🔒 Data Protection & Privacy
Your privacy matters to grap333. This document explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your own information as a user of our platform serving Malaysian players.
The six core principles that guide how grap333 handles your personal information. These cards are a summary — the full policy below provides the complete legal detail.
We collect personal data only for clearly defined purposes: account management, KYC compliance, payment processing, fraud prevention, and improving the grap333 experience for Malaysian players. Nothing more.
We request only the minimum personal information required to operate your account and fulfil our legal obligations. We do not collect data speculatively or for undefined future use.
All data is stored on encrypted servers. Access is restricted by role-based permissions. Regular security audits are conducted. We apply the same standards to third-party processors we engage.
grap333 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared only with trusted service providers operating under strict confidentiality obligations.
You have the right to access the personal data we hold about you, correct inaccuracies, request deletion, and withdraw marketing consent at any time. Requests are processed within 30 days.
This Privacy Policy is written in plain, accessible English. We avoid legal obfuscation. If something changes, we notify users proactively before the amendment takes effect.
This Privacy Policy ("Policy") is issued by grap333 ("Company", "We", "Us", "Our"), the operator of the online casino and sports betting platform available at https://grap333.cam and its associated mobile interfaces. It governs the collection, processing, storage, and use of personal data belonging to individuals who access or use the grap333 platform ("User", "You", "Your").
grap333 is committed to protecting the privacy of its users and handling all personal data with the highest standards of care, integrity, and transparency. This Policy has been drafted to reflect these commitments and to inform you of your rights with respect to your personal data.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, all of which together constitute the full regulatory framework governing your use of the grap333 platform. By accessing the platform or registering an account, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
Language Notice: This Privacy Policy is issued in English, which is the controlling language of all grap333 documentation. Where translations are provided for convenience, the English version shall prevail in all cases of ambiguity or conflict.
For the purposes of this Policy, the following terms shall have the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a living individual, including name, email address, identification number, financial data, and device identifiers. |
| "Processing" | Any operation performed on personal data — including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | grap333 — the entity that determines the purposes and means of processing personal data collected through the platform. |
| "Data Processor" | A third party that processes personal data on behalf of grap333 under a binding data processing agreement — such as payment processors, KYC verification providers, and cloud hosting services. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a defined purpose. |
| "Cookie" | A small text file stored on a User's device by the platform browser, used for session management, analytics, and user preference retention. |
grap333 collects personal data across several categories. The specific data collected will depend on how you interact with the platform:
Registration & Identity Data:
Identity Verification (KYC) Data:
Financial & Transaction Data:
Technical & Device Data:
Communications Data:
grap333 collects personal data through the following mechanisms:
Data from Malaysian Payment Providers: When you transact via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB, or Hong Leong, the payment confirmation data we receive is limited to transaction reference numbers, amounts, timestamps, and masked account identifiers. Full banking credentials remain solely with the respective payment provider.
grap333 uses personal data solely for the purposes set out in this section. We do not process your data for any purpose that is incompatible with the original purpose for which it was collected without obtaining fresh consent.
| Purpose | Data Used |
|---|---|
| Account Creation & Management | Name, email, date of birth, password, contact details — to create and maintain your grap333 Account. |
| Age & Identity Verification (KYC) | Identity documents, date of birth — to confirm you are 21+ and to comply with AML regulations. |
| Payment Processing | Payment method details, transaction history — to process deposits and withdrawal requests in MYR. |
| Fraud Prevention & Security | IP address, device data, transaction patterns — to detect and prevent fraudulent activity and account compromise. |
| Customer Support | Communications data, account activity — to investigate and resolve support queries and complaints. |
| Platform Improvement | Anonymised session and usage data — to identify technical issues and improve platform features and performance. |
| Regulatory Compliance | All applicable data categories — to fulfil obligations under anti-money-laundering regulations and cooperate with lawful official requests. |
| Marketing Communications | Email, preferences — to send promotional communications, only where you have provided explicit marketing consent. You may withdraw consent at any time. |
grap333 processes personal data only where a lawful basis for doing so exists. The legal bases applicable to our processing activities are as follows:
grap333 does not sell, rent, or commercially trade your personal data. We may share your data only in the limited circumstances described below:
No Unauthorised Sharing: grap333 will never share your personal data with advertising networks, data brokers, or marketing third parties without your explicit prior consent. If you have not opted into marketing communications, your data will not be used for any external marketing purpose.
