Privacy Policy — hiso33
This Privacy Policy describes how hiso33 collects, processes, stores, shares, and protects personal information provided by or collected from players and visitors to the hiso33 platform athttps://hiso33.cam. We are committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection principles.
How hiso33 Protects Your Data
These cards summarise our key privacy commitments. The full policy below governs all data processing activities.
Data Encrypted in Transit & at Rest
All personal data transmitted between your device and hiso33's servers is protected by 256-bit SSL/TLS encryption. Stored data is encrypted at rest using industry-standard protocols, ensuring it remains unreadable to unauthorised parties.
Your Data Is Never Sold
hiso33 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to operate your account, process transactions, and comply with regulatory obligations.
You Control Your Data
As a registered player, you have meaningful rights over your personal data — including the right to access, correct, export, and in certain circumstances request deletion of the information hiso33 holds about you.
Minimal Data Collection
hiso33 collects only the personal information strictly necessary to provide and maintain your account, process deposits and withdrawals in MYR, and meet identity verification (KYC) requirements. We do not gather data beyond what is operationally required.
Data Retained Only as Required
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, to comply with financial record-keeping obligations, or as required by applicable law. Data is securely deleted or anonymised when the retention period expires.
Transparent Communication
If this Privacy Policy is materially updated, hiso33 will notify registered players via their registered email address and through a notice on the platform. Continued use of hiso33 after notification constitutes acceptance of the revised policy.
Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Lawful Basis for Processing
- 6. How We Use Your Data
- 7. Data Sharing & Disclosure
- 8. International Data Transfers
- 9. Data Retention
- 10. Data Security
- 11. Cookies & Tracking
- 12. Your Rights
- 13. Minors & Age Policy
- 14. Third-Party Services
- 15. Policy Amendments
- 16. Contact & DPO
1. Introduction
This Privacy Policy (hereinafter referred to as "the Policy") issued by hiso33 (hereinafter referred to as "hiso33", "we", "us", or "our") and governs the collection, processing, storage, sharing, and protection of personal data relating to all individuals who access or interact with the hiso33 online platform, accessible at https://hiso33.cam, including registered account holders, prospective players, and general website visitors (collectively referred to as "Users", "Players", or "you").
hiso33 provides online casino games, live sports betting, and related entertainment services primarily to Malaysian players. In the course of delivering these services, hiso33 necessarily collects and processes certain categories of personal information. We are committed to handling this information responsibly, in good faith, and in accordance with applicable data protection principles, including those set out under the Malaysian Personal Data Protection Act 2010 (PDPA) and any other applicable legislation.
By creating an account on hiso33, using any feature of the platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which are incorporated by reference.
Note for Malaysian Players: hiso33 is operated as an English-language platform serving Malaysian users. All personal data processing activities described in this Policy apply equally to players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia.
2. Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including but not limited to name, identification number, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transmission, alteration, or deletion. |
| "Data Controller" | hiso33, as the entity that determines the purposes and means of processing personal data collected through the platform. |
| "Data Subject" | The individual to whom personal data relates — in this context, any registered player or platform visitor. |
| "Third Party" | Any natural or legal person other than the data subject and hiso33, including technology vendors, payment processors, game providers, and regulatory authorities. |
| "KYC" | Know Your Customer — the identity and age verification process conducted by hiso33 to confirm player eligibility and comply with applicable regulatory requirements. |
| "Cookies" | Small text files placed on a user's device by the platform or third-party services embedded within it, used for session management, analytics, and personalisation purposes. |
3. Personal Data We Collect
hiso33 collects personal data in the following categories, depending on how you interact with the platform:
3.1 Registration & Identity Data
- Full legal name (as it appears on your Malaysian MyKad or passport)
- Date of birth (for age verification — players must be 21 or above)
- Residential address (including postcode, city, and state)
- Email address and mobile phone number
- Username and encrypted password
- Nationality and identity document number (collected during KYC)
3.2 Financial & Transaction Data
- Deposit and withdrawal history, including amounts MYR and timestamps
- Payment method details (e.g., masked bank account number, e-wallet identifier for Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, or FPX)
- Cryptocurrency wallet addresses used for transactions (BTC, ETH, USDT, BNB)
- Bonus and promotional credit history
- Wagering history and game session records
3.3 KYC & Verification Documents
- Copies or photographs of government-issued identification (Malaysian MyKad, passport)
- Proof of address documentation (utility bills, bank statements)
- Selfie photographs submitted as part of identity verification
- Payment method ownership documentation
3.4 Technical & Device Data
- IP address and approximate geolocation data derived from IP
- Device type, operating system version, and browser type
- Session identifiers, login timestamps, and platform access logs
- Cookies and similar tracking technology data (see Section 11)
3.5 Communications Data
- Records of communications between you and hiso33 customer support, including live chat transcripts and email correspondence
- Feedback, complaint, or dispute records
- Responses to surveys or promotional communications (where applicable)
4. How We Collect Personal Data
hiso33 collects personal data through the following channels:
- Directly from you — when you register an account, submit KYC documents, make deposits or withdrawal requests, contact support, or participate in promotions.
