Privacy Policy Gana33 — Your Information Is Safe With Us

1. Information We Collect from You

Gana33 collects several categories of information when you register and use our platform. We only collect information that is genuinely necessary to provide you with the best possible service.

Account Registration Details:

• Full name as shown on identity card
• A valid and active email address
• Registered Malaysian phone number
• Date of birth (for age verification)
• Passwords are stored in hashed form — we do not store passwords in plain text

KYC Verification Information:

• Copy of national ID (MyKad) or passport
• Proof of current residential address (if required)
• Bank account or e-wallet details for transaction processing

Technical Information (Automatically Collected):

• IP address and approximate location based on IP
• Device type, operating system and browser version
• Platform activity logs including login times and game history
• Cookie and session data as described in the Cookies section

2. How We Use Your Personal Data

Every piece of information we collect is used for a specific and legitimate purpose. Below is the complete list of how your data is used at gana33:

Gana33 will not use your data for any purpose beyond those stated above without first obtaining your consent. If you do not wish to receive marketing communications, you may unsubscribe via the "unsubscribe" link in any promotional email we send.

3. Sharing Information with Third Parties

Gana33 takes a highly cautious approach to data sharing. Simply put — we do not sell your data. The following are the limited situations in which your data may be shared:

• Payment Processors: Required transaction information is shared with payment providers such as FPX, DuitNow and e-wallet providers for transaction processing purposes only. They are bound by strict confidentiality agreements.
• Platform Service Providers: Companies that help us operate the platform (hosting, analytics, cybersecurity) may have limited access to certain data within the scope of their work only.
• Legal Authority: Gana33 will disclose required information to Malaysian authorities if mandated by a court order or valid legal obligation.
• Fraud Prevention: In cases suspected to involve money laundering or financial crime, relevant information may be shared with the appropriate regulatory authorities.

All third parties working with gana33 are required to comply with data protection standards equivalent to this Privacy Policy. We do not use your data for third-party advertising or integrated marketing networks.

4. Cookies & Tracking Technologies

The gana33 website and app use cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better experience for you.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting anonymous data on how users interact with the platform, helping us identify areas for improvement.
• Functional Cookies: Saving your preferences such as language, display settings and game choices to streamline your experience in future sessions.
• Security Cookies: Used to detect suspicious activity and prevent unauthorised access to your account.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's documentation.

5. Data Security & Protection Measures

Gana33 continuously invests in security infrastructure to ensure your data is protected against both external and internal threats. Below are the key security measures we implement:

• Transit Encryption: All data transmitted between your device and gana33 servers is protected using TLS 1.3 — the highest standard currently available.
• Storage Encryption: Sensitive data in our databases is stored using AES-256 encryption, which requires a specific key to access.
• Tiered Access Control: gana33 staff can only access data relevant to the scope of their role. All access is logged and monitored.
• Two-Factor Authentication (2FA): Available to all player accounts and mandatory for all internal admin accounts.
• Regular Security Audits: We conduct penetration testing and security audits at least twice a year by independent security firms.
• 24/7 Monitoring: A real-time threat detection system monitors suspicious activity around the clock and will immediately alert our security team.

6. Data Retention Period

Gana33 does not retain your data indefinitely. We maintain a clear data retention policy based on operational needs and legal obligations:

• Active Account Data: Retained for the duration your account is active, plus any additional period required for audit and legal purposes.
• Financial Transaction Records: Retained for seven (7) years in accordance with Malaysia's financial legal requirements.
• KYC Documents: Retained for the period prescribed by applicable anti-money laundering (AML) regulations.
• Technical & Security Logs: Retained for 90 days for security incident investigation purposes, then automatically deleted.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, we use licensed document destruction services.

7. Your Rights as a Data Subject

Under Malaysia's PDPA and Gana33's commitment to privacy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the gana33 support team via Live Chat or email. We will process your request within 14 business days and may require identity verification beforehand to ensure the security of your account.

8. Protection of Children's Data

Gana33 is an exclusively adult platform. We do not knowingly collect or process personal data of individuals under 18 years of age. Our platform is protected by an age verification system during registration and KYC checks specifically designed to prevent access by minors.

Should we discover that personal data of an individual under 18 years of age has been collected without our knowledge, we will immediately take the following action:

• Suspending the relevant account immediately
• Deleting all collected personal data
• Refunding any funds that may have been deposited
• Reporting the incident to the relevant authorities if necessary

If you are a parent or guardian who suspects that your child has registered on gana33, please contact us immediately via Live Chat or our support email. We will prioritize such cases and respond within 24 hours.

9. Changes to This Privacy Policy

Gana33 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or security enhancements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page
• Sending a notification to your registered email for significant changes
• Displaying a notice on the platform for at least 14 days before changes take effect

We encourage you to review this Privacy Policy page periodically so you stay informed about how we protect your information. Continued use of the gana33 platform after any changes are published constitutes your acceptance of the updated policy.

10. Contact Us About Privacy

If you have any questions, concerns or complaints regarding how gana33 handles your personal data, we're here to help through the following channels:

• 24/7 Live Chat: The fastest way to get a response — available directly within the Gana33 platform with an average response time of under 2 minutes.
• Privacy Email: [email protected] — dedicated to privacy and data protection enquiries that require written documentation.
• FAQ Page: Visit FAQ page us for quick answers to frequently asked questions about privacy and account security.

For formal complaints relating to data protection, you also have the right to submit a complaint to the Department of Personal Data Protection (JPDP) Malaysia if you believe your privacy rights have been violated and the matter cannot be resolved through our support channels.

We are committed to responding to all privacy-related inquiries within 14 working days. For urgent cases involving security risks, we prioritize a response within 24 hours.