harta33 Privacy Policy

1. Data Controller

1.1 For the purposes of applicable data protection law, harta33 acts as the data controller in respect of personal data collected through the harta33.asia platform. As data controller, harta33 determines the purposes and means of processing personal data submitted by registered players and platform visitors.

1.2 harta33 operates under international gaming authority licensing standards. The Platform's data processing practices are designed to comply with applicable data protection legislation and the data handling requirements imposed by the relevant gaming authority.

1.3 Any questions or concerns regarding harta33's data processing activities may be directed to our Data Protection contact at [email protected].

2. Personal Data We Collect

2.1 harta33 collects the following categories of personal data from registered players and platform visitors:

Registration & Identity Data

• Full legal name as it appears on a government-issued identity document;
• Date of birth (for age verification purposes);
• Email address and account password (stored in encrypted, hashed form);
• Mobile phone number (where provided for 2FA or account recovery);
• Nationality and country of residence.

KYC Verification Data

• Government-issued identity document (MyKad, passport, or equivalent) — number, issuing authority, expiry date, and document image;
• Proof of address documentation (utility bill, bank statement, or equivalent);
• Payment method verification documentation where required.

Financial Transaction Data

• Deposit and withdrawal amounts, dates, and methods;
• Payment instrument identifiers (last four digits of bank account, eWallet account reference) — harta33 does not store full payment card or full bank account numbers;
• Transaction history and balance records.

Gaming Activity Data

• Game session history, bet amounts, game outcomes, and session durations;
• Sportsbook bet history and selection data;
• Bonus participation and wagering records.

Technical & Usage Data

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser type;
• Session timestamps and login history;
• Platform navigation patterns and feature usage.

Communications Data

• Content of support chat conversations and email correspondence with harta33;
• Records of promotional communications sent and opt-in/opt-out preferences.

3. How We Collect Your Data

3.1 Directly from you: Most personal data is provided directly by you during registration, KYC verification, payment processing, customer support interactions, or when you update your account settings.

3.2 Automatically: Technical data — including IP addresses, device identifiers, and session data — is collected automatically when you access the harta33 platform. This data is collected via server logs, cookies, and similar tracking technologies described in Section 7.

3.3 From third parties: harta33 may receive personal data from third-party identity verification providers (used for KYC), payment processors (used for transaction verification), and fraud prevention services. Data received from third parties is handled in accordance with this Privacy Policy.

4. Legal Basis for Processing

4.1 harta33 processes personal data under the following legal bases:

• Contractual necessity: Processing required to create and maintain your harta33 account, process deposits and withdrawals, and provide access to all platform services;
• Legal obligation: Processing required to comply with anti-money-laundering (AML) obligations, age verification requirements, and gaming authority licensing conditions;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement where such interests do not override your rights;
• Consent: Processing for direct marketing communications, where consent has been obtained and can be withdrawn at any time.

5. How We Use Your Data

5.1 harta33 uses collected personal data for the following purposes:

• To register, verify, and maintain your harta33 account;
• To process deposits, withdrawals, and other financial transactions;
• To verify your identity and age in compliance with KYC and AML obligations;
• To operate and deliver all casino games, live dealer services, and sportsbook functions;
• To detect, investigate, and prevent fraudulent activity, cheating, and money laundering;
• To monitor gaming behaviour for responsible gaming purposes and apply self-imposed limits;
• To provide customer support and resolve disputes;
• To comply with gaming authority licensing requirements and reporting obligations;
• To personalise your platform experience and deliver relevant promotional offers (subject to marketing preferences);
• To improve the harta33 platform through analysis of aggregated, anonymised usage data.

6. Sharing Your Personal Data

6.1 harta33 does not sell personal data to third parties. harta33 may share personal data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers — for transaction processing and payment verification;
• Identity verification providers: Third-party KYC and AML compliance services used to verify player identity and age;
• Fraud prevention services: Third-party fraud detection and risk assessment providers;
• Gaming platform technology partners: Software providers who supply the game engines, live dealer infrastructure, and sportsbook technology that power the harta33 platform — these partners process data under strict data processing agreements;
• Regulatory and law enforcement authorities: Where harta33 is legally required to disclose personal data by applicable law, court order, or regulatory direction.

