Official Policy

Privacy Policy Lotus33 – Personal Data Protection for Malaysian Members

Your privacy is not merely a legal obligation for Lotus33 — it is a moral responsibility we take seriously every day. This document clearly explains how we collect, use, protect and respect the personal data of every member in Malaysia.

Updated: January 2026 Bahasa Melayu (ms-MY) PDPA 2010 Compliant Reading Time: ~8 Minutes
SSL 256-bit
No Data Selling
Compliant with PDPA 2010
Guaranteed Member Rights

6 Data Protection Commitments Upheld by Lotus33

Not just words — these are principles embedded in every system and operational process at Lotus33.

Bank-Grade Encryption
All data transmitted between your device and Lotus33's servers is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks such as Maybank and CIMB. Your login credentials, personal details and transaction records cannot be intercepted by any third party in transit.
No Direct Data Sales
Lotus33 has never sold, rented, or transferred member personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you — we use it solely for the purposes you have consented to, in order to provide you with a better Lotus33 experience.
Malaysia PDPA Compliance
All data collection, processing and storage practices at Lotus33 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We maintain comprehensive records of data processing activities and conduct regular compliance reviews to ensure our standards remain current.
Full Control in Your Hands
Lotus33 gives you full control over your personal data. You may request access to your data, ask for corrections to inaccurate information, or request deletion of your data under certain circumstances — all at no charge and processed within a reasonable timeframe by the Lotus33 privacy team.
Secure Data Storage
Lotus33 members' personal data is stored on servers protected by multiple layers of physical and digital access controls. Internal access to member data is strictly limited to staff who require it to carry out their legitimate duties.
Immediate Breach Notification
In the event of any security breach affecting Lotus33 members' personal data, we are committed to notifying affected members within the timeframe required by Malaysian law. We will also take immediate remedial action and report the incident to the relevant authorities where required.
Lotus33's Privacy Commitment

By using the Lotus33 platform, you agree to the data collection and usage practices described in this Privacy Policy. We take this responsibility seriously and are committed to protecting your personal information to the highest available standards at all times. This document forms part of the Lotus33 Terms & Conditions at large.

1

Introduction & Scope of the Lotus33 Privacy Policy

This Privacy Policy ("Policy") describes how Lotus33 collects, uses, discloses, stores, and protects your personal information when you use our platform at https://lotus33.asia. This Policy applies to all Lotus33 members throughout Malaysia, including users of our website, mobile app, and all services we offer.

Lotus33 is a responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are fully accountable for ensuring that the personal data we hold is processed lawfully, fairly, transparently, and securely. We regard this obligation not merely as legal compliance, but as part of our moral responsibility to every member who entrusts Lotus33 with their personal information.

If you disagree with any aspect of this Privacy Policy, you have the right to discontinue use of the Lotus33 platform. If you have questions or concerns about how we manage your data, please contact the Lotus33 Privacy Officer at support@lotus33.asia before registering or continuing to use our services.

Language Note: This Privacy Policy is written in Bahasa Melayu as the primary language. In the event of any inconsistency between different language versions, the Bahasa Melayu version shall prevail and serve as the definitive reference.
2

Types of Personal Data Collected by Lotus33

Lotus33 collects various types of personal data depending on how you interact with our platform. Below is a detailed summary of the data we collect:

Data Categories Specific Details How It Is Collected
Identity Information Full name, Malaysian identity card number (MyKad), date of birth, gender Registration forms, KYC verification
Contact Information Malaysian phone number, email address, residential address (for verification purposes) Registration, profile updates
Financial Data E-wallet numbers (TNG, GrabPay, DuitNow), deposit & withdrawal transaction records in RM Payment processing, transaction history
Game Data Betting history, selected markets, win/loss records, session duration Automatically through platform activity
Technical Data IP address, device type, operating system, web browser, cookie data Server logs, cookies, tracking pixels
Communication Data Live chat session records, emails sent to support, complaint records Customer support interactions

We only collect data that is strictly necessary for the stated purposes. Lotus33 does not collect sensitive data such as health information, political views or religious beliefs unless specifically required by applicable law.

