PRIVACY POLICY

Buas33 Privacy Policy – Malaysia Member Data Protection

Buas33 is fully committed to protecting the privacy and personal data security of every member. This document transparently explains how we manage your information.

Updated: January 2026 AES-256 Encryption Applicable in Malaysia
Key Summary: buas33 does not sell, rent, or disclose members' personal data to any third party for marketing purposes without your consent. All information we collect is used solely for platform operations, account security, and improving user experience.

Introduction

Welcome to the buas33 Privacy Policy. This document is published in the spirit of full transparency — we want every member to understand exactly what happens to their information when they register and use the buas33 platform.

Privacy is more than words on paper to us. It is part of the foundation of trust we have built together with the Malaysian player community since 2018. We believe you deserve to know clearly how your data is used, stored, and protected — without confusing language or hidden terms.

This Privacy Policy applies to all services provided by buas33 across all platforms — website, Android and iOS mobile apps, and any official buas33 communication channels. By using any buas33 service, you agree to the practices described in this document.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy buas33, which together form the entire agreement between you and our platform.

Information We Collect

Buas33 only collects information necessary to operate the platform safely and effectively. The following are the categories of data we collect and their purposes:

Data Categories Example Information Purpose of Collection
Personal Identity Full name, date of birth, gender KYC verification, fraud prevention
Contact Information Email, phone number Account communications, notifications, support
Identity Document MyKad, passport (during KYC) Age & identity verification
Financial Data Bank name, account number, transaction history Deposit & withdrawal processing
Usage Data Activity logs, games played, session duration Platform enhancement, issue detection
Technical Data IP address, device type, web browser Security, unauthorised access detection

All information collected during the KYC process — including copies of identity documents — is processed in an environment fully protected by end-to-end encryption and deleted from processing systems as soon as verification is complete.

How We Use Your Data

Collected data is used exclusively for the following purposes and nothing beyond:

  • Account Management: To register, verify, and manage buas33 member accounts, including secure login and account recovery.
  • Transaction Processing: To process deposits and withdrawals via your preferred payment methods such as FPX, TNG eWallet, GrabPay, and bank transfer.
  • Platform Security: To detect suspicious activity, prevent fraud, money laundering, and unauthorized access to member accounts.
  • Customer Support: To provide accurate and personalized assistance when you contact the buas33 support team.
  • Important Communications: To send account-related notifications, security updates, and promotional information you have opted in to receive.
  • Legal Compliance: To fulfill reporting and compliance obligations required by applicable laws and regulations.
  • Product Improvement: To analyze usage patterns on an aggregate and anonymous basis to enhance the user experience on the buas33 platform.
Data Minimization Principle: buas33 adheres to the principle of data minimisation — we only collect information that is strictly necessary for the stated purposes. No excess data is collected without clear justification.

Data Storage & Security

Buas33 invests seriously in security infrastructure to ensure your data is always protected to the highest standard. The following are the technical measures we implement:

  • AES-256 Encryption: All personal and financial data is encrypted using AES-256 standards — the same level of encryption used by leading banking institutions and government agencies around the world.
  • HTTPS/TLS Connection: All communication between your device and buas33 servers is protected by TLS 1.3 protocol, ensuring that data in transit cannot be intercepted by third parties.
  • Two-Factor Authentication: buas33 provides a two-factor authentication (2FA) option for an additional layer of protection for your account.
  • Internal Access Control: Members' personal data is accessible only to buas33 staff with a legitimate and specific business need. All access is logged and regularly audited.
  • Secure Data Center: Member data is stored in ISO 27001-certified data centres with multi-layered backup systems, 24/7 physical protection, and a comprehensive disaster recovery plan.
  • Vulnerability Scanning: The buas33 system undergoes regular penetration testing and vulnerability scanning by independent third-party security experts.

Data Retention Period: buas33 retains members' personal data for as long as necessary to fulfil the purposes of collection and legal obligations. Account data inactive for more than 5 years will be deleted or anonymised in accordance with established procedures, subject to ongoing compliance requirements.

Your Responsibilities: While buas33 implements robust security measures, you are also responsible for keeping your password and account login details confidential. Do not share this information with anyone, including individuals claiming to be buas33 staff.

