Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by ganas33 ("we", "us", "our") and applies to all users ("you", "your", "User") of the ganas33 online casino and sports betting platform accessible at ganas33.cam (the "Platform"), including any associated mobile interfaces and customer communication channels.

ganas33 is committed to protecting the privacy and security of all personal data entrusted to us by our users. This Policy sets out in clear and transparent terms the categories of personal data we collect, the specific purposes for which that data is processed, the legal basis upon which we rely for each processing activity, and the rights you hold in relation to your personal data.

We serve players across Malaysia, including those based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other locations nationwide. The data practices described in this Policy reflect our obligations under applicable data protection legislation and our genuine commitment to responsible data stewardship.

Definitions

Throughout this Policy, the following terms carry the meanings set out below:

Data We Collect

ganas33 collects Personal Data across several categories, depending on how you interact with the Platform. We collect only the data that is necessary for the specific purpose described, in accordance with the principle of data minimisation.

3.1 Account Registration Data

When you create a ganas33 account, we collect:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city and postcode, e.g., Kuala Lumpur, Petaling Jaya)
• Email address
• Phone number
• Username and encrypted password
• Preferred language and currency (MYR)

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) regulations and to verify your identity before processing withdrawals, we collect:

• Copy of a valid government-issued photo identification (Malaysian MyKad, Passport, or Driver's Licence)
• Proof of residential address (utility bill or bank statement issued within three months)
• Selfie photograph held alongside the submitted identification document
• In certain cases, source of funds documentation

3.3 Financial & Transaction Data

When you make deposits or withdrawals via methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency, we collect:

• Payment method type and associated identifiers (masked card or account numbers)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history
• Cryptocurrency wallet addresses (where applicable)

3.4 Gameplay & Betting Data

• Game participation records, bet history, wagering amounts, and outcomes
• Session duration and frequency of play
• Bonus usage and promotional participation records
• Responsible gambling tool usage (deposit limits, self-exclusion requests)

3.5 Technical & Device Data

• IP address and geographic location data
• Browser type and version, operating system, and device identifiers
• Session timestamps, page views, and clickstream data
• Platform access logs

3.6 Communication Data

• Content and records of live chat sessions, emails, and support tickets submitted to our customer support team
• Survey responses and feedback submitted voluntarily

How We Collect Personal Data

ganas33 collects Personal Data through the following channels and mechanisms:

Data Processing & Use

ganas33 processes your Personal Data only for specific, documented, and legitimate purposes. The table below sets out the primary purposes for which we use your data:

Legal Basis for Processing

ganas33 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including account management, game delivery, and payment processing — is necessary for the performance of that contract.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, responsible gambling obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out for the legitimate interests of ganas33, including fraud prevention, platform security, responsible gambling monitoring, and internal analytics — provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your prior, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing & Disclosure

ganas33 does not sell, rent, or trade your Personal Data. We share Personal Data only in the limited circumstances described below, and only with recipients who are contractually or legally obligated to maintain appropriate data protection standards.

7.1 Service Providers and Data Processors

We engage third-party service providers to support the operation of our Platform, including:

• Payment processors — to facilitate deposits and withdrawals via methods such as Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks
• KYC and identity verification providers — to authenticate user identities and perform document verification
• Game software providers — who receive anonymised session data necessary to operate their games within our platform environment
• Fraud detection and cybersecurity providers — to identify suspicious transactions and protect platform integrity
• Customer support platform providers — who process communication data on our behalf to deliver live chat and email support
• Analytics providers — who process aggregated, non-identifiable technical data to help us improve platform performance

All third-party processors are engaged under data processing agreements that require them to process data only on our documented instructions and to implement appropriate technical and organisational security measures.

7.2 Legal and Regulatory Disclosure

ganas33 may disclose Personal Data to governmental authorities, regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where such disclosure is required by applicable law, a binding court order, or in response to a formal regulatory request. We will notify affected users of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructure, or sale of assets involving ganas33, Personal Data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and of any material changes to data processing practices that result from it.

