Privacy Policy

This Privacy Policy ("Policy") is issued by jili33 ("we", "us", "our", "the Platform") and applies to all personal data collected and processed in connection with your use of the jili33 website at https://jili33.cam, including account registration, identity verification, payment processing, gameplay, and customer support.

jili33 operates as an online gaming platform serving registered users in Malaysia, offering sports betting, live casino, slot games, and esports wagering denominated in Malaysian Ringgit (MYR). This Policy explains how we handle the personal data of Malaysian residents and any other users who interact with our platform.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between jili33 and its registered users. Where these documents overlap, both apply.

The following terms carry specific meanings throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, email address, phone number, identification document details, financial data, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Subject" means the individual whose personal data is being processed — in the context of this Policy, primarily registered jili33 users.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, jili33.
• "Third Party" means any individual or organisation other than jili33 and the data subject.
• "KYC" means Know Your Customer — the identity verification process conducted prior to withdrawal processing.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, which establishes principles for the processing of personal data in commercial transactions.
• "Cookies" means small text files stored on your device by your web browser when you visit the Platform, used to maintain session state and gather usage analytics.

jili33 acts as the data controller for all personal data collected through the Platform. This means jili33 determines the purposes for which your data is collected and the manner in which it is processed, stored, and — where applicable — disclosed.

Queries regarding data controller responsibilities, data subject rights, or any concern about how your personal data is handled should be directed to our support team using the contact details in Section 15 of this Policy.

jili33 collects personal data through three primary channels: information you provide directly, data generated automatically through your use of the Platform, and information received from third-party service providers involved in payment processing or identity verification.

4.1 — Data You Provide Directly

4.2 — Data Collected Automatically

When you access jili33, our systems automatically log certain technical data to ensure Platform security and operational stability. This includes:

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser version
• Session duration, pages visited, and features interacted with
• Game sessions played, bet amounts, and win/loss outcomes (for regulatory compliance)
• Login timestamps and authentication event logs

4.3 — Data from Third Parties

Where you deposit via third-party payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, or FPX, we receive transaction confirmation data from those providers — including transaction reference numbers, amounts, and success or failure status. We do not receive your full banking credentials or e-wallet login details from these providers.

jili33 processes personal data only where there is a valid legal basis to do so. The applicable legal bases for our processing activities are as follows:

• Contractual Necessity: Processing required to perform the contract with you as a registered user — including account creation, game access, deposit processing, and withdrawal fulfilment.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and regulatory record-keeping duties.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the Platform, prevent fraud, detect prohibited conduct, and maintain accurate audit logs — where our interests are not overridden by your data protection rights.
• Consent: For non-essential cookies and certain optional marketing communications, we rely on your explicit consent, which you may withdraw at any time without affecting lawfulness of prior processing.

jili33 uses the personal data it collects for the following specific purposes, each aligned with the legal bases described in Section 5:

• Account Management: Creating, maintaining, and administering your registered account, including password resets and preference updates.
• Identity Verification (KYC): Verifying your age (21+), identity, and address prior to processing your first withdrawal and at other compliance-triggered points.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method, reconciling transactions, and maintaining financial records.
• Platform Security: Detecting and preventing fraudulent activity, bot usage, multi-accounting, collusion, and unauthorised access to accounts.
• Regulatory Compliance: Meeting obligations under AML regulations, reporting requirements, and record-keeping mandates applicable to online gaming operators.
• Customer Support: Responding to enquiries, processing complaints, and maintaining records of support interactions for quality assurance and dispute resolution.
• Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling indicators and, where appropriate, implementing protective measures such as deposit limit interventions.
• Platform Improvement: Analysing anonymised usage data to identify technical issues, improve game performance, and enhance the user interface.

jili33 does not sell personal data to any third party. We share personal data only in the following limited and documented circumstances:

7.1 — Payment Service Providers

Transaction data is shared with payment processors — including e-wallet operators (Touch 'n Go, Boost, GrabPay), banking partners (Maybank, CIMB, Public Bank, Hong Leong Connect), DuitNow/FPX infrastructure providers, and cryptocurrency network operators — solely to the extent necessary to execute and confirm deposits and withdrawals.

7.2 — Identity Verification Services

Where third-party identity verification tools are used to process KYC submissions, your identity documents may be shared with those service providers under binding data processing agreements that restrict their use of your data exclusively to verification purposes.

