Mint33 Privacy Policy – Malaysian Player Data Protection

01Introduction & Privacy Commitment

Mint33 is an online Sports Betting and casino platform operating in Malaysia. We are fully committed to protecting the privacy of every member and user on our platform. This Privacy Policy has been drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and serves as a comprehensive guide to how we manage your personal data.

By registering an account with mint33, using any of our services, or visiting our website, you agree to the collection and use of your information as described in this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the mint33 platform and contact us to close your account.

02Personal Data We Collect

Mint33 collects your personal data from various sources in the context of your use of the platform. The following outlines the categories of data we collect and their original purpose of collection:

Data You Provide Directly:

• Full name as shown on your Malaysian identification document
• Date of birth and gender
• An active Malaysian phone number
• Email address (if registered)
• Your chosen username and password (stored in encrypted form)
• Payment method details used – Touch 'n Go, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, ShopeePay, or Boost (account numbers stored in masked format)
• Identity documents for KYC verification if required (Malaysian identity card number or passport)

Automatically Collected Data:

• IP address and approximate location based on IP
• Device type and version, operating system, and web browser used
• Login session data including date, time, and session duration
• Records of all betting activity — markets selected, stake amounts, outcomes, and transaction history
• Deposit and withdrawal records, including payment method, amount, and transaction time
• Usage pattern data – pages visited, searches made, and clicks within the platform
• Cookie and tracking technology data (detailed in Section 6)

Data from Third-Party Sources:

• Payment verification information from Malaysian e-wallet providers (Touch 'n Go, GrabPay, and others) for processing transactions
• Identity verification data from approved third-party KYC services, where applicable

03How We Use Your Personal Data

Mint33 uses collected personal data only for the following legitimate and necessary purposes:

• Account Management: Creating, verifying, and managing your member account; processing registration and login; updating your profile information upon request.
• Transaction Processing: Processing all deposits via Touch 'n Go, GrabPay, DuitNow, FPX, ShopeePay, and Boost; managing withdrawal of winnings; and maintaining accurate transaction records for accounting and compliance purposes.
• Bet Management: Processing and verifying sports bets (football, Malaysia Super League, EPL, BWF badminton, e-sports, and more); updating accumulator and in-play records; automatically calculating and crediting winnings.
• Customer Support: Providing support via live chat, email, and WhatsApp; resolving complaints and disputes; monitoring the quality of our customer support services.
• Security & Fraud Prevention: Detecting and blocking suspicious account activity; preventing fraud, money laundering, and system exploitation; ensuring each account is held by a single individual.
• Legal Compliance: Fulfilling Malaysia's PDPA compliance obligations; adhering to directives from relevant authorities as required by law.
• Marketing & Communications (with your consent): Sending promotional content, bonus offers, and platform updates via SMS or push notification – only to members who have given explicit consent.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling; facilitating the use of control tools such as deposit limits and self-exclusion.
• Platform Improvement: Analysing usage data in aggregate (not at an individual level) to improve the user experience, platform performance, and various aspects of the mint33 product.

04Data Sharing & Disclosure

Mint33 does not sell, rent, or transfer your personal data to any third party for their marketing or commercial purposes. However, under the following limited circumstances, we may share your information:

• Trusted Service Providers: We share necessary data with third-party service providers acting on our behalf — including payment processors (Touch 'n Go, GrabPay, DuitNow, and others), KYC service providers, and server infrastructure providers. All such third parties are bound by strict confidentiality agreements and are only permitted to use your data for the purposes of the services they provide to mint33.
• Legal Requirements: We may disclose your data to legal authorities, enforcement bodies, or courts when required or permitted under applicable Malaysian law. This includes directives from Bank Negara Malaysia, the Malaysian Communications and Multimedia Commission (MCMC), or other relevant Malaysian government agencies.
• mint33 Rights Protection: Where necessary to protect the rights, property, or safety of mint33, our members, or the public from fraudulent activity, money laundering, or other threats.
• Business Transfers: In the event of any merger, acquisition, or sale of mint33's assets, member data may be transferred to the receiving entity. You will be notified via an in-platform notification at least 30 days prior to any such transfer and given the option to close your account before it takes place.

