b133 Privacy Policy

1. Introduction

b133 ("we", "us", "our") operates the online gambling platform accessible at b133.win and is the data controller responsible for personal data collected through that platform. This Privacy Policy describes how b133 collects, processes, stores, and protects personal data relating to registered players and visitors to the platform ("you", "your").

b133 processes personal data in accordance with applicable international data protection standards and in compliance with the anti-money laundering and know-your-customer regulatory obligations applicable to our operating jurisdiction. This Policy should be read alongside our Terms & Conditions, which govern your use of the b133 platform.

2. Personal Data We Collect

2.1 Registration Data

When you create a b133 account, we collect the following personal data:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Residential address;
• Email address;
• Phone number;
• Username and hashed password.

2.2 Identity Verification (KYC) Data

As part of our mandatory KYC process, we collect:

• Government-issued photo identification (Malaysian MyKad or passport);
• Proof of address (utility bill or bank statement, where required);
• Selfie photograph for identity confirmation;
• Payment method ownership documentation where applicable.

2.3 Transaction Data

b133 records all financial transactions associated with your account, including deposit amounts, dates, payment methods (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank), withdrawal requests, and bonus transactions. Transaction records are maintained in MYR.

2.4 Gaming Activity Data

We record your gaming history including games played, stakes placed, outcomes, session timestamps, and responsible gaming tool usage.

2.5 Technical Data

b133 automatically collects technical data when you access the platform:

Data Type	Purpose
IP address	Fraud prevention, geographic compliance
Device type and OS	Platform optimisation, security monitoring
Browser type and version	Compatibility and security
Session timestamps	Security monitoring, responsible gaming
Login location data	Fraud detection, account security alerts

3. How We Use Your Personal Data

b133 uses your personal data for the following purposes:

• Account management: Creating and maintaining your b133 account, processing login authentication, and managing account settings;
• Identity verification: Completing KYC checks in compliance with our regulatory obligations;
• Payment processing: Processing deposits and withdrawals in MYR;
• Fraud prevention and AML compliance: Monitoring transactions and account activity to detect and prevent fraud, money laundering, and other prohibited conduct;
• Customer support: Responding to support queries, complaints, and dispute resolution;
• Responsible gaming: Monitoring gaming activity to identify problem gambling patterns and enforcing player-set limits;
• Service improvement: Analysing aggregated and anonymised usage data to improve platform performance;
• Marketing communications: Sending promotional offers to players who have opted in to marketing communications. Players may opt out at any time via account settings.

4. Legal Basis for Processing

b133 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions, including account management and payment processing;
• Legal obligation: Processing required to comply with applicable AML, KYC, and regulatory requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights;
• Consent: Marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time.

5. Data Sharing & Third Parties

5.1 Permitted Disclosures

b133 does not sell or rent your personal data. We may share your data with the following categories of third party, solely to the extent necessary to operate the platform:

• Payment processors: Touch n Go, Boost, and banking partners (Maybank, CIMB, Public Bank) to process deposits and withdrawals;
• KYC/identity verification providers: Third-party identity verification services who process identification documents on our behalf under strict data processing agreements;
• Game providers: Licensed game studios who provide the games available on the b133 platform, who may receive session-level data to resolve game disputes;
• Regulatory authorities: Law enforcement agencies, financial intelligence units, and regulatory bodies where required by law or where disclosure is necessary to prevent fraud or money laundering.

5.2 Data Processing Agreements

All third-party service providers who process personal data on behalf of b133 are required to enter into data processing agreements that impose data protection obligations equivalent to or exceeding those described in this Policy.

6. Cookies & Tracking Technologies

b133 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us provide a functional and personalised experience.

Categories of cookies used by b133:

Cookie Type	Purpose	Duration
Essential	Session management, login authentication, security	Session
Functional	Language preferences, remember-me settings	Up to 30 days
Analytics	Aggregated platform usage analysis (anonymised)	Up to 12 months
Security	Fraud detection and bot prevention	Session to 7 days

Essential cookies cannot be disabled as they are required for the platform to function. You may manage non-essential cookies through your browser settings, though this may affect platform functionality.

7. Data Retention

b133 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy regulatory and legal obligations. The following retention periods apply as a general guide:

• Account data: For the duration of your account plus 5 years following account closure, to comply with AML record-keeping requirements;
• Transaction records: Minimum 5 years from the date of transaction, in compliance with financial record-keeping obligations;
• KYC documentation: Minimum 5 years following the end of the business relationship;
• Marketing data: Until opt-out, plus a reasonable period to process the opt-out request;
• Technical/log data: Up to 12 months from collection, unless required longer for security investigations.

8. Data Security

b133 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Security measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for all administrative system access;
• Regular security audits and penetration testing;
• Automated intrusion detection and anomalous activity monitoring.

No internet transmission is completely secure. While b133 takes every reasonable precaution to protect your data, we cannot guarantee absolute security against all threats. Players are encouraged to maintain strong, unique passwords and enable 2FA on their b133 accounts.

9. Your Data Protection Rights

Subject to applicable law and regulatory restrictions, you have the following rights in relation to your personal data held by b133:

• Right of access: Request a copy of the personal data b133 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where no longer required for its original purpose and where no legal retention obligation applies;
• Right to restrict processing: Request that b133 limit how your data is used in certain circumstances;
• Right to data portability: Request your personal data in a structured, machine-readable format;
• Right to object: Object to processing based on legitimate interests, including for direct marketing purposes.

To exercise any of these rights, contact b133 support via live chat or email at [email protected]. Requests will be acknowledged within 5 business days and processed within 30 days. Note that certain rights may be limited where b133 has a legal obligation to retain data.

10. Children & Minors

b133 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. All account registrations require confirmation of the 21+ age requirement, and age verification is enforced as part of our KYC process. If b133 discovers that personal data has been collected from a person under 21, that account will be closed immediately, and all personal data associated with it will be deleted or anonymised subject to any mandatory retention obligations under applicable AML regulations.

11. Policy Updates

b133 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. The "Last Updated" date at the top of this Policy will be revised accordingly. Where changes are material, b133 will notify registered players via email to their registered address. Continued use of the b133 platform following notification of a Policy update constitutes acceptance of the revised Policy.

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data b133 holds about you, please contact our Data Protection team:

Email: [email protected]

Live Chat: Available 24/7 via the b133 platform.

For formal data subject access requests, please include your full name, registered email address, and a description of the data you are requesting. Identity verification may be required before personal data is disclosed.