come33 Official Documents

Come33 Privacy Policy – Malaysia Member Personal Data Protection

Come33 cares about every member's privacy. This policy transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026

PDPA Compliance

Come33 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of member personal data management.

Important Note: By registering and using the come33 platform, you agree to the collection and use of your personal data as described in this Privacy Policy. Please read this document carefully in its entirety before using our services.

01 Introduction

Come33 ("we", "Platform") deeply values the privacy and trust placed in us by every registered member. We understand that the personal data you share with us is both valuable and sensitive. That is why we take a responsible and transparent approach in every aspect of data management — from how it is collected, used, and stored, to how it is protected.

This Privacy Policy is drafted in accordance with the provisions of the Malaysia Personal Data Protection Act 2010 (PDPA) and applies to all users who access or use the come33 platform, whether via website, mobile app, or any other related digital channel.

We are committed to never selling, renting, or trading your personal data to any third party for marketing purposes without your explicit consent. Your trust is our most valued asset, and we ensure every decision involving your data is made responsibly.

02 Personal Data We Collect

Come33 collects various types of personal data to enable us to provide a complete, secure, and personalized service to every member. The data we collect can be categorized into several main categories:

Data Category Type of Information Primary Purpose
Identity Data Full name, MyKad number, date of birth, gender Identity Verification & KYC
Contact Data Phone number, email address, residential address Communication & support
Financial Data Bank account number, bank name, transaction records Payment Processing
Technical Data IP address, device type, operating system, web browser Security & fraud detection
Usage Data Betting history, games played, active hours Personalisation & analytics
Communication Data Support chat logs, email history, feedback Service improvement

All data we collect is directly relevant to the provision of come33's services. We do not collect data beyond what is strictly necessary for the stated purposes — this is the principle of "minimum data collection" that we strictly adhere to.

03 How We Use Personal Data

The personal data we collect is used solely for legitimate and transparent purposes. Below is a full list of how come33 uses your data:

  • Account management: To create, verify, and maintain your member account, including the mandatory KYC process for all new members.
  • Transaction processing: To process deposits, withdrawals, and all financial transactions made through the come33 platform securely and accurately.
  • Platform security: To detect, investigate, and prevent any fraudulent activity, money laundering, or unauthorised access to member accounts.
  • Customer support: To provide effective assistance when you contact the come33 support team, including tracking the history of previous interactions.
  • Legal compliance: To fulfil the legal and regulatory obligations applicable to the operations of the come33 platform.
  • Experience personalisation: To recommend games, promotions, and relevant content based on your usage habits and preferences.
  • Service communications: To send important notifications regarding your account, transactions, security updates, and policy changes.
  • Analytics and improvement: To analyse aggregate usage patterns to help us improve the platform's design, performance, and features.
come33 will not use your personal data for any third-party marketing purposes without first obtaining your explicit consent.

04 Data Sharing With Third Parties

Come33 does not sell, rent, or disclose members' personal data to third parties for commercial purposes. However, there are limited situations where we need to share your data with certain parties in order to deliver our services properly:

  • Payment processors: Integrated payment service providers such as FPX, DuitNow, and e-wallet processors receive the transaction data necessary to process your deposits and withdrawals.
  • Technology service providers: Companies that provide technical infrastructure, server hosting, and cybersecurity services to come33 may have limited access to your data within the scope of their work.
  • Legal authorities: We will disclose required data to government authorities, regulatory bodies, or law enforcement agencies when mandated by law or court order.
  • Business partners: In the event of a takeover, merger, or sale of business assets, member data may be transferred to the new entity, subject to equivalent data protection terms.

All third parties involved in processing come33 member data are required to comply with strict security and confidentiality standards. We only share data that is strictly necessary and do not exceed the scope of the permitted purpose.

