Privacy Policy

1 Introduction

God33 ("we", "us", "our", "the Company") operates the online gaming platform accessible at god33.cam. We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, including registered Members, prospective users, and visitors to our website.

This Privacy Policy ("Policy") describes how God33 collects, processes, stores, uses, and — where applicable — shares personal data in connection with the provision of our online casino, sports betting, and related gaming services. It has been prepared in a manner consistent with the principles of the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and with internationally recognised data protection standards.

By registering an account on God33, making a deposit, or otherwise using our Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. This Policy forms part of your overall agreement with God33 and should be read in conjunction with our Terms & Conditions.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Data Controller" means God33, the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means any third party that processes personal data on behalf of God33 under a data processing agreement, including payment processors, KYC verification providers, and cloud infrastructure providers.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by God33 — primarily Members and Platform users.
• "Personal Data" means any information relating to an identified or identifiable natural person, including names, identification numbers, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Sensitive Personal Data" means personal data warranting special protection, including financial account details, identity document numbers, and data relating to health or wellbeing.
• "Platform" means the God33 website, mobile site, applications, and all associated services accessible at god33.cam.

3 Data We Collect

God33 collects only the personal data that is necessary for the purposes described in this Policy. We do not collect data speculatively or in excess of our operational requirements. The categories of personal data we collect include:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Malaysian MyKad number, Passport number, or Driver's Licence number (collected during KYC verification)
• Residential address, including postcode, city, and state
• Email address and mobile phone number

• Payment method details necessary to process deposits and withdrawals (e.g., e-wallet account identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account numbers for Maybank, CIMB, Public Bank, Hong Leong, RHB; card details for Visa/Mastercard)
• Transaction history, including deposit amounts, withdrawal requests, and bonus redemptions
• Source of funds information requested where required for AML compliance purposes

• Wagering history across all game categories (live casino, slots, sports betting)
• Game session duration and frequency data
• Responsible gambling tool usage (deposit limits set, self-exclusion requests)

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Session identifiers, cookies, and login timestamps

• Records of customer support interactions, including live chat transcripts and email correspondence
• Feedback and survey responses submitted voluntarily

4 How We Collect Personal Data

God33 collects personal data through the following channels and methods:

• Account Registration: Data you provide directly when creating your God33 account, including your name, date of birth, email, and contact details.
• KYC Verification Portal: Identity documents and selfie verification images submitted through our secure in-platform verification system.
• Deposits & Withdrawals: Payment data shared with us and our payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB) when you transact on the Platform.
• Platform Usage: Technical and gaming activity data collected automatically as you use the Platform, including via cookies and server-side logging.
• Customer Support: Information you provide to our support team when you submit a query, complaint, or dispute.
• Third-Party Sources: In limited circumstances, we may receive data from third-party identity verification providers, fraud prevention services, or publicly available sources for the purpose of validating your identity or verifying information you have provided.

5 Data Processing — Purposes & Uses

God33 processes personal data for specific, legitimate purposes only. The table below summarises the principal processing activities and their associated purposes:

6 Legal Basis for Processing

God33 relies on the following legal bases when processing your personal data:

• Contract Performance: Processing is necessary to perform our contractual obligations to you as a registered Member, including operating your account, processing payments, and providing gaming services.
• Legal Obligation: Certain processing activities are required by law, including identity verification under anti-money laundering regulations and age verification requirements applicable to online gambling operators.
• Legitimate Interests: God33 processes some data on the basis of our legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and improving the quality of our services. Where we rely on legitimate interests, we have assessed that such interests do not override your fundamental rights and freedoms.
• Consent: For optional processing activities — such as sending you marketing emails or promotional SMS messages — we rely on your express, affirmative consent. You may withdraw consent at any time by contacting our support team or updating your notification preferences within your account settings.

7 Data Sharing & Disclosure

God33 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share data only in the circumstances and with the categories of recipients described below:

To process your deposits and withdrawals, we share necessary financial and identity data with our payment processing partners, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank), as well as Visa/Mastercard network processors and cryptocurrency payment gateways. All payment partners are contractually required to process your data solely for payment purposes and to maintain appropriate security standards.

God33 uses third-party identity verification services to process KYC documentation. These providers access only the data strictly necessary for verification purposes and are prohibited from using your data for any other purpose.

We share data with fraud detection and anti-money laundering service providers as necessary to protect the integrity of the Platform and comply with our legal obligations. This may include sharing transactional patterns and identity data with recognised financial crime prevention bodies.

God33 will disclose personal data to competent legal or regulatory authorities where we are required to do so by law, court order, or other binding legal process. We will notify affected Members of any such disclosure to the extent permitted by law.

Our Platform is hosted and operated using third-party cloud infrastructure and technology service providers. These parties process data on our behalf under strict data processing agreements and do not use your data for their own purposes.

8 Cookies & Tracking Technologies

God33 uses cookies and similar tracking technologies to operate core Platform functions, improve user experience, and gather aggregate analytics data. Cookies are small text files placed on your device when you access the Platform.

• Essential Cookies: Required for the Platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled without rendering the Platform inoperable.
• Functional Cookies: Remember your preferences such as language, display settings, and notification choices to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — including pages visited, time on page, and navigation paths — to help us identify areas for improvement.
• Security Cookies: Used for fraud detection, bot prevention, and to protect the integrity of login sessions.

You can control non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your Platform experience. Disabling essential cookies will prevent you from using the Platform altogether.

9 Data Retention

God33 retains personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Active Account Data: Retained for the duration of your membership and for a period of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years in compliance with Malaysian financial regulations applicable to gaming operators.
• KYC Documents: Retained for five (5) years following account closure or the conclusion of any regulatory investigation related to your account, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution processes.
• Gaming Activity Logs: Retained for five (5) years to support responsible gambling monitoring, dispute resolution, and regulatory compliance.
• Marketing Preference Data: Retained until you withdraw consent or until two (2) years of inactivity, whichever comes first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual.

10 Data Security

God33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Transport Layer Security: All data transmitted between your device and God33 servers is encrypted using TLS 1.2 or TLS 1.3 (256-bit SSL).
• At-Rest Encryption: Sensitive data stored in our databases — including financial data and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within God33 is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Withdrawal-linked transactions and sensitive account changes require two-factor authentication by default.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity, with automated alerts and manual review processes in place.
• Vulnerability Management: God33 conducts regular security assessments of its Platform infrastructure and applies security patches on an expedited basis when vulnerabilities are identified.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, God33 will notify you and, where required, the relevant authorities in a timely manner in accordance with applicable data breach notification obligations.

11 Your Rights as a Data Subject

As a data subject, you hold the following rights in relation to your personal data held by God33. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.