Data Sharing with Third Parties

Buas33 does not sell or rent members' personal data to any third party. However, there are limited situations where data sharing is necessary for platform operations:

  • Payment Processors: Required transaction information is shared with authorized payment providers (such as FPX, TNG, GrabPay) to process your deposits and withdrawals. All such providers are bound by strict data protection agreements.
  • Legal Compliance: buas33 may be required to disclose certain information to the relevant authorities when mandated by law, court order, or a valid law enforcement directive.
  • Technology Support Services: Third-party technical service providers who help operate our platform have limited access to only the data required for their specific tasks, and are bound by strict confidentiality agreements.
  • Fraud Prevention: In cases of suspected fraud or illegal activity, relevant information may be shared with fraud prevention agencies or the appropriate regulatory authorities.

In all of the data-sharing situations above, buas33 ensures that only the minimum necessary information is shared, and all receiving parties are bound by confidentiality obligations equal to or higher than our own standards.

Cookies & Tracking Technologies

Buas33 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functionality such as maintaining your login session, language settings, and basic preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: To collect anonymous information about how you use the buas33 platform, helping us identify and resolve technical issues.
  • Functional Cookies: To save your preferences such as preferred currency, favorite game types, and display settings for a more personalized experience.
  • Analytics Cookies: Helps us understand aggregate platform usage patterns to improve design and content. This data is processed anonymously and is not linked to your personal identity.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the buas33 platform.

Your Privacy Rights as a Member

As a buas33 member, you have the following privacy rights, which you may exercise at any time by contacting our support team:

Right to Access

You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 30 business days.

Right to Rectification

If your personal data is inaccurate or outdated, you have the right to request immediate correction via your account settings or the buas33 support team.

Right to Erasure

You have the right to request deletion of your personal data, subject to legal retention obligations and ongoing fraud prevention requirements.

Right to Restriction of Processing

Under certain circumstances, you have the right to request that buas33 restrict the processing of your personal data while a disputed issue is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform if desired.

Right to Object to Marketing

You can opt out of marketing communications from buas33 at any time via the unsubscribe link in our emails or through your account settings.

Children's Privacy

Buas33 does not provide any services to individuals under the age of 18. Our platform actively conducts age verification during the registration and KYC process.

We do not knowingly collect personal data from minors. Should we become aware that a minor's personal data has been collected without proper age verification, we will take immediate action to delete that data and close the account in question.

Parental Responsibilities: If you find that your child has accessed the buas33 platform, please contact our support team immediately. We will process the account closure and data deletion with the highest priority.

Changes to This Privacy Policy

Buas33 reserves the right to update or amend this Privacy Policy from time to time in line with changes in legislation, technology, or platform operating practices. Any material changes will be communicated to members via:

  • Notices prominently displayed on the buas33 platform homepage.
  • Notification emails sent to all active members.
  • In-app notifications on the buas33 mobile app.

The "Updated" date at the top of this page always reflects the date of the latest revision. We encourage you to review this page periodically to stay informed about buas33's privacy practices.

Contact Us About Privacy

For any questions, concerns, or requests regarding your data privacy, the buas33 Data Protection Officer team is ready to assist you through the following channels:

  • Live Chat 24/7: The fastest method — directly via the chat icon on the buas33 platform.
  • Privacy-Dedicated Email: [email protected] — responded to within 3 business days.
  • General Support: [email protected] — for general inquiries about your account and security.
  • Help Center: Visit the section FAQ us for quick answers to frequently asked questions about privacy and account security.
Response Time: buas33 is committed to responding to all privacy-related inquiries within a maximum of 30 calendar days from the date of receipt. For urgent cases involving account security, we aim to respond within 24 hours.
Why Your Privacy Is Safe With buas33

Six layers of protection ensuring every Malaysia member's personal information remains secure at all times.

AES-256 Encryption

All your personal and financial data is encrypted using AES-256 standards — the same encryption technology used by leading banks worldwide. Your data remains unreadable even if intercepted.

No Data Sales

Buas33 has never and will never sell, rent, or loan members' personal data to third-party advertisers or data brokers. Your data is used solely for platform operations and your own convenience.

Secure & Transparent KYC

Our identity verification (KYC) process is conducted in a fully encrypted environment. Identity documents are processed immediately and are not retained longer than required by law.

Two-Factor Authentication

Protect your account with an extra layer of security through two-factor authentication (2FA). Every login from a new device requires additional verification to prevent unauthorized access.

ISO 27001 Data Center

Buas33 member data is stored in ISO 27001-certified data centres with 24/7 security monitoring, layered physical access controls, and automated backup systems to ensure data continuity.

Full Privacy Rights

You are in full control — with the right to access, correct, transfer, or delete your personal data at any time. The buas33 privacy team processes all requests within 30 business days.

Bahasa Melayu