Privacy Policy

NTC33 ("we", "us", "our", or the "Company") operates the online gaming and sports betting platform accessible at ntc33.cam (the "Platform"). We are committed to respecting the privacy of all individuals who interact with the Platform, whether as registered account holders, visitors, or prospective players.

This Privacy Policy ("Policy") describes how NTC33 collects, receives, stores, uses, shares, and otherwise processes personal data in connection with the Platform and any related services. It applies to all users of the Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

This Policy is incorporated into and should be read alongside our Terms & Conditions. Terms defined in the Terms & Conditions and not defined in this Policy carry the same meanings here. By accessing the Platform or creating a registered Account, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Account" — a registered user account created on the NTC33 Platform.
• "Cookie" — a small text file placed on your device by the Platform to store session and preference information.
• "Data Controller" — the entity that determines the purposes and means of processing personal data; in this case, NTC33.
• "Data Processor" — a third party that processes personal data on behalf of NTC33 under a data processing agreement.
• "Data Subject" — any identified or identifiable natural person whose personal data is processed by NTC33; this includes you as a Player or visitor.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, IP address, device identifiers, and payment information.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Platform" — the NTC33 website, mobile-optimised interface, and associated services at ntc33.cam.
• "Special Category Data" — personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or data concerning criminal convictions.

NTC33, operating the Platform at ntc33.cam, acts as the Data Controller in respect of all personal data collected from users of the Platform. As Data Controller, NTC33 is responsible for determining why and how your personal data is processed and for ensuring that such processing is carried out in accordance with applicable data protection laws and this Policy.

Where NTC33 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification services, or cloud infrastructure providers), such parties act as Data Processors under contractual terms that require them to maintain appropriate security standards and to process data only as directed by NTC33.

NTC33 collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the main categories of data we collect and examples of each:

NTC33 does not intentionally collect Special Category Data (as defined in Section 2) unless required to do so for specific legal compliance purposes, such as processing a self-exclusion request that references a health condition. Where such data is collected, it is handled with a higher standard of care and is retained only for the minimum period necessary.

NTC33 collects personal data through the following mechanisms:

5.1 Directly from You

• During account registration, when you provide identity and contact information;
• When you submit documents for KYC identity verification;
• When you make deposits or request withdrawals via supported Malaysian payment methods;
• When you contact our customer support team via live chat or email;
• When you update your account preferences or responsible gambling settings;
• When you participate in promotions or respond to surveys.

5.2 Automatically via the Platform

• Through server logs that record IP addresses, device identifiers, and access timestamps;
• Through cookies and similar tracking technologies (see Section 11 for full details);
• Through game activity and betting history generated during your use of the Platform;
• Through fraud detection and security monitoring systems that analyse usage patterns.

5.3 From Third Parties

• From identity verification service providers during the KYC process;
• From payment processors confirming transaction status;
• From fraud prevention and anti-money laundering screening services;
• From publicly available sources where required for legal compliance purposes.

NTC33 processes your personal data for the following specific purposes:

• Account Creation and Management: To establish and maintain your registered Account, authenticate your identity at login, and manage your account preferences.
• Identity Verification (KYC): To verify your identity, age (confirming you are 21 or above), and payment method ownership in compliance with applicable anti-money laundering and responsible gambling obligations.
• Transaction Processing: To process deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Visa, Mastercard, USDT TRC20, and other supported methods; and to process withdrawal requests to verified accounts.
• Platform Operation and Improvement: To provide, maintain, and improve the Platform, diagnose technical issues, and develop new features based on usage patterns.
• Customer Support: To respond to enquiries, complaints, and support requests submitted via live chat, email, or other channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other prohibited activities.
• Responsible Gambling: To administer self-exclusion requests, deposit limits, cooling-off periods, and other player protection tools; and to identify patterns of behaviour that may indicate problem gambling.
• Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. You may withdraw this consent at any time via your account settings.

