rempit33 Privacy Policy

1. Introduction

rempit33 ("we", "us", "the Platform", "rempit33") operates the online gaming platform accessible at https://rempit33.win. This Privacy Policy applies to all personal data collected from individuals ("you", "the Player", "the User") who access or use the rempit33 platform, whether via desktop browser, mobile browser, or any other interface through which the rempit33 services are delivered.

rempit33 takes the privacy and security of your personal data seriously. As an online gaming operator serving players across Malaysia — including in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and beyond — we are committed to handling your personal information with the care, transparency, and security it deserves. This Policy is intended to give you a clear and honest picture of what data we hold about you, why we hold it, what we do with it, and what rights you have in relation to it.

This Privacy Policy should be read alongside, and forms part of, the rempit33 Terms & Conditions. Capitalised terms used in this Policy but not defined herein carry the meaning ascribed to them in the Terms & Conditions.

2. Personal Data We Collect

rempit33 collects personal data from you in the following categories and contexts:

2.1 Registration & Account Data

• Full legal name as it appears on your official identification document;
• Date of birth (for age verification — you must be 21 or older);
• Email address (your primary account identifier and communication channel);
• Mobile telephone number (used for SMS-based two-factor authentication and account alerts);
• Residential address (required for KYC compliance);
• Username and encrypted password hash.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (Malaysian IC, passport, or equivalent);
• Selfie photographs submitted as part of liveness verification procedures;
• Proof of address documentation where required by our compliance obligations;
• Source of funds declarations where required by AML/CFT regulatory standards.

2.3 Financial & Transaction Data

• Payment method details used for deposits and withdrawals — including e-wallet account references (Touch n Go, Boost), bank account numbers (Maybank, CIMB, Public Bank, and others), and DuitNow registered identifiers;
• Full transaction history including deposit amounts, withdrawal amounts, timestamps, and payment method used;
• Bonus and promotional activity records.

2.4 Gaming Activity Data

• Game session logs including games played, bet amounts, win/loss outcomes, and session duration;
• Sportsbook bet history including markets, selections, stake amounts, and settlement records;
• Lucky Bingo and Lucky Dice session histories;
• Responsible gaming tool usage, including deposit limit settings and self-exclusion activations.

2.5 Technical & Device Data

• IP address at time of registration and each subsequent login;
• Device type, operating system, and browser type and version;
• Geolocation data at session commencement (where location services are permitted by your device);
• Session duration, pages visited, and in-platform navigation patterns.

2.6 Communications Data

• Records of all communications between you and rempit33 customer support, whether via live chat, email, or ticket system;
• Survey responses and feedback you voluntarily submit to rempit33.

3. How We Use Your Personal Data

rempit33 processes your personal data for the following purposes:

• Account Management: To create, operate, and maintain your rempit33 account, authenticate your identity at each login, and deliver the gaming services you have contracted to receive;
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with our licensing obligations and AML/CFT regulatory requirements;
• Payment Processing: To process your deposits and withdrawals through your chosen payment methods, including Touch n Go eWallet, Boost, and local bank transfer channels;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct on the rempit33 platform;
• Legal & Regulatory Compliance: To comply with our obligations under applicable gaming licensing conditions, anti-money laundering laws, data protection regulations, and any lawful requests from competent authorities;
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance through the rempit33 support channels;
• Responsible Gaming: To monitor gaming behaviour for patterns indicative of problem gambling, to enforce self-exclusion requests, and to administer responsible gaming tools and limits;
• Platform Improvement: To analyse aggregate usage patterns and technical performance data for the purpose of improving the rempit33 platform, game selection, and user experience;
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw this consent at any time by updating your communication preferences in your account settings or contacting support.

4. Legal Basis for Processing

rempit33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and rempit33 — including account operation, payment processing, and game delivery — is processed on the basis of contractual necessity;
• Legal Obligation: Processing required to comply with our legal and regulatory obligations — including KYC, AML, and licensing requirements — is processed on the basis of legal obligation;
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics is conducted on the basis of our legitimate interests in operating a secure and compliant gaming platform, balanced against your data protection rights;
• Consent: Marketing communications are processed solely on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

rempit33 does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: We share necessary financial data with payment processing partners (including e-wallet operators and banking institutions) to facilitate your deposits and withdrawals. These parties process your data under their own privacy policies and applicable financial regulations;
• KYC & Identity Verification Providers: We engage certified third-party identity verification services to conduct document verification and liveness checks as part of our KYC compliance programme. These providers process your identity documents on our behalf under strict data processing agreements;
• Game Software Providers: Game providers (including Evolution Gaming, Pragmatic Play, and others) may receive session-level data necessary to deliver, record, and audit game outcomes. Game providers are contracted to process this data solely for game delivery and fairness audit purposes;
• Regulatory Authorities: rempit33 may disclose personal data to gaming regulators, law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or regulatory direction;
• Fraud Prevention Services: We may share data with third-party fraud detection and AML screening services to identify and prevent financial crime on the rempit33 platform.

