Privacy Policy mint33 – Your Personal Data Protection

1 Introduction

Welcome to the mint33 Privacy Policy. This document explains in detail how mint33 ("we", "our platform") collects, processes, stores, and protects your personal information when you register as a member, use our gaming platform, or interact with any of the services we offer on mint33.fun.

This Privacy Policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We take our responsibilities as a trusted data holder seriously and are committed to ensuring your data is processed lawfully, fairly, and transparently.

By registering an account or using any part of the mint33 platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact our support team for further assistance.

2 Information We Collect

Mint33 collects various types of information from members for different purposes. This data collection is necessary to enable us to provide you with a safe, compliant, and high-quality service. We only collect information that is genuinely required and never collect excessive data.

In addition to information you provide directly, we also collect data automatically when you use our platform, including server log data, device information, and usage patterns. This data helps us detect potential security threats and improve the overall user experience.

3 How We Use Your Data

Every piece of data we collect is used for a specific and legitimate purpose. mint33 processes your personal information on a solid legal basis, including the performance of a contract, legal obligations, and the platform's legitimate interests in ensuring safe and effective operations.

• Identity Verification and KYC: We use your identity data to conduct the Know Your Customer (KYC) verification process to meet anti-money laundering (AML) compliance and fraud prevention requirements.
• Financial Transaction Processing: Your bank and e-wallet details are used exclusively to securely and accurately process your deposits and withdrawals.
• Account Security: Technical data including IP addresses and device information is used to detect suspicious login attempts, cyberattacks, and potentially fraudulent activity.
• Service Communications: Your contact information is used to send important account notifications, security updates, transaction confirmations, and customer support responses.
• Responsible Gaming: Game history data is analysed to identify at-risk gaming patterns and provide proactive support to members who need assistance.
• Platform Improvements: Aggregated and anonymised usage data is used to understand usage patterns, improve platform performance, and develop better new features.
• Legal Compliance: We process data necessary to fulfil legal obligations, including responding to legitimate requests from relevant authorities.
• Marketing Communications (with consent): If you have opted in to receive marketing communications, we use your email to keep you informed about relevant promotions, bonuses, and special offers.

4 Sharing Information with Third Parties

Mint33 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, to operate the platform effectively, we need to share certain information with carefully selected parties under strictly limited and controlled circumstances.

• Payment Service Providers: Transaction information is shared with approved payment processors such as FPX, Touch 'n Go eWallet, and relevant banks to process your deposits and withdrawals.
• Game Providers: The required account information is shared with our game software providers to verify member eligibility and accurately process wins.
• Identity Verification Services: Your KYC data is shared with authorised third-party identity verification service providers to meet legal compliance requirements.
• Relevant Authorities: We will disclose the required information to law enforcement agencies, regulatory bodies, or courts when mandated by law or a valid court order.
• Technology Infrastructure Providers: Our cloud server and IT infrastructure service providers may have limited access to your data in the context of the technical services they provide.

All third parties we work with are required to comply with strict data protection agreements and are only permitted to use your data for the specific agreed purposes. We periodically audit all such third parties to ensure ongoing compliance.

5 Data Storage and Information Security

The security of your data is mint33's absolute priority. We continuously invest in the latest security infrastructure and apply a layered defence approach to ensure your data is protected at every stage of processing and storage.

• 256-bit SSL Encryption: All data transmitted between your browser and mint33's servers is protected by 256-bit Secure Socket Layer (SSL) encryption — the same security standard used by leading financial institutions around the world.
• Stored Data Encryption: Sensitive data such as financial details and identity information is stored in encrypted form using AES-256 encryption algorithms on our secure servers.
• Layered Access Controls: Access to member personal data is strictly limited to employees with a legitimate business need, and every access is recorded in a comprehensive audit log.
• 24/7 Monitoring: Our cybersecurity systems operate around the clock to detect and respond to any security threats, intrusion attempts, or suspicious activity.
• Backup and Recovery: Your data is regularly backed up to geographically separate locations to ensure service continuity and protection against data loss from disasters.
• Regular Security Testing: mint33 conducts regular penetration testing and security audits by independent cybersecurity experts to identify and address any vulnerabilities.

Data retention periods depend on the type of information and applicable legal requirements. Generally, financial transaction records are retained for a minimum of 7 years as required by Malaysian law, while other data that is no longer needed will be securely deleted in accordance with established procedures.

6 Cookies and Tracking Technologies

Mint33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and personalise your experience.

• Essential Cookies: These cookies are required for the platform's core functions such as login session management, security, and site navigation. Essential cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: These cookies collect anonymous information about how you use our platform, such as the most frequently visited pages and error messages received, to help us improve platform performance.
• Functional Cookies: These cookies allow the platform to remember your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies: We use analytics data in aggregate and without personally identifiable information to understand overall usage patterns and make data-driven decisions for platform improvements.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the full functionality of the mint33 platform. For more information on managing cookies, refer to your web browser's help guide.

7 Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by mint33. We fully respect and uphold these rights, and will endeavour to fulfil any related requests within a reasonable timeframe.

• Right to Access: You have the right to request and receive a copy of the personal data we hold about you. Such requests will be processed within 21 business days.
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate, incomplete, or outdated in our records.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of prior processing.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to Complain: You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated.

To exercise any of the above rights, please contact our data protection team by email at [email protected], including your full name, account number, and details of your request. We may need to verify your identity before processing any request relating to personal data.

8 Protection of Children's Data

The mint33 platform is exclusively for users aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If you are a parent or guardian who believes your underage child has registered an account on mint33, please contact our support team immediately. We will investigate the matter and delete all associated data without delay once verification is complete.

9 Amendments to This Privacy Policy

Mint33 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or industry best practices. All amendments will be posted on this page with the effective date clearly stated at the top of the document.

For significant amendments that affect how we process your personal data, we will notify you in advance via your registered email or a prominent notice on the platform at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of our platform.

Continued use of the mint33 platform after any amendments to this Privacy Policy take effect will be deemed as your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

10 Contact Our Data Protection Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we are ready to listen and assist you wholeheartedly.

• Support Email: [email protected] — we respond to privacy enquiries within 3 business days
• Live Chat: Available 24 hours a day, 7 days a week via the chat button on the mint33 platform
• Service Language: Malay and English

Any formal complaints relating to data protection may be submitted to the Department of Personal Data Protection Malaysia, the regulatory body responsible for enforcing the PDPA 2010.