Sri33 Privacy Policy — Our Commitment to Protecting Your Data

1 Introduction and Scope of the Privacy Policy

Sri33 is an online gaming platform operating exclusively for the Malaysian market. We understand that member trust is our most valuable asset, and protecting your personal data is part of our commitment to maintaining that trust.

This Privacy Policy applies to all information we collect through:

• The official sri33 website at sri33.net and all associated subdomains.
• The sri33 mobile app, available for download through our platform.
• All interactions you have with our customer support team via live chat, email, or any official sri33 communication channel.
• Any new services or features we introduce from time to time, unless stated otherwise in a specific privacy policy for that service.

By registering an account at sri33 or using any of our services, you agree to the collection and use of your personal information in accordance with the terms set out in this Privacy Policy. If you do not agree, please do not use our platform.

2 Types of Personal Data We Collect

Sri33 collects various types of personal information depending on how you interact with our platform. Below are the main categories of data we collect:

a) Identity and Account Information

• Full name as per identity card or passport.
• Identity card number (MyKad) or passport number.
• Date of birth and gender.
• Active mobile phone number.
• Email address.
• Username and password (passwords are stored in encrypted hash format).

b) Financial Information

• Bank account number and bank name.
• Digital wallet information (Touch 'n Go eWallet, GrabPay, Boost).
• A complete record of all deposit and withdrawal transactions.
• Wagering history and gaming activity.

c) Technical Information

• Your device's IP address.
• Type and version of the web browser used.
• Your device's operating system.
• Cookie data and session identifiers.
• Platform activity logs including login and logout timestamps.

3 How We Use Your Personal Data

Sri33 uses collected personal data solely for the following purposes, and for no other purpose without your prior consent:

We will not use your personal data for any purpose not stated above without first obtaining your explicit consent. If you do not wish to receive promotional communications, you may withdraw that consent at any time by contacting our support team.

4 Data Sharing with Third Parties

Sri33 takes a highly cautious approach to sharing member personal data. We does not sell, does not rent, and does not trade your personal data to any third party for commercial purposes. Your personal data may be shared only in the following limited circumstances:

• Payment Service Providers: Required information is shared with approved payment processors (such as local Malaysian payment gateways) to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum technical data required may be shared with game providers to ensure smooth gameplay and accurate wagering record-keeping.
• Legal Requirement: We may be required to disclose your personal data to relevant authorities if mandated by law or a valid court order.
• Fraud Prevention: In cases of suspected serious fraud, we may share necessary information with relevant fraud prevention bodies or financial institutions to protect the interests of all parties.

5 Data Security and Protection

Sri33 continuously invests in cybersecurity infrastructure to keep your personal data protected against unauthorised access, loss, misuse, or accidental disclosure. Key security measures we implement include:

• End-to-End Encryption: All data transmitted between your browser and sri33's servers is protected with 256-bit TLS/SSL encryption, ensuring no unauthorised party can intercept or read that data.
• Multi-Layer Access Control: Access to systems storing member data is restricted to staff who require such access to perform their duties only, in accordance with the "least privilege" principle.
• 24/7 Monitoring: Our security systems are monitored around the clock to detect and respond to any threats or suspicious activity without delay.
• Regular Penetration Testing: sri33 conducts regular penetration testing carried out by independent cybersecurity experts to identify and remediate any system vulnerabilities.
• Data Backup: Member data is automatically and regularly backed up to a secure, separate location to ensure rapid data recovery in the event of any technical incident.

While we take all reasonable precautions, no security system in the world can guarantee 100% absolute security. If you suspect any suspicious activity on your account, please contact our support team immediately.

6 Use of Cookies and Tracking Technologies

Sri33 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how the platform is used, and secure your login sessions.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and remembering language preferences. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance Cookies: Helping us understand how members use our platform, which pages are most frequently visited, and where technical issues occur. All data collected is anonymised.
• Functional Cookies: Allowing the platform to remember your preferences such as display settings and personal configurations to deliver a more tailored experience.

You can manage cookie settings through your web browser settings. However, disabling required cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help documentation.

7 Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in privacy protection, you as a sri33 member have the following rights regarding your personal data:

8 Children's Data Protection

Sri33 is an online gaming platform that intended exclusively for individuals aged 18 and above. We do not intentionally collect, process, or store any personal data relating to minors.

If we discover that we have inadvertently collected data from individuals under the age of 18, we will take immediate steps to:

• Terminating the account in question with immediate effect.
• Deleting all related personal data from our systems.
• Returning any remaining account balance to the rightful bank account holder.

If you believe a minor has registered an account on our platform without your knowledge, please contact our support team immediately so that appropriate action can be taken.

9 Cross-Border Data Transfers

In the context of sri33's platform operations, your personal data may be processed or stored on servers located outside Malaysia, particularly in relation to the cloud computing services we use to ensure platform scalability and reliability.

Whenever your personal data is transferred outside Malaysia, we ensure the transfer is carried out with adequate safeguards through:

• Use of internationally recognised standard contractual clauses with all overseas service providers.
• Ensuring that the recipient country or region maintains a level of data protection equivalent to or higher than that of Malaysia.
• Implementing additional technical and organisational measures such as data encryption prior to any transfer.

We are committed to ensuring that wherever your data is processed, it always receives protection consistent with this Privacy Policy and the requirements of Malaysian law.

10 Personal Data Retention Period

Sri33 does not retain your personal data longer than necessary for the purpose for which it was collected. Below is a general guide to data retention periods by category:

• Active Account Data: Retained for the duration your account is active and for the additional period required after account closure to comply with legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering legislation and financial reporting requirements.
• Activity Logs and Technical Data: Retained for 12 months for security and technical troubleshooting purposes.
• Customer Support Communication Data: Retained for 3 years for reference and resolution of any complaints that may arise.
• KYC and Identity Verification Data: Retained for a minimum of 5 years after account closure in accordance with compliance requirements.

Upon expiry of the relevant retention period, your personal data will be securely deleted or anonymised in accordance with the data disposal procedures established by sri33.

11 Contact Us Regarding Privacy

Sri33 takes every enquiry, concern, or complaint relating to privacy and personal data protection seriously. If you have any questions about this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Email: [email protected] — for written enquiries requiring a detailed response.
• Live Chat: Available 24 hours a day, 7 days a week via the live chat icon at the bottom corner of the sri33 platform.

We aim to respond to all privacy-related enquiries within 3 business days and will fulfil formal requests (such as data access or deletion) within 14 business days.

This Privacy Policy was last updated on January 2026. sri33 reserves the right to modify this Privacy Policy at any time. Material changes will be communicated to members via in-platform notifications or email at least 14 days before the changes take effect.