1 Introduction
rbig33 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at https://rbig33.cam. We are committed to protecting the privacy and personal information of every individual who visits, registers with, or interacts with the rbig33 platform ("you", "User", "Player").
This Privacy Policy describes the types of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, the security measures we employ to protect it, and the rights available to you in respect of your personal information.
This Policy applies to all Users globally, including players based in Malaysia. Malaysian users should note that rbig33 operates under international licensing frameworks and that separate data protection obligations may apply under Malaysian domestic law, including the Personal Data Protection Act 2010 (PDPA Malaysia). rbig33 handles personal data in a manner consistent with the principles set out in that Act.
📌 Note: This Privacy Policy should be read alongside the rbig33 Terms & Conditions, which govern the overall relationship between you and the platform.
2 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly.
Any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
rbig33 — the entity that determines the purposes and means of processing your personal data.
A third party that processes personal data on behalf of rbig33 under contractual instruction.
A small text file placed on your device by a website to retain session or preference information across visits.
Know Your Customer — identity and address verification procedures mandated by rbig33's licensing and anti-money laundering obligations.
3 Personal Data We Collect
3.1 Registration Data
When you create an rbig33 account, we collect information necessary to establish and administer your account, including your full legal name, date of birth, residential address, email address, mobile telephone number, and preferred currency (MYR by default for Malaysian users).
3.2 Identity Verification (KYC) Data
To comply with our licensing obligations and anti-money laundering requirements, we collect and verify government-issued identity documents. For Malaysian users, this typically means a copy of your MyKad (National Identity Card) or passport and a recent selfie photograph. This data is used exclusively for identity verification and fraud prevention.
3.3 Financial Data
When you make a deposit or withdrawal, we collect transaction-related information including your payment method identifier (e-wallet account number, bank account details, or cryptocurrency wallet address), transaction amounts in MYR, and timestamps. We do not store full payment card numbers on our own servers — card data is handled exclusively by PCI-compliant payment processors.
3.4 Usage and Activity Data
We collect information about how you interact with the rbig33 platform, including login times, pages visited, game sessions, wager history, betting preferences (such as sports markets followed, including Liga Super Malaysia and EPL fixtures), and session durations. This data supports account management, responsible gambling monitoring, and platform improvement.
3.5 Technical Data
We automatically collect certain technical data when you access rbig33, including your IP address, device type and model, operating system, browser type and version, and general geographic location (country or region level). This data is used for security, fraud detection, and platform performance purposes.
3.6 Communications Data
If you contact our support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages and associated account references. This data assists us in resolving disputes and improving service quality.
✅ Our commitment: rbig33 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or genetic/biometric data except where strictly required for KYC purposes under applicable law.
4 How We Use Your Personal Data
rbig33 processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your rbig33 account, including authentication, security, and communication. |
| Transaction Processing | Processing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other accepted payment methods. |
| Legal Compliance | Fulfilling obligations under our international gaming licence, anti-money laundering (AML) requirements, and applicable data protection laws including Malaysia's PDPA 2010. |
| Fraud & Security | Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, and other prohibited activities. |
| Responsible Gambling | Monitoring account activity for signs of problem gambling, enforcing self-exclusion arrangements, and administering deposit and session limits. |
| Customer Support | Responding to queries, complaints, and technical issues submitted by Users through live chat, email, or other support channels. |
| Marketing Communications | Sending promotional offers, bonus notifications, and platform updates where you have provided consent or where a legitimate interest applies. |
| Platform Improvement | Analysing aggregated usage data to improve site navigation, game performance, payment flow, and overall user experience. |
5 Legal Bases for Processing
rbig33 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil our obligations to you under the rbig33 Terms & Conditions — including account administration, payment processing, and customer support.
- Legal obligation: Processing required to comply with our licensing conditions, anti-money laundering obligations, and applicable data protection laws.
- Legitimate interests: Processing that serves rbig33's legitimate business interests — such as fraud prevention, platform security, and product improvement — where those interests are not overridden by your rights.
- Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing undertaken prior to withdrawal.
6 Data Sharing & Third Parties
6.1 Service Providers
rbig33 shares personal data with carefully selected third-party service providers who process data on our behalf under strict contractual data processing agreements. These include payment processing partners (e.g., operators of the FPX gateway, DuitNow infrastructure, and e-wallet integrations), identity verification providers, cloud hosting and infrastructure services, and customer communication tools.
6.2 Regulatory and Legal Authorities
rbig33 may disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies, or courts of law where required to do so by applicable law, valid legal process, or a binding regulatory order. We will endeavour to notify affected users of such disclosures where legally permitted to do so.
6.3 Business Transfers
In the event of a merger, acquisition, asset sale, or other corporate restructuring involving rbig33, personal data held by the Company may form part of the transferred assets. Affected users will be notified prior to any such transfer and will be offered the option to request deletion of their data where technically and legally feasible.
6.4 No Sale of Personal Data
rbig33 does not sell, rent, or trade personal data to third-party marketers or data brokers under any circumstances. Your personal information is not a commercial commodity at rbig33.
⚠️ Payment data: When you deposit via Malaysian payment methods such as Maybank FPX, CIMB Clicks, Touch 'n Go eWallet, or Boost, transaction data is transmitted to the respective payment provider in accordance with their own privacy policies. rbig33 does not receive or store your full banking credentials.
7 Cookies & Tracking Technologies
7.1 What Are Cookies
Cookies are small text files stored on your device when you visit rbig33. They allow the platform to recognise your browser, maintain your session state, remember preferences, and collect analytical data to improve the platform experience.
7.2 Types of Cookies Used
- Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens and security identifiers. They cannot be disabled without impairing platform functionality.
- Functional cookies: Enable personalised features such as language preferences, stored display settings, and responsiveness to your device type.
- Analytical cookies: Help rbig33 understand how users navigate the platform — including which game categories attract the most interest, how payment flows are used, and where users encounter difficulties. Data is processed in aggregated, anonymised form.
- Marketing cookies: Used to deliver relevant promotional content to users who have consented to receive marketing communications. These cookies do not track activity across unaffiliated third-party websites.
7.3 Managing Cookies
You can manage cookie preferences at any time through your browser settings. Disabling non-essential cookies may affect certain features of the rbig33 platform. Most modern browsers allow you to view, block, or delete cookies under their privacy or security settings panel.
8 Data Retention
rbig33 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law. The following general retention periods apply:
- Account and registration data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure to meet anti-money laundering and licensing record-keeping obligations.
- Transaction records: Retained for a minimum of seven (7) years in accordance with standard financial compliance requirements.
- KYC documentation: Retained for at least five (5) years post-account closure or as required by the applicable licensing authority.
- Support communications: Retained for three (3) years from the date of the interaction, or longer where related to an unresolved dispute.
- Marketing preferences: Retained until you withdraw consent or request deletion, whichever occurs first.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with rbig33's internal data lifecycle management procedures.
9 Security Measures
rbig33 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the rbig33 platform.
- Encrypted storage of sensitive personal data at rest, using industry-standard encryption algorithms.
- Role-based access controls ensuring that personal data is accessible only to rbig33 personnel with a legitimate operational need.
- Regular security assessments, vulnerability testing, and penetration testing of the platform infrastructure.
- Multi-factor authentication requirements for privileged access to internal data systems.
- Monitoring and logging systems to detect and respond to suspicious access patterns or data breach indicators in near real-time.
While rbig33 takes reasonable precautions to protect personal data, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach affecting your personal information, rbig33 will notify you in accordance with applicable legal requirements.
🔐 Your responsibility: You are responsible for maintaining the confidentiality of your rbig33 account credentials. We strongly recommend enabling two-factor authentication and using a unique, strong password that is not shared with any other service. If you suspect your account has been compromised, contact support immediately.
10 International Data Transfers
rbig33 operates under international licensing and may use service providers whose servers are located outside Malaysia. When personal data is transferred to a country that does not offer the same level of data protection as Malaysia, rbig33 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — before any such transfer takes place.
Where you are located in Malaysia, your data may be processed on servers based in another jurisdiction. rbig33 takes steps to ensure that any such international processing meets standards consistent with Malaysia's Personal Data Protection Act 2010 and the principles of the platform's international licensing framework.
11 Exercising Your Data Rights
To exercise any of the data rights described in this Policy — including access, rectification, erasure, restriction of processing, data portability, or objection — please contact the rbig33 Data Protection team through one of the channels listed in Section 14.
When submitting a data rights request, please include:
- Your full registered name and email address.
- A clear description of the specific right you wish to exercise and the data concerned.
- For erasure or portability requests, confirmation that you understand the practical implications (e.g., account closure may be required for full erasure).
rbig33 will acknowledge your request within five (5) business days and will endeavour to fulfil legitimate requests within thirty (30) calendar days. Complex requests or those involving large volumes of data may require additional time, in which case you will be informed of the expected timeline.
rbig33 reserves the right to decline requests that are manifestly unfounded, excessive, or in conflict with our legal obligations (such as mandatory data retention requirements under anti-money laundering law).
12 Children and Minors
The rbig33 platform is strictly intended for adults aged 21 years and above. rbig33 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has registered on the rbig33 platform or submitted personal data without your knowledge, please contact us immediately using the details in Section 14 so that we can investigate and take appropriate action.
🔞 Age enforcement: rbig33 applies KYC verification to confirm the age and identity of all registered players prior to processing any withdrawal. Accounts found to belong to underage individuals will be suspended and all balances held pending parental or guardian notification.
13 Amendments to This Policy
rbig33 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made to how we collect or use personal data, we will provide notice to registered users via the email address associated with their account or through a prominent on-site notification, at least seven (7) days prior to the revised Policy taking effect.
Minor updates — such as corrections of typographical errors, clarifications that do not change the substance of the Policy, or updates required urgently for legal compliance — may take effect immediately upon publication. The "Effective Date" at the top of this page will always reflect the date of the most recent revision.
Your continued use of the rbig33 platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the platform and request account closure.
14 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by rbig33, please contact us through the following channel:
- Email (plain text — not a clickable link): [email protected]
- Live Chat: Available 24/7 directly on the rbig33 platform
- Response time: 3–5 minutes average via live chat; email responses within 24 hours
- Support languages: English · Bahasa Melayu · 中文
When contacting us regarding a data-related matter, please reference "Privacy Policy — Data Rights Request" in your message subject so that it can be routed to the appropriate team promptly.
🔗 Related policies: This Privacy Policy forms part of the overall legal framework governing your use of rbig33 alongside the Terms & Conditions and Responsible Gambling page. We encourage all users to read each document in full.