Privacy Policy

This Privacy Policy ("Policy") sets out how WD33 ("WD33", "we", "us", "our") collects, uses, stores, shares, and protects personal data provided by or obtained from players, visitors, and users ("you", "your") of the WD33 online platform accessible at wd33.buzz and all associated sub-domains and services (collectively, the "Platform").

WD33 is committed to handling your personal information responsibly and in accordance with internationally recognised data protection principles. We collect only what we need, use it only for stated purposes, and maintain robust safeguards to protect your data from unauthorised access, disclosure, or misuse.

This Policy should be read in conjunction with our Terms & Conditions. If you do not agree with any part of this Policy, please cease using the Platform and contact our support team to close your account.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — a person who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. WD33 acts as Data Controller in relation to player data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of and under the instruction of WD33 (such as payment processors or KYC verification providers).
• "Consent" means any freely given, specific, informed, and unambiguous indication of a data subject's wishes by which they agree to the processing of their personal data.
• "KYC" means Know Your Customer — the process by which WD33 verifies the identity, age, and payment details of account holders.

WD33 is the Data Controller responsible for personal data collected through the Platform. As Data Controller, WD33 determines how and why your data is processed, and bears responsibility for ensuring that processing activities comply with this Policy and applicable data protection obligations.

All enquiries relating to data protection, including requests to exercise your data rights, should be directed to WD33's support team as described in Section 14 (Contact Us) of this Policy.

WD33 collects personal data through several channels — directly from you when you register or use the Platform, automatically through your use of the Platform, and from third-party verification providers where required for KYC or fraud prevention purposes. The categories of data we collect include:

WD33 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers) unless specifically required by applicable law or regulation.

WD33 processes your personal data for the following specific and legitimate purposes:

• Account Management: To create, verify, maintain, and administer your WD33 account, including processing your registration information and maintaining your account profile.
• Identity & Age Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with our licensing obligations and anti-money laundering requirements.
• Payment Processing: To process deposits and withdrawals via supported Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, and cryptocurrency channels. Payment data is shared with our payment processing partners solely for transaction execution.
• Customer Support: To respond to your enquiries, resolve complaints, assist with account issues, and provide 24/7 live chat support.
• Security & Fraud Prevention: To detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, multiple account registration, and other activities that breach our Terms & Conditions or applicable law.
• Regulatory Compliance: To meet our obligations under our international gaming licence, including record-keeping, reporting, and cooperation with licensing authority requests or legal process.
• Responsible Gambling: To monitor gaming behaviour, identify signs of problem gambling, administer self-exclusion requests, enforce deposit and loss limits, and fulfil our duty-of-care obligations to players.
• Platform Improvement: To analyse usage patterns, optimise platform performance, develop new features, and improve the overall player experience.
• Direct Communications: To send you account-related notifications, security alerts, transaction confirmations, and — where you have consented — promotional offers and bonus information.

WD33 processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, payment processing, and customer support — is carried out on the basis that it is necessary to provide the services you have requested.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, anti-money laundering checks, and record retention requirements mandated by our licensing authority.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and platform analytics is carried out on the basis of WD33's legitimate interests, provided these interests are not overridden by your privacy rights.
• Consent: Where processing is based on consent — such as receiving promotional communications — you may withdraw that consent at any time by contacting our support team or updating your notification preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

WD33 does not sell, rent, or trade your personal data to third parties. Personal data may be disclosed to the following categories of third parties in limited circumstances:

• Payment Processors: Malaysian payment service providers (including those operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency transaction networks) receive financial data necessary to process your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Specialist third-party KYC service providers may process copies of your identity documents and personal details for the purpose of identity and age verification. These providers are bound by strict confidentiality obligations.
• Game Studios & Software Providers: Game studios providing titles on the WD33 Platform may receive limited usage data (such as game session identifiers) for technical operation and game integrity purposes, but do not receive personally identifiable information beyond what is technically necessary.
• Regulatory & Law Enforcement Authorities: WD33 may disclose personal data to licensing authorities, financial regulators, or law enforcement agencies where required to do so by law, court order, or binding regulatory instruction.
• Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers may have access to personal data as part of providing technical services. All such providers are subject to contractual data protection requirements.