3

How Lotus33 Uses Your Personal Data

Lotus33 uses the personal data collected for the following purposes, all of which have a valid legal basis under Malaysia's PDPA 2010:

  • Account Management: To register a new account, verify a member's identity and age, process logins, and manage your account settings at Lotus33.
  • Service Delivery: To give you access to all features on the Lotus33 platform, including Live Casino baccarat, roulette, EPL and Liga Super Malaysia Sports Betting, IPL cricket, online slots and e-sports.
  • Payment Processing: To securely process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX in Malaysian Ringgit (RM).
  • Anti-Fraud Verification: To detect, investigate, and prevent fraudulent activity, money laundering, and platform abuse that could compromise the safety of other members.
  • Legal Compliance: To fulfil legal obligations including Know Your Customer (KYC) requirements and applicable anti-money laundering (AML) reporting obligations.
  • Customer Support: To provide technical assistance and resolve complaints or inquiries you submit to the Lotus33 support team via live chat, email, or WhatsApp.
  • Responsible Gaming: To monitor gameplay patterns, identify signs of problem gambling, and reach out to members who may need support or assistance.
  • Marketing Communications: To send information about Lotus33 bonuses, promotions, and latest features — only to members who have given consent to receive such communications.
  • Platform Improvements: To analyse usage patterns in aggregated, anonymised form to help us improve Lotus33's interface, performance, and overall experience.
Legal Basis: Every data processing activity at Lotus33 has at least one valid legal basis — whether that is your consent, a contractual requirement, a legal obligation, or Lotus33's legitimate interests balanced against your privacy rights.
4

Data Sharing with Third Parties

Lotus33 does not sell members' personal data to any third parties. However, in certain circumstances, we may share necessary information with the following parties in order to deliver a better service:

  • Payment Service Providers: Lotus33 shares the necessary transaction information with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and banks (Maybank, CIMB) to process your deposits and withdrawals. All these providers are bound by strict data protection agreements with Lotus33.
  • Game Providers: Certain game session data is shared with game providers such as Evolution Gaming, Pragmatic Play Live and Ezugi to enable the delivery of live casino games including baccarat, roulette and others. This data is used solely for the technical purposes of operating those game services.
  • Legal Authorities: Lotus33 may be required under Malaysian law to disclose certain information to competent authorities such as the police, courts, or regulatory bodies upon a valid official request.
  • Technical Service Providers: Companies providing hosting, cybersecurity infrastructure, and data analytics services to Lotus33 may process certain data as data processors on our behalf, subject to data processing agreements that comply with the PDPA.

In all of the data-sharing scenarios described above, Lotus33 ensures that recipient parties are bound by equivalent data protection obligations and use the data only for the specific authorised purpose. We do not permit any data sharing that goes beyond legitimate service requirements.

5

Lotus33 Data Security Measures

Lotus33 invests seriously in security technologies and procedures to protect members' personal data from unauthorised access, loss, destruction, or accidental disclosure. Our key security measures include:

  • 256-bit SSL/TLS Encryption: All communications between your device and Lotus33 servers are encrypted using TLS 1.3 protocol with 256-bit encryption strength. This ensures your data remains secure in transit.
  • Data-at-Rest Encryption: Sensitive data stored in the lotus33 database — including passwords (stored as irreversible one-way hashes) and financial information — is encrypted using industry-recognised cryptographic algorithms.
  • Layered Access Control: Access to members' personal data within Lotus33 is governed by a strict need-to-know principle — only staff who require access to carry out their legitimate duties may do so, and every instance of access is recorded in an audit log.
  • 24/7 Security Monitoring: Lotus33's security systems are continuously monitored to detect suspicious activity, unauthorised login attempts, or unusual traffic patterns that may indicate a cyberattack.
  • Regular Security Testing: Lotus33 conducts regular penetration testing and vulnerability assessments to identify and address any security weaknesses before they can be exploited.
  • Staff Training: All Lotus33 staff who handle member personal data receive regular privacy and data security training to ensure they understand their responsibilities.
Shared Responsibility: While Lotus33 takes all reasonable steps to protect your data, account security also depends on your own actions. Please use a strong, unique password, enable two-factor authentication where available, and never share your login credentials with anyone.
6

Personal Data Retention Period

Lotus33 does not retain your personal data longer than necessary for the purposes outlined in this Policy or as required under Malaysian law. Our data retention policy is as follows:

  • Active Account Data: Personal data of members with active Lotus33 accounts will be retained for as long as the account remains active and for a reasonable period following account closure.
  • Financial Transaction Records: Deposit and withdrawal transaction records in RM are retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
  • KYC Records: Identity verification documents (such as copies of identification cards) are retained for a minimum of 5 years from the date of submission or account closure, whichever is later, in line with Malaysia's AML requirements.
  • Communication Logs: Customer support communication records, including live chat sessions and emails, are retained for 2 years for quality control and dispute resolution purposes.
  • Technical Data & Logs: System access logs and technical data are retained for 12 months for security and technical troubleshooting purposes.
  • After Account Closure: When an account is closed at a member's request, Lotus33 will delete or anonymise personal data that is no longer required within 90 days, except for data that must be retained for legal compliance purposes.