NTC33 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the contract formed when you register an Account and agree to the Terms & Conditions. This covers account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML screening, and responsible gambling obligations.
• Legitimate Interests: Processing carried out for NTC33's legitimate business interests, including fraud detection, Platform security, internal analytics, and customer service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, such as sending direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

NTC33 does not sell, rent, or trade your personal data to any third party. We may share your personal data in limited circumstances as described below:

• Service Providers (Data Processors): We engage carefully selected third-party providers to assist in operating the Platform, including payment processors (covering Touch 'n Go, Boost, Maybank, CIMB, DuitNow integrations), identity verification providers, cloud hosting providers, fraud detection services, and customer support platform providers. All such processors are bound by contractual obligations requiring them to protect your data and process it only as directed by NTC33.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulators, courts, or other government bodies where required by applicable law, court order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of NTC33, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of NTC33's assets, your personal data may be transferred to the acquiring entity, subject to that entity being bound by privacy obligations at least as protective as those set out in this Policy. You will be notified of any such transfer via the email address on your Account.
• Fraud and AML Investigations: We may share personal data with fraud prevention agencies and financial intelligence units where required for anti-money laundering compliance or fraud investigation purposes.

NTC33 operates globally and may transfer personal data to servers or service providers located in jurisdictions outside Malaysia. Where such transfers occur, NTC33 implements appropriate safeguards to ensure that your personal data receives a level of protection consistent with applicable data protection standards. Safeguards may include contractual protections requiring recipients to maintain equivalent data security practices.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia, subject to the safeguards described in this section.

NTC33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Active Account Data: Retained for the duration of the Account relationship and for a period of at least five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by applicable AML legislation.
• Transaction Records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of five (5) years from the date of each transaction.
• Communications Records: Live chat transcripts and email correspondence with our support team are retained for up to two (2) years from the date of the communication.
• Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of the Account relationship plus one (1) year following closure.
• Self-Exclusion Records: Records of self-exclusion requests and responsible gambling tool activations are retained for a minimum of five (5) years to prevent reinstatement during the exclusion period and to comply with regulatory obligations.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.

NTC33 uses cookies and similar technologies on the Platform to support core functionality and improve user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable session management, authentication, and security features. They cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as account settings and responsible gambling configurations, across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised information about how players interact with the Platform — such as pages visited and session duration — to inform Platform improvements. Analytics data is not linked to individual identifiable profiles.
• Security and Fraud Prevention Cookies: Used by our fraud detection systems to identify suspicious usage patterns and protect the integrity of the Platform.

NTC33 does not use advertising or behavioural tracking cookies. We do not partner with third-party advertising networks that would place tracking cookies on your device through our Platform.

Subject to applicable law, you have the following rights in respect of your personal data held by NTC33. To exercise any of these rights, contact our support team via live chat on the Platform or by email. We will respond within 30 calendar days of receiving a valid request.

Please note that certain rights are subject to conditions and exemptions under applicable law. For example, NTC33 cannot delete Account data that it is legally required to retain under AML legislation. Where a request cannot be fulfilled in full, we will explain the reasons in our response.

NTC33 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for all personally identifiable data stored on NTC33 servers;
• Hashed storage of account passwords — NTC33 cannot retrieve your plain-text password;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data;
• Regular penetration testing and security audits of the Platform infrastructure;
• Intrusion detection systems and real-time security monitoring;
• Staff training on data protection obligations and security best practices.

Notwithstanding these measures, no method of electronic transmission or storage is entirely without risk. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, NTC33 will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

You are responsible for maintaining the security of your own account credentials. NTC33 will never request your password via live chat, email, or any other communication channel. If you suspect your account has been compromised, contact our support team immediately.

The NTC33 Platform is strictly intended for adults aged 21 and above. NTC33 does not knowingly collect personal data from individuals under the age of 21. Access to the Platform by minors is prohibited under our Terms & Conditions.

If NTC33 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, such data will be deleted promptly and the associated Account will be closed. Any deposits held in such an Account will be handled in accordance with applicable legal and regulatory requirements.

If you have reason to believe that a minor has accessed the Platform and provided personal data, please contact our support team immediately so that the matter can be investigated and remediated without delay.

NTC33 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The date of the most recent revision is displayed at the top of this document.

Where amendments are material — meaning they affect your rights in a meaningful way — NTC33 will provide notice to registered Account holders via the email address on record, or by way of a prominent notice on the Platform, prior to the changes taking effect. Continued use of the Platform following such notice constitutes acceptance of the updated Policy.

We encourage all players to review this Policy periodically to remain informed of how NTC33 handles personal data.

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by NTC33, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the NTC33 Platform — the fastest route for account-specific data queries.
• Email: [email protected] — for detailed written requests, including data subject access requests, rectification requests, and erasure requests. We aim to acknowledge all requests within 5 business days and respond in full within 30 calendar days.

If you are dissatisfied with our response to a data privacy request or complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. For players based in Malaysia, the relevant authority is the Personal Data Protection Commissioner under the Personal Data Protection Act 2010 (PDPA).