WD33 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law or our licensing obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account plus five (5) years following account closure, to meet anti-money laundering and licensing record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial regulatory requirements.
• KYC & Identity Documents: Retained for five (5) years from the date of account closure, or longer where required by regulatory instruction.
• Customer Support Communications: Retained for two (2) years from the date of last interaction, or longer where associated with an unresolved complaint or legal matter.
• Technical & Usage Logs: Retained for up to twelve (12) months for platform security and performance purposes, then deleted or anonymised.
• Marketing Consent Records: Retained for the duration of the consent, plus three (3) years thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

WD33 implements a comprehensive range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the WD33 Platform.
• Encryption of sensitive personal data at rest on WD33's servers.
• Strict role-based access controls limiting internal staff access to personal data on a need-to-know basis only, with all access logged and auditable.
• Regular independent security assessments, penetration testing, and vulnerability scanning of the Platform's infrastructure.
• Two-factor authentication (2FA) available for all player accounts as an additional layer of login security.
• Incident response procedures designed to detect, contain, and notify affected parties of any personal data breach in a timely manner.

WD33 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytical information. A cookie is a small text file placed on your device by a website server, which your browser returns to the server on subsequent visits.

The following categories of cookies are used on the WD33 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies, security tokens, and cookies that remember your authentication state. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and recently accessed game categories to personalise your experience across sessions.
• Analytical Cookies: Collect aggregated, anonymised data about how players use the Platform — such as which pages are visited most frequently and where users encounter errors — to help us improve performance and usability.
• Security Cookies: Used to detect and prevent fraudulent activity, multiple account registration, and suspicious login patterns.

You may manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, doing so may affect the functionality of certain features on the Platform. Blocking strictly necessary cookies in particular may prevent you from logging in or using core Platform features.

As a data subject, you hold the following rights in relation to the personal data WD33 holds about you. These rights are exercisable by contacting WD33's support team. WD33 will acknowledge all data rights requests within five (5) business days and aim to provide a full response within thirty (30) calendar days.

WD33 may need to verify your identity before fulfilling a data rights request to ensure that personal data is not disclosed to unauthorised parties. Where a request cannot be fulfilled — for example, where data must be retained to comply with legal obligations — WD33 will explain the reason for the limitation in writing.

The WD33 Platform is strictly intended for persons aged 21 years and above. WD33 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process and is applied to all accounts before withdrawal access is granted.

Where WD33 becomes aware or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated funds will be frozen pending investigation, and the personal data concerned will be deleted as promptly as legally permissible.

If you are a parent or guardian and believe that your child has registered an account on the WD33 Platform, please contact our support team immediately. We will investigate and take appropriate action without undue delay.

WD33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Where changes are material, WD33 will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The effective date of the current version is displayed at the top of this page. Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

We recommend reviewing this Policy periodically to remain informed of how WD33 handles your personal data. The most current version will always be accessible on this page.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way WD33 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the on-site chat widget at wd33.buzz. This is the fastest channel for urgent data-related queries including data breach notifications or account compromise.
• Email: [email protected] — for formal data rights requests or detailed privacy enquiries. Please allow up to 24 hours for an initial acknowledgement.

When submitting a data rights request, please include your registered account username, a clear description of your request, and any relevant reference information to allow WD33 to locate and act upon your data promptly.

WD33 takes all privacy-related communications seriously and is committed to responding to every request in a transparent, timely, and respectful manner. If you are not satisfied with WD33's response to your data rights request, you may have the right to lodge a complaint with the relevant regulatory authority in your jurisdiction.