Privacy Policy

1. Who We Are

epal33 ("we", "us", "our") operates the online gaming platform accessible at epal33.app. We are the data controller in respect of the personal data of players and visitors to the Platform. This Privacy Policy describes how epal33 collects, uses, stores, and discloses personal data in connection with the operation of the Platform and the services provided therein.

This Privacy Policy applies to all players registered on epal33, visitors to epal33.app, and any individuals who communicate with epal33 through our customer support channels, including players across Malaysia — whether in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or elsewhere.

2. Personal Data We Collect

2.1 Registration & Identity Data

When you register an account with epal33, we collect the following personal data:

• Full legal name;
• Date of birth (for age verification purposes — players must be 21 or older);
• National identification number or passport number;
• Residential address;
• Email address;
• Mobile phone number;
• Username and password (stored in encrypted form).

2.2 Financial Data

To process deposits and withdrawals, epal33 collects:

• Payment method details (e.g., bank account numbers for Maybank, CIMB, or Public Bank; registered mobile numbers for Touch n Go eWallet or Boost);
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps;
• Source of funds documentation where required by anti-money laundering regulations.

2.3 Usage & Technical Data

We automatically collect certain technical information when you use epal33, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Pages visited, game sessions played, bet history, and time spent on the Platform;
• Login timestamps and session durations;
• Referral source and navigation paths.

2.4 Communications Data

If you contact epal33 through live chat, email, or any other channel, we retain records of that communication, including the content of messages and any supporting documentation you provide.

3. How We Collect Your Data

epal33 collects personal data through the following means:

• Directly from you — when you register, complete KYC verification, make a deposit or withdrawal, contact support, or respond to surveys;
• Automatically — through cookies, server logs, and similar technologies when you visit or use the Platform;
• From third parties — from identity verification services, payment processors, and fraud prevention providers where necessary to comply with legal obligations or protect the integrity of the Platform.

4. How We Use Your Personal Data

epal33 uses your personal data for the following purposes:

• To register and maintain your epal33 account and provide access to the Platform;
• To verify your identity and age as required by our KYC obligations (21+ requirement strictly enforced);
• To process deposits, withdrawals, and other financial transactions;
• To detect, investigate, and prevent fraud, money laundering, and other unlawful activity;
• To comply with applicable legal and regulatory obligations, including record-keeping requirements;
• To provide customer support and respond to enquiries;
• To personalise your experience on the Platform, including game recommendations and relevant promotions (where you have consented to receive these);
• To send transactional communications, including account confirmations, security alerts, and payment notifications;
• To send marketing communications where you have opted in to receive them;
• To analyse Platform usage patterns and improve the epal33 user experience;
• To enforce our Terms & Conditions and other policies.

5. Legal Basis for Processing

epal33 processes your personal data on the following legal bases:

• Contract performance — processing necessary to provide you with the epal33 gaming service and fulfil our obligations under the Terms & Conditions;
• Legal obligation — processing required to comply with KYC, AML, and other applicable legal and regulatory requirements;
• Legitimate interests — processing for fraud prevention, platform security, and improving the epal33 service, where our interests are not overridden by your privacy rights;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Sharing Your Personal Data

epal33 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Payment processors — to facilitate deposits and withdrawals via Touch n Go eWallet, Boost, Malaysian banks, Visa, and Mastercard;
• Identity verification providers — to conduct KYC and age verification checks;
• Fraud prevention and AML services — to detect and prevent financial crime;
• IT and hosting providers — to maintain and operate the infrastructure on which epal33 runs;
• Regulatory and law enforcement authorities — where required by law, court order, or regulatory direction;
• Gaming licensing authorities — where required under epal33's international gaming licence obligations.

All third-party service providers engaged by epal33 are contractually required to process personal data only on our instructions and in accordance with applicable data protection standards.

7. Data Retention

epal33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting obligations. In general:

• Account data is retained for the duration of the account relationship and for a period of at least five (5) years following account closure, in accordance with AML record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years;
• Customer support communications are retained for three (3) years;
• Marketing consent records are retained for the duration of consent and for a reasonable period thereafter.

Where data is no longer required, epal33 will securely delete or anonymise it in accordance with our data retention schedule.

8. Cookies & Tracking Technologies

epal33 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. Cookies are small text files placed on your device when you visit epal33.app. We use the following categories of cookies:

• Strictly necessary cookies — essential for the Platform to function. These cannot be disabled.
• Functional cookies — enable personalised features such as remembering your language preference and login state.
• Analytics cookies — used to understand how players use the Platform, helping us improve performance and content. Collected data is aggregated and anonymised where possible.
• Marketing cookies — used to deliver relevant promotions and measure the effectiveness of our communications, only where you have consented.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core epal33 gaming service.

9. Your Privacy Rights

Subject to applicable law, you have the following rights in respect of your personal data held by epal33:

• Right of access — the right to request a copy of the personal data epal33 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data in certain circumstances, subject to our legal retention obligations;
• Right to restrict processing — the right to request that we limit the processing of your data in certain circumstances;
• Right to data portability — the right to receive your personal data in a structured, commonly used format where processing is based on consent or contract;
• Right to object — the right to object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to withdraw consent — where processing is based on consent, the right to withdraw at any time without affecting prior processing.

To exercise any of these rights, please contact our support team via 24/7 live chat or by email at [email protected]. We will respond to all verified requests within thirty (30) days.

10. Data Security

epal33 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for sensitive data at rest, access controls and two-factor authentication for internal systems, regular security assessments, and staff training on data protection obligations.

While we take data security seriously, no method of transmission over the internet or method of electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, epal33 will notify affected individuals and relevant authorities as required by applicable law.

11. Children's Privacy

epal33 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification to enforce this requirement. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account. Parents and guardians who believe their child may have accessed epal33 are encouraged to contact our support team immediately.

12. International Data Transfers

As an internationally licensed gaming platform, epal33 may transfer your personal data to processors and service providers located outside Malaysia. Where such transfers occur, epal33 ensures that appropriate safeguards are in place in accordance with applicable data protection standards — including contractual clauses that require the recipient to protect your data to a standard equivalent to that described in this Privacy Policy.

13. Changes to This Privacy Policy

epal33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. Material changes will be communicated to registered players via email or prominent notice on the Platform at least seven (7) days before the revised policy takes effect. Your continued use of epal33 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by epal33, please contact us through the following channels:

• Live Chat: Available 24/7 on every page of epal33.app — under 2-minute average response time.
• Email: [email protected] — response within 4–8 hours.

All privacy-related requests will be handled with confidentiality and in accordance with our data protection obligations.