05Data Security & Protection Measures

Mint33 invests seriously in security infrastructure to ensure your personal and financial data is protected at every level. Key security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communications between your device and mint33's servers are encrypted using the latest TLS 1.3 protocol. This ensures that no third party can intercept or read your data in transit.
• Encrypted Password Storage: Your account password is never stored in plain text. We use a one-way hashing algorithm with a random salt, ensuring your password cannot be recovered — even by the mint33 team itself.
• PCI DSS Compliance: mint33's payment system complies with the Payment Card Industry Data Security Standard (PCI DSS), ensuring all financial transaction information is protected to the highest industry standards.
• 24/7 Security Monitoring: Our security team continuously monitors the platform to detect any suspicious activity, unauthorised access attempts, or anomalies in data usage patterns.
• Internal Access Controls: Access to member data within mint33 is restricted to staff who require it for their specific job functions only, in line with the principle of least privilege. All access is logged and audited on a regular basis.
• Secure Data Backup: Your data is regularly backed up to a secure, separate server location to ensure rapid data recovery in the event of a technical failure.
• Penetration Testing: mint33 conducts regular penetration testing carried out by independent third-party security experts to identify and patch any vulnerabilities before they can be exploited.

06Cookies & Tracking Technologies

Mint33 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyse platform performance. The types of cookies we use are as follows:

You can manage optional cookies through your web browser settings at any time. However, disabling essential cookies will affect the core functionality of the mint33 platform.

07Data Storage & Retention

Mint33 retains your personal data only for as long as it is necessary for the purpose it was collected, or as required under applicable Malaysian law. The retention period for each data category is as follows:

• Active Account Data: Retained for as long as your mint33 account remains active. This data is continuously updated in line with your activity.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian accounting and financial regulatory requirements.
• Betting Records: Retained for 5 years for audit, dispute resolution, and compliance purposes.
• Support Communication Logs: Retained for 3 years for reference and service quality improvement purposes.
• Closed Account Data: After your account is closed at your request, your identifiable personal data will be anonymised within 90 days, except for records that must be retained by law.
• Security Logs: Retained for 1 year for security investigation and fraud prevention purposes.

Once the designated retention period has lapsed and there is no legal requirement to retain the data further, your data will be securely deleted or anonymised across all mint33 systems.

08Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mint33:

• Right of Access: You have the right to request a copy of the personal data mint33 holds about you. We will provide this information within 21 business days of receiving a valid request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most of your profile information directly within your mint33 account.
• Right to Withdraw Consent: For data processing that relies on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to that point.
• Right to Object: You have the right to object to the processing of your data for specific purposes, subject to applicable legal requirements and contractual obligations.
• Right to Erasure (Right to be Forgotten): Under certain circumstances, you may request the deletion of your personal data. Such requests are subject to the legal retention requirements outlined in Section 7.

09Children's Data & Age Protection

The mint33 platform is strictly for adults aged 18 and above. mint33 does not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data belonging to a minor has been collected without proper age verification, we will:

• Immediately closing the account in question
• Deleting or blocking all associated personal data
• Rejecting all pending unprocessed withdrawals associated with the account
• Forfeiture of all winnings obtained as a result of the age violation

10Cross-Border Data Transfers

In the course of mint33's operations, a limited amount of data may be processed or stored outside Malaysia — specifically in relation to server infrastructure services and international payment processing used by our platform.

In all cases of cross-border data transfers, mint33 ensures:

• Transfers are made only to countries or parties that maintain a level of data protection equivalent to or higher than Malaysia's PDPA standards
• Legally valid data processing agreements are established with all recipients of data outside Malaysia.
• Data transferred is kept to a minimum and limited strictly to what is necessary for the relevant service purpose
• You can find out more about the protection mechanisms used for such transfers by contacting us

11Privacy Policy Amendments

Mint33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to platform operations.

For material amendments — that is, changes that significantly affect how we use your data or your rights — we will:

• Notifying all active members via SMS or in-platform notification at least 14 days before the changes take effect
• Display a clear notice on the mint33.best homepage regarding the upcoming changes
• Providing a clear summary of what has changed and its implications

For minor corrections or clarifications that do not affect your fundamental rights, changes may take effect immediately with only the "Last Updated" date on this document being revised. The current version date is always displayed at the top of this page.

12Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mint33 handles your personal data, please reach out to us through the following channels:

• Email: support@mint33.best (use the subject line "PDPA Privacy Enquiry")
• Live Chat: Available on the mint33 platform — 24 hours a day, 7 days a week
• Response Time: We are committed to providing an initial response within 3 business days and full resolution within 21 business days in accordance with PDPA requirements

We take every privacy enquiry seriously and are committed to providing clear, accurate, and helpful responses to every mint33 Malaysia member who reaches out to us.