Privacy Policy rbig33 –
Member Personal Data Protection

1 Information We Collect

Rbig33 collects various types of personal information from members to ensure services provided are secure, complete, and tailored to each user's needs. All data collection is conducted transparently and only for the purposes stated in this policy.

1.1 Information You Provide Directly

When you register or use the rbig33 platform, we collect the following information:

• Personal identification information – full name, date of birth, identity card number or passport number.
• Contact information – email address and active mobile number.
• Financial information – bank account number, bank name, and transaction details for deposits and withdrawals.
• Identity verification documents (KYC) – copies of identity cards, bank statements, or other supporting documents required for compliance purposes.
• Password – stored in encrypted form using a one-way hashing algorithm; rbig33 does not store passwords in plain text.

1.2 Information Collected Automatically

When you browse or use the rbig33 platform, our systems automatically record the following technical information for security and service improvement purposes:

• IP Address and estimated geographic location based on IP.
• Device type – phone model, operating system, and web browser version.
• Session activity logs – login and logout times, in-platform actions, and betting history.
• Cookie data – session cookies and preference cookies that help us maintain your login and personalise your experience.
• Technical performance information – response times, error reports, and system logs for maintenance purposes.

2 How We Use Your Data

Rbig33 uses collected personal data solely for lawful and transparent purposes. Below is a full list of how your information is used in the platform's day-to-day operations:

Rbig33 will not use your personal data for any purpose beyond the list above without first obtaining your additional consent. Any new use will be communicated to you via an in-platform notification or your registered email.

3 Legal Basis for Data Processing

All personal data processing activities at rbig33 are carried out on one or more lawful bases recognised under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You provide explicit consent at registration for us to process your data for service and communication purposes of your choice.
• Contract Performance: Data processing is required to fulfill our obligations to you as a platform member, including payment processing, account verification, and service provision.
• Legal Obligations: Certain data must be processed and retained to fulfil Malaysian legal requirements, including anti-money laundering (AML) regulations and KYC obligations.
• Legitimate Interests: We process certain data to protect platform security, prevent fraud, and improve service quality, provided that such interests do not override your fundamental rights.

4 Information Sharing with Third Parties

Rbig33 maintains a strict policy regarding the sharing of members' personal data. We does not sell, rent, or share your data to third parties for marketing or commercial purposes. However, there are specific situations where data sharing is necessary and legally permitted:

4.1 Third-Party Service Providers

Rbig33 works with trusted service providers to manage specific platform functions, including:

• Payment processors and banking gateways to facilitate deposit and withdrawal transactions.
• Game software providers and Live Casino platform providers.
• Identity verification (KYC) services and anti-money laundering compliance agencies.
• Cloud infrastructure providers and cybersecurity services.

All such third parties are bound by strict confidentiality agreements and may only use your data for the agreed purposes. They are prohibited from using your information for any other purpose.

4.2 Legal Requirements

Rbig33 may disclose members' personal data to government authorities or regulatory bodies when required by Malaysian law, court order, or valid legal process. In all such cases, we will disclose only the minimum information necessary and, to the extent permitted by law, will notify the relevant member of such disclosure.

5 Cookies & Tracking Technologies

Rbig33 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand platform usage patterns. Cookies are small text files stored on your device when you visit our platform.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
• Preference Cookies: Saves your preferences such as language, display theme, and other personal settings to enhance your browsing experience.
• Analytics Cookies: Helps us understand how members interact with the platform so we can make meaningful improvements. All analytics data is processed in anonymized form.
• Session Cookies: Temporary cookies that are automatically deleted when you close your web browser.

You can manage cookie settings through your web browser at any time. Please note that disabling essential cookies may affect platform functionality and your gaming experience.

6 Data Security Measures

The personal data security of our members is an absolute priority at rbig33. We continuously invest in industry-standard security infrastructure to ensure your data is always protected against unauthorized access, loss, misuse, or accidental disclosure.

The technical and organizational security measures we practice include:

• 256-bit SSL/TLS encryption for all data transferred between your device and rbig33's servers.
• Data-at-rest encryption for all sensitive information stored in our databases.
• Two-factor authentication (2FA) available for all member accounts as an additional layer of protection.
• 24/7 Monitoring by a dedicated cybersecurity team that monitors suspicious activity in real time.
• Penetration testing conducted periodically by independent security experts.
• Strict internal access controls – only authorised personnel may access member data, and every access is logged for audit purposes.
• Encrypted data backups periodically to different server locations to ensure service continuity.

7 Data Storage & Transfer

7.1 Retention Period

Rbig33 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Generally:

• Active account data – retained for the duration of the active account and up to 7 years after account closure for legal compliance purposes.
• Financial transaction records – retained for a minimum of 7 years in compliance with financial reporting requirements.
• Customer support communication logs – retained for 3 years for reference and training purposes.
• Analytics cookie data – deleted within 12 months from the date of collection.

7.2 Data Storage Location

Rbig33 member personal data is stored in secure data centres. Should data transfer outside national borders be required for operational purposes, rbig33 ensures that the recipient country or organisation provides a level of data protection comparable to Malaysia's standards, and that appropriate data transfer agreements are in place.

8 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and rbig33's policies, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, unless we are legally required to retain it.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as during a dispute regarding data accuracy.
• Right to Object: You have the right to object to the processing of your data carried out on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: You may withdraw any consent you have given at any time without affecting the validity of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the rbig33 customer support team via live chat on the platform. We will process your request within 30 working days from the date of receipt of the completed request.

9 Children's Data Protection

The rbig33 Platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18. Should we discover that a minor's personal data has been collected without our knowledge, such data will be deleted immediately and the account in question will be closed without right of appeal.

Parents or guardians who have reason to believe their child has registered on the rbig33 platform are requested to contact our support team immediately. We will take prompt action to address the situation and ensure full compliance with child protection laws.

10 Amendments to the Privacy Policy

Rbig33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. Members will be notified of any material amendments via:

• Notification emails sent to your registered email address.
• A notice prominently displayed on the platform's home page upon login.
• Updates are effective from the "Last Updated" date shown at the top of this document.

Continued use of the rbig33 platform after the effective date of any amendment constitutes full acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account before the amendment takes effect.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding the rbig33 Privacy Policy or how we handle your personal data, please do not hesitate to reach our team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the platform.
• Email: [email protected] (response within 1–2 business days).

Our data protection team is ready to help you understand your rights and ensure your personal data is managed in the safest and most responsible manner. Your trust is our most valuable asset at rbig33, and we are committed to upholding it through full transparency and accountability in every aspect of data management.