This Privacy Policy explains how Berjaya33 collects, uses, stores, and protects your personal data. By using the Platform, you acknowledge that you have read and understood this policy and consent to the data practices described herein.
Berjaya33 ("the Platform", "we", "us", "our") operates the online casino and sports betting website accessible at berjaya33.cam. As part of operating this Platform and providing our services to you ("User", "Account Holder", "Data Subject"), we collect and process certain categories of personal data.
This Privacy Policy ("Policy") sets out in full detail what personal data we collect, how and why we process it, with whom we share it, how long we retain it, and what rights you hold in relation to your own data. This Policy applies to all users of the Platform, including visitors who have not registered for an Account.
We are committed to handling your personal data with respect, transparency, and proportionality. Our data processing practices are designed to comply with applicable international data protection standards, including the principles of the General Data Protection Regulation (GDPR) as a recognised global benchmark, notwithstanding that the Platform does not operate under any Malaysian regulatory framework.
Your Consent: By creating an Account on Berjaya33 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, phone number, payment details, IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, erasure, or destruction. |
| "Data Controller" | Berjaya33, which determines the purposes and means of processing your personal data. |
| "Data Processor" | A third-party entity that processes personal data on behalf of Berjaya33 under a binding data processing agreement. |
| "KYC Data" | Identity and age verification documents submitted by you, including government-issued ID (MyKad, passport), proof of address, and payment method documentation. |
| "Sensitive Data" | A subset of personal data requiring heightened protection, including financial account information, identity document numbers, and any data revealing health status where relevant to responsible gambling assessments. |
| "Cookie" | A small text file stored on your device by the Platform's web server, used to maintain session state, preferences, and analytics data. |
Berjaya33 collects personal data through three primary means: data you provide directly, data generated automatically through your use of the Platform, and data received from third parties involved in identity verification and payment processing.
We process your personal data for the following defined purposes. Each purpose is linked to a specific legal basis described in Section 5.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, KYC data | Contract performance |
| Identity and age verification (KYC) | KYC data, third-party verification results | Legal obligation / Contract |
| Processing deposits and withdrawals | Financial data, transaction data | Contract performance |
| Fraud prevention and AML compliance | All categories as required | Legal obligation / Legitimate interest |
| Responsible gambling monitoring | Transaction data, usage data, declarations | Legitimate interest / Legal obligation |
| Customer support | Communications, registration data | Contract performance |
| Platform improvement and analytics | Usage data, cookie data (consented) | Legitimate interest / Consent |
| Marketing communications | Registration data, preference data | Consent |
Berjaya33 processes your personal data only where a valid legal basis exists. The four legal bases we rely upon are as follows:
The majority of our data processing is necessary to perform the contract we hold with you — specifically, to operate your Account, process your transactions, and deliver the gaming and betting services you have registered to use. Without this processing, we cannot provide the Platform's core services.
Certain processing activities are required to comply with legal obligations applicable to Berjaya33 under the laws of its licensing jurisdiction, including anti-money laundering (AML) regulations, counter-terrorist financing (CTF) requirements, and Know Your Customer (KYC) obligations. We are required to retain records of these compliance activities for defined periods regardless of your Account status.
Where processing is not required by contract or law, we may rely on our legitimate interest in operating a secure, fraud-free, and well-functioning Platform — provided that interest does not override your own privacy rights. Legitimate interest processing includes fraud detection, security monitoring, responsible gambling pattern analysis, and internal analytics. We conduct proportionality assessments before relying on this basis.
For processing that is not otherwise justified above — primarily optional analytics cookies and marketing communications — we rely on your explicit consent. Consent is always freely given, specific, and informed. You may withdraw consent at any time without detriment to your use of the Platform's core services. Withdrawal of marketing consent can be done via your Account settings or by contacting support.
Berjaya33 does not sell, rent, exchange, or otherwise commercialise your personal data with third parties. We share personal data only in the following defined and controlled circumstances:
We engage trusted third-party service providers who process data on our behalf under binding Data Processing Agreements (DPAs) that prohibit any use of your data beyond the specific service being provided. These include:
We may disclose personal data to competent authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory demand — including AML, CTF, and fraud investigations. In all cases, we disclose only the minimum data necessary to satisfy the legal requirement.
In the event of a merger, acquisition, or sale of all or substantially all of Berjaya33's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer, and the acquiring entity will be bound by the same data protection obligations as set out in this Policy.
We Never Sell Your Data: Berjaya33 does not and will never sell personal data to data brokers, advertisers, or any other third party for their independent commercial use. Data sharing is strictly limited to the operational purposes described in this section.
As an internationally licensed online gaming platform, Berjaya33 may process and store your personal data on servers located outside Malaysia. Where personal data is transferred to jurisdictions that do not have data protection standards equivalent to those in your home country, we implement appropriate safeguards to protect your data.
These safeguards include: standard contractual clauses requiring recipients to apply equivalent data protection standards; technical security measures including encryption in transit and at rest; and contractual restrictions on the purposes for which transferred data may be used.
If you have questions about the specific safeguards applied to international transfers of your data, you may contact our Data Protection contact at the address set out in Section 16.