- Automatically through platform use — through server logs, cookies, and analytics tools when you access or interact with the hiso33 website or its features.
- From payment service providers — transaction confirmation data from e-wallet providers, banks, FPX, DuitNow, and cryptocurrency network confirmations.
- From identity verification services — data returned from third-party KYC and document verification providers engaged to assist with age and identity verification.
- From fraud prevention services — risk signals and flags from anti-fraud and compliance screening services used to protect the platform and its players.
5. Lawful Basis for Processing
hiso33 processes personal data only where there is a legitimate lawful basis for doing so. The applicable bases are as follows:
| Legal Basis | Application |
|---|---|
| Contractual necessity | Processing required to create and operate your account, process deposits and withdrawals in MYR, and fulfil our obligations under the Terms & Conditions. |
| Legal obligation | Processing required to comply with KYC/AML (anti-money laundering) requirements, age verification obligations, and financial record-keeping obligations under applicable law. |
| Legitimate interests | Processing for fraud detection, platform security, bonus abuse prevention, and improvement of platform services, where these interests are not overridden by your fundamental rights and freedoms. |
| Consent | Processing for optional marketing communications and non-essential cookies, where you have given express prior consent. Consent may be withdrawn at any time. |
6. How We Use Your Personal Data
hiso33 uses the personal data collected for the following specific purposes:
- Account creation and management: To register your player account, maintain your profile, authenticate your login sessions, and manage account preferences.
- Transaction processing: To process deposits and withdrawals in MYR via your chosen payment method — whether Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, or cryptocurrency — and to maintain accurate financial records of all transactions.
- Identity and age verification (KYC): To verify that you are aged 21 or above and to confirm your identity in compliance with applicable regulatory requirements before processing withdrawal requests.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
- Responsible gambling: To monitor patterns of play that may indicate problem gambling behaviour and to administer self-exclusion, deposit limit, and cool-down requests where submitted.
- Customer support: To respond to your queries, complaints, and support requests, and to maintain records of communications for quality assurance purposes.
- Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game availability, and user experience.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided express consent or where permitted under applicable law. You may opt out at any time.
- Legal compliance: To comply with applicable laws, respond to regulatory inquiries, and cooperate with law enforcement where legally required.
7. Data Sharing & Disclosure
hiso33 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the following limited circumstances and only to the extent strictly necessary:
- Payment service providers: Transaction data is shared with payment processors, e-wallet providers (including Touch 'n Go eWallet, Boost, GrabPay), banks (Maybank, CIMB, Public Bank), FPX/DuitNow operators, and cryptocurrency network validators as necessary to process deposits and withdrawals.
- KYC and identity verification providers: Identity document data and selfie photographs are shared with third-party identity verification service providers for the sole purpose of conducting age and identity checks.
- Game technology providers: Limited session and wager data may be shared with third-party game providers whose games are integrated into the hiso33 platform, to the extent necessary for game functionality and integrity.
- Fraud prevention and AML services: Transaction and identity data may be shared with anti-fraud and anti-money laundering screening services to identify and prevent financial crime.
- Legal and regulatory authorities: hiso33 may disclose personal data to Malaysian authorities, law enforcement agencies, or regulatory bodies where required or permitted by applicable law, including in connection with investigations into fraud, money laundering, or other criminal activity.
- Business succession: In the event of a merger, acquisition, or sale of substantially all assets of hiso33, personal data may be transferred to the successor entity subject to equivalent privacy protections.
All third-party service providers engaged by hiso33 are subject to contractual data processing obligations and are prohibited from using your personal data for any purpose beyond the specific service they have been engaged to provide.
8. International Data Transfers
Given the nature of hiso33's technology infrastructure and third-party service providers, your personal data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia. Where such transfers occur, hiso33 implements appropriate safeguards — including contractual protections requiring recipient parties to handle data in accordance with standards equivalent to those applied within Malaysia under the PDPA.
hiso33 takes reasonable steps to ensure that any cross-border transfer of personal data is subject to adequate protections and that your rights as a data subject are preserved regardless of the jurisdiction in which processing occurs.
