Security & Privacy

Privacy Policy Goll33 — Your Data Protection Is Our Priority

Goll33 is committed to protecting the privacy and security of your personal data. This document transparently explains how we collect, use, store, and safeguard your information.

Updated: January 2026  |  Version 2.5

Commitment Privacy Us

Six core principles that underpin how goll33 manages your data.

256-bit SSL Encryption

All data transmitted between your device and goll33 servers is protected with 256-bit SSL encryption, ensuring your sensitive information cannot be intercepted by any third party.

Data Not Sold

Goll33 has never sold and will never sell your personal information to any third party for commercial purposes. Your data belongs to you — we only use it to improve your experience.

Secure Storage

All data is stored on servers protected by layered firewalls, strict access controls, and round-the-clock security monitoring. Data backups are performed automatically to prevent information loss.

Restricted Access

Only authorised goll33 staff may access users' personal data, and only when necessary for operational or customer support purposes. All access is logged and monitored.

PDPA Compliance

Goll33 complies with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to access, correct, and request the deletion of your personal data at any time.

Notification Controls

You have full control over your communication preferences. Choose to receive or opt out of marketing notifications, promotional emails, and SMS messages through your account settings.

01 Introduction

Welcome to the goll33 platform. This Privacy Policy explains in detail how goll33 — the owner and operator of an online gaming platform in goll33.app — collect, use, disclose, and protect your personal information when you use our website, mobile app, or any services we offer.

By registering or using the goll33 platform, you agree to the collection and use of your information as described in this policy. If you do not agree with any part of this policy, you should not use our platform. We encourage you to read this document carefully and contact our support team if anything is unclear.

This Privacy Policy applies to all users of the goll33 platform — whether you access it via web browser, Android app, or iOS app. It covers all information you provide directly to us, information collected automatically during use, and information obtained from legitimate third-party sources.

Our commitment: goll33 has never sold, rented, or traded your personal data to any external party for marketing or commercial purposes.

02 Information We Collect

To provide a safe, personalised, and seamless gaming experience, goll33 collects the following categories of information:

A. Information You Provide Directly

  • Registration Information: Full name, date of birth, identification card number, email address, phone number, and password.
  • KYC Information: Copies of identity documents (MyKad, passport), an identity verification selfie, and proof of address such as a utility bill or bank statement.
  • Financial Information: Bank account number, account holder name, and bank name for deposit and withdrawal processing purposes.
  • Communications: Messages you send to the support team, feedback you provide, and records of live chat interactions.

B. Information Collected Automatically

  • Technical Data: IP address, web browser type, operating system version, device model, and screen resolution.
  • Usage Data: Pages visited, time spent on each page, games played, total wagering amount, and wins.
  • Location Data: General geographic location based on your IP address for legal compliance verification purposes.
  • Cookies & Tracking: Session data, user preferences, and authentication tokens stored in your browser.

C. Information From Third Parties

  • Identity verification from registered and accredited KYC service providers.
  • Payment verification information from approved payment processors.
  • Blacklist screening data from financial authorities for anti-money laundering (AML) purposes.
Data Category Purpose of Collection Legal Basis
Identity Data Account verification, KYC, fraud prevention Legal obligation, contract
Financial Data Deposit & withdrawal processing Contract performance
Technical Data Security, fraud detection, optimisation Legitimate interest
Usage Data Service improvement, responsible gaming Legitimate interest, consent
Marketing Data Promotional communications & personalised offers Your consent

03 How We Use Your Data

Goll33 uses the information collected for the following purposes, all within the bounds permitted by Malaysian law and sound data protection principles:

  • Account Management: Create and manage your account, process registrations, and verify your identity through the KYC process.
  • Transaction Processing: Securely and accurately process deposits, withdrawals, and all financial activities related to your account.
  • Platform Security: Detect and prevent fraudulent activity, money laundering, unauthorized access, and other security threats.
  • Customer Support: Responding to enquiries, resolving technical issues, and providing the necessary assistance via live chat or email.
  • Service Improvement: Analyze usage patterns to improve platform design, game performance, and the overall user experience.
  • Responsible Gaming: Monitoring gameplay patterns to identify users who may require assistance related to responsible gaming.
  • Marketing Communications: Send offers, promotions, and the latest updates from goll33 — only with your explicit consent.
  • Legal Compliance: Meeting the reporting and compliance requirements mandated by Malaysian law, including AML and KYC requirements.

goll33 does not use your data to make automated decisions that have a material effect on you without human intervention, except in cases of automated fraud detection where immediate action is required to protect the security of your account.

