Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how grab333 ("grab333", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access and use the grab333 online gaming platform at grab333.lat and any associated web interfaces (collectively, the "Platform").

grab333 is committed to handling your personal data with transparency, care, and in compliance with applicable data protection legislation. This Policy is incorporated by reference into the grab333 Terms and Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy.

If you do not agree to the practices described in this Policy, you must discontinue use of the Platform and may request account closure by contacting the grab333 support team.

Plain-language summary: grab333 collects personal data necessary to operate your account, verify your identity, process payments, and keep the Platform secure. We do not sell your personal data to third parties. We retain data only for as long as necessary and protect it with industry-standard security measures.

2. Data Controller

For the purposes of this Policy, grab333 acts as the data controller in respect of personal data collected through the Platform. As data controller, grab333 determines the purposes and means of processing your personal data.

grab333 operates under an international gaming authority licence. All data processing activities are conducted in accordance with the data protection obligations attached to that licence and applicable data protection law.

Contact details for data-related enquiries are set out in Section 14 of this Policy.

3. Personal Data We Collect

grab333 collects personal data through several channels: directly from you during registration and account activity, automatically through your use of the Platform, and from third-party sources such as payment processors and identity verification services.

Category	Data Collected	Collection Method
Identity	Full legal name, date of birth, nationality, government-issued ID details	Registration & KYC process
Contact	Email address, mobile number, residential address	Registration & account settings
Financial	Payment method details, transaction history, MYR balance records	Deposit & withdrawal actions
Gaming Activity	Bet history, game session logs, wagering patterns, RTP data	Automatic — Platform activity
Technical	IP address, device type, browser version, operating system, session timestamps	Automatic — server logs & cookies
Communications	Support chat transcripts, email correspondence, feedback submissions	Direct interaction with grab333
Marketing Preferences	Opt-in/opt-out status for promotional communications	Account settings & registration

grab333 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless strictly required for responsible gaming assessments, in which case explicit consent will be obtained separately.

4. How We Use Your Personal Data

grab333 uses your personal data for the following purposes:

Account management: To create, maintain, and administer your grab333 account, including grab333 login authentication and account security.
Identity verification (KYC): To verify your identity, age, and eligibility to use the grab333 Platform in accordance with our licence obligations and applicable law.
Payment processing: To process deposits and withdrawals through Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, USDT, and other approved payment methods.
Gaming services: To provide you with access to live casino tables, slot games, sportsbook markets, and all other features of the grab333 Platform.
Responsible gaming: To monitor gaming activity, identify patterns indicative of potential harm, administer deposit limits, and enforce self-exclusion requests.
Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account abuse, collusion, and other prohibited activity on the grab333 Platform.
Legal compliance: To comply with anti-money-laundering (AML) obligations, gaming licence conditions, financial reporting requirements, and any applicable law or regulatory instruction.
Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
Marketing communications: To send you promotional offers, bonus notifications, and Platform updates — only where you have opted in to receive such communications. You may opt out at any time via account settings.
Platform improvement: To analyse aggregated usage data for the purpose of improving grab333 Platform features, user experience, and game offerings.

5. Legal Basis for Processing

grab333 processes your personal data on the following legal bases:

Contractual necessity: Processing required to fulfil the agreement between you and grab333, including account management, payment processing, and service delivery.
Legal obligation: Processing required to comply with applicable law, including AML regulations, licensing conditions, and tax reporting obligations.
Legitimate interests: Processing necessary for fraud prevention, Platform security, and responsible gaming monitoring, where those interests are not overridden by your data protection rights.
Consent: Processing of data for marketing communications, where consent has been explicitly provided. Consent may be withdrawn at any time without affecting prior processing.

6. Data Sharing & Disclosure

grab333 does not sell your personal data to third parties. Personal data may be shared in the following limited circumstances:

Payment processors: Financial data is shared with approved payment providers (including e-wallet operators and banks) solely for the purpose of processing transactions on your behalf.
Identity verification providers: Identity and document data may be shared with accredited KYC and AML compliance service providers for verification purposes.
Game software providers: Limited technical data (such as session tokens and game round IDs) is shared with licensed game providers for the purpose of game delivery and dispute resolution.
Regulatory and law enforcement authorities: grab333 will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required by applicable law or regulatory instruction.
Corporate transactions: In the event of a merger, acquisition, or sale of all or part of grab333's business, your data may be transferred to the relevant successor entity, subject to equivalent data protection standards.

