Harimau33 Privacy Policy

Introduction and Data Controller

Harimau33 determines why and how personal data is processed in connection with the Harimau33 platform. References in this Privacy Policy to “we”, “us”, “our”, or the “Platform” mean Harimau33. References to “you” or “player” mean the individual who visits or uses the Platform.

This Privacy Policy reflects data protection principles relevant to services offered to Malaysian users, including transparency, purpose limitation, data minimisation, accuracy, security, retention control, and respect for individual rights. Harimau33 also considers applicable requirements and the principles reflected in Malaysia’s Personal Data Protection Act 2010 where relevant to the processing activity.

Harimau33 services are intended only for people aged 21 and above. We do not knowingly provide gambling services to minors. If we identify information associated with an underage account, Harimau33 may restrict the account, investigate the circumstances, and delete or retain relevant records as required for safeguarding, fraud prevention, or legal purposes.

Personal Data We Collect

The information collected by Harimau33 depends on how you interact with the Platform. Some information is required to create and protect an account, while other information is generated through betting, casino, payment, or support activity.

How We Collect Personal Data

Harimau33 collects information directly when you register, submit KYC documents, update account settings, contact support, place bets, join live casino games, use responsible gambling controls, or request a deposit or withdrawal. Information provided directly must be accurate and belong to you.

Harimau33 also collects information automatically when you use the Platform. This may include server logs, device information, session times, page interactions, attempted logins, and security events. Such collection helps Harimau33 maintain access during busy EPL weekends, Liga Super Malaysia matches, UFC cards, and other periods of high activity.

Data may also be received from payment processors, identity verification providers, fraud prevention services, or banking and eWallet channels used for a transaction. For example, Harimau33 may receive a payment confirmation or reference when you use Maybank, CIMB, Public Bank, Hong Leong, FPX, DuitNow, Touch 'n Go eWallet, Boost, or GrabPay.

How Harimau33 Uses Personal Data

Harimau33 processes personal data to operate the Platform and deliver the services requested by players. This includes creating and authenticating accounts, displaying MYR balances, accepting eligible wagers, settling results, administering promotions, completing KYC reviews, and responding to account enquiries.

Harimau33 may use personal data for the following purposes:

• To confirm identity, age, account ownership, and payment method ownership.
• To process deposits, withdrawals, refunds, and transaction reconciliations.
• To provide sports betting, live football, casino, bonus, and loyalty services.
• To detect duplicate accounts, suspicious transactions, collusion, account takeover, and bonus misuse.
• To apply deposit limits, cooling-off periods, session reminders, and self-exclusion controls.
• To investigate complaints, correct account errors, and preserve records relevant to a dispute.
• To maintain technical security, monitor performance, and improve accessibility across mobile and desktop devices.
• To send essential notices concerning account security, material policy changes, or service interruptions.

Legal Bases and Processing Grounds

Depending on the activity and applicable requirements, Harimau33 processes data because it is necessary to perform an agreement with you, satisfy a legal or regulatory obligation, pursue a legitimate operational or security interest, protect vital interests, establish or defend legal claims, or act on your consent.

Contract-related processing includes operating your account, accepting bets, displaying balances, and processing withdrawals. Legitimate interests may include securing Harimau33 systems, preventing fraud, improving services, protecting other players, and keeping appropriate audit records. Where Harimau33 relies on legitimate interests, we consider whether those interests are proportionate to the impact on your privacy.

Consent may be used for optional marketing preferences or technologies that are not strictly necessary. You may withdraw consent for future processing through Harimau33 support. Withdrawal does not make processing already completed under valid consent unlawful, and it does not affect processing based on another lawful ground.

When Personal Data May Be Shared

Harimau33 does not sell personal data. Information may be shared with vetted service providers only where reasonably necessary to operate, secure, or support Harimau33. Relevant recipients may include hosting providers, payment processors, identity verification services, game technology providers, security specialists, customer support systems, professional advisers, and competent authorities.

Service providers must process information according to documented purposes, appropriate confidentiality obligations, and relevant security expectations. Harimau33 seeks to limit shared data to what each recipient needs for its assigned function. A live casino technology provider, for example, does not need access to complete KYC documents merely to supply game functionality.

Harimau33 may disclose information where reasonably necessary to comply with lawful demands, investigate suspected crime, prevent harm, enforce the Terms & Conditions, defend a legal claim, or protect Platform users and assets. We review requests where practical and disclose only information relevant to the lawful purpose.

Payment and Transaction Information

Harimau33 records transaction amounts, dates, methods, status, and references needed to credit deposits or complete withdrawals. A player using FPX or DuitNow may generate a different record from a player using Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, ETH, or USDT.

Harimau33 generally seeks to avoid storing complete payment credentials where they are not required. Payment providers may independently collect and process information under their own terms. Harimau33 may retain masked identifiers, transaction confirmations, wallet addresses, bank references, verification results, and correspondence to reconcile MYR balances, prevent fraud, or resolve a failed payment.