7.4 No Sale of Personal Data

Cookies & Tracking Technologies

The ganas33 Platform uses cookies and similar tracking technologies to provide essential functionality, improve user experience, and gather anonymised analytics data. The table below describes the categories of cookies we use:

You may manage your cookie preferences through your browser settings. Disabling essential cookies may impair or prevent access to certain platform features. Analytics and functional cookies can be disabled without loss of core functionality, though your personalisation preferences will not be saved between sessions.

Data Retention

ganas33 retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely destroyed or anonymised in a manner that prevents reconstruction of the original data. Users may request earlier deletion subject to the conditions described in Section 11.

Data Security

ganas33 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit TLS/SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. The presence of HTTPS in your browser address bar confirms this protection is active.
• Data Encryption at Rest: Sensitive data stored on our servers — including KYC documents, financial data, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis to authorised personnel only. All staff with data access receive mandatory data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: Users are strongly encouraged to enable two-factor authentication (2FA) on their accounts. Our platform supports 2FA to add an additional layer of account security beyond the password.
• Penetration Testing and Vulnerability Scanning: Regular security assessments are conducted to identify and remediate potential vulnerabilities in our platform infrastructure.
• Incident Response: ganas33 maintains a documented data breach response plan. In the event of a confirmed data breach that poses a risk to user rights, we will notify affected users and relevant authorities within the timeframes required by applicable law.

Your Rights as a Data Subject

As a user of the ganas33 platform, you hold a number of rights in relation to your Personal Data. These rights are described below. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Subject Rights Request" and your registered account email address. We will acknowledge your request within 5 business days and endeavour to fulfil it within 30 calendar days.

We will not charge a fee for handling data subject rights requests in ordinary circumstances. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, with written explanation provided to the requestor.

Children's Privacy & Age Restriction

The ganas33 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store any Personal Data from individuals under the age of 21. All prospective users must confirm their age at the time of registration, and are subject to mandatory KYC age verification prior to the processing of any withdrawal.

If ganas33 becomes aware or has reasonable cause to believe that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated Personal Data to the extent permissible by law, and retain only such records as may be required for AML reporting or regulatory notification purposes.

Parents or guardians who believe that a minor under their care has registered on the ganas33 platform should contact us immediately at [email protected] so that we can take prompt corrective action. Please include "Underage Account" in the email subject line.

Third-Party Links & External Services

The ganas33 platform may contain functional integrations with third-party payment providers and game software providers. While we carefully select and vet all third parties with whom we work, ganas33 is not responsible for the privacy practices, data handling policies, or security measures of third-party entities.

When you complete a transaction via a third-party payment method — such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or an FPX bank interface — that transaction is subject to the privacy policy of the relevant third-party provider in addition to this Policy. We encourage you to review the privacy policies of any third-party services you use in connection with the ganas33 platform.

ganas33 does not incorporate any social media login functions, external advertising networks, or cross-site tracking technologies that would share your Personal Data with social media platforms or advertising brokers.

Amendments to This Policy

ganas33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our business practices, or the services we offer. Material amendments — those that meaningfully alter your rights or the way we process your data — will be communicated to registered users via email notification or a prominent in-platform notice at least fourteen (14) days before the amended Policy takes effect.

Non-material amendments (for example, clarifications that do not alter the substance of our processing activities) may be made without advance notice, though the updated Policy will always be accessible at ganas33.cam/privacy-policy with the revised effective date clearly stated.

Your continued use of the ganas33 platform following the effective date of any amended Policy constitutes your acceptance of those changes. If you do not agree with an amended Policy, you should cease using the platform and may request account closure in accordance with our Terms and Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by ganas33, please contact us through the following channels. For formal data subject rights requests, please use the email channel and include your registered account email address and a clear description of your request.

For data subject rights requests specifically — including access, rectification, erasure, and portability requests — please email us with the subject line "Data Subject Rights Request" and provide your full name, registered email address, and a description of the right you wish to exercise. We will acknowledge receipt within five (5) business days.