fortune33 Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out the practices of fortune33 ("fortune33", "Platform", "we", "us", "our") regarding the collection, use, storage, disclosure and protection of personal data provided by or obtained from users ("User", "you", "your") of the fortune33 platform accessible at fortune33.cam.

fortune33 is an English-language sports betting and online casino information platform serving Malaysian users and other adults aged 21 years and above. We recognise that the personal information you entrust to fortune33 is sensitive and we are committed to handling it with the care, transparency and security it deserves.

By creating a fortune33 account, making a deposit, or continuing to access platform features after this Policy has been published, you confirm that you have read and accepted the terms of this Privacy Policy. This Policy should be read alongside the fortune33 Terms and Conditions and the Responsible Gambling Policy.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

Data Controller

The Data Controller for personal data processed through fortune33.cam is the fortune33 operating entity. Contact details for data-related enquiries are provided in Section 16 of this Policy. fortune33 acts as Data Controller for account registration data, transaction records and KYC documentation.

Where fortune33 engages third-party service providers to carry out specific processing activities (such as payment processing, fraud detection or email delivery), those providers act as Data Processors under written agreements that require them to process data only on documented fortune33 instructions and to maintain appropriate security standards.

Data We Collect

fortune33 collects the categories of personal data described in the table below. Not all categories apply to every user — the data processed depends on the nature of your engagement with the platform.

fortune33 does not intentionally collect sensitive categories of personal data (such as health, political opinions or biometric data) unless specifically required for responsible gambling purposes and with your explicit consent.

How We Collect Data

fortune33 collects personal data through the following primary channels:

• Direct submission: Data you enter when creating or updating a fortune33 account, completing a KYC submission, making a payment or contacting support.
• Automated technical collection: Data generated automatically when you access fortune33, including server logs, cookie data, session identifiers and device fingerprint information.
• Payment providers: Transaction confirmation data and payment instrument identifiers received from approved Malaysian payment channels including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong) and eligible card networks.
• Identity verification services: Results and status information from KYC document verification processes conducted by authorised third-party verification providers.
• Fraud and risk systems: Risk signals and authentication data from fraud-detection tools used to protect the fortune33 platform and its users.

Data Processing

fortune33 processes personal data for the following specific and documented purposes:

• Account management: Creating, maintaining and securing your fortune33 account, authenticating login sessions and managing account preferences.
• Transaction processing: Facilitating deposits via Malaysian payment methods (Touch 'n Go eWallet, Boost, DuitNow, FPX and others) and processing withdrawal requests to verified payment accounts.
• Identity verification (KYC): Confirming your identity and age (21+) in line with international licensing and anti-fraud standards before withdrawals or promotional claims are processed.
• Responsible gambling: Monitoring account activity to identify patterns that may indicate problem gambling, applying player-requested limits, and supporting self-exclusion requests.
• Legal and regulatory compliance: Meeting applicable anti-money-laundering obligations, responding to lawful regulatory enquiries and maintaining required audit records.
• Platform security: Detecting and preventing fraudulent transactions, account takeovers, bot activity and other security threats.
• Service improvement: Analysing aggregated, anonymised usage patterns to improve fortune33 performance, content and features.
• Communications: Responding to support enquiries and sending service-critical notifications regarding your fortune33 account.

Legal Basis for Processing

fortune33 processes personal data one or more of the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing required to perform the fortune33 User Agreement — including account creation, deposit processing and withdrawal management.
• Legal obligation: Processing required to comply with applicable anti-money laundering, counter-terrorism financing, KYC and data-retention laws.
• Legitimate interests: Processing necessary for the legitimate interests of fortune33, including platform security, fraud prevention, responsible gambling monitoring and service analytics — where those interests are not overridden by your fundamental rights.
• Consent: Processing for purposes such as marketing communications, where your freely given, specific and informed consent has been obtained and can be withdrawn at any time.

Data Sharing

fortune33 does not sell, rent or trade personal data to any third party. Personal data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers: Malaysian payment processors including eWallet operators, FPX banking partners and card networks, who receive only the minimum data required to process your transaction.
• Identity verification providers: Authorised KYC service providers who process identity documents under binding data-processing agreements.
• Fraud and security services: Risk management providers who analyse transaction patterns to detect unusual or fraudulent activity on fortune33 accounts.
• IT and hosting infrastructure: Cloud hosting and technical infrastructure providers who store and process fortune33 platform data under appropriate security and confidentiality controls.
• Regulatory and legal authorities: Where fortune33 is required by applicable law, court order or lawful regulatory instruction to disclose personal data, we will comply with the minimum disclosure required.
• Corporate successors: In the event of a merger, acquisition or restructure involving fortune33, personal data may be transferred to the successor entity subject to equivalent privacy protections.

