Privacy Policy Seri33 – Malaysian Member Data Protection

1. Introduction – Who Is Responsible for Your Data

Seri33, operating under the domain seri33.biz, is the data controller for all personal information collected from members and users of our platform. This means seri33 is fully responsible for determining the purposes and means of processing your personal data, and for ensuring that data is protected in accordance with the standards set out in the Personal Data Protection Act 2010 (PDPA) of Malaysia.

As an online entertainment and betting platform serving users across Malaysia, seri33 understands how sensitive the financial and personal information you entrust to us truly is. We do not take that trust lightly — it is the foundation of the long-term relationship we aim to build with every seri33 member throughout Malaysia, from Kuala Lumpur and Selangor to Johor Bahru, Penang, Kota Kinabalu, and Kuching.

2. Types of Personal Data Collected by Seri33

2.1 Data You Provide Directly

Seri33 collects personal information that you voluntarily provide during the account registration process, while using the platform, and through interactions with our support team. This includes:

• Full name as it appears on your MyKad or other valid Malaysian identification document
• An active Malaysian mobile number for OTP verification and account communications
• Email address for official communications, transaction notifications, and promotions you have consented to
• Date of birth to verify age eligibility (18 years and above)
• Payment method details such as your Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow e-wallet account numbers used for deposits and withdrawals
• Identity verification documents (KYC) such as a copy of your MyKad, when requested as part of the verification process

2.2 Automatically Collected Data

While you use the seri33 platform, our systems automatically collect certain technical information required to keep the platform running correctly and securely. This includes:

• Your device's IP address for security verification and fraud prevention
• The web browser type and operating system of the device you are using
• Pages within the seri33 platform that you visit and the time of those visits
• Session log data including the date, time, and duration of platform use
• Records of betting activity for compliance purposes and game result verification

3. How Seri33 Uses Your Personal Data

Seri33 uses your personal data only for legitimate, clearly defined purposes. Below is a summary table showing the purposes for which data is used and the legal basis underpinning each:

Seri33 will not use your personal data for any purpose beyond those stated above without first obtaining your renewed consent. If you would like to know more about the specific purposes for which your data is processed, please contact the seri33 privacy team at support@seri33.biz.

4. Sharing Data with Third Parties

4.1 Core Principle – Seri33 Does Not Sell Your Data

Seri33 has never sold, rented, or transferred members' personal data to advertisers, marketing companies, or any external parties unrelated to our platform's operations for direct marketing purposes. This is a non-negotiable principle and the foundation of the trust seri33 has built with our member community.

4.2 Permitted Sharing

In the following limited and specific circumstances, seri33 may need to share member personal data with certain parties:

• Payment service providers: Payment gateways that process deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX — only the data necessary to process the relevant transaction is shared
• Relevant Malaysian authorities: If seri33 is required by Malaysian law or a valid court order to disclose certain information to the relevant authorities
• Technology service providers: Companies providing technical infrastructure to seri33 – such as cloud computing, platform analytics, and cybersecurity services – all bound by strict confidentiality agreements with seri33
• Anti-fraud compliance body: In cases where fraudulent activity or suspected money laundering is involved, seri33 may be required to share relevant information with industry bodies or the appropriate authorities

In all instances of data sharing described above, seri33 ensures that only the minimum information strictly necessary is shared, and that all parties receiving such data are bound by confidentiality and data protection obligations equivalent to seri33's own standards.

5. seri33 Data Security Measures

Protecting member data is one of seri33's most significant investments in platform operations. We apply multiple layers of technical and organisational safeguards to keep your data secure at all times:

• 256-bit SSL encryption for all data transmitted between your device and seri33's servers – the same standard used by Malaysia's leading banks
• Server databases protected with encryption at rest, preventing unauthorised access even in the event of a physical breach
• An intrusion detection system that monitors seri33 platform traffic continuously, 24 hours a day
• Two-factor authentication (2FA) is available for member accounts seeking an additional layer of security
• Internal role-based access control ensuring that only authorised seri33 staff can access specific categories of data
• Regular security audits by qualified independent parties to identify and remediate system vulnerabilities

In the event of a data security incident affecting seri33 members, we are committed to notifying affected members within a reasonable timeframe in accordance with Malaysia's PDPA requirements, and to taking immediate remedial action to minimise any impact.

