Hiso33 Privacy Policy – Data Protection & Privacy of Our Malaysian Members — Guaranteed

1Introduction & Scope of hiso33's Privacy Policy

Hiso33 is an online Sports Betting and casino platform operating in Malaysia. In providing these services, we need to collect and process certain personal data from members and platform users. We understand that your trust in hiso33 depends greatly on the confidence that your personal data is handled responsibly, transparently, and securely.

This Privacy Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adheres to all seven data protection principles prescribed under that legislation. These principles cover the general principle, notice and choice, disclosure, security, data integrity, access, and data transfers. hiso33 takes a proactive approach — not merely meeting the minimum legal requirements, but handling member data in line with international industry best practices.

This Policy applies to all personal data collected through the hiso33.click website, through interactions with our customer support team, through use of any hiso33 product or service, and through any communication you initiate with hiso33 — whether by email, Live Chat, or any other channel provided by the platform.

2Personal Information We Collect

Hiso33 collects various categories of personal information depending on how you interact with the platform. Below is a detailed breakdown of the data collected and the purposes it serves:

In addition to information you provide directly, hiso33 also automatically collects technical information when you use the platform. This includes your IP address, device and browser information, platform usage data (pages visited, time spent), and login session information. This information is used primarily for security purposes, fraud detection and improving the user experience on hiso33.

3How hiso33 Uses Your Personal Data

Every use of personal data by hiso33 has a clear and legitimate purpose. We do not process personal data for any purpose not stated in this Policy. The following are the key purposes for which hiso33 uses your data:

• Service Provision: To allow you to register an account, log in, deposit funds using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks, place bets on Malaysia Super League or EPL football matches, badminton, e-sports, and casino games, and withdraw your winnings.
• Identity Verification (KYC): To comply with legal requirements for verifying user identity prior to processing a first withdrawal and in other circumstances that require member verification.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, manipulation, money laundering, or any misuse of the hiso33 platform that could harm other members or the platform itself.
• Customer Support: To enable the hiso33 support team to assist you effectively when you reach out via Live Chat, email, or any other available channel.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and take proactive steps in line with hiso33's commitment to member wellbeing.
• Platform Improvements: To analyse aggregate (not individual) usage patterns in order to understand how members use the platform and make meaningful improvements based on actual usage data.
• Service Communications: To send you important account-related notifications, including changes to our terms, security updates, and other service information you need to know as a hiso33 member.
• Marketing (With Consent): To send you hiso33 promotions, bonuses, and special offers — only if you have given your consent to receive marketing communications. You may withdraw this consent at any time.

4Disclosure of Data to Third Parties

Hiso33 understands that the disclosure of your personal data to third parties is a sensitive matter that requires your full trust. We do not sell, rent, or trade member personal data to any third party for their own commercial purposes. However, in the course of operating the platform, there are certain situations where hiso33 needs to share data with specific parties:

• Payment Service Providers: Required transaction information is shared with payment service providers such as Touch 'n Go eWallet, GrabPay, and FPX banking partners (Maybank, CIMB, and others) solely for the purpose of processing your deposits and withdrawals. These providers are subject to their own strict privacy policies and security standards.
• Technology & Cloud Service Providers: hiso33 works with trusted technology infrastructure providers to store and process data. All agreements with these providers include strict data protection clauses that ensure your data is handled to the same standards as hiso33's Privacy Policy.
• Competent Authorities: hiso33 may be required to disclose information to Malaysian authorities (such as the police, courts or regulatory agencies) when mandated by law or where necessary to prevent serious financial crime. Any such disclosure will be made strictly in accordance with proper legal procedures.
• Identity Verification Providers: For KYC purposes, hiso33 may engage verified third-party identity verification services. Only the minimum information required for the verification process is shared, and it is handled in accordance with strict data protection standards.

5Data Security – How hiso33 Protects Your Information

Hiso33 takes its security infrastructure seriously to ensure your personal data is protected against unauthorised access, disclosure, alteration, or accidental deletion. The following are the key security measures we have in place:

• End-to-End Encryption: All communications between your device and hiso33's servers are protected by 256-bit TLS/SSL protocols. This means that data transmitted — including login credentials and transaction details — cannot be read by any third party, even if they manage to intercept the communication.
• Strict Access Controls: Access to member personal data within hiso33 is restricted to employees who genuinely need it to perform their duties. We enforce a "least privilege" principle — each employee is granted access only to the data required for their specific role.
• Continuous Monitoring: hiso33's security monitoring system operates 24 hours a day, 7 days a week to detect any suspicious activity or unauthorised access attempts. Any anomalies are investigated promptly by our cybersecurity team.
• Data Backup & Recovery: Member data is regularly backed up to a secure, separate location to ensure service continuity and data recovery in the event of an unforeseen incident.
• Incident Response Procedures: hiso33 maintains a proven security incident response procedure. In the event of a data breach that may affect members, hiso33 will notify the affected members within the timeframe required by applicable law.

