Giga33 Privacy Policy – Personal Data Protection for Malaysian Members

1Information We Collect from You

Giga33 collects various types of information to enable us to provide a secure, fair and personalised service to every member. The information collected falls into two main categories:

A. Information You Provide Directly

• Registration information: Full name, date of birth, Malaysian phone number, active email address, and the username you selected when registering your giga33 account.
• Identity verification (KYC): Where required for security purposes or the withdrawal of winnings, giga33 may request a copy of your MyKad or other official Malaysian identification document.
• Payment information: Payment method details you have registered — including eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers or bank account numbers for FPX (Maybank2u, CIMB Clicks). Full card numbers are not stored in giga33's systems.
• Support communications: Any messages, complaints or enquiries you send to the giga33 support team via live chat, email or any other channel.

B. Automatically Collected Information

• Device and connection data: Your IP address, browser type, operating system, device type (phone, tablet or computer) and screen resolution are collected automatically when you access the giga33 platform.
• Game activity data: Game records, betting history, session duration, wins and losses, and tournament activity. This data is required for fair platform operation and dispute resolution.
• Cookie and tracking data: giga33 uses session cookies and preference cookies to enhance the user experience. Further details are explained in Section 5 of this document.
• General location data: Your state or general region based on your IP address, for the purpose of verifying Malaysian membership eligibility and regulatory compliance.

2How giga33 Uses Your Personal Data

All data collected by giga33 is used responsibly and only for legitimate purposes. The following outlines the primary ways we use your personal information:

• Account management: To create, verify and manage your giga33 account, process secure logins, and ensure two-factor authentication (2FA) functions correctly.
• Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and to securely and accurately process withdrawal of winnings to your registered payment account.
• Game fairness & security: To monitor gaming activity for the detection of collusion, bot usage, multiple accounts and fraud. This protects all legitimate players on the giga33 platform.
• Customer support: To identify you when you contact the giga33 support team and to provide accurate assistance based on your account history.
• Legal compliance: To fulfil obligations under applicable Malaysian law, including legitimate requests from government authorities where required.
• Platform improvements: To analyse usage patterns in aggregate (not at an individual level) in order to improve giga33's interface, performance and game offerings.
• Service-related communications: To send you important account-related notifications — including deposit confirmations, security alerts and terms updates — via email or SMS to your registered Malaysian mobile number.
• Marketing communications (with consent): Only where you have given your consent, giga33 may send you information about platform promotions, bonuses and special events. You may withdraw this consent at any time.

Giga33 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

3Data Sharing & Disclosure to Third Parties

Giga33 takes a strict approach to data sharing. We do not sell or transfer your personal data to third parties for commercial gain. However, there are limited situations where giga33 may need to share certain information:

• Payment service providers: Only the minimum transaction details required are shared with certified payment gateways (Malaysian eWallet and internet banking providers) solely to process your deposits and withdrawals. All such providers are bound by strict data confidentiality agreements with giga33.
• Game software provider: Minimal gaming activity data required for this purpose is shared with licensed game software providers solely to ensure game integrity. These providers are not permitted to use your data for any other purpose.
• Legal authorities: giga33 will disclose the necessary data to the relevant Malaysian authorities — such as the police, courts or regulatory bodies — when required by law or a valid court order. giga33 will notify you of any such disclosure where permitted by law.
• Fraud prevention: In cases of suspected fraud or criminal activity, giga33 may share relevant information with industry fraud prevention bodies or the appropriate authorities.

In the event that giga33 is involved in a merger, acquisition or asset sale, member data may form part of the transferred assets. In such cases, members will be notified by email and given the option to request account deletion before the transfer takes place.

4Data Security — How giga33 Protects Your Information

Giga33 continually invests in security infrastructure to ensure your personal data is protected at all times. The technical and organisational security measures we have in place include:

• Data-at-rest encryption: All sensitive data stored in giga33's databases is encrypted using AES-256 standards. This means that even if someone were to gain unauthorised access to the database, the stored data would be unreadable without the encryption key.
• Encryption of data in transit: All communications between your browser and the giga33 platform are protected by TLS 1.3 with a 256-bit SSL certificate that is kept continuously up to date.
• Internal access controls: Only giga33 staff who require access to your personal data in order to carry out their authorised duties are permitted to do so. All access is logged and continuously monitored.
• Two-factor authentication (2FA): giga33 offers 2FA for all member accounts as an additional layer of protection against unauthorised access. We strongly encourage all members to enable this feature.
• Continuous threat monitoring: giga33's security monitoring system operates 24/7 to detect suspicious activity, including unusual login attempts, access from unrecognised locations, and abnormal transaction patterns.
• Regular penetration testing: giga33 conducts regular security assessments and penetration testing carried out by independent third parties to identify and patch any vulnerabilities before they can be exploited.