6. Cookies and Tracking Technologies

6.1 What Are Cookies and How Does seri33 Use Them

Cookies are small text files stored by your web browser when you visit the seri33 platform. seri33 uses cookies for several important purposes that enhance your experience on our platform:

• Session cookies: Maintaining your logged-in session while you use the seri33 platform, so you do not need to sign in again each time you navigate between pages
• Preference cookies: Saves your preferred language and display settings on the platform for a more personalised experience
• Analytics cookies: Helping the seri33 team understand how members use the platform – which sections are visited most frequently, how long betting sessions last, and so on – so we can make meaningful improvements
• Security cookies: Identifying suspicious sessions and protecting your account from unauthorised access

6.2 Managing Your Cookie Settings

You can manage cookie usage through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note, however, that blocking certain cookies may affect the functionality of the seri33 platform — for example, blocking session cookies may cause you to be logged out repeatedly. For the best experience on seri33, we recommend allowing cookies from the seri33.biz domain.

7. Your Rights as a seri33 Member

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights in relation to your personal data held by seri33. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the seri33 privacy team by email at support@seri33.biz, stating the right you wish to exercise and your account details. seri33 will respond within 14 business days.

8. Data Retention and Deletion Period

Seri33 retains members' personal data for as long as your account remains active, and for any additional period required by Malaysian law following account closure. As a general rule, financial transaction records are kept for a minimum of seven years in accordance with Malaysia's tax and anti-money laundering legislation, even after an account has been closed.

Data collected solely for marketing or platform analytics purposes — and not legally required to be retained — will be deleted within 12 months of the point at which it is no longer needed for those purposes. seri33 employs secure data deletion procedures to ensure that deleted information cannot be recovered by any party.

When you request the closure of your seri33 account, the following process applies: data that is not legally required to be retained will be deleted within 30 days, while financial transaction records will be kept for the minimum retention period required under the PDPA and applicable Malaysian financial laws.

9. Children's Privacy

The seri33 platform is strictly for adults aged 18 and above. seri33 does not knowingly collect or process personal data from individuals under the age of 18. If you have reason to believe that a minor has registered an account on seri33 or has provided us with their personal data, please contact seri33 immediately at support@seri33.biz so that we can take appropriate action, including deleting the relevant data and closing the account.

Seri33 employs multiple mechanisms to verify that users meet the minimum age requirement, including Malaysian phone number verification, identity document requests during the KYC process, and ongoing monitoring to identify accounts that may belong to individuals under the age of 18.

10. Amendments to This Privacy Policy

Seri33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new Malaysian legal requirements, or platform technology developments. When material changes are made to this Privacy Policy – meaning changes that significantly affect how we handle your personal data – seri33 will notify members via their registered email address at least 14 days before the changes take effect.

Minor amendments that have no material effect may take effect immediately, reflected by an updated date at the top of this page. You are encouraged to review this Privacy Policy page periodically. The date of the last update is 1 January 2026. Your continued use of the seri33 platform following any amendments to this Privacy Policy constitutes your acceptance of the latest version.

11. Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how seri33 handles your personal data, please do not hesitate to reach out to our team. We take every privacy enquiry seriously and are committed to providing a clear and satisfactory response.

• Privacy-specific email: support@seri33.biz (please indicate "Privacy Inquiry" in the subject line)
• Live chat on the seri33 platform: available 24 hours a day, 7 days a week
• Response time for privacy enquiries: within 3 business days
• Response time for PDPA rights exercise requests: within 14 working days

To lodge a formal complaint about how seri33 handles your personal data, you are also entitled to contact the Personal Data Protection Commissioner of Malaysia as provided under the Personal Data Protection Act 2010. That said, seri33 encourages you to contact us directly first, as we are committed to resolving any privacy concerns in a satisfactory manner and within a reasonable timeframe.