6.2 All third-party data processors engaged by harta33 are contractually bound to process personal data only as instructed by harta33 and in accordance with appropriate data protection standards.

7. Cookies & Tracking Technologies

7.1 The harta33 platform uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and — with your consent — analyse platform usage and deliver relevant content.

7.2 The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated information about how players use the harta33 platform, enabling us to improve performance and usability. Analytics data is anonymised where possible.
• Marketing cookies: Used (with your consent) to track interactions with promotional campaigns and personalise promotional content.

7.3 You may adjust cookie preferences at any time via your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to and use the harta33 platform.

8. Data Retention

8.1 harta33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, and audit obligations.

8.2 Specific retention periods applicable to harta33 data categories:

• Account and identity data: Retained for the duration of the account and for a minimum of five (5) years following account closure, as required under AML and gaming authority obligations;
• Transaction data: Retained for a minimum of five (5) years from the date of the transaction;
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Support and communications data: Retained for up to three (3) years from the date of the last communication;
• Technical and usage logs: Retained for up to twelve (12) months.

8.3 Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

9.1 harta33 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players and the harta33 platform;
• Encryption of sensitive data at rest, including password hashes and payment method references;
• Strict access controls limiting personal data access to authorised personnel with a demonstrated business need;
• Regular security assessments and penetration testing of the platform infrastructure;
• Multi-factor authentication for all administrative access to systems holding personal data.

9.2 While harta33 takes reasonable measures to protect personal data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable 2FA on their harta33 accounts to further protect their personal information.

10. Your Data Rights

10.1 Subject to applicable data protection law, you have the following rights in relation to your personal data held by harta33:

• Right of access: You may request a copy of the personal data harta33 holds about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data, subject to harta33's legal obligations to retain certain data under AML and gaming authority requirements;
• Right to restrict processing: You may request that harta33 restrict the processing of your personal data in certain circumstances;
• Right to data portability: You may request that harta33 provide your personal data in a commonly used, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of these rights, contact harta33 at [email protected]. harta33 will respond to all verifiable requests within thirty (30) days. Where requests are complex or numerous, harta33 may extend this period by a further 30 days with prior notification.

11. Children's Privacy

11.1 The harta33 platform is strictly for individuals aged 21 years and older. harta33 does not knowingly collect personal data from persons under 21 years of age. If harta33 becomes aware that personal data has been collected from an underage individual, the relevant account will be immediately suspended, the data securely deleted, and any net deposits returned in accordance with the harta33 Terms and Conditions.

11.2 If you believe a person under 21 has registered on the harta33 platform, please notify harta33 at [email protected] immediately.

12. International Data Transfers

12.1 harta33 may transfer personal data to third-party service providers located outside Malaysia where this is necessary to operate the platform — for example, to cloud infrastructure providers or international fraud prevention services.

12.2 Where personal data is transferred internationally, harta33 ensures that appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards. harta33 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing supplementary safeguards.

13. Marketing Communications

13.1 With your consent, harta33 may send promotional communications via email or on-platform notification regarding bonuses, new game releases, sportsbook promotions, and VIP programme updates relevant to your harta33 account.

13.2 You may withdraw consent for marketing communications at any time by updating your notification preferences in your harta33 account settings. Withdrawal of marketing consent does not affect the lawfulness of processing prior to withdrawal and does not affect transactional communications (such as deposit confirmations or security alerts) which harta33 is obligated to send regardless of marketing preferences.

14. Updates to This Privacy Policy

14.1 harta33 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. The effective date at the top of this policy reflects the date of the most recent revision.

14.2 Where changes to this Privacy Policy are material, harta33 will notify registered players via email to the address associated with their account. Continued use of the harta33 platform following notification of a material change constitutes acceptance of the updated Privacy Policy.

14.3 harta33 recommends that players periodically review this Privacy Policy to remain informed about how personal data is handled.

15. Contact Us

15.1 If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how harta33 handles your personal data, please contact us:

• Live Chat: Available 24/7 on the harta33 platform — the fastest response channel for Malaysian players.
• Email: [email protected] — for formal data rights requests and privacy complaints.

15.2 harta33 is committed to resolving all privacy-related enquiries promptly and transparently. Where you are not satisfied with harta33's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.