You must use payment methods that belong to you. If Harimau33 detects a mismatch between account ownership and payment ownership, the transaction may be paused while additional evidence is requested. These checks protect players and reduce unauthorised third-party funding.

Cookies, Devices, and Analytics

Harimau33 may use cookies and similar technologies to maintain login sessions, remember language or display preferences, protect account access, understand Platform performance, and identify technical faults. Strictly necessary cookies enable core functions and cannot always be disabled without affecting service availability.

Analytics information may show aggregated usage patterns, such as popular pages, device categories, or general navigation paths. Harimau33 uses this information to improve mobile access and ensure that live betting data remains readable for users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia.

You can manage cookies through browser controls, although blocking essential cookies may prevent sign-in, security verification, or balance updates. Device and IP data may still be processed where necessary for fraud prevention, account security, and service delivery.

Data Security

Harimau33 applies administrative, technical, and organisational safeguards designed to protect personal information against accidental loss, unauthorised access, alteration, disclosure, or destruction. Measures may include encryption in transit, access controls, environment separation, monitoring, audit logs, staff confidentiality requirements, and incident response procedures.

No internet service can guarantee absolute security. Players also have an important role in protecting their accounts. Harimau33 recommends using a unique password, keeping login details private, signing out on shared devices, and contacting support promptly if an unknown login, payment, or account change is detected.

If a personal data incident presents a material risk, Harimau33 will assess the event, take reasonable containment and recovery steps, preserve relevant evidence, and provide notifications where required by applicable obligations.

Data Retention and Account Closure

Harimau33 retains personal information for periods reasonably connected to account administration, transaction records, dispute resolution, fraud prevention, security, responsible gambling, and applicable legal requirements. Different categories may have different retention periods.

Closing an account does not necessarily result in immediate deletion of all records. Harimau33 may need to retain identity, transaction, complaint, or self-exclusion information to protect against fraud, answer a later dispute, meet record-keeping duties, or prevent an excluded player from reopening an account during a restriction period.

When information is no longer required, Harimau33 will take reasonable steps to delete, anonymise, or securely isolate it. Anonymised information that no longer identifies an individual may be retained for statistical, security, or service planning purposes.

Your Privacy Rights

Subject to applicable law, verification, exemptions, and the circumstances of the request, you may have rights concerning personal data held by Harimau33. A request will not affect information that Harimau33 must retain for lawful compliance, fraud prevention, dispute management, or active self-exclusion.

Harimau33 may request identity verification before responding to a privacy request. This prevents personal data from being disclosed or altered by an unauthorised person. We aim to acknowledge requests promptly and explain any lawful reason why a request cannot be completed in full.

Responsible Gambling and Sensitive Account Data

Harimau33 may process information relating to deposit limits, session reminders, cooling-off periods, self-exclusion requests, unusual activity, or communications indicating possible gambling harm. This processing helps Harimau33 apply requested controls and support a safer entertainment environment.

Responsible gambling information is treated with particular care and is accessible only where necessary for support, account administration, safeguarding, or applicable obligations. A player who requests self-exclusion should expect Harimau33 to retain enough identifying information to maintain that restriction, even if other account information becomes eligible for deletion.

Harimau33 is for players aged 21 and above only. If you wish to set limits, take a break, or exclude yourself, review the Responsible Gambling page or contact support. Responsible gambling requests are handled confidentially and should not be delayed when immediate account restriction is needed.

International Data Processing

Some service infrastructure or specialist providers used by Harimau33 may be located outside Malaysia. As a result, personal data may be processed in another jurisdiction where privacy rules differ from those in Malaysia.

Where cross-border processing occurs, Harimau33 seeks to use appropriate contractual, organisational, and technical safeguards having regard to the nature of the information, purpose of processing, destination, and available legal protections. Access remains limited to recipients with a legitimate operational need.

Harimau33 does not authorise service providers to use transferred player data for their own unrelated advertising. Providers are expected to process data according to their assigned function and applicable confidentiality requirements.

Changes to This Privacy Policy

Harimau33 may update this Privacy Policy to reflect changes in Platform features, security practices, payment methods, legal requirements, or data processing activities. The effective date and version number at the top of this page will be updated when a revision is published.

Where a change materially affects how personal data is used, Harimau33 may provide an additional account notice or other suitable communication. Continued use of the Platform remains subject to the current policy, although Harimau33 will seek fresh consent where a new processing purpose legally requires it.

Players should review this page periodically. Questions about a revision may be sent to Harimau33 support using the contact information below.

Contact Us About Privacy

To ask a privacy question, report a data concern, or make an eligible rights request, contact the Harimau33 support team. Include your registered username or account reference, describe the request clearly, and do not send your password. Additional verification may be required before account data can be disclosed or changed.

Email

[email protected]

Availability

24 hours a day, 7 days a week

Languages

English, Bahasa Melayu, and Mandarin

Request Type

Privacy enquiry, access request, correction, deletion, restriction, objection, or consent withdrawal