Summary: grab33 ("we", "us", "our") is committed to protecting the personal data of all players on the grab33 platform at grab33.asia. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your data. By registering or using the grab33 platform, you acknowledge that you have read and understood this Privacy Policy.
grab33 operates the online casino and sportsbook platform accessible at grab33.asia. For the purposes of this Privacy Policy, grab33 acts as the data controller — meaning we determine the purposes and means of processing personal data submitted by players and visitors to our platform.
We take our obligations under applicable data protection law seriously. This Policy has been prepared in accordance with internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. All grab33 staff and third-party processors who handle player data are bound by confidentiality obligations and receive appropriate data protection training.
This Policy applies to all personal data processed in connection with the grab33 platform, including data provided during registration, during gameplay, during payment transactions, and during customer support interactions. It applies to Malaysian players and all other users of grab33.asia regardless of location.
grab33 collects the following categories of personal data:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, Malaysian IC (MyKad) or passport number, nationality | Required |
| Contact Data | Email address, Malaysian mobile number, residential address | Required |
| Financial Data | Bank account details, eWallet identifiers (Touch 'n Go, Boost), USDT wallet addresses, transaction history | Required |
| KYC Documents | Copies of government-issued ID, proof of address documents, selfie/liveness verification | Required for withdrawals |
| Gaming Data | Bet history, game sessions, win/loss records, bonus usage, wagering activity | Automatic |
| Technical Data | IP address, device type, browser, operating system, session timestamps, login history | Automatic |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Where applicable |
| Preference Data | Marketing preferences, responsible gaming settings, language and interface preferences | Optional |
We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless legally required or expressly provided by the player in the context of a responsible gaming declaration.
The majority of personal data grab33 holds is provided directly by you during the following interactions: account registration; submission of KYC verification documents; making deposits or withdrawal requests; contacting customer support via live chat or email; participating in promotions or surveys; and setting responsible gaming preferences.
When you access grab33.asia, we automatically collect certain technical data through cookies, web beacons, and server logs. This includes your IP address, browser type and version, operating system, referring URL, pages visited, session duration, and device identifiers. This data is collected to ensure platform functionality, detect fraud, and improve user experience.
grab33 may receive personal data from third parties in limited circumstances, including: identity verification providers who confirm the authenticity of your KYC documents; payment processors who confirm deposit and withdrawal transactions; and fraud prevention services that flag high-risk activity patterns. All third-party data sources are contractually required to have a lawful basis for sharing data with us.
grab33 processes personal data for the following specific purposes:
grab33 processes personal data under the following legal bases:
grab33 does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances:
We share data with trusted third-party service providers who assist in operating the grab33 platform, including: payment processors (for deposit and withdrawal transactions); KYC/AML verification providers; game content providers (who may receive anonymised session data for technical purposes); IT infrastructure and cloud hosting providers; and customer support tooling providers. All service providers are bound by data processing agreements requiring them to process data only on our instructions and in accordance with applicable data protection law.
grab33 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required by applicable law or in response to a valid legal request (such as a court order or regulatory investigation). We will notify you of such disclosures where we are legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of grab33's business, personal data held by grab33 may be transferred to the acquiring entity. You will be notified of any such transfer and your data rights will be preserved.
grab33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
Where retention beyond these periods is required by law or necessary to resolve a dispute, we will retain the relevant data until that obligation is fulfilled. Upon expiry of applicable retention periods, data is securely deleted or anonymised in accordance with our data destruction procedures.
grab33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:
While grab33 takes all reasonable steps to protect your data, no internet transmission or electronic storage method is 100% secure. You are responsible for maintaining the security of your account credentials and for notifying us promptly of any suspected unauthorised access to your account.
grab33 uses cookies and similar tracking technologies to operate the platform and improve your experience. The following types of cookies are used:
You can manage non-essential cookie preferences through your browser settings. Note that disabling functional or analytics cookies may affect your experience on the grab33 platform. grab33 does not use third-party advertising or retargeting cookies.
Subject to applicable law, you have the following rights with respect to your personal data held by grab33:
To exercise any of these rights, contact grab33 at [email protected]. We will respond to all data rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days with prior notice. We may require identity verification before processing your request.
Strictly 21+: grab33 does not knowingly collect personal data from individuals under 21 years of age. Registration is prohibited for persons under 21, and age verification is conducted during the KYC process for all accounts. If we become aware that personal data has been collected from a person under 21 without appropriate verification, we will immediately delete that data and close the associated account.
Parents and guardians who believe that a minor has registered on grab33 are encouraged to contact us at [email protected] immediately. We take all such notifications seriously and will act promptly to investigate and close any account found to belong to an underage individual.
grab33 may transfer your personal data to service providers located outside Malaysia, including in countries where data protection laws may differ from those in Malaysia. Where such transfers occur, grab33 ensures that appropriate safeguards are in place, including: contractual data processing agreements incorporating internationally recognised data transfer clauses; transfers only to service providers in countries with adequate data protection frameworks; and privacy impact assessments conducted prior to any new cross-border transfer arrangement being established.
All third-party recipients of personal data outside Malaysia are required to process such data in accordance with the security and confidentiality standards described in this Privacy Policy.
grab33 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. The current version of this Policy is always available at grab33.asia/privacy-policy, with the "Last Updated" date prominently displayed.
For material changes that significantly affect how your personal data is processed, grab33 will notify you via the email address registered to your account at least 14 days before the changes take effect. Your continued use of the grab33 platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data grab33 holds about you, please contact our support team:
Data Protection
All data transmitted between your device and grab33 servers is protected by bank-grade 256-bit SSL/TLS encryption. Your login credentials and payment details are never sent in plain text.
grab33 never sells, rents, or trades your personal data to third-party marketers. Data is shared only with service providers essential to platform operation and under strict contractual controls.
Staff access to player data is governed by role-based permissions. Only personnel with a legitimate business need can access specific categories of personal data, and all access is logged.
You have the right to access, correct, delete, and port your personal data. All data rights requests are handled within 30 days. Simply email [email protected] to submit a request.
grab33 uses only necessary, functional, and analytics cookies. No third-party advertising or retargeting cookies are deployed. You can manage cookie preferences via your browser settings.
grab33 collects only the personal data necessary for the specific purpose stated. Data is retained for defined periods and securely deleted upon expiry of applicable retention obligations.
Your data is protected. Your payments are secure. grab33 is Malaysia's most player-focused online casino — 500+ games, instant eWallet deposits, and 24/7 support.