harta333 Privacy Policy

01Introduction

harta333 ("we", "us", "our") operates the online sportsbook and casino platform accessible at https://harta333.win and is committed to protecting the privacy and personal data of all individuals who interact with our Platform. This Privacy Policy applies to all Members, registered users, and visitors to the harta333 website, including those accessing the Platform from Malaysia and other jurisdictions.

This Privacy Policy describes the types of personal data harta333 collects, the purposes for which it is used, the conditions under which it may be shared with third parties, and the rights available to individuals with respect to their data. harta333 processes personal data in accordance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and the data protection requirements of the jurisdiction governing harta333's international gaming licence.

By registering an Account on the harta333 Platform, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should not use the harta333 Platform.

02Personal Data We Collect

harta333 collects the following categories of personal data from Members and Platform users:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification documents (e.g., Malaysian MyKad or passport) provided during account registration or KYC verification.
• Contact Data: Email address, Malaysian mobile number, and mailing address as provided during registration or account updates.
• Financial Data: Payment method details (e.g., e-wallet account identifiers, bank account details for FPX transactions), deposit and withdrawal transaction records, and account balance history. harta333 does not store full payment card numbers on its servers.
• Transaction Data: Complete records of all bets placed, games played, wins, losses, and bonus activities on the harta333 Platform.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, referring URL, and session data collected automatically when you access the Platform.
• Usage Data: Pages visited, features used, time spent on pages, search queries within the Platform, and betting or game preferences.
• Communications Data: Records of your communications with harta333 customer support, including live chat transcripts and email correspondence.

03How We Collect Your Data

harta333 collects personal data through the following methods:

• Direct submission: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access or interact with the Platform.
• Third-party sources: Data received from payment processors (e.g., FPX providers, Touch n Go, Boost, GrabPay) and identity verification service providers used in the KYC process.
• Regulatory and fraud prevention sources: In certain circumstances, harta333 may receive data about you from fraud prevention agencies, regulatory authorities, or credit reference agencies in connection with anti-money laundering obligations.

04Purpose of Processing

harta333 processes your personal data for the following purposes:

• To create, manage, and maintain your harta333 Account, including identity and age verification (21+).
• To process deposits, settle bets and game outcomes, and execute withdrawal requests to your registered payment method.
• To comply with anti-money laundering (AML), Know Your Customer (KYC), and counter-terrorism financing obligations imposed under applicable law and harta333's international gaming licence.
• To provide customer support through live chat and email, and to resolve disputes or complaints.
• To administer bonuses, promotions, and loyalty programmes, including verification of eligibility and tracking of wagering requirements.
• To enforce harta333's Terms & Conditions and Responsible Gaming Policy, including the application of self-exclusion, deposit limits, and account restrictions requested by Members.
• To detect, investigate, and prevent fraud, collusion, match-fixing, and other prohibited conduct on the Platform.
• To analyse usage patterns and improve the harta333 Platform, including personalising content and game recommendations.
• To send service-related communications, including account notifications, security alerts, and transaction confirmations.
• To send marketing communications regarding harta333 products and promotions, where you have provided consent or where permitted under applicable law.

05Legal Basis for Processing

harta333 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between harta333 and the Member, including account management, transaction processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including AML/KYC obligations, regulatory reporting requirements, and gaming licence conditions.
• Legitimate interests: Processing undertaken in pursuit of harta333's legitimate business interests, including fraud detection, platform security, and service improvement, where such interests do not override the fundamental rights of data subjects.
• Consent: Processing based on your freely given, specific, and informed consent, including for direct marketing communications. Consent may be withdrawn at any time by contacting harta333 support.

06Data Sharing & Disclosure

harta333 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. harta333 may share your personal data with the following categories of recipients in the circumstances described:

• Payment service providers: To process deposits and withdrawals via Touch n Go, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect. These providers process data only as necessary to execute payment instructions.
• KYC and identity verification providers: To fulfil age and identity verification obligations prior to account activation and withdrawal processing.
• Game content providers: Technical data necessary for the operation of live casino, slots, and esports betting products may be shared with certified game studio partners solely for game functionality purposes.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction — including gaming regulators, financial intelligence units, and law enforcement agencies.
• Fraud prevention and AML service providers: In connection with harta333's obligations to detect and prevent money laundering, fraud, and other financial crime.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform infrastructure vendors who process data on behalf of harta333 under binding data processing agreements.

All third parties with whom harta333 shares personal data are contractually required to maintain appropriate data security standards and to use the data only for specified, legitimate purposes consistent with this Privacy Policy.

07Data Retention

harta333 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. In practice, this means:

• Account data and KYC records are retained for a minimum of five (5) years following account closure, as required under AML and gaming regulations.
• Transaction records (deposits, withdrawals, bets, and game history) are retained for a minimum of five (5) years.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Technical and usage data collected via cookies and server logs is retained for up to thirteen (13) months from the date of collection.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with harta333's data destruction procedures.

08Cookies & Tracking Technologies

The harta333 Platform uses cookies, web beacons, and similar tracking technologies to enhance the user experience, maintain session integrity, and collect analytics data. The following types of cookies are used on the Platform:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, preferred sports markets, and display options.
• Analytics cookies: Used to collect aggregated information about how Members use the Platform, including pages visited, session duration, and navigation paths, to improve the harta333 user experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and credential-stuffing attempts.

You may adjust your browser settings to refuse or delete non-essential cookies at any time. Please note that disabling certain cookies may affect the functionality of the harta333 Platform. harta333 does not use third-party advertising cookies or retargeting pixels.

09Data Security

harta333 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the harta333 Platform.
• Encrypted storage of passwords using industry-standard bcrypt hashing — plain-text passwords are never stored.
• Restricted access controls ensuring that personal data is accessible only to authorised personnel with a legitimate business need.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Incident response procedures for the detection, reporting, and remediation of data security incidents.

Notwithstanding the foregoing, no method of electronic transmission or data storage is completely secure. harta333 cannot guarantee absolute security of your personal data and advises Members to maintain strong, unique passwords and to enable two-step verification where available.

10Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by harta333:

• Right of access: You may request a copy of the personal data harta333 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to harta333's legal obligations to retain certain data (e.g., AML/KYC records).
• Right to restrict processing: You may request that harta333 limit the processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to harta333.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact harta333 at [email protected]. harta333 will respond to all valid requests within 30 days. We may require identity verification before processing your request.

11Children's Privacy

The harta333 Platform is strictly intended for adults aged 21 years and above. harta333 does not knowingly collect personal data from individuals under the age of 21. If harta333 discovers that personal data has been collected from a person under 21, the Account will be immediately suspended, all deposits will be returned to the original payment method, and the personal data will be securely deleted from harta333's systems.

If you believe that a minor has registered an Account on the harta333 Platform, please contact support immediately at [email protected].

12Third-Party Links

The harta333 Platform does not contain links to third-party websites unrelated to the operation of the Platform. harta333 is not responsible for the privacy practices of any external websites, applications, or services. This Privacy Policy applies solely to data processing carried out by harta333 in connection with the operation of https://harta333.win.

13Changes to This Policy

harta333 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The date of the most recent revision will always be displayed at the top of this page. Where changes are material, harta333 will notify registered Members by email or through a prominent notice on the Platform prior to the changes taking effect.

Continued use of the harta333 Platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the revised policy, you should close your Account and cease using the Platform.

14Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which harta333 processes your personal data, please contact our data team:

• Email: [email protected]
• Live Chat: Available 24/7 from the harta333 Platform
• Response time: Within 24 hours for email; under 2 minutes for live chat

This Privacy Policy was last updated on 12 June 2026.