Privacy Policy

This Privacy Policy ("Policy") sets out how mae33 ("mae33", "we", "us", "our"), the operator of the online gaming platform accessible at mae33.cam, collects, processes, stores, and protects personal data belonging to users ("User", "Player", "you") who access or use our Platform.

mae33 is built specifically for the Malaysian market. We serve players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. Given the trust our players place in us, we treat data protection as a core operational obligation — not a compliance checkbox.

This Policy applies to all personal data collected through the mae33 website, any mobile-optimised interface, live chat and support communications, payment processing interactions, and any other touchpoint between you and mae33. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

By registering an Account on mae33 or continuing to use the Platform after this Policy takes effect, you acknowledge that you have read and understood how we handle your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform and close your Account.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and device identifiers.
• "Data Controller" means mae33, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of mae33 under a written agreement, including payment processors and identity verification providers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" means Know Your Customer — the identity verification process required by regulatory and anti-money laundering obligations.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and session management.
• "Account" means your registered user account on the mae33 Platform.
• "Platform" means the mae33 website, mobile interface, and all associated services accessible at mae33.cam.

mae33 collects Personal Data through several channels. The categories of data we collect are described below:

3.1 Registration Data

When you create an Account, we collect the information you provide directly, including:

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Residential address
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (MYR by default)

3.2 KYC Verification Data

To comply with anti-money laundering obligations and verify player identity, we collect:

• Copy of government-issued photo identification (Malaysian MyKad, Passport, or Driver's License)
• Proof of residential address (utility bill or bank statement dated within three months)
• Selfie photograph for liveness verification
• Source of funds documentation where required by our compliance team

3.3 Financial Transaction Data

When you make deposits or withdrawals, we record:

• Payment method type (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, BTC/USDT)
• Transaction amount in MYR or cryptocurrency equivalent
• Transaction timestamps and reference numbers
• Partial payment identifiers (e.g., masked bank account or e-wallet identifiers — never full card numbers)

3.4 Gaming Activity Data

• Games played, bet amounts, game outcomes, and session duration
• Sports betting selections, odds at time of placement, and settlement outcomes
• Bonus usage history and wagering requirement progression

3.5 Technical & Device Data

• IP address and approximate geolocation (country/region level)
• Browser type and version
• Device type, operating system, and screen resolution
• Session login and logout timestamps
• Cookie identifiers and session tokens

3.6 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence content and metadata
• Responsible gambling tool usage (deposit limit settings, self-exclusion requests)

mae33 processes your Personal Data for the following specific purposes:

mae33 relies on one or more of the following legal bases when processing your Personal Data:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and licensing conditions.
• Legitimate Interests: Processing carried out for purposes that serve our legitimate business interests without overriding your fundamental rights — including fraud prevention, platform security, and service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to marketing communications and optional personalisation features. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

mae33 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly for the purposes outlined in this Policy:

• KYC and Identity Verification Providers: Third-party services used to verify identity documents and conduct liveness checks as part of our regulatory compliance programme.
• Payment Processors: Including FPX banking network operators, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and cryptocurrency network processors — solely to facilitate deposit and withdrawal transactions.
• Game Software Providers: Licensed game studios whose titles are hosted on the mae33 Platform may receive aggregated, pseudonymised session data for RNG auditing and game performance purposes.
• Fraud Prevention and Security Services: Third-party providers assisting in detecting and preventing fraudulent activity, account takeovers, and money laundering.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or instruction from a competent regulatory or law enforcement authority, we may disclose Personal Data as legally obligated.
• Professional Advisers: Legal, accounting, or auditing professionals engaged by mae33, subject to confidentiality obligations.

mae33 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account and KYC Data: Retained for a minimum of 5 years following account closure, in accordance with anti-money laundering regulatory requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction for AML and tax compliance purposes.
• Gaming Activity Logs: Retained for up to 3 years from the date of activity, or longer if required for dispute resolution or regulatory audit.
• Support and Communications Records: Retained for up to 3 years from the date of last interaction, or for the duration of any open dispute.
• Marketing Consent Records: Retained until withdrawn plus 1 year, to demonstrate compliance with consent obligations.
• Technical and Device Logs: Retained for up to 12 months for security and fraud prevention purposes.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

mae33 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and analyse site performance. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and game lobby layout. These improve your experience but are not essential to core functionality.
• Analytics Cookies: Collect aggregated, pseudonymised data about how users interact with the Platform — including pages visited, session duration, and navigation paths. This data is used solely to improve Platform performance and is not linked to individual identities.
• Security Cookies: Assist in fraud detection, account protection, and identification of suspicious login behaviour.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. mae33 does not currently use third-party advertising or cross-site tracking cookies.

mae33 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the mae33 Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive Personal Data — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations and regular security training.
• Multi-Factor Authentication: Available for all player accounts and required for internal administrative access to systems holding Personal Data.
• Regular Security Audits: mae33 conducts periodic penetration testing and vulnerability assessments of its Platform infrastructure.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, mae33 will notify affected users and relevant authorities within the timeframes required by applicable law.

Subject to applicable law, you hold the following rights in respect of the Personal Data mae33 holds about you:

• Right of Access: You may request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held in your Account.
• Right to Erasure: In certain circumstances, you may request deletion of your Personal Data. Note that this right is subject to our legal retention obligations — we cannot erase data we are required to retain by law (e.g., AML transaction records).
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances, for example while a dispute is pending.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your Personal Data.
• Right to Object: You may object to processing of your Personal Data based on legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will respond to all verifiable requests within 30 days. We may need to verify your identity before processing your request.

The mae33 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory step in our KYC process, and we will close any Account found to belong to a person under 21, withholding associated balances pending investigation.

If you believe that a minor has registered an Account on mae33 or that we have inadvertently collected data relating to a minor, please contact us immediately at [email protected] so that we may take prompt remedial action.

mae33 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, or applicable legal requirements. When material changes are made, we will notify registered Users via in-Platform notification or email at least 7 days before the revised Policy takes effect.

The most current version of this Policy is always available at mae33.cam/privacy-policy. The "Last Updated" date at the top of this page indicates when the latest revision was published. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact the mae33 data protection team through the following channels:

• Live Chat: Available directly on the Platform, 24/7 — average response time under 2 minutes during staffed hours (8AM–2AM MYT).
• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related requests.
• Response Time: We aim to acknowledge all formal privacy requests within 5 business days and resolve them within 30 days.

Our team supports players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and all correspondence is handled in English.