Privacy Policy x33 –
Our Commitment to Your Data Security

1Information We Collect

X33 collects various types of information depending on how you interact with our platform. This information falls into two main categories: information you provide directly, and information collected automatically during platform use.

Information you provide directly:

• Full name, date of birth, and Malaysian identity card number (MyKad) during the registration and KYC process.
• Email address and mobile number for account verification and communication purposes.
• Bank account or digital wallet details (FPX, Touch 'n Go eWallet, Boost, GrabPay) registered for deposits and withdrawals.
• Supporting documents such as a copy of your ID and proof of current address submitted during the KYC process.
• Any communications you send to our support team via live chat or email.

Information collected automatically:

• IP address, device type, operating system, and browser version used.
• Session log data including pages visited, session duration, clicks, and navigation patterns within the platform.
• General location information based on IP address (country or region — not precise GPS location).
• Cookie data and similar identifiers that help us remember your preferences and improve your user experience.
• Game activity records and financial transactions automatically logged for security and audit purposes.

2How We Use Your Information

Every piece of information we collect is used for clear and legitimate purposes. x33 does not use your data for any purpose unrelated to the delivery of platform services. The following are the specific purposes for data use:

• Account Management: Creating, maintaining, and securing your user account, including identity verification and password recovery.
• Transaction Processing: Processing deposits, withdrawals, and all fund movements within your account securely and accurately.
• Legal Compliance: Fulfilling obligations under PDPA, anti-money laundering (AML) laws, and relevant regulatory directives.
• Fraud Detection: Monitoring suspicious activity to protect you and the platform from misuse.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical support more effectively.
• Platform Improvements: Analyzing usage patterns to improve overall design, performance, and gaming experience.
• Marketing Communications: Sending offers, bonuses, and promotional information — only if you have opted in to receive them.

3Information Sharing and Disclosure

X33 takes a highly cautious approach to data sharing. We do not sell, rent, or share your personal information with third parties for their own commercial purposes. However, there are limited situations where we may need to share your information:

• Trusted Service Providers: Technical and operational partners such as payment processors, cloud infrastructure providers, and identity verification services, all bound by strict confidentiality agreements.
• Legal Requirements: Government authorities or law enforcement agencies when required by court order or applicable laws in Malaysia.
• Platform Protection: Fraud detection companies or industry bodies that help prevent abuse and protect other users on the platform.
• Your Consent: In all other circumstances, we will only share your data after obtaining your explicit and informed consent.

All third parties we work with are required to comply with data security standards equal to or higher than our own. We conduct regular reviews of data processing agreements with all our partners.

4Data Security and Protection Measures

The security of your data is an absolute priority at x33. We continuously invest in the latest security infrastructure to ensure your information remains protected from online threats at all times.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same industry-grade encryption protocols used by leading financial institutions.
• Data-at-Rest Encryption: Sensitive information stored in our databases, including passwords and financial details, is encrypted using AES-256 algorithm.
• Two-Factor Authentication (2FA): We offer an additional layer of security through 2FA for all user accounts — highly recommended to enable.
• 24/7 Monitoring: Our security team monitors platform traffic and activity around the clock to detect and respond to any threats promptly.
• Regular Penetration Testing: We engage independent security experts to conduct regular penetration testing to identify and patch any system vulnerabilities.

5Your Rights Under PDPA

As an x33 platform user, you have rights protected under Malaysia's Personal Data Protection Act 2010. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will process your request within 30 calendar days.

6Cookies and Tracking Technologies

X33 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how users interact with our platform. Cookies are small text files stored on your device when you visit our website.

We use four main categories of cookies:

• Essential Cookies (Required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Preference Cookies: Remembering your preferences such as language, theme, and display settings for a more personalized experience.
• Analytics Cookies: Collecting data on how you use the platform to help us improve its design and functionality.
• Marketing Cookies: Used to deliver advertisements and promotions more relevant to your interests — you may opt out at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of some features on our platform.

7International Data Transfers

In the course of its operations, x33 may transfer your personal information to servers or processing facilities located outside Malaysia. Any such transfer is carried out in compliance with PDPA requirements and ensures equivalent protection is applied to your data.

Safeguards we apply to international transfers include:

• Binding data processing agreements (DPA) with all overseas partners.
• Thorough security assessments before any new third-party service is engaged.
• Use of recognized transfer mechanisms such as Standard Contractual Clauses (SCC) where applicable.

8Children's Privacy

The x33 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from underage individuals. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected] so we can take corrective action without delay.

All new users are required to verify their age during the registration process, and our KYC process is designed to detect and reject registrations from individuals who do not meet the minimum age requirement.

9Changes to This Privacy Policy

X33 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes are made, we will notify you via:

• A prominent notice on the platform's home page for at least seven days.
• Notification email to your registered address.
• A pop-up notice upon the next login.

The latest update date is always displayed at the top of this document. Continued use of the platform after any changes are published is considered acceptance of the updated terms. We encourage you to review this page periodically.

10Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we welcome you to reach out to us:

We are committed to responding to all privacy-related enquiries within 30 calendar days from the date of receipt. For urgent cases involving a potential security breach, we will respond within 72 hours.