Privacy Policy aman33 — Malaysia Player Data Protection

1Data Collected by aman33

Aman33 collects your personal data through two main ways — data you provide directly while using the platform, and data collected automatically as you browse our website or use our app.

2How Your Data Is Used

Data collected by aman33 is used for specific and limited purposes. We do not use your data for purposes unrelated to platform operations without obtaining your consent first.

• Account Management: To create, maintain, and protect your aman33 account.
• Transaction Processing: To process deposits, withdrawals, and all financial activities accurately and securely.
• Identity Verification (KYC): To meet legal compliance requirements for verifying player identity and age.
• Customer Support: To provide relevant assistance based on account history and reported issues.
• Platform Security: To detect and prevent fraud, multi-account usage, and suspicious activity.
• Responsible Gaming: To monitor gameplay patterns and provide appropriate support to players who may need assistance.
• Platform Communications: To send account-related notifications, promotions you have subscribed to, and important updates about our services.
• Service Improvement: To analyze platform usage patterns for product improvement and user experience enhancement.

3Third-Party Data Sharing

Aman33 only shares player personal data with third parties in limited and controlled circumstances. All data sharing is subject to legally binding data protection agreements.

• Payment Processors: Information required to complete transactions is shared with licensed payment processors such as FPX, TNG eWallet and Boost providers. This data is limited strictly to what is needed for transaction verification.
• Technology Providers: Cloud infrastructure and software providers that support aman33 operations may access data within environments governed by strict confidentiality agreements.
• Legal Requirements: aman33 will disclose data if ordered by a court, regulatory authority, or legitimate law enforcement body. We will endeavor to notify you of any such request unless prohibited from doing so by law.

4Data Security & Encryption

Aman33 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS encryption for all communications between the browser/app and server.
• Passwords are stored in bcrypt hash format — even aman33 staff cannot read your password.
• Two-factor authentication (2FA) is available for all accounts and is strongly recommended.
• Automated security scanning and periodic penetration testing are conducted by the internal security team and independent auditors.
• All aman33 servers operate in ISO 27001-certified data centres with strict physical access controls.
• An intrusion detection system (IDS) monitors network traffic in real time to identify abnormal activity.

While aman33 takes all reasonable steps to protect your data, no system is one hundred percent immune. We encourage you to play your part in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

5Cookies & Tracking Technologies

Aman33 uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and ensure the security of your login session.

• Essential Cookies: Required for core platform operations — including login session management and security. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous information about how visitors use our website to help us understand and improve the platform.
• Preference Cookies: Stores your preferences such as language, time zone and display settings to enhance your experience on future visits.
• Session Token: Used to verify your active session and protect against CSRF attacks.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality. aman33 does not use third-party cookies for advertising purposes.

6Your Rights as a User

Aman33 respects your rights over your personal data. Here are the rights you hold and how to exercise them:

7Data Storage & Deletion

Aman33 retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with applicable legal and operational requirements.

• Active account data: Retained for as long as your account remains active on the aman33 platform.
• KYC and financial records: Retained for a minimum of 5 years after account closure, in line with applicable anti-money laundering (AML) compliance requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical data and access logs: Retained for 12 months for security and incident investigation purposes.

Once the retention period expires or you request data deletion (subject to binding legal requirements), aman33 will securely delete or anonymise your data using industry-standard methods.

All data is stored on servers located in regions that comply with relevant data protection laws. Cross-border data transfers, where applicable, are only carried out with adequate safeguards such as recognised standard contractual clauses.

8Privacy Policy Amendments

Aman33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or technology in use.

• Any significant amendments will be communicated to players via in-platform notifications or registered email at least 14 days before taking effect.
• The "Updated" date at the top of this page always reflects the latest version of this policy.
• Continued use of the aman33 platform after any amendments take effect will be considered your acceptance of the updated policy.
• If you disagree with any amendments made, you have the right to close your account and request deletion of your data before the new policy takes effect.