Privacy Policy Harta33 – Our Commitment to Protecting Malaysian Players' Data

Harta33 is an online casino platform operating in Malaysia, offering digital entertainment services that include slots, Live Casino, poker, lottery, Malaysia Super League and EPL Sports Betting, and cricket. In providing these services, harta33 needs to collect and process certain personal information from members for legitimate and specific purposes.

We understand that privacy is a serious matter for Malaysian internet users today. With more financial transactions happening digitally — from deposits via Touch 'n Go eWallet to withdrawals through DuitNow — trust in a platform to keep your information safe is essential. That's why harta33 continuously invests in industry-standard data security systems and procedures.

This Policy applies to all users of harta33.xyz regardless of how you access the platform — whether via laptop, smartphone, or tablet. It also applies to all data you provide to harta33, whether during the registration process, while using the platform, or when contacting our customer support team.

Harta33 only collects data necessary to operate the platform and deliver the services you request. Below are the categories of data we collect, along with specific examples for each category:

We do not collect information considered sensitive, such as medical data, religious beliefs, or political views. All data collected is limited to what is necessary to operate the harta33 online casino service safely and responsibly.

Personal data collected by harta33 is used for the following specific and legitimate purposes. We do not use your data for any purpose not stated in this Policy without first obtaining your renewed consent:

• Account Management: Registering and maintaining your harta33 account, processing login requests, and verifying your identity during your first withdrawal or when required
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as processing withdrawal of winnings to your account
• Platform Security: Detecting and preventing fraud, money laundering, collusion in poker games, bot usage, and violations of harta33's Terms & Conditions
• Responsible Gambling: Monitoring gambling patterns to identify signs of problem gambling and provide appropriate support to members who may need it
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support related to your harta33 account or gameplay
• Service Communications: Sending important account notifications such as deposit confirmations, withdrawal confirmations, expiring bonus reminders, and security alerts
• Legal Compliance: Complying with KYC (Know Your Customer), AML (Anti-Money Laundering), and other reporting obligations applicable to harta33's operations
• Platform Improvements: Analyzing aggregated and anonymized usage patterns to improve the design, performance, and game variety of the harta33 platform

Harta33 uses an internal analytics system to understand how players interact with the platform. This allows us to improve the user experience over time — for example, if we find that many Malaysian players are encountering difficulties with the withdrawal process at certain times, we will investigate and resolve the issue. This analysis is performed on aggregated data and does not expose any individual's information.

Every instance of personal data processing carried out by harta33 is grounded in a valid legal basis. We rely on one or more of the following bases depending on the purpose of the processing:

Harta33 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, there are limited circumstances in which we need to share data with certain parties in order to operate the harta33 platform effectively:

• Payment Providers: Information required to process transactions is shared with PCI DSS-licensed payment gateways supporting Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks). These providers receive only the data necessary to process each specific transaction.
• Game Providers: The minimum technical information required to enable access to games is shared with harta33's game software providers, who have signed strict confidentiality agreements.
• Technical Service Providers: Companies supporting harta33's technical infrastructure — such as cloud computing services and cybersecurity monitoring — all bound by strict data processing agreements.
• Legal Authorities: Where required by law or a valid court order, harta33 may be obligated to disclose certain information to law enforcement agencies or the relevant regulatory authorities.
• Anti-Fraud Enforcement: In cases of suspected fraud or money laundering, harta33 may share relevant information with the appropriate security agencies as required under Malaysian law.

In all of the data-sharing scenarios above, harta33 ensures that recipient parties are bound by data protection obligations equivalent to or stricter than our own standards. All data-sharing agreements prohibit the use of your data for any purpose unrelated to the services they provide to harta33.