While giga33 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a data breach affecting your personal information, giga33 will notify you within 72 hours of confirming the incident via your registered email, in line with industry best practices.

5Cookies & Tracking Technologies

Giga33 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the giga33 platform to function. They include session cookies that maintain your login status, security cookies that protect against CSRF attacks, and language preference cookies. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as display theme, last played game and poker table configuration. This allows giga33 to deliver a more personalised experience each time you log in.
• Analytics Cookies (with consent): Used to understand how members interact with the giga33 platform in aggregate — most frequently visited pages, average session duration and popular game types. This data helps us improve the platform.
• Marketing Cookies (with consent): Enabled only with your consent, these cookies help giga33 display relevant promotions to you within the platform based on your gaming interests.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect the functionality of the giga33 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

6Your Rights as a User under Malaysia's PDPA

As a giga33 member based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) regarding your personal data held by giga33:

• Right of access: You have the right to request a copy of all personal data that giga33 holds about you. This request will be processed within 21 days and may be subject to a reasonable administrative fee as permitted under the PDPA.
• Right to rectification: If any information we hold about you is inaccurate or out of date, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly through your account settings.
• Right to restriction of processing: In certain circumstances, you have the right to request that giga33 restrict the processing of your data — for example, while you are disputing the accuracy of your data or while a complaint investigation is in progress.
• Right to withdraw consent: For data processing based on consent (such as marketing communications), you may withdraw your consent at any time without affecting your eligibility to use the giga33 platform.
• Right to erasure: You may request deletion of your account and personal data by contacting giga33 support. Please note that certain data may need to be retained for periods prescribed by Malaysian law (for example, financial records for 7 years).

To submit any request relating to your privacy rights, please contact giga33's Data Protection Officer by email at privacy@giga33.xyz or via live chat within the platform. All requests will be acknowledged within 3 business days and resolved within 21 days as required under the PDPA.

7Data Retention & Deletion

Giga33 retains your personal data only for as long as necessary for the purposes described in this policy, or as required under applicable Malaysian law. The following outlines our data retention guidelines:

• Active account data: For as long as your account remains active, giga33 will retain all relevant personal data to ensure a smooth and secure service.
• Data after account closure: Upon account closure at your request, giga33 will delete or anonymise most personal data within 30 days, except for data that must be retained under legal obligations.
• Financial records: Transaction records, deposit and withdrawal history must be retained for 7 years from the date of transaction under Malaysian legal requirements relating to financial records and anti-money laundering.
• KYC documents: Identity verification documents such as copies of MyKad must be retained for 7 years after the business relationship ends, in line with anti-money laundering requirements.
• Security logs: Access logs and security activity records are retained for 90 days for security incident investigation purposes, then automatically deleted.

Once the retention period expires, giga33 will securely delete or anonymise data using methods that ensure it cannot be recovered or re-identified. The deletion process is internally audited to ensure compliance.

8Contact Us About Privacy

Giga33 has appointed a Data Protection Officer responsible for ensuring compliance with Malaysia's PDPA and handling all privacy-related enquiries from members.

• Privacy Email: privacy@giga33.xyz — for all enquiries, data access requests and privacy-related complaints
• General Support Email: support@giga33.xyz — for account support and general enquiries
• Live Chat: Available 24/7 within the giga33 platform — for immediate enquiries

If you are dissatisfied with how giga33 handles your personal data or with our response to your privacy request, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPDM) under the Ministry of Communications and Digital Malaysia.

Giga33 will review and update this Privacy Policy from time to time to reflect changes in our privacy practices or legal requirements. Members will be notified of any material changes via email at least 14 days before they take effect. The date of the last update is always displayed at the top of this document.