05 Data Storage & Security

Come33 continuously invests in robust security infrastructure to ensure your personal data is always protected against unauthorized access, disclosure, alteration, or destruction. The key security measures we employ include:

  • Personal data is encrypted using 256-bit SSL/TLS protocols both in transit and at rest on our servers.
  • A layered access control system ensuring that only authorised personnel can access sensitive member data within the scope of their responsibilities.
  • Regular security audits conducted by independent parties to identify and address any vulnerabilities in the system.
  • Intrusion detection systems (IDS) and enterprise-grade firewalls that monitor all inbound and outbound traffic in real time.
  • Automated data backups performed at regular intervals to a separate, secure server location to ensure rapid data recovery in the event of an incident.

Your personal data is retained for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. Once the lawful retention period expires, your data will be securely deleted or anonymised using irreversible methods.

Retention Period: Active account data is retained for the duration of the active account period plus 7 years after closure, in line with Malaysia's financial legal requirements.

06 Cookies & Tracking Technologies

Come33 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you visit our platform.

There are several types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how you use our platform — pages visited, time spent, and links clicked — to help us improve your user experience.
  • Functional Cookies: Saving your preferences such as language, text size, and display settings so we can provide a more personalised experience on your next visit.
  • Analytics Cookies: Used to understand platform usage patterns in an aggregated and anonymised form for the purpose of product and service improvement.

You can manage your cookie settings through your web browser preferences at any time. However, disabling essential cookies may affect your ability to fully use certain features of the come33 platform.

07 Your Rights as a Member

As a data subject under Malaysia's PDPA, you have specific rights regarding the personal data we hold. come33 respects and facilitates the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or outdated personal data.

Right to Restriction

You have the right to request restriction of your data processing under certain circumstances provided by law.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a machine-readable format and transfer it to another provider.

Right to Erasure

You have the right to request deletion of your data under certain circumstances, subject to our legal obligations.

To exercise any of the above rights, please contact the come33 support team via FAQ page us. We will process your request within 21 business days in accordance with the provisions of Malaysia's PDPA.

08 Child Data Protection

Come33 takes child protection extremely seriously. Our platform is strictly intended for users aged 18 and above only. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge — for example through registration using false information — we will immediately delete that data and close the relevant account without any compensation.

If you become aware that a child under the age of 18 has registered or used the come33 platform, please contact our support team immediately so that appropriate action can be taken.

09 Privacy Policy Amendments

Come33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant operational reasons. All amendments will be published on this page along with the most recent update date.

If we make material and significant changes to this Privacy Policy — particularly those that could significantly affect your rights or how we use your data — we will endeavour to notify you via a prominent notice on the platform or by email to the address registered to your account at least 14 days before such changes take effect.

Your continued use of the come33 platform following any amendments to the Privacy Policy constitutes your acceptance of the updated version. We therefore encourage you to review this page periodically.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how come33 handles your personal data, we encourage you to contact our team. We are committed to providing a clear and satisfactory response within a reasonable timeframe.

You can reach us through the following channels:

  • Privacy Email: [email protected]
  • Live Support: Via the live chat function on the come33 platform, available 24 hours a day, 7 days a week.
  • FAQ Page: come33.net/faq — for frequently asked questions that may already have ready answers.
We will acknowledge receipt of every privacy complaint within 3 business days and endeavour to resolve it within 21 business days in accordance with Malaysia's PDPA provisions.

Why Your Data Is Safe with come33

We don't just comply with the law — we go further to ensure your privacy is protected at all times.

256-bit SSL Encryption

All data transmitted between your device and come33's servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.

Full PDPA Compliance

The come33 Privacy Policy is drafted and regularly updated to ensure full compliance with Malaysia's Personal Data Protection Act 2010 — safeguarding your rights as a user.

Layered Access Controls

Only authorised come33 staff may access sensitive member data, and every access is automatically logged for audit and internal accountability purposes.

Regular Security Audits

Come33 conducts regular independent security audits to identify and address any system vulnerabilities before they can be exploited by unauthorized parties.

No Data Sales

Come33 has never and will never sell, rent, or trade members' personal data to advertisers or third parties for commercial gain.

Immediate Incident Notification

In the event of any security incident involving your data, come33 is committed to notifying you within 72 hours, in line with international best practices.


Join come33 — The Platform That Values Your Privacy

Your privacy is more than just a promise on paper. At come33, personal data protection is part of our culture and our commitment to every member.

Bahasa Melayu