Harta33 takes data security extremely seriously and continuously invests in technology and procedures to keep your personal data safe. The following are the key security measures we have in place:

• Data Encryption in Transit: All communications between your browser and harta33's servers are protected by TLS 1.3 protocol and 256-bit SSL encryption — the padlock icon or "https://" in your address bar confirms this.
• Database-Level Data Encryption: Sensitive data such as passwords is stored in hashed form that cannot be decrypted. Even in the event of unauthorised server access, your password cannot be read in its original form.
• Two-Factor Authentication (2FA): harta33 members are encouraged to enable 2FA — a one-time OTP code sent to your registered Malaysian mobile number each time you log in from a new device.
• Real-Time Security Monitoring: harta33's automated monitoring system tracks account activity around the clock to detect suspicious login attempts, access from unusual locations, or abnormal activity patterns.
• Internal Access Controls: Only harta33 staff who require access to specific data in order to perform their duties are permitted to do so. Access is regularly audited and monitored by our internal security team.
• Regular Security Testing: harta33 conducts regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
• Certified Data Centres: harta33 data is stored in data centres with industry-standard physical and digital security certifications, with backup systems at separate locations to prevent data loss.

While we take all reasonable steps to protect your data, no system is 100% secure against all threats. You also play an important role in keeping your account safe — use a strong password, do not share your login credentials, and report any suspicious activity to harta33 customer support immediately.

Harta33 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable law. Our general principle is: retain only what is needed, and delete when it is no longer required.

Once the designated retention period expires, your personal data will be securely deleted or fully anonymised using approved procedures so that it can no longer be linked back to you. This deletion process occurs automatically within harta33's systems and requires no action on your part.

As a harta33 member, you have the following rights regarding your personal data held by us. These rights can be exercised by contacting us via email at support@harta33.xyz or through live chat within the platform:

• Right of Access: You have the right to receive a copy of all personal data we hold about you. This request will be processed within 14 working days after your identity has been verified. harta33 provides data exports in a readily readable format.
• Right to Rectification: If you believe the personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly from your harta33 account settings without needing to contact support.
• Right to Erasure ("Right to be Forgotten"): You may request that your personal data be deleted from harta33's systems. Please note that this right may be limited in situations where data retention is required by law — for example, financial transaction records that must be kept for 7 years under AML requirements.
• Right to Object to Processing: You have the right to object to the processing of your personal data for specific purposes, particularly direct marketing. Objecting to direct marketing will immediately halt the processing of your data for that purpose.
• Right to Data Portability: You have the right to receive the personal data you have provided to harta33 in a structured, machine-readable format (such as JSON or CSV) and to transfer it to another service provider of your choice.
• Right to Withdraw Consent: For any processing based on your consent, you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.

Harta33 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your browser or device when you visit harta33.xyz. The categories of cookies we use are as follows:

• Essential Cookies (Required): These cookies are essential for the core functionality of the harta33 platform — including maintaining your login session, remembering your language preference, and enabling the game lobby to function correctly. Without them, the platform cannot operate. These cookies cannot be disabled.
• Performance Cookies: We use analytics cookies to understand how players interact with the harta33 platform — which pages are visited most frequently, how long players spend in particular games, and where players encounter technical difficulties. This information is used in aggregate and anonymised form to improve the platform.
• Functional Cookies: These cookies remember your preferences within the harta33 platform — including display settings, your last game selection, and communication preferences — to deliver a more personalized and seamless gaming experience each session.
• Security Cookies: Dedicated cookies are used to detect and prevent suspicious activity such as multiple login attempts from different locations within a short period, helping to protect your harta33 account from unauthorised access.

You can manage your cookie preferences through your web browser. Most modern browsers — including Chrome, Safari, Firefox, and Edge — allow you to view, manage, and delete stored cookies. However, disabling all cookies may significantly affect the functionality and usability of the harta33 platform, including potentially preventing you from logging in.

In addition to cookies, harta33 uses other tracking technologies such as web beacons in emails to verify whether important transactional emails (such as deposit or withdrawal confirmations) have been successfully received and opened. This helps us ensure that critical account-related communications reach you effectively.

Harta33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or relevant technological developments. Whenever a significant amendment is made, we will notify you via:

• An in-platform harta33 notification displayed upon your next login
• An email to your registered address summarizing the key changes
• Updating the "Last Updated" date at the top of this Policy

Your continued use of the harta33 platform following the publication of any amendments to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you have the right to close your account and withdraw your balance before the amendments take effect.

We encourage you to review this Privacy Policy periodically, especially before making a new deposit or sharing any additional information with the harta33 platform. The latest version of the Privacy Policy is always available on this page.