04 Information Sharing

Goll33 does not disclose your personal information to third parties except in the following clearly defined circumstances:

Trusted Service Providers

We work with selected third-party service providers to help operate our platform, including:

  • Licensed payment processors and payment gateways in Malaysia.
  • Identity verification (KYC) service providers that are registered and PDPA-compliant.
  • Cloud hosting and data security service providers.
  • Live chat and customer support service providers.

All of these service providers are bound by strict data protection agreements and are only permitted to use your information for the specific purposes we have defined.

Legally Mandated Disclosure

Goll33 may be required to disclose your information to the relevant authorities when mandated by law, court order, or direction from a legitimate government agency in Malaysia. This includes:

  • Financial crime investigations by the police or Bank Negara Malaysia.
  • Compliance with suspicious transaction reporting requirements under the Anti-Money Laundering Act.
  • Response to valid court orders or legal processes.

In all cases of disclosure to authorities, goll33 will only disclose the minimum necessary information and will endeavour to notify you of such disclosure where permitted by law.

05 Cookies & Tracking Technologies

The goll33 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions smoothly. The following are the types of cookies we use:

Required Cookies (Mandatory)

These cookies are essential for the basic functions of the platform and cannot be disabled. They include login session tokens, language preferences, and security settings. Without these cookies, the platform cannot function properly.

Performance & Analytics Cookies

We use internal analytics tools to understand how users interact with our platform — which pages are visited most, where users encounter difficulties, and how the navigation flow can be improved. This data is collected in aggregate and cannot be used to identify you as an individual.

Functional Cookies

These cookies remember your preferences such as display theme, game preferences, and account settings so you do not need to reconfigure them each time you log in.

Security Cookies

Used to detect suspicious activity, prevent CSRF (Cross-Site Request Forgery) attacks, and ensure that every login session is valid and secure.

You can manage or delete cookies through your web browser settings at any time. However, disabling certain cookies may affect platform functionality. For guidance on managing cookies, refer to your browser's help section.

06 Data Security

Goll33 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse:

  • Data Encryption: All communications between your device and goll33 servers are secured using TLS 1.3 protocol with AES-256 encryption.
  • Two-Factor Authentication (2FA): We provide 2FA options for all user accounts to prevent unauthorised access even if your password is compromised.
  • 24/7 Monitoring: An automated security monitoring system operates around the clock to detect and respond to threats in real time.
  • Penetration Testing: goll33 conducts regular security audits by independent security experts to identify and patch system vulnerabilities before they can be exploited.
  • Internal Access Controls: Access to user data by goll33 staff is restricted on a need-to-know basis and fully logged for audit purposes.
  • Secure Backup: Data is automatically backed up to a separate secure location, ensuring service continuity and data recovery in the event of an incident.

While goll33 takes all reasonable precautions, no security system is entirely foolproof. In the event of a data breach affecting your rights and freedoms, we will notify you within the timeframe required by applicable law.

If you suspect suspicious activity on your account or discover a security vulnerability on our platform, please contact our security team immediately at [email protected].

07 Your Rights Under the PDPA

As a user of the goll33 platform based in Malaysia, you are protected under the Personal Data Protection Act 2010 (PDPA) and have the right to:

Right to Access

Request a copy of all personal data that goll33 holds about you at any time.

Right to Rectification

Request the correction of any inaccurate or outdated information in your records.

Right to Erasure

Request the deletion of your personal data when it is no longer needed for its original purpose.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Request your data in a structured, machine-readable format for transfer.

