epal33 Privacy Policy

1. Who We Are

epal33 ("epal33", "we", "us", "our") is the operator of the online gaming platform accessible at epal33.co ("the Platform"). epal33 is licensed and regulated by an international gaming authority and is committed to protecting the privacy and personal data of all Players and visitors ("you", "your") who access or use the Platform.

For the purposes of applicable data protection legislation, epal33 is the data controller responsible for the personal data collected through the Platform. If you have any questions about how epal33 processes your personal data, please contact our support team via the 24/7 Live Chat service on the Platform or by email at [email protected].

2. Data We Collect

epal33 collects personal data in the following categories:

• Registration Data: Full name, date of birth, nationality, residential address (including city — commonly Kuala Lumpur, Penang, Johor Bahru, or Petaling Jaya for our Malaysian player base), email address, and mobile phone number provided when you create your epal33 account.
• Identity Verification Data: Government-issued identity documents (such as Malaysian MyKad or passport), proof of address, and selfie images submitted during KYC verification.
• Financial Data: Payment method details, deposit and withdrawal transaction records, and MYR account balances. epal33 does not store full card numbers; payment processing is handled by our regulated payment service providers including Touch 'n Go eWallet, Boost, and FPX bank gateway partners.
• Gameplay Data: Records of all bets placed, games accessed, sessions played, bonus activity, and outcomes on the epal33 Platform.
• Technical Data: IP address, device type and identifiers, browser type and version, operating system, referring URLs, and session timestamps collected automatically when you access the Platform.
• Communications Data: Records of your interactions with epal33 customer support, including Live Chat transcripts, emails, and any feedback submitted through the Platform.
• Responsible Gaming Data: Records of any deposit limits, loss limits, session reminders, or self-exclusion requests you have made via your epal33 account settings.

3. How We Use Your Data

epal33 uses the personal data collected for the following purposes:

• To create and administer your epal33 account and verify your identity in compliance with our KYC obligations under our gaming licence.
• To process deposits and withdrawals and maintain accurate financial records as required by our licence and applicable financial regulations.
• To provide and improve the gaming services, sportsbook, live casino, and slot offerings available on the epal33 Platform.
• To communicate with you regarding your account, including transaction confirmations, security alerts, and support responses.
• To detect and prevent fraud, money laundering, underage gambling, and other prohibited activities on the Platform.
• To enforce our Terms & Conditions and comply with legal and regulatory obligations.
• To personalise your epal33 experience, including game recommendations and relevant promotional offers where you have not opted out of marketing communications.
• To operate and improve the responsible gaming features available to all epal33 Players.
• To conduct internal analytics and reporting to understand how the Platform is used and to improve its performance, security, and user experience.

4. Legal Basis for Processing

epal33 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and epal33 — including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with our obligations under our gaming licence, applicable anti-money laundering legislation, and data protection law.
• Legitimate interests: Processing conducted for the legitimate interests of epal33, such as fraud prevention, platform security, and internal analytics, where those interests are not overridden by your rights and interests.
• Consent: Where we send you marketing communications or use non-essential cookies, we rely on your consent. You may withdraw consent at any time by contacting epal33 support or adjusting your account preferences.

5. Data Sharing & Disclosure

epal33 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly as necessary:

• Payment Service Providers: Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and the FPX gateway operator, to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and anti-fraud service providers engaged by epal33 to verify player identities and screen for sanctions or politically exposed person status.
• Game Content Providers: Licensed game studios and live casino providers whose software operates within the epal33 Platform may receive limited session data necessary to deliver game functionality.
• Regulatory Authorities: epal33's licensing authority and any competent law enforcement or regulatory body where disclosure is required by law or by the terms of our gaming licence.
• Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and IT service providers engaged by epal33 under strict data processing agreements that prohibit use of your data for any purpose other than providing services to epal33.

All third-party processors engaged by epal33 are contractually obligated to handle personal data in accordance with applicable data protection standards and are prohibited from processing your data for their own purposes.

6. Cookies & Tracking Technologies

epal33 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, login persistence, and security features. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to understand how Players navigate the Platform, which pages are most visited, and where technical errors occur — enabling epal33 to improve the user experience.
• Functional Cookies: Used to remember your preferences, such as language settings and last-visited game categories, to personalise your epal33 experience.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the epal33 Platform.

7. Data Retention

epal33 retains your personal data for as long as your account remains active and for a minimum period of five (5) years following account closure, in order to comply with our obligations under our gaming licence and applicable financial regulations. Specific categories of data may be retained for longer periods where required by law.

Gameplay records, transaction histories, and KYC documentation are retained for the periods specified by our regulatory obligations. Where data is no longer required, epal33 will securely delete or anonymise it in accordance with our data retention schedule.

8. Data Security

epal33 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the epal33 Platform.
• Encryption of sensitive data at rest, including payment details and identity documents.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the Platform's infrastructure.
• Two-factor authentication available to all Players for additional account security.

While epal33 takes all reasonable steps to protect your data, no internet transmission is entirely secure. You are responsible for maintaining the confidentiality of your epal33 login credentials and for securing your own device.

9. Your Rights

Subject to applicable data protection legislation, you have the following rights in respect of your personal data held by epal33:

• Right of Access: To request a copy of the personal data epal33 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data where epal33 no longer has a lawful basis for retaining it, subject to our regulatory retention obligations.
• Right to Restriction: To request that epal33 restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: To object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the epal33 support team via Live Chat or email at [email protected]. epal33 will respond to all verifiable data subject requests within 30 days.

10. Children's Privacy

The epal33 Platform is strictly for persons aged 21 years and above. epal33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe an underage person has registered on the epal33 Platform, please notify us immediately via Live Chat.

11. International Data Transfers

As an internationally licensed gaming operator, epal33 may transfer your personal data to service providers and infrastructure partners located outside of Malaysia. Where such transfers occur, epal33 ensures that appropriate safeguards are in place — such as standard contractual clauses or adequacy decisions — to ensure that your personal data receives a level of protection consistent with applicable data protection standards.

12. Amendments to This Policy

epal33 reserves the right to update this Privacy Policy at any time. Where material changes are made, epal33 will notify active Players via their registered email address or via a notice posted prominently on the Platform. The date of the most recent revision is displayed at the top of this page. Continued use of the epal33 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or epal33's handling of your personal data, please contact us through one of the following channels:

• Live Chat: Available 24/7 directly on the epal33 Platform — the fastest way to reach our support team.
• Email: [email protected] — please include your registered username and a description of your query. We respond to privacy-related enquiries within 30 days.