hiso33 Privacy Policy

1. Introduction

hiso33 ("we", "us", "our") is committed to protecting the privacy and personal data of all persons who interact with the hiso33 platform, whether as registered Members, visitors to the hiso33.vu website, or users of any other service operated by hiso33. This Privacy Policy ("Policy") sets out in detail the types of personal data we collect, the purposes for which we process that data, the conditions under which we may share it, your rights in respect of your personal data, and our obligations under applicable data protection law.

This Policy applies to all data processing activities carried out by hiso33 in connection with the hiso33 platform and its related services. It covers personal data collected through the hiso33 website, account registration and management processes, transaction and gaming activity, customer support interactions, and marketing communications where applicable.

hiso33 processes personal data in accordance with applicable international data protection principles, including principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and accountability. We are committed to handling your data responsibly and in accordance with the trust you place in us as a Member of the hiso33 platform.

2. Personal Data We Collect

hiso33 collects personal data in the following categories, depending on the nature of your interaction with the platform:

2.1 Identity & Contact Data

• Full legal name as per national identity documentation
• Date of birth (for age verification in compliance with our 21+ policy)
• Residential address, including postcode and country
• Email address
• Malaysian mobile phone number
• National identity card number or passport number (for KYC verification)

2.2 Financial & Transaction Data

• Payment method details (e-wallet account identifiers, FPX bank account references, cryptocurrency wallet addresses where applicable)
• Deposit and withdrawal transaction records including amounts, dates, and processing status
• Account balance history
• Bonus and promotional credit transaction records

2.3 Gaming Activity Data

• Bet history across all hiso33 products (casino, sportsbook, slots, lottery)
• Game session logs including duration, game type, and outcome
• Responsible gaming tool usage (deposit limits set, cool-off periods activated, self-exclusion requests)

2.4 Technical & Usage Data

• IP address and approximate geolocation data
• Device type, operating system, and browser type
• Session identifiers and authentication logs
• Platform usage patterns and feature interaction data
• Cookies and similar tracking technology data (see Section 6)

2.5 Communications Data

• Records of all support interactions via live chat and email
• Complaint and dispute correspondence
• Marketing preference records

3. How We Use Your Personal Data

hiso33 uses the personal data collected about you for the following purposes:

hiso33 will not use your personal data for any purpose that is incompatible with the purposes described in this Policy without your prior notification and, where required, your explicit consent.

4. Legal Basis for Processing

hiso33 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and hiso33, including account creation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, gaming licence conditions, and age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our legitimate interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, where we have obtained your explicit prior consent. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in your account settings.

5. Data Sharing & Disclosure

hiso33 may share your personal data with the following categories of third parties, strictly for the purposes identified in this Policy:

• Payment service providers: E-wallet operators (Touch n Go eWallet, Boost, GrabPay, DuitNow), FPX banking partners (Maybank, CIMB, Public Bank, and others), and cryptocurrency payment processors — solely to process your financial transactions.
• Identity verification providers: Third-party KYC service providers engaged to perform identity and age verification checks in compliance with our licensing obligations.
• Gaming software providers: Certified game studios and platform technology providers who require access to limited data to deliver and audit the games and services available on hiso33.
• Regulatory and law enforcement authorities: Where required by applicable law, gaming regulatory authority instructions, court order, or other legal process.
• Fraud prevention and security services: Third-party fraud detection and cybersecurity providers engaged to protect the integrity of the hiso33 platform and its Members.

All third parties with whom hiso33 shares personal data are required to process that data in accordance with applicable data protection principles and are subject to appropriate contractual data protection obligations. hiso33 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.

6. Cookies & Tracking Technologies

hiso33 uses cookies and similar tracking technologies on the hiso33 platform for the following purposes:

6.1 Essential Cookies

These cookies are strictly necessary for the operation of the hiso33 platform. They enable core functionality such as session management, authentication, and security. Essential cookies cannot be disabled without significantly impairing the functionality of the platform.

6.2 Performance & Analytics Cookies

hiso33 uses analytics cookies to collect aggregated, anonymised information about how Members interact with the platform. This information is used to improve platform performance, identify technical issues, and enhance the overall user experience. No personally identifiable information is included in analytics data shared with third-party analytics providers.

6.3 Functionality Cookies

Functionality cookies allow hiso33 to remember your preferences (such as language settings and display preferences) to provide a personalised experience on subsequent visits.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the hiso33 platform. Most browsers provide instructions for managing cookies in their help documentation.

7. Data Retention

hiso33 retains personal data for the period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity data: Retained for a minimum of 3 years from the date of activity.
• Support and communications data: Retained for a minimum of 3 years from the date of the interaction or resolution of any related dispute.
• Technical and usage data: Retained for up to 12 months in identifiable form; aggregated anonymised data may be retained indefinitely for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with hiso33's data disposal procedures.

8. Data Security

hiso33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the hiso33 platform
• Encryption of sensitive personal data stored on hiso33's systems
• Role-based access controls ensuring that only authorised hiso33 personnel can access personal data on a need-to-know basis
• Regular security assessments and penetration testing of the hiso33 platform
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hiso33 will notify affected Members in accordance with applicable legal requirements. If you discover or suspect a security vulnerability affecting the hiso33 platform, please report it immediately to [email protected].

9. Your Data Rights

Subject to applicable data protection law and hiso33's legal obligations, you have the following rights in respect of your personal data held by hiso33:

• Right of access: You may request a copy of the personal data hiso33 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to hiso33's legal retention obligations.
• Right to restrict processing: You may request that hiso33 restrict processing of your data in certain circumstances.
• Right to data portability: You may request that hiso33 provide your data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.

To exercise any of these rights, please submit a request in writing to [email protected] with the subject line "Data Rights Request". hiso33 will respond to your request within 30 days. Identity verification may be required before we can process your request.

10. Children's Privacy

The hiso33 platform is strictly intended for persons aged 21 years and above. hiso33 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has submitted personal data to hiso33, please contact us immediately at [email protected].

11. Third-Party Services

The hiso33 platform may contain references to or integrations with third-party service providers, including payment processors and game studios. hiso33's Privacy Policy does not govern the data practices of these third parties. Each third-party provider operates under its own privacy policy. hiso33 recommends that you review the privacy policies of any third-party services with which you interact in connection with the hiso33 platform. hiso33 bears no responsibility for the data practices of third-party providers.

12. Changes to This Privacy Policy

hiso33 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. Material changes to this Policy will be communicated to registered Members via the email address associated with their hiso33 account and by notice on the hiso33 platform. The date of the most recent revision is displayed at the top of this Policy. Your continued use of the hiso33 platform following notification of a material change constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the hiso33 platform and may request account closure.

13. Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hiso33, please contact us using the details below: