Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how b133 ("b133", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to users ("Player", "you", "your") of the b133 online gaming platform accessible at b133.cam (the "Platform").

b133 takes the privacy and security of your personal data seriously. This Policy is intended to provide you with a clear and transparent account of our data practices so that you can make informed decisions about your use of the Platform. It applies to all personal data we collect through the Platform, including during account registration, KYC verification, financial transactions, customer support interactions, and general Platform use.

If you have any questions about our data practices or wish to exercise any of your rights under this Policy, please contact us using the details provided in Section 16.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, b133.
• "Data Processor" means a third party that processes personal data on behalf of and under the instruction of the Data Controller.
• "KYC" means Know Your Customer — the identity verification process required for regulatory compliance purposes.
• "Cookies" means small text files placed on your device by the Platform to store preferences and session information.
• "Third Party" means any person or entity other than you or b133.

Data Controller

b133 is the Data Controller responsible for the personal data collected and processed through the b133 Platform. As Data Controller, b133 determines the purposes for which personal data is collected and the manner in which it is used.

For all data-related enquiries, requests, and complaints, please contact the b133 Data Protection team using the contact information set out in Section 16 of this Policy.

Personal Data We Collect

b133 collects the following categories of personal data:

We do not intentionally collect sensitive personal data (such as racial origin, religious beliefs, or biometric data) beyond what is strictly required for identity verification purposes. Where such data is incidentally collected as part of an identity document submission, it is used solely for verification and is not further processed for any other purpose.

How We Collect Personal Data

b133 collects personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to promotions.
• Automated technical collection: When you access the Platform, our servers automatically record technical data including your IP address, device identifiers, browser information, and session activity logs.
• Cookies and tracking technologies: As described in Section 8 of this Policy, the Platform uses cookies and similar technologies to collect usage and preference data.
• Third-party payment processors: When you make a deposit via Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, or GrabPay, our payment processor partners may share transaction confirmation data with us.
• KYC verification partners: Where we use third-party identity verification services to assist with document authentication, those providers may share verification outcomes and associated data with us.
• Fraud and risk management systems: Automated systems may collect and process behavioural signals for the purpose of fraud detection and prevention.

Purposes of Processing & Legal Basis

b133 processes your personal data for the following purposes, each supported by a recognised legal basis:

Where b133 relies on your consent as the legal basis for processing — for example, for certain marketing communications — you may withdraw that consent at any time by contacting our support team or updating your account preferences. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.

Data Sharing & Disclosure

b133 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following limited circumstances:

• Payment service providers: We share relevant transaction data with Malaysian payment processors — including FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong), DuitNow, Touch 'n Go eWallet, Boost, and GrabPay — to facilitate deposits and withdrawals. These providers act as Data Processors under contractual data protection obligations.
• KYC & identity verification partners: Where we engage specialist third-party identity verification services, limited personal data (including document scans) may be shared solely for verification purposes.
• Fraud prevention & risk management services: We may share technical and behavioural data with fraud detection platforms to protect the Platform and its players.
• IT service providers & cloud infrastructure partners: Platform data, including personal data, may be hosted on servers operated by contracted cloud infrastructure providers. Such providers process data only under strict contractual instructions from b133.
• Legal and regulatory authorities: b133 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, court order, or legitimate regulatory demand. b133 will endeavour to notify affected users of such disclosures where legally permitted to do so.
• Professional advisers: We may share data with legal counsel, auditors, or financial advisers where necessary for business or compliance purposes, subject to professional confidentiality obligations.

All third parties with whom b133 shares personal data are required to process that data only for the specified purpose, in accordance with b133's instructions, and under data protection terms that are at least as protective as those described in this Policy.

Cookies & Tracking Technologies

The b133 Platform uses cookies and similar tracking technologies to improve your experience, maintain session security, and analyse Platform usage. The following categories of cookies are in use:

b133 does not use third-party advertising or behavioural tracking cookies. You may manage strictly non-essential cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair Platform functionality and prevent you from accessing your account.

Data Retention

b133 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum period of five (5) years following account closure, as required by anti-money laundering legislation.
• Transaction records (deposits and withdrawals): Retained for a minimum of five (5) years from the date of each transaction for financial compliance purposes.
• Customer support and communications records: Retained for three (3) years from the date of last interaction.
• Technical and usage logs: Retained for up to twelve (12) months from collection, unless required for active fraud investigations.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent as a compliance record.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with b133's internal data disposal procedures.

Data Security

b133 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the b133 Platform;
• Encryption of personal data stored in our databases at rest;
• Strict role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific duties;
• Regular internal and external security assessments and penetration testing;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response and data breach notification procedures.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, b133 will notify affected individuals in accordance with applicable data protection law.

International Data Transfers

b133 primarily processes and stores personal data on servers located within or serving the Asia-Pacific region. Where personal data is transferred to or processed by service providers in jurisdictions outside Malaysia, b133 ensures that such transfers are subject to adequate data protection safeguards, including:

• Contractual data protection clauses with receiving parties that impose standards equivalent to those described in this Policy;
• Transfers only to jurisdictions assessed as providing an adequate level of personal data protection;
• Additional technical safeguards such as end-to-end encryption where applicable.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our support team.

Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that b133 holds about you:

• Right of Access: You may request a copy of the personal data b133 holds about you and information about how it is used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to our legal retention obligations — we cannot erase data that we are required by law to retain.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is disputed.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting prior processing.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a copy of your personal data in a structured, machine-readable format.

Children's Privacy

The b133 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If b133 becomes aware that personal data has been collected from a person under the minimum age, we will promptly take steps to delete such data and close the associated account.

If you believe that a minor may have accessed or registered on the b133 Platform, please contact our support team immediately so that appropriate action can be taken.

Third-Party Links

The b133 Platform does not contain links to external third-party websites as a matter of policy. In the event that any third-party link appears on the Platform in connection with a licensed game provider or payment service, b133 is not responsible for the privacy practices of those third-party sites. We encourage you to review the privacy policies of any third-party service you use in conjunction with your b133 account, such as your bank or e-wallet provider.

Policy Amendments

b133 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where amendments are material, we will provide reasonable advance notice to registered players via a notice on the Platform or by email.

The "Last Updated" date at the top of this page will reflect the effective date of any revision. Your continued use of the Platform following the posting of an amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and may request account closure.

Contact Us

For all privacy-related enquiries, data subject rights requests, or complaints, please contact the b133 Data Protection team:

All privacy-related communications must be submitted in writing (email or live chat message). Please include your registered account email address and clearly describe the nature of your request or concern. b133 is committed to resolving all data protection matters promptly and transparently.