Right to Restrict Processing

Request that we restrict how your data is processed under certain circumstances.

To exercise any of the above rights, please contact the goll33 privacy team by email at [email protected] with the subject line "PDPA Privacy Request". We will process your request within thirty (30) business days. In complex cases, this period may be extended by up to sixty (60) days with prior notification.

Some deletion requests or processing restriction requests may not be fully fulfilled if the data in question is required for compliance with legal obligations, dispute resolution, or the enforcement of agreements.

08 Data Retention

Goll33 only retains your personal data for as long as necessary for the purposes stated in this policy, or as required by Malaysian law. The following are our retention period guidelines:

Data Type Retention Period Reason
Active Account Data For as long as the account is active Continuous service delivery
Transaction Records 7 years after transaction Compliance with Malaysian financial laws
KYC Documents 5 years after account closure AML & legal requirements
Communication Logs 3 years Dispute resolution
Technical & Log Data 12 months Security & fraud detection
Marketing Data Until consent is withdrawn Based on your consent

When data is no longer required, it will be securely deleted or anonymised using procedures that ensure it cannot be recovered. Anonymised data may be retained indefinitely for analytics and service improvement purposes.

09 Children's Privacy

The goll33 platform is exclusively for adult users aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Goll33 implements age verification measures during the registration process to prevent underage users from signing up. Should we discover that we have inadvertently collected information from a person under the age of 18, we will take immediate action to delete that information and close the account in question.

If you believe a minor under the age of 18 has registered an account on the goll33 platform, please contact us immediately at [email protected] so we can take the appropriate action.

10 Privacy Policy Amendments

Goll33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. The "Updated" date at the top of this page will always reflect the date of the most recent amendment.

For amendments deemed material — such as significant changes to how we use your data or new rights you are entitled to — goll33 will notify you through:

  • In-account notification upon your next login.
  • Email to the address registered on your account.
  • A prominent notification banner on the goll33.app homepage.

Continued use of the goll33 platform after a policy amendment is published will be considered your acceptance of the updated policy. If you do not agree with the changes, you may contact us to process the closure of your account.

We recommend that you save a copy of this policy for your personal reference and review this page periodically, especially before making any significant financial transactions.

11 Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us:

  • Privacy Email: [email protected] (subject line: "Privacy Enquiry")
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the goll33 platform.
  • FAQ: Visit page FAQ us for answers to general privacy-related questions.

We are committed to responding to all privacy-related enquiries within three (3) business days. For formal requests under the PDPA, we will provide a written response within thirty (30) business days as required by law.

Goll33 has appointed an internal Data Protection Officer responsible for ensuring PDPA compliance across the organisation. All serious complaints or concerns regarding data protection may be referred directly to them via the same email channel.

Join goll33 Today

Privacy Protected, Games More Secure

Register a goll33 account today and enjoy a safe, transparent, and exciting online gaming experience. Your data is fully protected — we guarantee it.

Download the goll33 app — Get it here

FAQ Privacy

Answers to frequently asked questions about privacy and data security at goll33.

Not at all. goll33 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is used solely for platform operations and legal compliance as stated in this Privacy Policy.

All your financial information is protected with 256-bit SSL encryption during transmission. Financial data is stored on separate servers with stringent access controls. goll33 works with licensed payment processors that comply with PCI-DSS security standards to ensure every deposit and withdrawal transaction is processed securely.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA. Submit your request to [email protected] with the subject line "Data Deletion Request". Please note that certain data may need to be retained for a specific period to fulfil legal obligations, such as financial transaction records which must be kept for seven years.

When your account is closed, your personal data will enter a defined retention phase according to data type. Transaction records and KYC documents will be retained for the legally required period before being securely deleted. Data no longer needed for legal purposes will be deleted or anonymised within 90 days of account closure.

You can unsubscribe from goll33 marketing emails at any time in two ways: (1) Click the "Unsubscribe" link at the bottom of any marketing email you receive, or (2) Log in to your account and go to Settings > Communication Preferences to customise the types of notifications you wish to receive. Your request will be processed within 5 business days.
Bahasa Melayu