Privacy Policy EVO33 — Data Protection & Information Security

EVO33 ("we", "Platform", or "company") is an online gaming platform operating in Malaysia, providing live casino, sports betting, fish shooting games, bingo, and a variety of other digital entertainment services. We understand that your trust in us depends not only on the quality of the games we offer, but also on how we handle your personal information.

This Privacy Policy is designed to ensure you have a clear understanding of what data we collect, why we need it, how we use it, and the steps we take to keep your data safe and protected. This document also outlines your rights as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA).

We are committed to maintaining full transparency in how we handle personal data. If at any time you have questions or concerns about how we manage your information, please do not hesitate to contact our Data Protection Officer (DPO) team through the channels provided at the end of this document.

EVO33 collects your personal data through various channels throughout your use of our platform. The following are the categories of data we collect and the purposes for their collection:

Data We Do Not Collect: EVO33 does not collect sensitive data such as your health information, religious beliefs, or political views. We also do not store full credit/debit card details — payment data is processed and stored by licensed payment processors that comply with PCI DSS standards.

EVO33 uses your personal data solely for legitimate and necessary purposes to ensure our platform operates smoothly and delivers the best experience for you. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and managing your member account, including secure login and password recovery processes.
• Transaction Processing: Processing your deposits and withdrawals efficiently and securely through your preferred payment methods.
• Legal Compliance: Fulfilling legal obligations including KYC requirements, AML reporting, and compliance checks mandated by the relevant authorities.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and any activity that violates our Terms & Conditions.
• Service Improvements: Analysing usage patterns on an aggregate (not individual) basis to improve platform features, performance, and the overall user experience.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates.
• Customer Support: Providing effective assistance when you contact our support team and maintaining communication records for future reference.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and offering appropriate assistance to members who need it.

For marketing communications such as promotional information and the latest bonus offers, we will only contact you if you have given your consent during registration. You may withdraw this consent at any time through the notification settings in your account.

EVO33 does not share your personal data with third parties except in the following limited situations that are necessary for platform operations or required by law:

• Payment Processors: Information required to complete financial transactions is shared with our licensed payment processors. All payment processors are bound by strict confidentiality agreements and comply with PCI DSS standards.
• Technology Service Providers: Providers of server infrastructure, cloud services, and analytics tools that help us operate the platform. All such providers are contractually bound not to use your data beyond the scope of the services provided.
• Game Providers: Minimal game session information may be shared with third-party game providers integrated into the EVO33 platform for technical purposes only.
• Authorities: EVO33 will disclose data to authorities when required by law, court order, or to assist in fraud investigations and financial crime proceedings.
• Professional Advice: Lawyers, accountants, or other professional advisors bound by confidentiality obligations in the context of providing advice to evo33.

In all cases where your data is shared, EVO33 ensures that the receiving party has adequate security controls and is contractually or legally bound to protect that data. EVO33 has never sold and will never sell your personal data for any commercial purpose.

EVO33 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or improper disclosure. Key measures we have in place include:

• Data Encryption: All data in transit is protected by TLS 1.3 / SSL 256-bit. Sensitive data at rest is also encrypted using the AES-256 standard.
• Role-Based Access Control: EVO33 staff may only access data relevant to the scope of their responsibilities. All access is logged and continuously monitored.
• Two-Factor Authentication: Our admin accounts are protected by mandatory two-factor authentication (2FA) to prevent unauthorised access even in the event of a compromised password.
• Regular Security Audits: We conduct regular penetration testing and independent security audits to identify and address potential vulnerabilities.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any suspicious activity in real time.
• Incident Response Plan: EVO33 has established procedures in place to handle any data breach, including notifying affected members within the timeframe required by law.

EVO33 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the basic functions of the platform, such as login session authentication and security. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
• Functional Cookies: Enabling the platform to remember your preferences such as interface language, gaming limits you have set, and other display settings for a more personalised experience.
• Analytics Cookies: We use aggregated and anonymised analytics data to understand how members use our platform, which pages are most frequently visited, and where technical issues occur. This data helps us continuously improve the platform.
• Security Cookies: Used to identify and prevent fraud, automated bots, and other malicious activities that could compromise the security of our platform and members.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect platform functionality. Note: EVO33 does not use third-party cookies for advertising or cross-site user profiling purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

To exercise any of the above rights, please contact our Data Protection Officer via email at [email protected]. Please include your full name, member ID number, and a clear description of your request. We will verify your identity before processing any request to ensure the security of your data.

EVO33 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and for 5 years after account closure, in line with AML compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysia's financial and taxation laws.
• KYC Documents: Retained for the duration of the active account period and 5 years after the account closure date or the date of the last transaction, whichever is later.
• Support Communication Logs: Retained for 3 years for reference and service improvement purposes.
• Technical & Log Data: Server logs and technical data are retained for 12 months for security and technical troubleshooting purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.

When the retention period expires or the data is no longer required, EVO33 will securely delete or anonymise the data using industry-accepted methods, including secure erasure and storage media sanitisation.

The evo33 platform may contain links or integrations to third-party services such as game providers, payment processors, or support platforms. It is important that you understand the following:

• EVO33 is not responsible for the privacy practices of such third parties. Each third-party provider has its own privacy policy governing how they handle your data.
• We carefully evaluate and select third-party partners to ensure they maintain data protection standards equal to or higher than our own.
• All third-party providers with access to evo33 member personal data are bound by comprehensive data processing agreements.
• We recommend that you read the privacy policy of any third-party service you use in connection with the EVO33 platform.

If you have any concerns about a third-party integration on our platform and its impact on your privacy, please contact our support team for further clarification.

EVO33 is a gaming platform exclusively for individuals aged 18 and above. We take the protection of minors extremely seriously and maintain a strict policy in this regard:

• EVO33 does not intentionally collect, process, or store personal data from individuals under the age of 18.
• Our registration process includes age verification designed to prevent minors from creating an account.
• Our KYC process will identify and close any account found to have been registered by an underage individual.
• If you believe a child has provided us with their personal data, please contact us immediately and we will take steps to delete that information.

EVO33 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When we make significant amendments, we will:

• Displaying a clear notice on the platform's home page for at least 14 days before the amendments take effect.
• Notifying all registered members via email about any changes made.
• Updating the "Last Updated" date at the top of this document to reflect the most recent revision date.
• Maintaining an archive of previous versions of this policy for your reference.

Your continued use of the evo33 platform after any amendments take effect will be considered your acceptance of those changes. If you do not agree with any amendment, you have the right to close your account before it takes effect by contacting our support team.

For minor amendments that do not affect your fundamental rights — such as spelling corrections or language clarifications — we may not send individual notifications, but the last updated date will always be kept current.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how EVO33 handles your personal data, please contact us through the following channels:

For complaints related to personal data processing that cannot be resolved directly with us, you have the right to lodge a complaint with the Malaysian Personal Data Protection Department (PDPD) or the relevant data protection authority in your country.