grap333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention schedule is as follows:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | For the duration of the Account and for a period of five (5) years following permanent account closure, in compliance with AML record-keeping requirements. |
| KYC Documents | Five (5) years from the date of submission or from the date of Account closure, whichever is later, as required by anti-money-laundering legislation. |
| Transaction Records | Seven (7) years from the date of transaction, in accordance with applicable financial record-keeping obligations. |
| Support Communications | Three (3) years from the date of the last interaction, or until the matter is formally resolved, whichever is later. |
| Marketing Preferences | Until consent is withdrawn by the User or the Account is closed, whichever occurs first. |
| Technical & Log Data | Up to twelve (12) months, unless retained longer for active fraud investigation or legal proceedings. |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with grap333's internal data lifecycle procedures.
grap333 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us deliver and improve the service. The categories of cookies we use are:
Cookie Control: You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the grap333 platform. Instructions for managing cookies are available in your browser's help documentation.
Subject to applicable law, you hold the following rights with respect to the personal data that grap333 processes about you. To exercise any of these rights, please contact us using the details in Section 16. We will respond to all verified requests within thirty (30) calendar days.
grap333 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:
In the event of a personal data breach that poses a risk to your rights and freedoms, grap333 will notify affected users without undue delay and in accordance with applicable regulatory notification requirements.
The grap333 platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to delete the data and close the associated account.
Parental Notice: If you believe that a minor has used your payment method or personal details to access grap333, please contact our support team immediately. We will investigate and take corrective action without delay, including refund of any deposits where applicable.
The grap333 platform may contain references to third-party services such as payment providers. While we take care in selecting reputable partners, grap333 is not responsible for the privacy practices of any third-party service that is accessed outside of the grap333 platform environment.
We encourage you to review the privacy policies of any third-party service you use in connection with your grap333 Account — including the privacy documentation of your chosen payment provider, whether that is Touch 'n Go eWallet, Maybank, CIMB, or any other Malaysian payment service.
In the course of operating the grap333 platform, personal data may be transferred to and processed in countries outside Malaysia — for example, by cloud infrastructure providers or KYC verification partners whose servers are located internationally.
Where such transfers occur, grap333 ensures that appropriate safeguards are in place to protect the transferred data to a standard at least equivalent to the protections provided under this Policy. Safeguards may include:
Details of the safeguards applied to any specific international transfer may be requested by contacting us at the address in Section 16.
grap333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational circumstances. Where material changes are made, we will notify registered users via email and/or by posting a prominent notice on the platform at least seven (7) calendar days before the amended Policy takes effect.
The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically. Continued use of the grap333 platform following the effective date of any amendment constitutes acceptance of the revised Policy.
Version Archive: Previous versions of this Privacy Policy are available on request. Please contact our support team if you require a copy of a prior version for reference purposes.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how grap333 has handled your personal information, please contact our team using the following details:
We will respond to all data rights requests within thirty (30) calendar days. Where a request is complex or there are multiple requests, this period may be extended by a further sixty (60) days, in which case we will notify you accordingly.
For questions about our Terms & Conditions or our Responsible Gambling Policy, please use the same contact channels. All user communications are treated with strict confidentiality.
A quick-reference overview of what you can ask grap333 to do with your personal information at any time.
To exercise any right, contact us at [email protected] with "Privacy Request" in the subject. We respond within 30 days.
Our support team is available around the clock to answer any questions about your data rights or how grap333 handles your personal information.
🔞 For players aged 21 and above only. Play responsibly — gambling is for entertainment purposes only.