Rush333 Privacy Policy – Data Protection & Privacy for Malaysian Players

This Privacy Policy explains how rush333 ("Platform", "We") collect, use, store, protect and disclose the personal information you provide to us when using the rush333 platform's services. This Policy applies to all users who access or register an account on the rush333 website, including players using Sports Betting, online casino, roulette, baccarat, slots and other games available on our platform.

By registering an account rush333 or using any of our services, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. This policy should be read alongside rush333's Terms & Conditions, as both documents form part of the complete platform usage agreement.

Rush333 committed to complying with all relevant data protection laws applicable to our operations. We take a transparent and responsible approach to every aspect of user data management — not merely to meet compliance requirements, but because we believe the trust of our members is the most valuable asset we have.

Rush333 collects various types of information to enable us to provide safe, fair, and fully functional betting and casino services. The data we collect can be grouped into three main categories:

A. Information You Provide Directly

• Full name as shown on your MyKad or valid identification document
• An active Malaysian mobile number
• A valid email address
• Date of birth for age eligibility verification
• Account password (stored in encrypted form — not readable by rush333 staff)
• Payment method details — Malaysian eWallet or bank account numbers used for deposits and withdrawals
• Identity documents (MyKad or passport) submitted upon request for identity verification or AML compliance purposes
• Communication information — the content of any enquiries, complaints or feedback you submit to the support team rush333

B. Information Collected Automatically

• Your device's IP address when accessing the rush333 platform
• Device type, operating system, and web browser version used
• Platform usage data — pages visited, time spent, features used
• Betting and gaming activity data — wagers placed, outcomes, deposit and withdrawal amounts
• Login and logout session logs, including timestamps and approximate location
• Cookie data and similar tracking technologies (see Section 6)

C. Information from Third-Party Sources

• Identity verification data from KYC (Know Your Customer) service providers, used to verify the information you have submitted
• Information from payment service providers regarding the status and confirmation of your eWallet or FPX transactions
• Information related to anti-money laundering (AML) compliance from legally authorised databases

Personal data collected by rush333 used solely for purposes related to delivering a safe, fair, and high-quality platform service to you. The following are the specific purposes for which data is used:

• Account management: Creating and maintaining your rush333 account, verifying your identity, processing logins, and keeping your account secure.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and processing winning withdrawals to your Malaysian bank account or eWallet within 3–5 minutes.
• Provision of betting and casino services: Allows you to place sports bets (Malaysia Super League, EPL, BWF badminton, cricket, esports), play casino games (roulette, baccarat, blackjack, slots, table games), and access all rush333 platform features.
• Legal and regulatory compliance: Complying with anti-money laundering (AML) requirements, age verification (18+), tax compliance and other reporting obligations required by law.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-account usage, bonus abuse, and other security threats to the rush333 platform and its members.
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance via live chat and email, 24 hours a day.
• Service communications: Sending important notices about your account, changes to terms, security updates and promotional information (with your consent).
• Platform improvement: Analysing usage data (in aggregated, non-identifiable form) to improve the features, performance and overall user experience of the rush333 platform.
• Loyalty programme and promotions: Managing the rush333 VIP programme, calculating bonus and promotion eligibility, and tracking member progress within the loyalty programme.

Rush333 does not use your data for purposes unrelated to platform operations without first obtaining your additional consent.

Rush333 does not sell, rent, or trade your personal data to any third party for their own marketing or business purposes. These are our core commitments and are non-negotiable.

However, there are limited situations where rush333 may need to share certain data with specific third parties for legitimate operational purposes:

• Payment service providers: Payment gateways and eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u and CIMB Clicks) receive only the transaction details necessary to process your payment. These providers are bound by strict confidentiality terms.
• KYC and identity verification providers: Third-party services used to verify your identity during registration or when required for AML compliance. Only the minimum data necessary for verification is shared.
• Game software providers: Casino game providers that supply roulette, slots, baccarat, and table games to the rush333 platform may process game session data necessary for their operation. They do not receive users' personally identifiable information.
• Legal requirements: Rush333 will disclose data when required by law, court order or direction from a lawful authority — such as anti-money laundering investigations or related criminal investigations.
• Business transfer: In the event of a company merger, acquisition or asset transfer, user data may be transferred to the new entity, provided that entity maintains data protection standards equivalent to those set out in this Policy.

The personal and financial data security of our members is our highest priority rush333. We invest in the latest security technologies and procedures to ensure your information remains protected at all times.

• 256-Bit SSL Encryption: All data transmitted between your device and rush333 servers is protected by 256-bit Transport Layer Security (TLS) encryption — the same standard used by major Malaysian banking institutions.
• Hashed password storage: Your account password is never stored in plain text. We use strong cryptographic hashing algorithms, meaning even rush333 staff are unable to read your password.
• Two-factor authentication (2FA): An additional security layer available for all rush333 accounts. We strongly encourage all members to enable 2FA to protect their accounts from unauthorised access.
• 24-hour suspicious activity monitoring: Rush333's automated security system continuously monitors login patterns and account activity. Any unusual activity will trigger an immediate security review.
• Secure servers with strict access controls: User data is stored on servers protected by multiple layers of strict physical and digital access controls. Only authorised personnel with a legitimate business need may access user data, and all access is logged and audited.
• Regular penetration testing: Rush333 conducts regular penetration testing to identify and patch any system vulnerabilities before they can be exploited.
• Secure data backups: Critical data is regularly backed up to a separate secure location to ensure recovery is possible in the event of a system failure.

