Requirements: grap33 will disclose your personal data to government authorities or law enforcement agencies if required by court order or applicable legislation.
  • Fraud Prevention: Certain information may be shared with fraud prevention agencies or other platforms in the industry to protect the platform and users from criminal activity.
  • Business Transfer: In the event of a company merger, acquisition, or asset sale, user data may be transferred as part of those assets, with appropriate notice provided to users.

All third parties who receive your personal data from grap33 are bound by strict data confidentiality agreements and are required to implement data protection standards equal to or higher than our own.

6Cookies & Tracking Technologies

The grap33 platform uses cookies and similar tracking technologies to enhance the user experience and ensure optimal platform functionality. The types of cookies we use include:

  • Essential Cookies: Required for core platform functions such as login authentication, session security, and site navigation. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting data on how users interact with the platform to help us identify areas for improvement and optimise site performance.
  • Functionality Cookies: Saving user preferences such as language, currency, and display settings to deliver a more personalised experience.
  • Analytics Cookies: Used to analyse platform traffic and usage patterns for the continuous improvement of grap33 services.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the grap33 platform. By using our platform, you agree to the use of cookies as described here.

7User Rights Over Personal Data

As a grap33 user in Malaysia, you have the following rights regarding your personal data in accordance with the provisions of PDPA 2010:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time through our support team.

Right to Rectification

If your data is inaccurate or outdated, you may request that we correct or update the information.

Right to Erasure

You may request the deletion of your personal data, subject to applicable data retention legal obligations.

Right to Withdraw Consent

You may withdraw consent for marketing communications at any time via your account settings or customer support.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Complain

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To submit any request related to your privacy rights, please contact our Data Protection Officer team via email at [email protected] or via live chat on the platform. We are committed to processing your request within 14 business days.

8Children's Data Protection

The grap33 platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe your child or a minor has registered on the grap33 platform, please contact us immediately via live chat so we can take appropriate action.

9Changes to the Privacy Policy

Grap33 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to the services we offer. Any material changes will be communicated to you via:

  • Prominent notice on the grap33 platform homepage.
  • Email notification to your registered email address.
  • Pop-up notification upon next login after changes take effect.

Your continued use of the grap33 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. The "Last Updated" date at the top of this document will always reflect the latest version of this policy.

10Contact Us Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how we manage your personal data, our team is ready to assist through the following channels:

Our team is committed to responding to all privacy-related enquiries within 14 working days from the date of receipt. For urgent cases involving account security, please use live chat for immediate assistance.

Why grap33 Safe for You

Every aspect of the grap33 platform is designed with user security and privacy as the core of our design philosophy.

Military-Grade Encryption

Every transaction and data transfer on the grap33 platform is protected with 256-bit SSL encryption — the same security standard used by leading financial institutions worldwide.

Certified KYC

Grap33's identity verification (KYC) process ensures only legitimate users can access the platform, protecting our player community from fraud and fake identities.

Malaysia PDPA Compliance

Grap33 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010, ensuring your rights as a user are always upheld and respected.

No Data Sales

Grap33 is committed to not selling, renting, or exchanging your personal data to third-party advertisers or marketing companies for profit without your explicit consent.

Full Control in Your Hands

Through your grap33 account settings, you have full control to manage your data — from communication preferences to securely requesting account deletion.

Regular Security Audits

The grap33 platform undergoes regular security testing and data protection audits by independent third parties to ensure our systems continuously meet the latest security standards.

Safe & Trusted Platform

Ready to Play with With Full Confidence?

Your data is protected, your identity is secure, and your gaming experience is guaranteed to be fair. Register with grap33 today and enjoy Malaysia's best casino entertainment.

Bahasa Melayu