Privacy Policy

1. Introduction

seri33 ("we", "us", "our", "Company") operates the online gaming and sports betting platform accessible at https://seri33.cam ("Platform"). We take the privacy of our users seriously and are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy ("Policy") describes how seri33 collects, uses, stores, discloses, and protects the personal information of individuals who register for an account, access the Platform, or otherwise interact with our services ("Users", "Players", "you"). This Policy applies to all personal data processed by seri33 in connection with the operation of the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and seri33.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other information in our possession.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, seri33.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of seri33, under our instructions and subject to contractual data protection obligations.
• "KYC Data" means identity verification documents and associated information collected during the Know Your Customer verification process, including but not limited to government-issued identity documents and proof of address.
• "Sensitive Data" means categories of Personal Data that warrant heightened protection, including financial account details, government identification numbers, and payment method information.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, analytics, and user experience personalisation.

3. Data We Collect

seri33 collects personal data through several channels: directly from you when you register or use the Platform, automatically through your interaction with the Platform, and in limited cases from trusted third parties. The categories of personal data we collect include:

3.1 Registration & Account Data

When you create a seri33 account, we collect the information you provide, including:

• Full legal name
• Date of birth (for age verification — minimum21 years of age)
• Email address
• Contact number
• Residential address (city, state, postcode)
• Preferred currency (MYR — Malaysian Ringgit)
• Username and encrypted account credentials

3.2 KYC Verification Data

To comply with our identity verification requirements and anti-moneylaundering obligations, we collect:

• Copies of valid government-issued identity documents (Malaysian MyKad, Passport, or Driver's License)
• Proof of residential address (utility bill, bank statement, or equivalent, dated within 3 months)
• Selfie photograph holding identity document
• In some cases, evidence of the payment method used (e.g., screenshot of e-wallet or bank account)

3.3 Financial & Transaction Data

We record all financial activity on your account, including:

• Deposit and withdrawal amounts, dates, and payment methods used (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20, BTC)
• Transaction reference numbers and processing timestamps
• Account balance history
• Bonus and promotional credit records

3.4 Gaming & Betting Activity Data

We maintain records of your activity on the Platform, including:

• Games played, bet amounts, results, and session durations
• Sports markets wagered on, including Liga Super Malaysia, EPL, UFC, and other events
• Game preferences, login frequency, and platform navigation patterns

3.5 Technical & Device Data

Automatically collected data when you access the Platform includes:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session identifiers and authentication tokens
• Pages visited, time spent, and click-path data

Data Category	Primary Purpose	Retention Period
Registration & Account Data	Account management, customer support	Duration of account + 5 years post-closure
KYC Verification Data	Identity verification, AML compliance	5 years from date of collection
Financial Transaction Data	Payment processing, fraud prevention	7 years (regulatory requirement)
Gaming & Betting Activity	Service delivery, responsible gambling monitoring	Duration of account + 2 years post-closure
Technical & Device Data	Security, fraud detection, platform optimisation	13 months from collection

4. How We Use Your Data

seri33 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your player account, including processing deposits, withdrawals, and bonus credits in MYR.
• Identity Verification (KYC): Verifying your identity and age (minimum 21 years) before permitting withdrawals, in accordance with anti-money-laundering and regulatory requirements.
• Service Delivery: Providing access to games, sports betting markets, live casino tables, and all other Platform features.
• Security & Fraud Prevention: Detecting and investigating suspicious activity, multiple account creation, and other potential violations of our Terms & Conditions.
• Responsible Gambling Monitoring: Monitoring gaming behaviour to identify indicators of problem gambling, applying deposit limits where requested, and processing self-exclusion requests.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance via live chat and email.
• Legal & Regulatory Compliance: Meeting our obligations under applicable law, including anti-money-laundering regulations, data retention requirements, and any lawful requests from competent authorities.
• Platform Improvement: Analysing aggregated usage data to improve the user interface, game catalogue, and overall player experience.
• Communications: Sending you transactional notifications (deposit confirmations, withdrawal approvals, bonus credits) and, where you have opted in, promotional communications regarding relevant offers.

5. Legal Basis for Processing

seri33 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and seri33 — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML verification, financial record-keeping, and response to lawful authority requests.
• Legitimate Interests: Processing necessary for our legitimate business interests, including security monitoring, fraud prevention, and Platform improvement, where these interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting customer support or updating your account preferences.