9. Data Retention
hiso33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to satisfy applicable financial and regulatory record-keeping obligations, or as otherwise required by law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years from account closure |
| Financial transaction records | Minimum 7 years from the date of the transaction |
| KYC documents | Duration of account plus 5 years from account closure |
| Customer support communications | 3 years from the date of the last communication |
| Technical and device logs | 12 months from the date of collection |
| Marketing consent records | Until consent is withdrawn, plus 3 years thereafter |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised such that it can no longer be associated with any identifiable individual.
10. Data Security
hiso33 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and hiso33's servers.
- Encryption at rest for all stored personal data and financial records.
- Access controls — personal data is accessible only to authorised hiso33 personnel on a strict need-to-know basis.
- Regular security assessments and penetration testing to identify and remediate vulnerabilities.
- Multi-factor authentication for internal system access by hiso33 staff.
- Incident response procedures for detecting, assessing, and notifying affected parties of any confirmed data security incident.
While hiso33 takes all reasonable precautions to safeguard your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying hiso33 immediately if you suspect any unauthorised access to your account.
11. Cookies & Tracking Technologies
hiso33 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain login sessions, analyse platform usage, and support security functions. Cookies are small text files stored on your device by your web browser when you visit the platform.
11.1 Types of Cookies Used
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Session management, login authentication, security tokens, and fraud detection. These cannot be disabled without impacting core platform functionality. | No — operationally necessary | |
| Remembering your language preferences, display settings, and previously selected payment methods for a smother return visit experience. | Optional — consent requested | |
| Anonymised platform usage analysis — page views, navigation paths, device types, and session duration — used to improve platform performance and user experience. | Optional — consent requested |
11.2 Managing Cookies
You may manage or disable non-essential cookies through your web browser settings. Please note that disabling essential cookies may prevent certain platform features from functioning correctly, including login sessions and secure payment processing. Instructions for managing cookies in popular browsers are available in your browser's help documentation.
12. Your Rights as a Data Subject
As a data subject, you hold the following rights in relation to your personal data processed by hiso33. To exercise any of these rights, please submit a written request to our support team (see Section 16 for contact details). hiso33 will respond to all valid requests within thirty (30) calendar days.
hiso33 will process all data subject requests free of charge and without undue delay. We may request proof of identity before actioning a request to protect against unauthorised access to another person's data.
13. Minors & Age Policy
The hiso33 platform is strictly intended for individuals who are 21 years of age or older. hiso33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age — whether through false registration information or any other means — we will immediately suspend the associated account and take appropriate steps to delete the data concerned in accordance with applicable law.
If you believe that a minor has registered an account on hiso33 or that hiso33 has inadvertently collected data from a person under 21, please notify us immediately at the contact details provided in Section 16 so that we can investigate and take prompt remedial action.
14. Third-Party Services & Links
The hiso33 platform may incorporate third-party services — including game content from certified game providers, payment gateway integrations, and analytics tools — that are subject to their own separate privacy policies. hiso33 is not responsible for the privacy practices of any third-party services accessible through or embedded within the platform.
hiso33 does not host any external links to third-party websites within its informational pages. Any third-party services you interact with through the platform (such as your bank's online interface when completing an FPX transfer, or your Touch 'n Go eWallet app) are governed by that third party's own privacy policy, which we encourage you to review.
15. Policy Amendments
hiso33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. When material changes are made, hiso33 will notify registered players by email to their registered address and by posting a prominent notice on the platform at least fourteen (14) days before the changes take effect.
The effective date displayed at the top of this Policy indicates when the current version came into force. Continuing to use the hiso33 platform after the effective date of an amended Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the platform and request account closure.
We recommend reviewing this Privacy Policy periodically. All previous versions are available upon request by contacting our support team.
16. Contact Us & Data Protection Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which hiso33 processes your personal data, please contact our customer support and data protection team using the details below. All privacy-related correspondence is handled with strict confidentiality.
hiso33 Customer Support & Data Privacy
Available: 24 hours a day, 7 days a week — including Malaysian public holidays
Email contact: [email protected] (plain text — not a clickable link)
Languages: English
Response time: Privacy and data subject requests acknowledged within 5 business days; substantive responses within 30 calendar days.
When submitting a data subject rights request (see Section 12), please include your registered account username and a brief description of your request in your message. hiso33 may request proof of identity before processing certain types of requests.
For responsible gambling enquiries, self-exclusion requests, or concerns about problem gambling, please visit our dedicated Responsible Gambling page, which provides full details of available player protection tools and support resources.
Play at hiso33 with Complete Confidence
Your personal data is protected by industry-standard encryption, never sold, and only used to run your account and process your MYR transactions. Over 500,000 Malaysian players trust hiso33 — and now you know exactly why.
21+ only. Please gamble responsibly. By using hiso33, you confirm acceptance of this Privacy Policy and our Terms & Conditions.