All third-party recipients of your personal data are contractually required to process that data in accordance with applicable data protection law and solely for the permitted purpose.

7. Cookies & Tracking Technologies

grab333 uses cookies and similar tracking technologies on the Platform for the following purposes:

Essential cookies: Required for Platform functionality, including grab333 login session maintenance, security tokens, and load balancing. These cannot be disabled.
Analytical cookies: Used to understand how players interact with the grab333 Platform, including page views, session duration, and navigation paths. Data is processed in aggregated, anonymised form.
Preference cookies: Used to remember your Platform preferences, including language settings and game lobby filters.
Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of grab333 marketing campaigns, subject to your consent.

You may manage non-essential cookies through your browser settings. Disabling essential cookies may impair Platform functionality, including the ability to maintain your grab333 login session.

8. Data Retention

grab333 retains your personal data for as long as necessary to fulfil the purposes set out in this Policy and to comply with applicable legal, regulatory, and contractual obligations.

Specifically:

Account data and transaction records are retained for a minimum of five (5) years from the date of account closure, in accordance with AML legislation and gaming licence record-keeping requirements.
KYC documentation is retained for the period prescribed by applicable identity verification regulations, typically five (5) years from the date of verification.
Support communications are retained for three (3) years from the date of the interaction, unless retention is required for longer as part of an open dispute or legal proceeding.
Marketing preference data is retained until you withdraw consent or request erasure, provided no overriding legal obligation requires continued retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Your Data Protection Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by grab333:

Right of Access

Request a copy of the personal data grab333 holds about you, along with information about how it is used.

Right of Rectification

Request correction of inaccurate or incomplete personal data in your grab333 account records.

Right to Erasure

Request deletion of your personal data where it is no longer needed for the original purpose, subject to legal retention obligations.

Right to Restriction

Request that grab333 restricts processing of your data during the period of a rectification or objection request.

Data Portability

Request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.

Right to Object

Object to processing of your personal data based on grab333's legitimate interests, including for direct marketing purposes.

To exercise any of these rights, contact grab333 at [email protected]. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days, subject to identity verification. Where a request is complex or numerous, this period may be extended by a further 60 days with notice.

grab333 will not charge a fee for the exercise of data rights unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

10. Data Security

grab333 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

256-bit SSL/TLS encryption for all data transmitted between your browser and the grab333 Platform, including during grab333 login and payment transactions.
Cryptographic hashing of account passwords — account credentials are never stored in plain text and cannot be retrieved by grab333 staff.
Role-based access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
Regular penetration testing and security audits of Platform infrastructure.
Segregation of player funds from operational accounts at the financial level.

While grab333 takes all reasonable steps to protect your personal data, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your grab333 login credentials.

11. Children and Minors

The grab333 Platform is not directed at, and is not intended for use by, any person under the age of 21. grab333 does not knowingly collect personal data from individuals under 21 years of age. If you have reason to believe that a minor has provided personal data to grab333, please contact us immediately at [email protected] so that we can take appropriate action, including deletion of such data and closure of the relevant account.

12. International Data Transfers

grab333 may transfer your personal data to servers or third-party processors located outside of Malaysia in connection with Platform operations, game software delivery, or identity verification services. Where such transfers occur, grab333 ensures that adequate safeguards are in place to protect your data, including contractual clauses that impose data protection obligations equivalent to those applied within Malaysia.

13. Changes to This Privacy Policy

grab333 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Material changes will be communicated to registered players by email or prominent notice on the grab333 Platform no fewer than seven (7) days before the effective date of the change.

Your continued use of the grab333 Platform following notification of a revised Policy constitutes acceptance of the updated terms. If you do not accept the changes, you should cease using the Platform and request account closure.

14. Contact & Complaints

For any queries, requests, or complaints relating to this Privacy Policy or grab333's data processing practices, please contact the grab333 Data Protection team:

Email: [email protected]

Live Chat: Available 24/7 via the grab333 Platform at grab333.lat

grab333 aims to respond to all data-related correspondence within 5 business days. If you are dissatisfied with grab333's handling of your personal data or response to a data rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Contents