Personal Data Protection

Rush 33 Privacy Policy — Our Commitment to Protecting Malaysian Players' Data

Rush 33 treats your privacy as a trust that cannot be compromised. This document clearly sets out what data we collect, how it is used, who it is shared with, and your rights as a Malaysian player over that data.

Updated: 1 January 2026
Bahasa Melayu (ms-MY)
Malaysia
1

Introduction

This Privacy Policy ("Policy") is issued by Rush 33, an online casino and entertainment platform accessible at rush33.biz. This Policy describes our privacy practices regarding how we collect, use, store, and disclose your personal information when you use our platform or services, or when you contact us.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to ensuring your personal data is managed with the highest possible level of protection. Your trust is something we do not take lightly — every decision we make regarding data is grounded in respect for your privacy.

Scope of this Policy: This Privacy Policy applies to all information collected through the Rush 33 platform, including the rush33.biz website, mobile applications (where available), email communications and our customer support services. By using the Rush 33 platform, you agree to the collection and use of information as described in this Policy.

We encourage you to read this Policy carefully. If anything is unclear or you have questions about our privacy practices, the Rush 33 support team is available around the clock via 24-hour live chat or by email at support@rush33.biz.

2

Personal Information We Collect

Rush 33 only collects data that is strictly necessary to operate our services safely, efficiently, and in line with industry compliance standards. The following are the categories of data we may collect:

A. Information You Provide Directly
Identity Information

Full legal name, date of birth, gender, national identification number (MyKad), passport number (if applicable). This data is required for identity verification (KYC) and to confirm that you meet the minimum age requirement to use the Rush 33 platform.

Contact Information

Email address, Malaysian mobile number, and residential address (where required for certain verifications). We use this information for account communications, security notices, and customer support.

Financial Information

Bank account numbers, account holder names, and Malaysian e-wallet details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) used for deposits and withdrawals. We do not store credit or debit card numbers directly on our servers.

B. Information Collected Automatically
Technical & Device Data

IP address, browser type, operating system, device model, screen resolution, and network information. This data helps us optimise the platform for your device and detect suspicious activity.

Gaming Activity Data

Gaming history (slots, blackjack, poker, baccarat, Sports Betting on football, badminton, and more), total deposits and withdrawals, account balance, play sessions, and game preferences. This data is used for account management and fraud detection.

Platform Usage Data

Pages visited, time spent, links clicked, searches made, and navigation patterns. This information helps us understand how players use the platform and make continuous improvements.

3

How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. Rush 33 does not use your data for purposes unrelated to the services we offer Malaysian players. The following are the primary purposes for which data is used:

Purpose of Use Data Types Involved Legal Basis
Account Management & VerificationIdentity, contact, KYCContract
Deposit & Withdrawal ProcessingFinancial, identityContract
Anti-Money Laundering (AML) ComplianceIdentity, financial, transactionalLegal Requirements
Fraud Detection & PreventionTechnical, activity, financialLegitimate Interest
Customer SupportCommunications, account activityContract
Responsible GamingGaming activity, gambling patternsLegitimate Interest
Service & Promotional CommunicationsEmail address, phone numberConsent
Platform ImprovementUsage, technicalLegitimate Interest

Regarding marketing communications: we will only send you promotional emails or SMS messages about Rush 33 offers if you have given your consent at registration or at a later date. You may unsubscribe at any time via the link provided in every marketing email or by contacting our support team.

4

Data Sharing & Disclosure

Rush 33 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a foundational promise we have never compromised on since day one.

There are, however, limited situations where we may need to share your data with trusted parties:

Trusted Service Providers

Companies that assist us in running our operations — game providers (Evolution Gaming, Pragmatic Play, etc.), payment processors (Touch 'n Go, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks), cloud service providers, and analytics tools. All these partners are bound by strict confidentiality agreements and are only permitted to use your data for purposes we have specified.

Authorities & Legal Requirements

We may be required to disclose certain information to Malaysian authorities (such as Bank Negara Malaysia, the Royal Malaysia Police, or tax authorities) when compelled by law, court order, or in the context of a legitimate official investigation.

Business Transfer

In the event of a merger, acquisition or sale of Rush 33's assets, members' personal data may be transferred to the new entity. You will be notified in advance and your rights over that data will be fully preserved.

Cross-Border Data Transfers: Where data needs to be transferred outside Malaysia (for example, to servers in another country for operational purposes), Rush 33 ensures that such transfers only take place to countries or entities that provide a level of data protection comparable to Malaysia's PDPA.

5

Data Retention Period

Rush 33 does not retain your personal data for longer than is necessary for the purpose for which it was collected, or as required by applicable Malaysian law.

Account & Identity Data (KYC)
5 years after account closure
Required under Malaysia's AML/KYC compliance obligations
Financial Transaction Records
7 years
Malaysian financial and tax legal requirements
Game History
3 years after gameplay
For dispute resolution and customer support
Customer Support Logs
2 years
For reference and service improvement purposes
Technical & Security Logs
12 months
For fraud detection and system security
Marketing Data (with consent)
Until unsubscribed
Deleted immediately upon withdrawal of your consent

Upon expiry of the retention period, data will be securely deleted or anonymised in accordance with Rush 33's internal procedures.

