Privacy Policy sri33 – Your Personal Data Protection

Welcome to the Privacy Policy sri33. This document outlines our commitment to protecting your personal data as a member of our online entertainment platform in Malaysia. At sri33, we understand that privacy is more than a legal obligation — it is the foundation of the trust you place in us, and we take that responsibility seriously.

This Privacy Policy applies to all users who visit, register with, or use any services offered by sri33 through our website. It explains the types of information we collect, the purposes for collecting it, how we protect it, and the rights you hold regarding your personal data.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international data privacy standards. By using the sri33 platform, you agree to the terms set out in this Privacy Policy. We encourage you to read this document carefully and contact us if you have any questions.

sri33 only collects data necessary to provide you with quality, secure, and legally compliant services. No excessive data is collected beyond our operational requirements. The following are the categories of data we may collect:

Your personal data is collected through several channels: directly when you complete a registration form or submit verification documents; automatically when you use our platform; and through trusted third parties such as payment providers and approved identity verification partners.

sri33 uses collected personal data solely for legitimate, stated purposes. We will not use your data for any other purpose without informing you in advance. The primary purposes for which data is used include:

• KYC verification and compliance: Verifies your identity, age, and eligibility to use our platform in accordance with legal requirements.
• Account management: Creates, maintains, and protects your account so your gaming experience is always smooth and secure.
• Financial transaction processing: Processes your deposits, withdrawals, and all financial transactions on the platform securely and efficiently.
• Customer support: Enables our team to recognise you and provide relevant assistance whenever you need help.
• Platform security: Detects and prevents fraud, money laundering, unauthorised access, and any other security threats.
• Service improvement: Analyses aggregate (not individual) usage patterns to improve our platform's products, design, and performance.
• Important communications: Sends important notices regarding your account, security, policy changes, and relevant promotional information (subject to your preferences).
• Legal compliance: Fulfils reporting and compliance obligations to the relevant regulatory bodies as required by law.

sri33 takes an extremely cautious approach when it comes to sharing your personal data. We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data is only shared in limited situations and with appropriate safeguards in place.

There are a limited number of situations where we may need to share your information with certain parties:

• Trusted service providers: Companies that assist us in day-to-day operations such as payment gateway providers, identity verification services, and customer support platforms. All such providers are bound by strict data confidentiality agreements.
• Regulatory bodies and law enforcement: When required by Malaysian law or a valid court order, we may be required to disclose certain information to the relevant authorities.
• Fraud prevention: In cases where there is suspicion or evidence of fraudulent activity or money laundering, relevant information may be shared with bodies responsible for preventing financial crime.
• Business transfer: If sri33 is involved in a merger, acquisition, or sale of business assets, user data may be transferred to the new entity — but you will be notified in advance and your rights will be preserved.

The security of your personal data is the absolute priority of sri33. We continuously invest in the latest security infrastructure to ensure your information is protected against cyber threats, unauthorized access, data loss, or destruction.

The security measures we implement cover multiple layers of protection:

• End-to-end encryption: All data in transit is protected with 256-bit TLS/SSL protocols. Your password is stored in a hashed format that cannot be decrypted.
• Firewall and intrusion detection systems: Our servers are protected by multi-layered firewalls and intrusion detection and prevention systems operating 24 hours a day, 7 days a week.
• Continuous security monitoring: Our security team monitors platform activity in real-time to detect any anomalies or unauthorised access attempts.
• Regular security audits: We conduct regular penetration testing and security audits by independent security experts to ensure our protections are always up to date.
• Role-based access management: sri33 staff may only access data required for their role, and every access is logged for audit purposes.
• Incident response plan: sri33 has a clear incident response procedure. In the event of a data breach, you will be notified within the timeframe required by law.

sri33 uses cookies and similar tracking technologies to enhance your browsing experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several different types of cookies for different purposes:

• Essential cookies: Required for core website functions such as login, session verification, and security. These cookies cannot be disabled.
• Performance cookies: Collects information about how visitors use our website — which pages are visited most often, what error messages are received — to help us improve website performance.
• Functional cookies: Stores your preferences such as language, region, and other settings to deliver a more personalised experience.
• Analytical cookies: Helps us understand aggregate platform usage patterns to make better product development decisions.

You can manage and control cookies through your browser settings at any time. However, disabling essential cookies may affect platform features that require login or session security.

As a user sri33 and as a Malaysian citizen, you have rights protected under the Personal Data Protection Act (PDPA) 2010. We are committed to fully respecting and facilitating the exercise of those rights.

• Right to access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within a reasonable timeframe.
• Right to rectification: If the data we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data — subject to applicable legal record-keeping obligations.
• Right to restrict processing: You may request that we restrict how we process your data while a dispute is pending resolution.
• Right to object: You may object to the processing of your data for specific purposes, such as marketing communications.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact our customer support team. We will verify your identity before processing any request to protect the security of your data.

sri33 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Once data is no longer required, it will be securely deleted or anonymised.

• Active account data: Retained for the duration your account remains active, plus any period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC Documents Retained for the period prescribed by applicable Anti-Money Laundering (AMLA) legislation.
• Support communication logs: Retained for 3 years for reference and service improvement purposes.
• Technical log data: Typically retained for 12 months before being automatically deleted or anonymized.

Platform sri33 may contain links to third-party websites or services such as payment providers or service partners. This Privacy Policy applies only to the sri33 platform and does not cover the privacy practices of those third-party websites.

We encourage you to read the privacy policy of every third-party website you visit. sri33 is not responsible for the content, privacy practices, or security of those third-party websites. Any interaction you have with third-party websites is entirely at your own risk.

sri33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors. The most recent update date will always be displayed at the top of this document.

For significant amendments, we will endeavor to notify you via your registered email or a prominent notice on our platform before the changes take effect. Continued use of the sri33 platform after amendments are published constitutes your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our privacy team sri33 ready to assist you.

You can reach us by email at [email protected] or through our customer support channels, which operate 24 hours a day. We are committed to responding to all privacy-related enquiries seriously and within a reasonable timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority under PDPA 2010.