Privacy Policy

1. Who We Are

mytown33 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at mytown33.club. mytown33 is committed to protecting the privacy and personal data of all registered players and visitors to the Platform.

This Privacy Policy applies to all personal data collected by mytown33 through the Platform, including data collected at account registration, during ongoing gameplay, through customer support interactions, and via technical mechanisms such as cookies and server logs. This Policy should be read in conjunction with the mytown33 Terms & Conditions.

2. Personal Data We Collect

mytown33 collects personal data that is necessary to operate the Platform, verify player identity, process transactions, and comply with applicable regulatory obligations. The categories of personal data we collect include:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification details provided during Know Your Customer ("KYC") verification.
• Contact data: Email address, mobile phone number, and correspondence address.
• Financial data: Payment method details (e.g., bank account number associated with Maybank, CIMB, or Public Bank; Touch 'n Go eWallet or Boost account reference), transaction history, deposit and withdrawal records.
• Account data: Username, account preferences, login history, session duration, and gameplay activity records.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, and time zone settings, collected automatically when you access the Platform.
• Communications data: Records of your interactions with mytown33 customer support, including live chat transcripts, emails, and any information you voluntarily provide in such communications.
• Usage data: Information about how you navigate and interact with the Platform, including pages visited, games played, bet amounts, and clickstream data.

mytown33 does not intentionally collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, or health information. Where such data is incidentally disclosed by a player (for example, in a support communication), it will be handled with the same protections as other personal data and will not be used for any purpose beyond resolving the immediate interaction.

3. How We Use Your Personal Data

mytown33 uses the personal data described above for the following purposes:

• Account management: To create and maintain your mytown33 player account, verify your identity, and administer your profile settings and preferences.
• Transaction processing: To process MYR deposits and withdrawals via the payment methods available on the Platform, and to maintain accurate financial records of all transactions.
• Regulatory compliance: To fulfil our obligations under applicable anti-money laundering ("AML") and counter-terrorism financing ("CTF") regulations, including customer due diligence, transaction monitoring, and reporting obligations.
• Platform security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in the mytown33 Terms & Conditions.
• Customer support: To respond to enquiries, resolve disputes, process complaints, and communicate information relevant to your account.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to administer self-exclusion or deposit limit requests made by players.
• Platform improvement: To analyse aggregate, anonymised usage data for the purpose of improving Platform functionality, game selection, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent and have not subsequently opted out. You may withdraw marketing consent at any time by contacting support.

4. Legal Basis for Processing

mytown33 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the Terms & Conditions agreement between you and mytown33, including account operation, transaction processing, and support services.
• Legal obligation: Processing required to comply with applicable AML, CTF, KYC, and gaming licence regulatory requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have given explicit consent and retain the right to withdraw that consent at any time.

5. Data Sharing & Disclosure

mytown33 does not sell or rent your personal data to third parties. We may share your personal data with third parties only in the following circumstances:

• Payment processors: Financial data is shared with payment service providers (including those operating Touch 'n Go eWallet, Boost, and Malaysian banking integrations) solely to facilitate deposit and withdrawal transactions.
• KYC and compliance providers: Identity data may be shared with third-party identity verification and AML screening services to fulfil regulatory compliance obligations.
• Game software providers: Gameplay session data (excluding financial and identity data) is shared with the certified game studios providing titles on the mytown33 platform, for the purpose of game delivery and RNG certification.
• Regulatory and law enforcement authorities: mytown33 will disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or gaming licence condition.
• Professional advisers: Personal data may be disclosed to legal, audit, or financial advisers engaged by mytown33 where necessary, subject to confidentiality obligations.

All third parties with whom mytown33 shares personal data are required to handle such data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific function for which it was disclosed.

6. Cookies & Tracking Technologies

mytown33 uses cookies and similar technologies on the Platform for the following purposes:

• Session cookies: Essential cookies that maintain your authenticated session while you are logged in to mytown33. These expire when your browser session ends and cannot be disabled without preventing platform access.
• Preference cookies: Cookies that remember your display and language settings across visits.
• Analytics cookies: First-party cookies used to collect aggregate, anonymised data on page visits, navigation paths, and feature usage to inform platform improvements. This data is not linked to individual identities.

mytown33 does not deploy third-party advertising cookies, cross-site tracking pixels, or social media tracking tags. You may manage cookie settings through your browser preferences. Please note that disabling essential session cookies will prevent you from logging in to your mytown33 account.

7. Data Retention

mytown33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your active mytown33 account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Financial transaction data is retained for a minimum of seven (7) years to meet accounting and regulatory reporting obligations.
• Support communications: Customer support records are retained for three (3) years from the date of the last interaction.
• Marketing data: Where processing is based on consent, data is retained until you withdraw consent or for three (3) years of inactivity, whichever occurs first.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with mytown33's data disposal procedures.

8. Data Security

mytown33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and mytown33 servers.
• Encryption of sensitive data fields (including payment references and identity documents) in storage.
• Role-based access controls restricting internal data access to authorised personnel with a documented need.
• Regular penetration testing and vulnerability assessments by independent security specialists.
• Incident response procedures to detect, contain, and notify affected parties of any data breach in accordance with applicable legal requirements.

9. Your Data Rights

Subject to applicable law and regulatory obligations, you have the following rights in relation to the personal data mytown33 holds about you:

• Right of access: You may request a copy of the personal data mytown33 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mytown33's regulatory retention obligations.
• Right to restriction: You may request that mytown33 restrict processing of your personal data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the mytown33 support team via live chat. We will respond to verified data subject requests within thirty (30) days. We may require identity verification before processing a request to protect against unauthorised disclosure.

10. Minors

mytown33 is strictly an adult platform. The Platform is not directed at, nor intended for use by, individuals under the age of 21. mytown33 does not knowingly collect personal data from anyone under the age of 21.

If you are a parent or guardian and believe that a minor has provided personal data to mytown33 without your consent, please contact our support team immediately. Any account found to be operated by or on behalf of a minor will be closed and associated data deleted in accordance with applicable law.

11. Changes to This Policy

mytown33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. Where a material change is made, mytown33 will notify registered players via the email address on file prior to the change taking effect.

The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the Platform following any update constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must cease use of the Platform and may request account closure.

12. Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how mytown33 handles your personal data, please contact the mytown33 compliance and support team:

mytown33 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days. For complaints that cannot be resolved through our internal process, you retain the right to escalate to the relevant regulatory authority under the terms of mytown33's gaming licence.