Privacy Policy rempit33 — Malaysian User Data Protection

1Introduction and Scope of the Privacy Policy

This Privacy Policy is published by rempit33 ("we", "Platform", "company") and applies to all users who access or use the rempit33.vu website, the rempit33 mobile app, and all services operating under the rempit33 brand. This policy explains in detail how we handle your personal information from the moment of registration throughout your use of the platform.

Rempit33 understands that user trust is our most valuable asset. That is why we are committed to handling every piece of your personal data with the highest level of care and security. We do not treat privacy as a box to be ticked — it is a core value of the rempit33 service.

This Privacy Policy should be read together with rempit33's Terms and Conditions and our Responsible Gaming Policy, all of which form the overarching agreement governing the relationship between you and rempit33. In the event of any conflict between these documents, this Privacy Policy shall apply with respect to matters concerning the handling of personal data.

2Types of Personal Data We Collect

To provide a safe, legal, and responsible betting service, rempit33 collects several categories of personal information from users. This collection is done directly from you during registration or platform use, or automatically through industry-standard tracking technology.

We only collect data that is strictly necessary for legitimate, stated purposes. We do not collect sensitive data such as medical information, religious beliefs, or political views unless you voluntarily provide it in specific contexts such as the responsible gaming programme.

3Purpose of Data Collection and Use

Every piece of data collected by rempit33 has a clear and specific purpose. We do not use your data for any purpose other than those stated here without first obtaining your additional consent.

• Account management: Creating, verifying, and maintaining your user account; processing registrations and logins; and enabling account recovery when needed.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and accurately.
• KYC and AML verification: Conducting Know Your Customer (KYC) checks and Anti-Money Laundering (AML) compliance as required by regulatory obligations.
• Platform security: Detecting and preventing fraud, unauthorised access, system abuse, and other suspicious activities that could compromise the safety of other users.
• Customer support: Responding to enquiries, resolving complaints, and providing technical and operational support to users.
• Service improvement: Analysing platform usage patterns to enhance the user experience, improve existing features, and develop new functionality.
• Service communications: Sending important notifications related to your account, promotions you have subscribed to, and relevant service updates.
• Responsible gaming: Monitoring wagering patterns to identify early signs of problem gambling and providing appropriate assistance.

4Data Sharing and Disclosure to Third Parties

Rempit33 does not share, sell, or disclose users' personal data to third parties except in the circumstances described below. Any data sharing is carried out under strict controls and only to the extent necessary for a legitimate purpose.

• Payment service providers: Required transaction information is shared with recognised payment processors such as FPX, Touch 'n Go, GrabPay, and Boost solely to process your transactions. These providers are bound by strict confidentiality agreements.
• Game software providers: Third-party casino and sports game providers may receive the minimum technical data required to enable games to function properly within the rempit33 platform.
• Regulatory authority: rempit33 complies with all lawful requests from regulatory authorities, law enforcement agencies, and courts with jurisdiction over our operations.
• Identity verification services: Data required for the KYC process is shared with certified identity verification service providers to ensure compliance with AML requirements.
• IT service providers: IT infrastructure providers supporting rempit33's operations may have limited access to data within the scope of their technical roles, subject to comprehensive confidentiality agreements.

5Data Security Measures

Rempit33 implements a comprehensive, multi-layered data security framework, combining the latest technology with strict operational policies to protect your personal information from unauthorised access, loss, destruction, or accidental disclosure.

• Data encryption in transit: All communications between your device and rempit33 servers are encrypted using TLS 1.3 protocol with AES-256 encryption. This ensures data cannot be read even if intercepted during transmission.
• Data encryption at rest: Sensitive data such as financial information and identity documents are stored in encrypted format within protected databases. Passwords are never stored in plain text — only cryptographic hashes are retained.
• Role-based access control: Access to user data within rempit33's internal systems is restricted based on the principle of least privilege. Only staff who require access to perform their specific duties are granted permission.
• Two-factor authentication (2FA): Two-factor authentication is available for all user accounts and is mandatory for all rempit33 internal administrative access.
• Continuous monitoring and auditing: Security monitoring systems operate 24/7 to detect and respond to any threats or unusual activity in real time.
• Periodic penetration testing: rempit33 conducts regular penetration testing and vulnerability assessments through accredited independent cybersecurity firms.

While we take all reasonable steps to protect your data, no security system is entirely perfect. You also play an important role in keeping your account secure by using a strong and unique password and not sharing your login details with anyone.

6User Rights Regarding Personal Data

As a rempit33 user, you have certain rights regarding the personal data we hold and process. We fully respect these rights and provide straightforward mechanisms for you to exercise them.

To exercise any of the above rights, please contact our privacy team by email at [email protected] or via Live Chat on the platform. We will process your request within 14 business days. For more complex cases, this period may be extended up to 30 days, and we will notify you if this applies.

7Cookies, Trackers and Similar Technologies

Rempit33 uses cookies and similar tracking technologies to enhance platform functionality and security. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential cookies (required): Required for core platform operations such as login session management, security, and essential website functionality. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Helping us understand how users interact with the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is used to improve the user experience.
• Preference cookies: Saving your preferences and settings such as language, time zone, and display theme so you do not need to reconfigure them each time you log in.
• Security cookies: Used to detect and prevent fraudulent activity, ensure legitimate user sessions, and protect the platform from cyber attacks.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality or user experience of the rempit33 platform.

8Children's and Minors' Privacy

Rempit33 is an online betting platform strictly dedicated to adult users aged 18 and above. We do not collect, store, or process personal data from individuals under the age of 18.

If rempit33 discovers that personal data of a child or minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that data and terminate the associated account. Parents or guardians who believe their child may have registered on this platform are encouraged to contact us immediately.

9Data Retention Period

Rempit33 retains users' personal data only for as long as necessary to fulfil the original purpose of collection, or for as long as required by applicable laws and regulatory obligations.

• Active account data: Retained for as long as your account remains active on the rempit33 platform.
• Financial transaction records: Retained for a minimum of 7 years following each transaction, as required by Malaysian banking and anti-money laundering laws.
• KYC data and identity documents: Retained for the duration of the active account period plus 5 years after account closure, in accordance with KYC/AML requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Closed account data: Following account closure, personal data no longer required for legal purposes will be deleted or anonymised within 90 days.
• Cookie and analytics data: Retained for a maximum of 13 months from the date of collection, after which data is aggregated and anonymised for internal reporting purposes.

Once the designated retention period expires, your personal data will be securely deleted or converted into a non-identifiable format (anonymised) using data deletion procedures that comply with industry security standards.

10Amendments to This Privacy Policy

Rempit33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or service improvements. We are committed to informing you of any material changes.

• Material amendments: For any significant changes that affect how we handle your data, we will send a notification via email or an in-platform notice at least 14 days before the changes take effect.
• Minor amendments: For editorial corrections, language updates, or technical clarifications that do not involve policy changes, we will update the "Last Updated" date at the top of this page.
• Ongoing consent: Continued use of the rempit33 platform after the effective date of any amendment is considered your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The latest version of this Privacy Policy is always available on this page.

11How to Contact Us on Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the rempit33 privacy team is here to help. We are committed to responding to all privacy-related enquiries within 3 business days.

• Live Chat: The fastest way to get immediate assistance — available 24/7 within the rempit33 platform.
• Privacy email: [email protected] — For privacy-related enquiries, data access requests, or formal complaints.
• Response time: General enquiries are answered within 24 hours; data rights requests are processed within 14 business days.