That said, no online security system can guarantee 100% perfect protection. You also play an important role in keeping your account safe — never share your password, use a strong and unique password, and enable 2FA. Contact our support team rush333 immediately if you suspect your account has been accessed without your authorisation.

Platform rush333 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage for ongoing improvement.

Types of cookies we use:

• Session cookies (required): Required to maintain your login session, ensure platform security, and keep core features functioning properly. These cookies cannot be disabled without affecting the basic functionality of the rush333 platform.
• Preference cookies: Stores your preferences such as language, favourite bet limits, and display settings to deliver a more personalised experience each time you log in to rush333.
• Analytics cookies: Collects aggregated data on how users interact with the rush333 platform — most visited pages, time spent, navigation patterns, and technical issues. This data is used to improve the platform and does not identify individual users.
• Security cookies: Helps detect and prevent fraudulent activity, suspicious login attempts, and other security threats to your account and the rush333 platform.

You can manage or delete cookies at any time through your web browser settings. However, disabling certain cookies may affect the functionality or your experience on the platform. rush333. Session login cookies, for example, are required to maintain the security of your session while you play.

Rush333 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable law. The following are general guidelines on retention periods for the various types of data:

• Active account data: For the duration your account remains active, plus any additional period required after account closure to resolve outstanding claims, disputes, or compliance obligations.
• Financial transaction records: A minimum of seven (7) years from the date of the transaction, in line with the financial and tax compliance requirements applicable to the rush333 platform.
• Customer support communication data: Three (3) years from the date of last interaction, to allow for historical reference if needed to resolve future disputes.
• Gaming and betting activity logs: One (1) to three (3) years depending on the data type and operational requirements, for the purposes of dispute resolution, auditing, and system improvement.
• KYC documents and identity verification: For the period required by applicable AML compliance obligations, typically between five (5) and seven (7) years from the date of verification or account closure.
• Security log data: Between six (6) months and two (2) years depending on the log type, for the purposes of detecting and investigating security incidents.

Once the relevant retention period has expired and there is no further legal or operational requirement to retain the data, rush333 will securely delete or anonymise your personal data using appropriate methods to ensure it cannot be recovered.

As a platform member rush333, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of access: You have the right to request a copy of the personal data we hold about you. Rush333 will provide that data in a readable format within a reasonable timeframe upon receipt of a valid request.
• Right to rectification: If personal data held by rush333 about you is inaccurate or out of date, you have the right to request a correction. Some information can be updated directly through your account settings, while other changes may require identity verification.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. However, this right has limitations — rush333 may need to retain certain data to meet legal obligations or to defend against legitimate legal claims.
• Right to restrict processing: You may request that rush333 restrict how we use your data in certain circumstances — for example, while a dispute about data accuracy is ongoing or while you are objecting to data processing.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time, and rush333 will cease such processing immediately upon request.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format to facilitate transfer to another service provider, within reasonable technical limitations.

To exercise any of the above rights, please contact the support team rush333 via live chat or email at support@rush333.xyz. We will process your request within a reasonable timeframe and may ask for appropriate identity verification before acting on requests involving data access or changes.

Platform rush333 is intended solely for adults aged 18 and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 18.

All prospective users are required to confirm they are 18 years of age or older at the time of registration. Rush333 conducts periodic additional age verification and reserves the right to request proof of age (such as a MyKad or passport) from any user at any time.

In the event that rush333 finds that personal data belonging to a minor has been collected without our knowledge through dishonest registration, we will take immediate action to delete that data and close the associated account. If you are a parent or guardian and suspect that a child under 18 has registered or used the rush333 platform, please contact us immediately at support@rush333.xyz or via live chat.

This is part of the commitment rush333 towards responsible gaming and the protection of vulnerable individuals in our community.

Rush333 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements in how we protect user data.

Any material amendments that affect how we use or disclose your personal data will be communicated to you at least seven (7) days before taking effect, via an email notice sent to your registered address and/or a notice displayed within the platform. rush333 while you are logged in.

Non-material amendments — such as spelling corrections, language clarifications, or formatting changes that do not alter substantive rights or obligations — may take effect immediately upon updating the date shown at the top of this document. Continued use of the platform rush333 after the notice of amendment is considered acceptance of the amended terms.

You are encouraged to review this Privacy Policy periodically to ensure you remain informed of our latest practices rush333 regarding the protection of your data. This current version of the Privacy Policy takes effect from 1 January 2026.

If you have any questions, concerns, or requests regarding this Privacy Policy or how rush333 handling your personal data, we encourage you to reach out to us through the following channels:

• Live Chat: Available 24 hours within the rush333 platform — the fastest way to get a response. Please state that your enquiry relates to data privacy so it can be routed to the appropriate team.
• Email: support@rush333.xyz — Please include the subject line "Data Privacy Enquiry" to help us process your request faster. We will respond within 48 business hours.

For formal privacy rights requests (data access, correction, or deletion), please include the following in your request: your full registered name, registered phone number or email address, the type of request, and a brief description of the data in question. We may require additional identity verification before processing data-related requests to protect the security of your account.

Rush333 committed to responding to all legitimate privacy enquiries promptly, professionally, and in clear, easy-to-understand English.