Privacy Policy cair33 —
Protection of Your Personal Data

Cair33 collects your personal information through several channels depending on your interaction with our platform. This collection is carried out transparently and solely for legitimate purposes as stated in this policy.

Information you provide directly:

• Full name, date of birth, and ID card or passport number upon account registration.
• Email address, mobile phone number, and residential address.
• Bank account details, digital wallet account numbers (Touch 'n Go, Boost), or crypto wallet addresses for deposit and withdrawal purposes.
• Identity verification documents (copies of ID card, utility bills) uploaded during the KYC process.
• Any information you provide to our customer support team during a live chat session or via email.

Information collected automatically:

• IP address, web browser type, operating system, and device information used.
• Activity log data including pages visited, access dates and times, and actions performed on the platform.
• General location information derived from your IP address.
• Technical performance and diagnostic data from the mobile app.

The information we collect is used responsibly for operational and service improvement purposes. Below is a summary of our data usage:

If you do not wish to receive marketing communications from us, you can unsubscribe at any time through your account settings or by contacting the cair33 support team.

Cair33 does not share, sell or disclose your personal information to third parties except in the following limited and strictly controlled circumstances:

• Payment service providers — payment gateway providers we use to process deposit and withdrawal transactions, subject to strict confidentiality agreements.
• KYC service providers — trusted and audited third parties that assist in the identity verification process, with access limited to only the data required.
• Relevant authorities — when required by law, court order, or a valid request from law enforcement agencies.
• Business transfer — in the event cair33 is involved in a merger, acquisition or asset sale, member information may be transferred as part of that transaction with reasonable prior notice to members.

Cair33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login sessions, security and navigation. These cookies cannot be disabled.
• Performance cookies — collects information about how you use the platform, helping us identify technical issues and improve site performance.
• Functional cookies — stores your preferences such as language, display settings and recent activity history for a more personalised experience.
• Analytics cookies — used to understand overall usage patterns for platform improvement purposes, without personally identifying you.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of cair33. Continued use of our platform is considered consent to the use of cookies as described above.

The security of your personal data is cair33's top priority. We implement multiple layers of technical and organizational protection to keep your data safe from unauthorized access, disclosure, alteration, or destruction.

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols for all communication between your device and our servers.
• Encryption of stored data — sensitive information such as passwords and KYC documents is stored in encrypted format using the latest encryption algorithms.
• Role-based access control (RBAC) ensuring staff can only access data necessary for their specific tasks.
• 24/7 system monitoring with an intrusion detection system (IDS) that actively identifies and blocks suspicious activity.
• Penetration testing and security audits conducted periodically by independent third parties.
• Encrypted data backups are stored at separate data center locations to ensure service continuity.

Cair33 retains your personal information for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. The general principles we follow are:

• Active account data — retained for as long as your account is active and for a specified period after account closure for the purpose of resolving any pending disputes.
• Financial transaction records — retained for a minimum of 7 years in compliance with applicable anti-money laundering (AML) legal requirements.
• KYC Documents — retained for a minimum of 5 years after the date of submission or account closure, whichever is later.
• Customer support communication logs — retained for 2 years for the purpose of complaints resolution and service improvement.
• Anonymous analytics data — may be retained indefinitely as it contains no information that can personally identify you.

Once the retention period expires, your data will be securely deleted or fully anonymised in accordance with established procedures.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and cair33's internal policies, you have the following rights regarding your personal data:

Cair33 services are exclusively for individuals aged 18 years and above. Our platform does not knowingly collect, use, or disclose personal information of individuals under the age of 18.

If we discover that we have collected personal information from someone under the age of 18, we will take immediate steps to delete that information from our systems and close the relevant account.

Parents or guardians who believe their child or ward may have registered a cair33 account are requested to contact us immediately so that appropriate action can be taken.

The cair33 platform may contain links to third-party websites or services such as game providers, payment gateways, or social media platforms. This Privacy Policy applies to cair33 only and does not cover the privacy practices of any third party.

We encourage you to read the privacy policy of every third-party platform you visit. cair33 is not responsible for the content, privacy practices, or policies of any third-party websites outside our control.

Cair33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Members will be notified of any material changes via:

• Notices prominently displayed on the cair33 platform homepage.
• Notifications sent to your registered email address at least 7 days before changes take effect.
• Push notifications via the cair33 mobile app for important changes.

The "Updated" date at the top of this page will always reflect the latest version of our Privacy Policy. Continued use of cair33 services after any changes take effect will be considered your acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the cair33 Data Protection Officer (DPO) team is ready to assist you.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon in the corner of the platform.
• Email: [email protected] (response within 1–2 business days)
• FAQ: Visit our FAQ page for answers to frequently asked questions.

We are committed to addressing every privacy-related enquiry seriously and within a reasonable timeframe. Your satisfaction and trust are our priority.