7.3 — Legal and Regulatory Authorities

jili33 will disclose personal data to competent authorities, law enforcement, or regulatory bodies where required by applicable law, valid court order, or in response to a lawful request. We will notify affected users of such disclosure where legally permitted to do so.

7.4 — Business Continuity

In the event of a merger, acquisition, or business transfer involving jili33, personal data may be transferred to the successor entity as part of that transaction, subject to the same or equivalent privacy protections as described in this Policy. Affected users will be notified in advance where practicable.

jili33 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of account activity and for a minimum of 5 years following account closure, as required by AML regulatory frameworks.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or longer where required by applicable law or ongoing regulatory investigation.
• Transaction records: Retained for a minimum of 6 years from the date of the transaction for financial record-keeping purposes.
• Support correspondence: Retained for 3 years from the date of the final communication, or longer where a dispute remains unresolved.
• Session and gameplay logs: Retained for 2 years for operational analysis and security audit purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of consent plus 3 years, to demonstrate compliance in the event of a complaint.

Upon expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous in accordance with our data disposal procedures.

jili33 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Transport Encryption: All data transmitted between your browser and our servers is protected by TLS 1.3 encryption. Connections via unencrypted HTTP are automatically redirected to HTTPS.
• Storage Encryption: Personal data at rest, including KYC documents and financial records, is stored using AES-256 encryption.
• Access Controls: Access to personal data within jili33's systems is restricted to personnel with a documented operational need. Access logs are maintained and reviewed regularly.
• Intrusion Detection: Automated monitoring systems scan for unusual access patterns, brute-force attempts, and other indicators of unauthorised system access.
• Penetration Testing: The Platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

jili33 uses cookies and similar tracking technologies to maintain session continuity, ensure platform security, and gather anonymised usage analytics. The following categories of cookies are employed:

You may manage cookie preferences through your browser settings. Disabling essential cookies will affect Platform functionality. Non-essential cookie consent can be withdrawn at any time without affecting the lawfulness of prior processing based on that consent.

In the course of operating the Platform and processing payments, personal data may be transferred to and processed in jurisdictions outside Malaysia. Such transfers occur in the following contexts:

• Cloud infrastructure providers hosting Platform servers in secure data centres that may be located outside Malaysia.
• KYC and identity verification service providers operating international verification networks.
• Cryptocurrency network infrastructure, which by its nature operates across distributed global nodes.

Where personal data is transferred internationally, jili33 ensures that adequate safeguards are in place — including binding contractual clauses with receiving entities that impose data protection obligations equivalent to those described in this Policy. We do not transfer data to jurisdictions that lack adequate data protection frameworks without appropriate contractual protection.

As a data subject, you hold the following rights with respect to the personal data jili33 holds about you. Requests to exercise these rights should be submitted to our support team using the contact details in Section 15.

jili33 will respond to data subject requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days with notice to you. There is no charge for exercising these rights in ordinary circumstances.

jili33 is strictly prohibited to persons under the age of 21 years. We do not knowingly collect personal data from individuals under 21. Age is verified as part of the KYC process required prior to first withdrawal.

If jili33 becomes aware or has reasonable grounds to believe that personal data belonging to an individual under 21 has been collected — whether through an incorrectly stated date of birth or other means — we will immediately suspend the relevant account, delete the personal data concerned to the extent legally permissible, and reverse any financial transactions where possible.

jili33 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. The effective date displayed at the top of this page reflects the most recently published version.

Where a change is material — for example, a new category of data being collected or a new purpose introduced — registered users will be notified by email to the address associated with their account no fewer than 7 days before the change takes effect.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the amendment, you should contact us to close your account before the change takes effect.

For all privacy-related enquiries, data subject requests, or complaints regarding how jili33 handles your personal data, please contact us through the following channels:

• Support Email: [email protected] — for privacy-related matters, use "Privacy Request" or "Data Subject Request" as the subject line.
• Live Chat: Available 24/7 through the Platform. For formal data subject rights requests, email is preferred to ensure a proper written record.
• Response Commitment: Privacy-related emails receive an acknowledgement within 2 business days and a substantive response within 5 business days. Formal data subject requests are processed within 30 calendar days.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. In Malaysia, the relevant authority is the Department of Personal Data Protection (JPDP), which administers the Personal Data Protection Act 2010 (PDPA).