Privacy Policy Fortuna33 – Malaysia Player Personal Data Protection

Fortuna33 takes personal data protection seriously. As a digital entertainment platform serving players in Malaysia, we are subject to the Personal Data Protection Act 2010 (PDPA) and are committed to ensuring that every piece of information you share with us is handled with the utmost integrity.

This Privacy Policy transparently explains Fortuna33's data collection and processing practices. We have written this document in plain language – not confusing legal jargon – so you truly understand what happens with your information.

By registering an account or using Fortuna33 services, you agree to this Privacy Policy. If you do not agree, you are requested not to use our platform. You have the right to withdraw consent at any time by contacting us, although this may require the closure of your account.

Fortuna33 collects various categories of personal data depending on your interactions with the platform. Below is a summary of the types of data we collect and the purposes for which they are collected:

How Data Is Collected

Fortuna33 collects data through several key channels: directly from you during the registration and platform usage process, automatically via tracking technologies such as cookies and server logs, and from trusted third parties such as identity verification service providers for KYC purposes.

Fortuna33 uses your personal data only for legitimate, disclosed purposes. The core principle guiding our data use is minimisation – we only use data that is strictly necessary for the stated purpose.

• Service delivery: Enables you to access your account, make deposits and withdrawals, and enjoy all games and features on the fortuna33 platform.
• Identity verification (KYC): Verify your identity to meet legal compliance requirements and prevent fraud and money laundering.
• Payment processing: Process your deposits and withdrawals via supported Malaysian payment methods including DuitNow, FPX, and e-wallets.
• Service communications: Send important notifications relating to your account, transactions, active bonuses, and service updates.
• Platform security: Detect and prevent fraudulent activity, unauthorised access, and platform abuse.
• Platform improvements: Analyse aggregated usage patterns to improve the performance, design, and features of the fortuna33 platform.
• Legal compliance: Fulfil reporting and compliance obligations to relevant authorities as required by Malaysian law.
• Marketing communications: Send relevant promotional offers and bonus information — only if you have given your consent to receive them.

Fortuna33 does not sell your personal data. We only share data with trusted third parties in the following situations and only to the extent necessary for those purposes:

• Payment service providers: Payment gateway providers, banks, and e-wallet operators that process your transactions – all bound by strict confidentiality agreements.
• Game providers: Game providers that supply slots, Live Casino, and other games – data shared is limited to the technical information required to run the games.
• KYC and verification services: Certified third-party identity verification service providers that securely process your KYC documents.
• Statutory authorities: Fortuna33 will disclose data to Malaysian authorities if required by court order, legal directive, or in the course of a valid criminal investigation.
• Analytics services: Aggregated and anonymised data is shared with analytics services for platform improvement purposes – no individually identifiable information is shared.

All third parties handling fortuna33 player data are bound by data processing agreements that require them to protect your data to the same or higher standard that fortuna33 upholds.

Fortuna33 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Data encryption in transit: SSL/TLS 256-bit for all communications between your browser and fortuna33 servers.
• Data encryption at rest: Sensitive data such as financial information and KYC documents is stored in encrypted form within protected databases.
• Role-based access control: fortuna33 staff may only access player data within the limits required by their role — no full access is granted unless necessary.
• Periodic security audits: fortuna33 conducts regular penetration testing and security audits carried out by qualified independent parties.
• 24/7 monitoring: Automated monitoring systems detect and alert the fortuna33 security team of any unusual data-related activity.

While no system can guarantee absolute security, fortuna33 continuously improves its security measures in line with evolving technology and emerging threats. In the event of a security incident involving your data, we will notify you within the timeframe required by law.

Fortuna33 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance cookies: Collect information about how you use the platform to help us identify and resolve technical issues and improve performance.
• Functional cookies: Save your preferences such as display settings and game preferences so you do not need to reconfigure them each time.
• Analytics cookies: Used to understand overall platform usage patterns – data collected is in aggregate form and does not identify individuals.

You can manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Fortuna33 platform.

Under the Malaysian Personal Data Protection Act 2010, you have several important rights regarding your personal data held by Fortuna33. These rights may be exercised by contacting our Privacy Officer:

Fortuna33 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the retention period expires, data will be securely deleted or anonymised.

• Active account data: Retained throughout the active account period and for a specified period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering legal requirements.
• KYC Documents: Retained for the period required by applicable law, typically no less than 5 years after the business relationship ends.
• Support communication records: Retained for 2 years for service reference and the resolution of any disputes.
• Technical and security logs: Retained for 12 months for security analysis and fraud detection.

The fortuna33 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If we discover that data from an underage individual has been collected, it will be deleted immediately and the associated account will be closed.

Fortuna33 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you via your registered email and in-account notifications at least 14 days before the changes take effect.

We encourage you to review this page periodically to stay informed about how we protect your information. The "Effective Date" at the top of this document will be updated whenever changes are made.

Fortuna33 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy and the PDPA 2010. If you have any questions, concerns, or wish to exercise your rights as a data subject, you may contact us through the following channels:

• In-App Live Chat: The fastest option – available 24/7 on the Fortuna33 mobile app and website.
• Email: [email protected] – for inquiries related to privacy and data protection.
• General Support Email: [email protected] – for general inquiries including account and service-related matters.

We are committed to responding to all privacy-related enquiries within 14 business days. For more complex requests such as data access or deletion applications, the response period is within 21 business days as stipulated by the PDPA 2010.

If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels established by the Ministry of Communications and Digital.