Privacy Policy harta33

Introduction and Scope of This Policy

This Privacy Policy is issued by harta33 ("we" or "the platform") and applies to all users who register, log in or use the services provided on the harta33 website. This policy explains the types of personal data we collect, the purposes for which it is used, how it is stored and the rights you hold as a user in relation to that information.

By continuing to use the harta33 platform, you confirm that you have read, understood and agreed to the provisions of this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

Information We Collect

harta33 collects personal information required solely for the purposes of operating the platform, verifying identity, processing payments and meeting international licensing requirements. The information collected includes:

• Identity information: full name, date of birth, national identity card number (MyKad) or passport
• Contact information: email address, mobile phone number, mailing address
• Account information: username, password (in encrypted form), login history
• Financial information: e-wallet account name, bank account number (for withdrawal verification), deposit and withdrawal history
• Device and technical information: IP address, browser type, operating system, game session data
• User behaviour information: game preferences, betting patterns, in-platform transaction history

We do not collect information unrelated to platform operations. All data collection is carried out on the basis of consent given during the account registration process.

Purposes for Using Personal Data

All data collected by harta33 is used for legitimate purposes directly related to the provision of platform services. Those purposes are as follows:

• Verifying the identity and age of players (minimum age 21 years) during account registration
• Processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Boost and cryptocurrency
• Account-related communications: email verification, transaction notifications, customer support responses
• Prevention of fraud, money laundering and other illegal activities
• Compliance with international licensing requirements and internal audits
• Improving user experience based on general behavioural analysis (without identifying individuals)
• Managing the VIP programme and awarding eligible bonuses to players

Sharing and Disclosure of Information

harta33 takes a very careful approach to data sharing. As a core principle, we do not sell, transfer or disclose player personal data to outside parties without explicit consent, except in the circumstances set out below:

• Approved payment service providers: to process deposits and withdrawals on your behalf, limited to only the information required
• Technology service providers: cloud storage, cybersecurity systems and technical support that are bound by strict confidentiality agreements
• Regulatory authorities: where required by law or by direction of a legitimate licensing body
• Fraud investigations: information required for the investigation of fraudulent activity or money laundering by authorised parties

In all cases of sharing, we ensure that recipients of data are subject to confidentiality and data protection obligations equivalent to our own standards.

Data Storage and Retention Periods

Player personal data is stored in a secure, encrypted server environment. Retention periods depend on the type of information and operational requirements:

• Active account data is retained for the duration the account is active plus at least 5 years after the account is closed
• Financial transaction records are retained for the period required by international licensing and audit requirements
• System logs and session data are retained for the period required for security and investigation purposes
• Data that is no longer required will be securely deleted or anonymised in accordance with established procedures

Once an account is closed at a player's request, we will retain the minimum records required by law and licensing before carrying out full deletion of data that is no longer needed.

Use of Cookies and Tracking Technologies

harta33 uses cookies and similar tracking technologies to improve the user experience on the platform. Cookies are small text files stored on your device when you visit our website.

• Session cookies: allow you to remain logged in and retain your preferences during an active visit
• Preference cookies: store your language settings, display preferences and game choices
• Internal analytics cookies: help us understand usage patterns in order to improve the platform
• Security cookies: used to detect unusual activity and prevent unauthorised access

You can manage cookie settings through your browser settings. However, disabling certain cookies may affect platform functionality. harta33 does not use third-party cookies for advertising purposes.

Your Rights as a User

As a registered harta33 player, you have the following rights regarding your personal data. All requests relating to these rights can be submitted through our customer support channels:

• Right of access: you may request a copy of the personal data we hold in relation to your account
• Right to rectification: you may request correction of information that is inaccurate or out of date
• Right to erasure: in certain circumstances, you may request deletion of your data after your account is closed
• Right to restrict processing: you may request that we limit the use of your data in circumstances provided for under this policy
• Right to withdraw consent: you may withdraw consent for data processing at any time, subject to minimum operational requirements
• Right to complain: if you believe your privacy rights have been violated, you have the right to submit a formal complaint to us

Cross-Border Data Transfers

As a platform operating under international licensing, harta33 may store or process personal data on servers located outside Malaysia. Any such data transfer is carried out with strict protective measures in place:

• Transfers only to jurisdictions that apply equivalent data protection standards
• Use of contractually binding data transfer agreements with all service providers
• Full data encryption both in transit and at rest
• Regular audits of third-party providers to ensure ongoing compliance

By using the harta33 platform, you agree to such data transfers subject to the protective measures outlined above.

Data Breaches and Incident Response

Although harta33 implements comprehensive security measures, no system can be guaranteed 100% secure. Should a data breach occur that affects your personal information, we are committed to:

• Notifying affected players within a reasonable time after the breach is detected and confirmed
• Providing details of the nature of the breach, the data involved and the steps that have been taken
• Issuing practical guidance to players to protect themselves from further impact
• Cooperating fully with the relevant authorities in the investigation of the incident
• Taking immediate remedial action to prevent any further unauthorised access to or misuse of data

Amendments to the Privacy Policy

harta33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, licensing requirements or applicable law. Any material amendments will be communicated to players via in-platform notifications or email.

The effective date of the current version of this Privacy Policy is 1 January 2026. Continued use of the harta33 platform after the amendment's effective date is considered acceptance of the latest version of this policy.