harta333 Privacy Policy

1 Data Controller Information

harta333 is the data controller responsible for the personal data you provide when using our platform. As data controller, harta333 determines the purposes for which and the means by which personal data is processed. All data-related enquiries, requests, and complaints should be directed to our support team at [email protected]. harta333 is committed to handling your personal data lawfully, fairly, and transparently, in accordance with applicable international data protection standards.

2 Data We Collect

harta333 collects the following categories of personal data from registered members and platform visitors:

• Identity Data: Full name, date of birth, nationality, and copies of government-issued identity documents (e.g. Malaysian IC or passport) where requested for KYC verification purposes.
• Contact Data: Email address, mobile telephone number, and residential address as provided at registration.
• Financial Data: Payment method details (e.g. Touch n Go eWallet account identifiers, bank account names, FPX transaction references), deposit and withdrawal history, and transaction amounts in MYR.
• Technical Data: IP address, browser type, device type and identifiers, operating system, session duration, login timestamps, and referring URLs.
• Usage Data: Games played, bet amounts and history, bonus claims, platform navigation patterns, and session activity logs.
• Communications Data: Records of live chat conversations, email correspondence, and support ticket exchanges with harta333 staff.

3 How We Collect Your Data

harta333 collects personal data through the following means:

• Direct provision: Data you enter voluntarily when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated technologies: Data collected automatically as you interact with our platform, including cookies, server logs, session tracking, and analytics tools.
• Third-party sources: Data received from payment processors, identity verification providers, and fraud prevention services where necessary to comply with our legal and regulatory obligations.

4 Purpose and Legal Basis for Processing

harta333 processes personal data only where a lawful basis exists. The primary legal bases on which we rely are:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered member — including account management, deposits, withdrawals, and game participation.
• Legal obligation: Processing necessary to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and our obligations under international licensing frameworks.
• Legitimate interests: Processing necessary for fraud prevention, platform security, abuse detection, and service improvement, where these interests are not overridden by your fundamental rights.
• Consent: Where you have provided explicit consent for specific processing activities, such as receiving promotional communications from harta333. You may withdraw consent at any time.

5 How We Use Your Data

harta333 uses your personal data for the following purposes:

• Creating, managing, and maintaining your harta333 account.
• Processing deposits and withdrawals via Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank, and other supported payment methods.
• Verifying your identity and age (21+) in compliance with our regulatory obligations.
• Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Providing customer support and resolving disputes.
• Sending service-related communications (account alerts, security notifications, withdrawal confirmations).
• Sending promotional communications where you have consented or where a legitimate interest applies.
• Conducting platform analytics and improving harta333 services for Malaysian members.
• Complying with applicable laws, licensing authority requirements, and court orders.

6 Data Sharing and Third Parties

harta333 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share data only in the following limited circumstances:

• Service providers: We engage trusted third-party vendors to assist in operating our platform, including payment processors, identity verification providers, cloud hosting services, and fraud detection systems. These providers are contractually bound to process data only on harta333's instructions and to maintain appropriate security standards.
• Regulatory and licensing authorities: We may share data with our licensing authority as required to demonstrate compliance with our gaming licence obligations.
• Law enforcement: We will disclose data where required by a valid legal order, court order, or regulatory demand. We will notify you of such disclosures to the extent permitted by applicable law.
• Business transactions: In the event of a merger, acquisition, or sale of harta333 assets, personal data may be transferred to a successor entity subject to equivalent data protection commitments.

7 International Data Transfers

harta333's operations and service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, harta333 ensures that appropriate safeguards are in place to protect your data, including standard contractual clauses, adequacy decisions, or equivalent mechanisms recognised under applicable data protection frameworks. By using harta333, you acknowledge that your data may be transferred and processed outside Malaysia in accordance with this Policy.

8 Data Retention

harta333 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. Specifically:

• Account data is retained for the duration of your account's active status and for a minimum of five (5) years following account closure, as required by AML regulations.
• Financial transaction records are retained for a minimum of six (6) years from the date of each transaction.
• Technical and usage logs are retained for up to twelve (12) months unless a longer retention period is required for security or legal purposes.

When data is no longer required, harta333 will securely delete or anonymise it in accordance with our data disposal procedures.

9 Cookies and Tracking Technologies

harta333 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your authenticated session, and analyse platform usage. Cookies used by harta333 include:

• Essential cookies: Required for the platform to function. These cannot be disabled without impacting core functionality such as login session management.
• Analytics cookies: Used to understand how members interact with the harta333 platform, identify performance issues, and improve user experience. Data collected is aggregated and anonymised wherever possible.
• Preference cookies: Used to remember your settings and personalise your experience on the harta333 platform across sessions.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the harta333 platform. Continued use of the platform after being notified of our cookie use constitutes consent to our cookie practices.

10 Security of Your Data

harta333 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include SSL/TLS encryption of all data in transit, bcrypt hashing of all passwords, role-based access controls limiting staff access to personal data, regular security audits and penetration testing, and incident response procedures for data breaches. In the event of a data breach that poses a material risk to affected individuals, harta333 will notify relevant parties in accordance with applicable law. No security system is impenetrable; while harta333 takes every reasonable precaution, we cannot guarantee absolute security of data transmitted over the internet.

11 Your Rights as a Data Subject

Subject to applicable law and our legitimate processing obligations, you have the following rights with respect to your personal data held by harta333:

To exercise any of these rights, contact harta333 support at [email protected]. We may require identity verification before processing requests.

12 Children and Minors

harta333 is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a minor, we will immediately close the associated account and delete all related data. If you believe a minor has registered on harta333, please notify us at [email protected] immediately.

13 Changes to This Policy

harta333 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered members via email or in-platform notification with reasonable advance notice. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of the harta333 platform following notification of changes constitutes acceptance of the revised Policy.

14 Contact Us

For all privacy-related enquiries, data subject rights requests, or complaints, please contact the harta333 data protection team at [email protected]. We aim to respond to all data-related requests within 30 days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to you.