Once a retention period has expired and there is no legal requirement to retain the data further, Lotus33 will delete or anonymise your personal data in a secure and irreversible manner.

7

Cookies, Tracking Technologies & Device Data

Lotus33 uses cookies and similar tracking technologies to enhance your experience on our platform and for legitimate analytics purposes. Below is information about the cookies we use:

  • Essential Cookies (Required): These cookies are required for the Lotus33 platform to function properly. They include session cookies for login, security cookies to prevent fraud, and cookies that store your language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Functional Cookies: These cookies remember your preferences such as display settings, game choices, and form entries to make future use of Lotus33 more convenient. They improve your experience without storing any sensitive information.
  • Analytics Cookies: Lotus33 uses analytics tools to understand how members use our platform in aggregate, anonymised form. This data helps us identify areas of the platform that need improvement and features that Malaysian members value most.
  • Marketing Cookies: With your consent, we use marketing cookies to display relevant Lotus33 content and offers to you. You may withdraw this consent at any time through the cookie settings on the platform.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the Lotus33 platform. For guidance on managing cookies in your browser, refer to the help documentation for the browser you use.

8

Your Rights Regarding Personal Data

As a Lotus33 member in Malaysia, you have several important rights regarding your personal data under PDPA 2010. Lotus33 fully respects these rights and will handle your requests promptly and transparently:

Right of Access
You have the right to request a copy of the personal data Lotus33 holds about you. Requests will be processed within 21 business days.
Right to Rectification
If your data is inaccurate or out of date, you have the right to request a correction. We will update your records promptly upon verification.
Right to Erasure
Under certain circumstances, you may request the deletion of your personal data, subject to legal retention requirements.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time, and we will stop immediately.
Right to Restriction
You may request a restriction on the processing of your data under certain circumstances while your query is being investigated by the Lotus33 team.
Right to Portability
You have the right to receive the data you have provided to Lotus33 in a structured, machine-readable format for transfer if required.

To exercise any of the above rights, please contact the Lotus33 privacy team by email at support@lotus33.asia, stating the type of request, your full name and account number for verification purposes. Lotus33 does not charge a fee for the first data rights request within any 12-month period.

9

Protection of Children's Data

The Lotus33 platform is intended for individuals aged 18 and above only. We do not knowingly collect, store, or process personal data from individuals under the age of 18. This is an absolute policy with no exceptions.

All prospective members are required to confirm they are 18 years of age or older during the registration process. Lotus33 enforces strict age verification and reserves the right to request supporting documents such as a copy of a Malaysian identity card (MyKad) or passport at any time to verify a member's age.

If Lotus33 discovers or suspects that personal data of a child under 18 has been collected without the knowledge and consent of a parent or lawful guardian, we will take immediate steps to delete that data from our records and close the associated account. If you believe your underage child has registered an account with Lotus33, please contact us immediately at support@lotus33.asia.

10

Amendments to the Lotus33 Privacy Policy

Lotus33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or technological developments. We are committed to informing you of any significant changes to this policy through the following means:

  • Email notification to your registered address for major changes that affect your privacy rights
  • In-platform notification on Lotus33 when you next log in
  • Update the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. If you disagree with any changes made, you have the right to close your Lotus33 account and request deletion of your data before the new policy takes effect.

Current Version: This Lotus33 Privacy Policy was last updated in January 2026. This version supersedes all previous versions. You may download or print the latest version of this policy from this page at any time.
11

Contact the Lotus33 Privacy Team

If you have any questions, concerns, or complaints about how Lotus33 handles your personal data, we encourage you to contact us directly in the first instance. The Lotus33 privacy team is ready to help and committed to resolving any issues promptly and transparently.