6Cookies & Tracking Technologies

Hiso33 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services. The following are the types of cookies used by hiso33:

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the hiso33 platform. For more information on how to manage cookies in your browser, refer to the help section of the browser you are using.

7Cross-Border Data Transfers

In the course of operating the platform, hiso33 members' personal data may be processed on servers located outside Malaysia. This includes technology infrastructure servers used by hiso33 to deliver a fast and reliable platform.

When personal data is transferred outside Malaysia, hiso33 ensures that appropriate protections are in place in accordance with Malaysia's PDPA requirements. This includes ensuring that the recipient country or territory has adequate data protection laws, or that appropriate data transfer agreements containing equivalent data protection safeguards have been signed with the receiving party.

8Data Retention Period

Hiso33 does not retain member personal data longer than is necessary for the purposes set out in this Policy or as required by Malaysian law. hiso33's data retention practices are as follows:

• Active Account Data: For as long as your account remains active and you continue using hiso33's services, we will retain the personal data necessary to provide those services.
• Closed Account Data: Following account closure, hiso33 will retain certain personal data (including transaction records and identity verification information) for a minimum period of 7 years, in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Communication Logs: Communication records with the hiso33 support team are retained for 3 years from the date of the last interaction for reference and service improvement purposes.
• Analytics Data: Aggregated usage data (with all personal identifiers removed) may be retained for longer periods for long-term trend analysis and platform improvement purposes.
• After the Retention Period: Once the retention period has expired, hiso33 will delete or anonymise personal data securely in a manner that ensures it cannot be recovered or reused.

9Your Rights as a hiso33 Member

Under Malaysia's PDPA and hiso33's Privacy Policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the hiso33 support team via 24/7 Live Chat within the platform or by email at support@hiso33.click. Please state the specific right you wish to exercise and any relevant information to enable us to process your request. hiso33 will acknowledge receipt of your request within 3 business days and provide a full response within the timeframe stipulated by Malaysia's PDPA.

10Child & Youth Protection

Hiso33 takes the protection of children and young people very seriously. The hiso33 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

All users are required to confirm that they are at least 18 years of age upon registration. hiso33 enforces age verification procedures at the point of registration and during the KYC process to ensure compliance with this requirement. MyKad or passport information collected during KYC helps us verify the actual age of each member.

11Marketing Communications & Your Choices

Hiso33 may send you marketing communications about the latest promotions, exclusive bonuses, upcoming Malaysia Super League or EPL Sports Betting offers, the newest slots promotions, and a range of other incentives. We fully respect your preferences in this matter.

• Explicit Consent: hiso33 will only send you marketing communications if you have given explicit consent to receive them during registration or subsequently through your account settings.
• How to Withdraw Consent: You can opt out of marketing communications at any time in three ways: (1) click the "unsubscribe" link in any marketing email, (2) update your communication preferences in your hiso33 account settings, or (3) contact our support team to update your preferences.
• Important Service Communications: Withdrawing marketing consent does not affect the receipt of essential service communications such as account security notifications, transaction confirmations, and important policy updates. These communications will continue to be sent as they form an integral part of the hiso33 service.
• Processing Time: Requests to stop receiving marketing communications will be processed within 5 business days. You may still receive some communications during this processing period.

12Contact Us & Privacy Policy Amendments

Hiso33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors. Any material amendments will be communicated to members via their registered email address or through an in-platform notification at least 14 days before the changes take effect.

The latest version of the Privacy Policy is always available at https://hiso33.click/privacy-policy. The "Updated" date at the top of this page indicates when the policy was last revised. Continued use of the hiso33 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

For any enquiries, concerns or requests regarding hiso33's Privacy Policy or your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the hiso33 platform – the fastest channel, with an average response time of under 2 minutes
• Email: support@hiso33.click – responded within 2–4 hours on business days
• Email Subject for Privacy Requests: Use the subject line "Data Privacy Request – [Username]" to expedite the processing of your request

Hiso33 is committed to responding to all privacy-related enquiries within 21 days of receipt, in line with Malaysia's PDPA requirements. For more complex cases, we will keep you informed of progress within that timeframe.