6. Data Sharing & Disclosure

seri33 does not sell your personal data to third parties. We may disclose your personal data in the following limited circumstances:

6.1 Service Providers & Data Processors

We engage carefully veted third-party service providers to assist in delivering the Platform, including payment processing companies (for handling MYR transactions via DuitNow, FPX, and other local payment rails), identity verification service providers, cloud hosting and data storage providers, and fraud detection technology partners. All such processors are bound by data processing agreements that prohibit use of your data beyond the scope of the services they provide to seri33.

6.2 Legal & Regulatory Disclosure

We may disclose your personal data to competent governmental authorities, regulators, law enforcement agencies, or courts where we are legally required or compelled to do so — for example, in connection with anti-money-laundering investigations, judicial orders, or regulatory audits.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of seri33's assets, your personal data may be transferred to the successor entity as part of that transaction. We will provide reasonable notice of any such transfer via the Platform or by email to your registered address.

7. Data Retention

seri33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods applicable to each category of data are set out in the table in Section 3 above.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an individual. Financial transaction records are retained for a minimum of 7 years in accordance with standard anti-money-laundering regulatory requirements, even after account closure.

8. Data Security

seri33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit.
• Encryption at Rest: Sensitive personal data and financial information stored in our systems is encrypted at rest using industry-standard cryptographic techniques.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Personnel with access to sensitive data are subject to background checks, training, and confidentiality obligations.
• Two-Factor Authentication: Available for all player accounts to protect against unauthorised login.
• Penetration Testing & Security Audits: Our infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities.
• Incident Response: We maintain a data breach response procedure. In the event of a breach that presents a material risk to affected individuals, we will notify relevant parties in accordance with applicable legal obligations.

Notwithstanding the above, no system is entirely immune to security risk. We cannot guarantee the absolute security of information transmitted over the internet, and you access the Platform at your own risk.

9. Cookies & Tracking Technologies

seri33 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and improve the user experience. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impacting core functionality.
• Functional Cookies: Remember your preferences (such as language settings and account display options) to personalise your experience.
• Analytics Cookies: Collect anonymised data on how users navigate the Platform to help us understand usage patterns and improve performance. Aggregated data only — no individual profiling.
• Security Cookies: Used to detect and prevent fraudulent activity, including multiple account creation from the same device or IP address.

Most web browsers allow you to manage cookie settings through the browser's privacy or settings menu. Please note that disabling certain cookies may affect the functionality of the Platform. seri33 does not use cookies to serve behavioural advertising or to track your activity across third-party websites.

10. International Data Transfers

seri33 operates internationally and some of our service providers — including cloud hosting, payment processing, and identity verification partners — may be located outside Malaysia. Where personal data is transferred to jurisdictions that may not offer the same level of data protection as Malaysia, we take steps to ensure that appropriate safeguards are in place, including contractual data protection clauses that bind our processors to handle your data with the same level of care required under this Policy.

11. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us via the details provided in Section 15.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. Note that this right is subject to overiding legal obligations — for example, we cannot delete financial transaction records that we are required to retain under anti-money-laundering regulations.
• Right to Restrict Processing: You may request that we restrict our processing of your data in specified circumstances, for example while a rectification request is being considered.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where it is based on our legitimate interests. We will consider your objection and cease or restrict processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12. Protection of Minors

The seri33 Platform is strictly for individuals aged21 years and above. We do not knowingly collect or process personal data from persons under 21 years of age. Age verification is mandatory at the registration stage and is enforced through our KYC process.

If seri33 becomes aware that personal data has been collected from a person under the minimum age, the relevant Account will be immediately suspended, and the personal data will be deleted from our systems to the extent permitted by applicable law. If you believe a minor has registered an account, please contact us immediately at the address in Section 15.

13. Third-Party Links

The seri33 Platform may contain references or links to third-party services or information sources. This Privacy Policy does not extend to any third-party websites, platforms, or services that are not operated by seri33. We are not responsible for the privacy practices of third parties, and we recommend that you review the privacy policy of any third-party service you access independently of seri33.

14. Policy Amendments

seri33 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The date of the most recent revision is displayed at the top of this document.

Where changes are material, we will provide advance notice via a prominent notice on the Platform or by email to your registered address. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and request account closure.

15. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our support team. We aim to acknowledge all data-related enquiries within a reasonable timeframe and to resolve them as promptly as practicable.

If you are not satisfied with our handling of your data rights request, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.