6

Data Security

Protecting your data is more than a legal obligation for Rush 33 — it is a moral responsibility we take very seriously. We continuously invest in industry-standard security technologies and procedures to safeguard your personal information.

256-bit SSL Encryption

All data transmitted between your browser and Rush 33's servers is encrypted using TLS 1.3 with AES-256-bit encryption — the same standard used by Malaysia's leading banking institutions.

Database Security

Personal data is stored in databases protected by layered firewalls, role-based access controls, and comprehensive audit logs for every access to sensitive data.

Two-Factor Authentication (2FA)

Rush 33 offers 2FA for all member accounts. Once enabled, every login requires additional verification via SMS or an authenticator app. We encourage all members to activate this feature.

24/7 Monitoring

Rush 33's security systems are monitored 24 hours a day, 7 days a week by our dedicated cybersecurity team. Any suspicious activity triggers an immediate alert and is investigated without delay.

While Rush 33 implements comprehensive security measures, no system can guarantee 100% absolute security. You also play an important role in protecting your account — use a strong and unique password, never share your login credentials with anyone, and contact us immediately if you suspect any unauthorised access.

7

Your Rights Over Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by Rush 33:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request that we correct it within a reasonable timeframe.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — unless we are required by law to retain it.

Right to Object

You have the right to object to the processing of your data for specific purposes, including direct marketing. Objections will be acted upon immediately.

Right to Data Portability

You may request your data in a machine-readable format (JSON/CSV) for transfer to another platform of your choice.

Right to Restrict Processing

In certain circumstances (e.g., during a dispute), you may request that we temporarily restrict the processing of your data.

How to Exercise Your Rights: To submit any request relating to your privacy rights, contact the Rush 33 Data Protection Officer by email at privacy@rush33.biz or via our platform's live chat. We will verify your identity before processing any request and will respond within 21 business days.

8

Cookies & Tracking Technologies

Rush 33 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage, and maintain account security. Cookies are small text files stored on your device when you visit our platform.

Cookie TypePurposeDurationStatus
Essential Cookies Login, session security, 2FA verification Session / 30 days Mandatory
Functional Cookies Saves language preference, theme and display settings 1 year Mandatory
Analytics Cookies Usage statistics, popular pages, time spent on the platform 2 years Preferences
Marketing Cookies Relevant ad display, Rush 33 promotional retargeting 90 days Preferences

You can manage your cookie settings at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the Rush 33 platform — for example, disabling essential cookies may require you to log in again each time.

9

Third-Party Links & Services

The Rush 33 platform may contain links or integrations with third-party services, including game providers such as Evolution Gaming and Pragmatic Play, as well as payment processors such as Touch 'n Go, GrabPay, DuitNow, and FPX. When you access these third-party services, their own privacy policies apply — not the Rush 33 Privacy Policy.

Rush 33 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of each third-party service you use in connection with the Rush 33 platform.

10

Child Protection

Rush 33 is an exclusive platform for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under 18. Should we discover that a minor has registered an account, the account will be terminated immediately and all associated data will be permanently deleted.

If you, as a parent or guardian, believe your child who is under age has accessed the Rush 33 platform or provided us with their personal data, please contact us immediately at privacy@rush33.biz and we will take immediate action to remove that information.

11

Privacy Policy Amendments

Rush 33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, Malaysian legal requirements, or other relevant factors. The latest version of this Privacy Policy will always be available on this page, with a clear update date displayed at the top.

For material changes to how we process your personal data, we will endeavour to provide advance notice via your registered email or a prominent notice on the Rush 33 platform. Your continued use of the platform after any changes are published will be considered your acceptance of the updated Policy.

Current Version: This Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions of the Rush 33 Privacy Policy.

12

Contact Our Data Protection Officer

For any enquiries, requests or complaints regarding this Privacy Policy or Rush 33's data handling practices, please contact our Data Protection Officer through the following channels:

Privacy Email

Privacy@rush33.biz
Response within 5 business days

Live Chat

Available 24/7
Response < 2 minutes

Customer Support

Support@rush33.biz
Bahasa Malaysia & English

We are committed to handling all privacy enquiries with seriousness and professionalism. Your trust is our priority.

Why Your Privacy Is Safe with Rush 33

Six concrete data protection commitments we uphold every day

Malaysia PDPA Compliance

All data handling practices at Rush 33 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the country's primary data protection legislation.

No Data Selling

Rush 33 never sells, rents or trades members' personal data to third parties for their marketing purposes. This is a line we will never cross.

Bank-Grade Encryption

The same 256-bit SSL encryption used by Maybank, CIMB and Malaysia's leading financial institutions protects all data and transactions on the Rush 33 platform.

Full Control in Your Hands

You may access, correct, download, or delete your personal data at any time. Your privacy rights are real and enforceable — not just a promise.

Minimum Required Data

Rush 33 only collects data that is strictly necessary — our "data minimisation" principle ensures we never gather information that is irrelevant to the services we provide.

Regular Security Audits

Rush 33's security and privacy systems undergo regular internal audits and independent assessments to ensure our data protection standards remain current and effective.

Your Data Is Safe. Now Let's Play!

Rush 33 protects your privacy to the highest standard. Register a free account today and enjoy over 2,400 of Malaysia's best online casino games with complete peace of mind.

⚠️ 18+ only. Play responsibly. Learn more.

Bahasa Melayu