6. Cookies & Tracking Technologies

The rempit33 platform uses cookies and similar tracking technologies to operate and improve our services. We deploy the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, load balancing, and security tokens. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Used to remember your preferences, language settings, and responsible gaming configurations across sessions;
• Analytics Cookies: Used to collect anonymised data about how players interact with rempit33 — including pages visited, session duration, and navigation patterns — to help us improve the platform. This data is aggregated and does not identify individual users;
• Security Cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other malicious activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will materially impair your ability to use the rempit33 platform.

7. Data Retention

rempit33 retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by AML/CFT regulations;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction;
• Communications Records: Customer support communications retained for three (3) years from the date of the interaction;
• Technical Logs: IP address and session logs retained for twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data destruction procedures.

8. Data Security

rempit33 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction:

• Transport Encryption: All data transmitted between your device and rempit33 servers is encrypted using 256-bit Transport Layer Security (TLS). This applies to all platform interactions including login, payment processing, and gameplay;
• Data-at-Rest Encryption: Sensitive personal data stored on rempit33 servers is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within rempit33 is restricted on a strict need-to-know basis. Staff access to player data is logged and audited;
• Two-Factor Authentication: All rempit33 administrative accounts require multi-factor authentication. Players are strongly encouraged to enable 2FA on their accounts;
• Security Monitoring: rempit33 employs continuous security monitoring to detect intrusion attempts, anomalous access patterns, and potential data breach indicators;
• Penetration Testing: The rempit33 platform undergoes regular independent security assessments.

In the event of a personal data breach that poses a risk to your rights and freedoms, rempit33 will notify affected players and relevant regulatory authorities in accordance with applicable data protection laws.

9. Your Data Protection Rights

Subject to applicable law and certain regulatory limitations, you have the following rights with respect to your personal data held by rempit33:

• Right of Access: You may request a copy of the personal data rempit33 holds about you;
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right of Erasure: You may request deletion of your personal data in certain circumstances. Please note that we may be required to retain certain data under AML, licensing, and other regulatory obligations, which override erasure requests in respect of that data;
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances while a dispute or complaint is under review;
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the rempit33 data team via the live chat on the platform or via email to [email protected]. We will respond to verified requests within thirty (30) days.

10. Children's Privacy

The rempit33 platform is strictly restricted to individuals aged 21 years and above. rempit33 does not knowingly collect, process, or retain any personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and permanently close the associated account. Parents or guardians who believe a minor has accessed rempit33 should contact us immediately at [email protected].

11. Third-Party Services

The rempit33 platform integrates third-party services including game software providers, payment processors, and analytics tools. Each third-party provider operates under its own privacy policy. rempit33 conducts due diligence on third-party providers to ensure adequate data protection standards prior to engagement, and all third-party data processors are engaged under formal data processing agreements requiring compliance with applicable data protection obligations.

rempit33 is not responsible for the privacy practices of third-party services accessed through links or integrations on the platform beyond the scope of our contractual data processing arrangements with those parties.

12. International Data Transfers

rempit33 is an international gaming platform. In the course of providing our services, your personal data may be transferred to and processed in jurisdictions outside Malaysia, including the location of our licensing authority, hosting infrastructure, and key service providers. Where personal data is transferred internationally, rempit33 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Malaysia, including through the use of standard contractual clauses or other recognised transfer mechanisms.

13. Updates to This Privacy Policy

rempit33 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date at the top of this document will be updated to reflect the date of the most recent revision. Material changes will be communicated to registered players via email to the registered address on file. Continued use of the rempit33 platform following the posting of a revised Privacy Policy constitutes your acceptance of the changes.

Players are encouraged to review this Privacy Policy periodically. The most current version is always available at https://rempit33.win/privacy-policy.

14. Contact & Data Enquiries

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data by rempit33, please contact our support and data team through the following channel: