hiso33 Privacy Policy

1. Introduction

hiso33 ("we", "us", "our") operates the online gaming platform accessible at https://hiso33.bio ("Platform"). We act as the data controller in respect of the personal data of individuals who register accounts, use the Platform's services, or otherwise interact with hiso33. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data in connection with your use of the hiso33 Platform.

This Policy is aligned with the principles of Malaysia's Personal Data Protection Act 2010 ("PDPA") and the data protection obligations imposed by the international gaming authority guidelines under which hiso33 operates. By registering an account or otherwise using the hiso33 Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy forms part of the hiso33 Terms & Conditions and should be read alongside them.

2. Data We Collect

In the course of providing services on the hiso33 Platform, we collect and process the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Malaysian MyKad number or passport number).
• Contact Data: Email address, mobile phone number, and residential address, including postcode and state.
• KYC Documentation: Copies or images of identity documents submitted during the Know Your Customer ("KYC") verification process, including MyKad, passport, and proof of address documents.
• Financial Data: Payment method details, transaction history, deposit and withdrawal records, and account balances. hiso33 does not store full payment card numbers; payment processing is handled by certified third-party payment processors.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone settings, and other technical identifiers generated when you access the hiso33 Platform.
• Usage Data: Information about your use of the Platform, including games played, bet history, session duration, login timestamps, and navigation paths within the Platform.
• Communications Data: Records of communications between you and hiso33 support, including live chat transcripts, email correspondence, and any feedback or complaints submitted.
• Responsible Gaming Data: Records of any responsible gaming limits, self-exclusion requests, or cooling-off periods activated on your account.

3. How We Collect Data

hiso33 collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting hiso33 support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the Platform. See Section 7 (Cookies & Tracking) for further details.
• Third-party sources: Identity verification and fraud prevention data received from KYC service providers and AML screening databases in connection with the mandatory account verification process.
• Payment processors: Transaction confirmation data received from authorised payment service providers including Touch 'n Go eWallet, Boost, FPX, and banking partners such as Maybank, CIMB, and Public Bank.

4. Purposes of Processing

hiso33 processes your personal data for the following purposes:

• To establish, maintain, and administer your hiso33 account, including processing deposits, withdrawals, and bet transactions.
• To conduct KYC identity verification and ongoing AML and fraud monitoring, as required by international gaming authority obligations.
• To verify that you meet the minimum age requirement of 21 years to use the hiso33 Platform.
• To provide customer support and respond to your queries, complaints, and requests.
• To comply with legal, regulatory, and gaming authority obligations, including the retention of transaction and identity records.
• To administer bonuses, promotions, and loyalty programmes for which you are eligible.
• To monitor for and prevent fraudulent, abusive, or prohibited conduct on the Platform.
• To personalise your experience on the hiso33 Platform, including game recommendations and relevant promotional communications where you have provided consent.
• To analyse Platform usage for the purposes of improving services, resolving technical issues, and enhancing security.
• To implement and manage responsible gaming tools, including deposit limits, self-exclusion, and account cooling-off periods.

5. Legal Basis for Processing

hiso33 processes personal data on the following legal bases:

• Performance of contract: Processing necessary to administer your account and deliver the services you have registered for.
• Legal obligation: Processing required to comply with KYC, AML, and gaming authority regulatory requirements.
• Legitimate interests: Processing for fraud prevention, Platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have provided explicit prior consent and have not subsequently withdrawn it.

6. KYC & Identity Verification

hiso33 is required under international gaming authority guidelines to verify the identity of all registered players before real-money gaming is permitted. This process involves the collection and processing of sensitive identity documentation, including your MyKad or passport. KYC data is processed by hiso33 and by authorised third-party KYC service providers operating under strict data processing agreements. KYC documentation is retained for the period required by applicable regulatory obligations following account closure. You may not opt out of KYC processing as a condition of using the hiso33 Platform; failure to complete verification will result in restricted account access.

7. Cookies & Tracking

hiso33 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Performance cookies: Used to collect anonymised data about how players use the Platform, to identify technical issues and improve performance.
• Functionality cookies: Used to remember your preferences, such as language settings, and to provide a more personalised experience.
• Analytics cookies: Used by hiso33's analytics tools to understand aggregate Platform usage patterns. No individual player is identified through analytics data alone.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the hiso33 Platform.

8. Data Sharing & Third Parties

hiso33 does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Service providers: KYC verification providers, payment processors, fraud detection services, cloud hosting providers, and customer support platform vendors — all operating under data processing agreements with hiso33.
• Gaming authority and regulators: Where required to report to the applicable gaming authority, or to respond to a lawful request from a regulatory or law enforcement body.
• Legal compliance: Where disclosure is required by applicable law, court order, or to protect the rights, property, or safety of hiso33, its players, or third parties.
• Business transfers: In the event of a merger, acquisition, or transfer of hiso33's business assets, player data may be transferred as part of that transaction, subject to equivalent privacy protections.

9. International Data Transfers

hiso33 may transfer your personal data to service providers or infrastructure located outside Malaysia. Where such transfers occur, hiso33 ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent to those required under the Malaysian PDPA — to protect the security and confidentiality of transferred data. By using the hiso33 Platform, you acknowledge and consent to such international transfers where necessary for service delivery.

10. Data Retention

hiso33 retains your personal data for as long as your account is active and for a period thereafter as required by applicable regulatory, legal, and gaming authority obligations. Specifically:

• Account and KYC records are retained for a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction records, including bet history and financial transactions, are retained for a minimum of five (5) years.
• Support communications are retained for three (3) years from the date of the communication.
• Technical and usage data logs are retained for twelve (12) months, after which they are aggregated and anonymised.

Once the applicable retention period expires, hiso33 will securely delete or anonymise your personal data in accordance with our internal data deletion procedures.

11. Data Security

hiso33 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit TLS encryption for all data in transit, encrypted storage for sensitive personal data at rest, role-based access controls limiting internal access to personal data on a need-to-know basis, regular security assessments and penetration testing of Platform infrastructure, and mandatory two-factor authentication for administrative access to systems holding player data. Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. hiso33 cannot guarantee absolute security and will notify affected players of any data breach that poses a significant risk to their rights and freedoms, in accordance with applicable regulatory requirements.

12. Your Rights

As a data subject under applicable data protection law, you have the following rights in respect of your personal data held by hiso33:

• Right of access: You may request a copy of the personal data hiso33 holds about you.
• Right to correction: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to retention obligations that hiso33 cannot waive under gaming authority and AML regulations.
• Right to restrict processing: You may request that hiso33 restrict processing of your personal data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to hiso33.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, contact hiso33 via the live chat or email address listed below. hiso33 will respond to valid data subject requests within thirty (30) days. Identity verification may be required before requests are processed. Email: [email protected] (plain text — not a clickable link).

13. Children & Minors

The hiso33 Platform is strictly for persons aged 21 and above. hiso33 does not knowingly collect personal data from individuals under the age of 21. If hiso33 discovers that personal data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted and the associated account will be closed immediately. Parents or guardians who believe a minor has registered on hiso33 should contact support immediately.

14. Policy Amendments

hiso33 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations, or gaming authority requirements. Material changes will be communicated to registered players via email or prominent Platform notice prior to taking effect. The current version of this Policy is always available on the hiso33 Platform. Continued use of the Platform following any update constitutes acceptance of the revised Policy.