We retain personal data for no longer than is necessary for the purpose for which it was collected, subject to applicable legal minimum retention periods. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / Legal obligation |
| KYC verification documents | Duration of account + 5 years post-closure | AML / Legal obligation |
| Transaction records (all deposits, withdrawals, bets) | 5 years from date of transaction | AML / Legal obligation |
| Support communications | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent management |
| Analytics and usage data | Up to 26 months (aggregated / anonymised) | Consent / Legitimate interest |
| Self-exclusion records | Duration of exclusion period + 5 years | Legal obligation / Player protection |
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
Berjaya33 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:
While we implement all reasonable and appropriate technical and organisational security measures, no data transmission over the internet is completely secure, and we cannot provide an absolute guarantee against all possible data security threats.
Berjaya33 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to keep your session secure, and — where you have consented — to improve the Platform and personalise your experience.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, security tokens, authentication state, load balancing. Cannot be disabled without breaking core Platform functionality. | No — essential |
| Functional | Remembering your language preferences, display settings, and recently viewed games. | No — service delivery |
| Analytics | Aggregated, anonymised data on how users navigate the Platform, which features are most used, and where technical errors occur. Used to improve Platform quality. | Yes — consent-based |
| Marketing | Tracking whether you arrived via a specific promotional link or affiliate referral, to attribute bonus eligibility correctly. | Yes — consent-based |
You may manage or disable non-essential cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block third-party cookies only, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your Account.
Berjaya33 does not currently use cross-site tracking cookies to follow your activity outside of our own Platform. Our analytics cookies are scoped to berjaya33.cam only.
As a Data Subject, you hold the following rights in relation to your personal data held by Berjaya33. These rights may be subject to certain conditions and exceptions as provided for under applicable data protection law, including situations where retention is required by legal obligation.
To exercise any of these rights, please contact our Data Protection team at the address set out in Section 16. We will verify your identity before processing any data subject request, and will respond within 30 calendar days of receiving a verified request. Where requests are complex or numerous, we may extend this period by a further 30 days with prior notice.
Berjaya33 does not knowingly collect personal data from any person under the age of 21. The Platform is strictly intended for adults aged 21 and above. As part of our account registration process, we apply mandatory KYC age verification requiring government-issued identification before withdrawal capabilities are activated.
If we become aware that personal data has been collected from a person under the age of 21, we will immediately and permanently close the associated Account, delete all associated personal data (except where retention is required to fulfil legal reporting obligations), and forfeit all balances in accordance with our Terms and Conditions.
If you are a parent or guardian and believe that a minor has created an Account on Berjaya33 using your or their own details, please contact our support team immediately via the channels described in Section 16.
21+ Only: Our services are strictly for players aged 21 and above. Age verification is mandatory and enforced. Berjaya33 cooperates fully with any investigation related to underage access and will report confirmed cases to relevant authorities where required.
Berjaya33 may send you marketing communications about promotions, new games, bonus offers, and Platform updates, but only where you have provided explicit consent to receive such communications at the time of registration or thereafter.
Marketing messages may be sent via email, SMS, or in-Platform notification. Each marketing communication will include a clear and functional mechanism to unsubscribe or opt out. You may also update your marketing preferences at any time through your Account settings, or by contacting support.
Withdrawing marketing consent does not affect your ability to use the Platform or access your Account. It simply means you will no longer receive promotional communications from us, though you may still receive service-essential communications (such as withdrawal confirmations, KYC requests, or security alerts).
The Platform may contain references to or integrations with third-party services, including payment processors such as Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks. When you interact with these third-party services, you are subject to their own privacy policies, which Berjaya33 does not control.
Berjaya33 is not responsible for the privacy practices of third-party payment processors, game studio providers, or any other external services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.
Our Data Processing Agreements with all Data Processors require them to process data only as instructed by Berjaya33, to implement appropriate security measures, and to prohibit further sub-processing without our express written authorisation.
Berjaya33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to Platform operations. Material changes — those that significantly alter how we collect, use, or share your personal data — will be communicated to Account Holders by email or prominent in-Platform notice no less than 14 calendar days before the change takes effect.
Non-material amendments (such as typographical corrections or clarifications that do not alter your rights) may be made without prior notice. The effective date displayed at the top of this page will always reflect the date of the most recent revision.
Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept any revised terms, you must discontinue use of the Platform and close your Account prior to the effective date.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a privacy concern, please contact the Berjaya33 Data Protection team through the following channels:
We will acknowledge all privacy-related enquiries within 3 business days and will aim to resolve them fully within 30 calendar days. For complex data subject requests, we may extend the resolution period by a further 30 days with prior notice to you.
For concerns related to responsible gambling and the processing of your responsible gambling data, please also visit our Responsible Gambling page.
This Privacy Policy was last reviewed and updated on 1 January 2026. Please check this page periodically for the most current version. We recommend saving or printing a copy of this Policy for your records.
Our support team is available 24/7 to assist with any privacy enquiry, data access request, or question about how we handle your personal information. You can also explore our full FAQ for quick answers.
For full details on your rights and our data practices, please read our complete Privacy Policy above. Also see our Terms & Conditions and Responsible Gambling Policy.