All Data Processors engaged by fortune33 are required to enter into written data-processing agreements that restrict their use of personal data to the specific, documented purpose for which it was shared.

International Data Transfers

fortune33 may transfer personal data to jurisdictions outside Malaysia for processing by service providers or as required by the operating structure of the fortune33 platform. Where such transfers occur, fortune33 takes reasonable steps to ensure that equivalent levels of data protection apply in the recipient jurisdiction, including through contractual data-protection clauses or the use of processors in jurisdictions recognised as providing adequate protections.

Malaysian users should be aware that data protection laws vary across jurisdictions and that international transfers may involve jurisdictions whose laws differ from those applicable in Malaysia. By accepting this Policy you acknowledge and consent to such transfers on the basis and safeguards described above.

Data Retention

fortune33 retains personal data for defined periods determined by the purpose of the data and applicable legal requirements. The general retention principles applied by fortune33 are as follows:

At the end of applicable retention periods, fortune33 will securely delete or anonymise personal data unless specific legal obligation requires continued retention.

Cookies and Tracking Technologies

fortune33 uses cookies and similar tracking technologies on the platform to maintain login sessions, store user preferences, support platform security and collect anonymised analytics data. The categories of cookies used by fortune33 are described below.

• Essential cookies: Required for the fortune33 platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting core platform functionality.
• Functional cookies: Store your language preferences, display settings and login state to improve your fortune33 experience across sessions.
• Analytics cookies: Collect anonymised information about how users navigate fortune33, which pages are visited most frequently, and where errors occur. This data is aggregated and does not identify individual users.
• Security cookies: Used by fraud-detection systems to identify unusual access patterns, bot activity and potential account-compromise attempts.

You may adjust your browser's cookie settings to restrict or delete cookies at any time. Note that disabling essential cookies may prevent you from accessing certain fortune33 features, including the ability to maintain a logged-in session.

Security Measures

fortune33 implements technical and organisational security measures appropriate to the risk associated with processing your personal data. These include but are not limited to:

• HTTPS Transport Layer Security (TLS) encryption applied to all data in transit between your browser and fortune33 servers.
• Encryption of sensitive data at rest, including stored KYC document files and financial records.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented operational requirement.
• Regular security assessments and monitoring of fortune33 platform infrastructure for vulnerabilities and anomalous activity.
• Incident response procedures to identify, contain and notify affected users of any data breach that is likely to result in risk to their rights and freedoms.

While fortune33 takes all reasonable precautions, no online platform can guarantee absolute security. Users are advised to protect their own accounts by using strong, unique passwords, enabling two-factor authentication where available, and never sharing login credentials, OTP codes or identity documents through unsecured messaging channels.

Your Rights

Subject to applicable law and the operational requirements of the fortune33 platform, you hold the following rights in relation to personal data that fortune33 holds about you:

To exercise any of the above rights, please contact fortune33 at the address provided in Section 16. fortune33 will respond to verified rights requests within a reasonable timeframe consistent with applicable data protection standards. fortune33 may request identity verification before processing a rights request to prevent unauthorised access to account data.

Minors and Age Policy

fortune33 is strictly intended for adults aged 21 years and above. fortune33 does not knowingly collect, process or retain personal data relating to individuals under the age of 21. Age verification is conducted as part of the fortune33 KYC process, and any account identified as belonging to an underage individual will be closed immediately.

If you are a parent or guardian and believe that a minor under your care has provided personal data to fortune33, please contact support immediately. fortune33 will investigate and, where confirmed, delete the relevant data without undue delay.

fortune33 takes its responsibility toward the protection of minors very seriously as part of its broader responsible gambling commitments. The platform does not direct marketing or promotional content toward individuals identified as being under 21 years of age.

Policy Changes

fortune33 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, data processing practices, platform features or business operations. When material changes are made, the revised Policy will be published on this page with an updated effective date and, where appropriate, a summary of the key changes.

Continued use of fortune33 following the publication of an updated Policy constitutes acceptance of the revised terms. fortune33 recommends that you review this page periodically to remain informed of how your data is managed. If you do not agree with any changes, you should cease using fortune33 and request account closure.

Contact Us

For all data protection enquiries, rights requests or privacy-related concerns, please contact the fortune33 Data Protection team using the details below. Our team is available 24 hours a day, seven days a week to assist with platform queries.

Email: [email protected]

Please include "Privacy Request" in the subject line of your email and provide your registered fortune33 account username along with a clear description of your enquiry. Where a rights request is submitted, fortune33 may require identity verification to process the request securely.