You can reach the Lotus33 privacy team via:

  • Email: support@lotus33.asia (use the subject line "Data Privacy Inquiry" for faster processing)
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the Lotus33 platform
  • WhatsApp: Contact our support team via WhatsApp for immediate assistance

Lotus33 is committed to responding to all privacy inquiries within 5 business days. For formal data rights requests (access, correction, deletion), please provide your full name, account number, and the type of request to expedite the verification and processing.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority under PDPA 2010.

Understanding Why Lotus33 Takes Member Data Protection in Malaysia Seriously

In today's digital age, personal data has become one of the most valuable — and most vulnerable — assets we hold. Every time you register on an online platform, you are entrusting them with an important piece of your life: your name, your Malaysian phone number, your financial information, and in the case of Lotus33, details relating to your entertainment activities. That trust is not something we take lightly.

Many Malaysians have had the unsettling experience of their data being used without their knowledge — whether it's receiving unsolicited sales calls, discovering their information has been sold to third parties, or worse, falling victim to identity fraud. At Lotus33, we understand these concerns, and we have built our privacy systems with these scenarios in mind from the ground up.

One of our core principles is "data minimisation" — meaning we only collect data that is genuinely necessary to provide the service you have requested. We do not gather additional information simply because it might be useful in the future. If data is not required for a legitimate Lotus33 operation, we do not collect it.

For payments, Lotus33 operates entirely in MYR using local e-wallets such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u or CIMB Clicks. This means your financial information stays within the Malaysian financial ecosystem you already know and trust — no need to share details with foreign payment processors who may operate under different privacy standards.

Whether you're playing Live Casino baccarat, placing bets on EPL or Liga Super Malaysia matches, or spinning slots at Lotus33, your gaming activity records are stored securely and used only for legitimate purposes — such as displaying your betting history, processing winnings, and identifying any patterns that may indicate a need for responsible gaming support. These records are never shared with advertisers or sold to unrelated parties.

Cybersecurity threats are a real concern that we take seriously at Lotus33. We conduct regular security testing, update our security infrastructure to keep pace with emerging threats, and train all staff who handle personal data to ensure they understand and comply with the privacy standards we have set. In the event of a security incident affecting member data, we are committed to notifying affected members within the timeframe required under Malaysia's PDPA 2010.

For members who want greater control over their data, Lotus33 offers several options. You can manage your marketing communication preferences within your account profile — if you no longer wish to receive promotional emails about bonuses or the latest Lotus33 features, you can unsubscribe at any time without affecting your account. You may also request a copy of all data we hold about you, ask for corrections to any inaccurate information, or in certain circumstances, request the deletion of your data.

Ultimately, Lotus33's commitment to privacy is part of a larger core value — trust. We believe the relationship between Lotus33 and our members is built on a foundation of trust that must be carefully maintained every day. Every decision we make about your data is filtered through one simple question: "Is this truly in the best interest of our members?" If the answer is yes, we proceed. If not, we find a better way that better respects your privacy.

You Have Full Control Over Your Data at Lotus33

Malaysia's PDPA 2010 gives you clear rights — and Lotus33 respects them in full.

Request Data Access
Request a copy of all personal data Lotus33 holds about you. Processed within 21 working days at no charge for the first request.
Correct Your Information
If any data is found to be inaccurate or outdated, we will correct it promptly following verification of your identity.
Withdrawal of Consent
Opt out of marketing communications at any time through your account settings or by contacting the Lotus33 team.
PDPA Complaint
If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

For any requests relating to your personal data, contact us at support@lotus33.asia with the subject line "Data Privacy Inquiry". We will respond within 5 business days.

View Privacy FAQ

Other Important Policies & Guidelines at Lotus33

All Lotus33 policy documents are publicly available to all current and prospective Malaysian members.

About Us
Learn about the background, mission, and core values of Lotus33 as a trusted Malaysian platform.
Read Now
Terms & Conditions
Read all terms of use for the Lotus33 platform, including bonus, deposit, and withdrawal conditions.
Read Now
Responsible Gaming
A complete guide to responsible gaming and the self-management tools available at Lotus33.
Read Now
Frequently Asked Questions
Answers to common questions covering privacy, account security and personal data.
View FAQ

All transactions on Lotus33 are in Malaysian Ringgit (RM) — secure, fast and with no hidden fees.

Touch 'n Go eWallet GrabPay Boost ShopeePay DuitNow Maybank2u CIMB Clicks FPX

Ready to Join a Platform That Respects Your Privacy?

Lotus33 protects your personal data with 256-bit SSL encryption, complies fully with Malaysia's PDPA 2010, and never sells your information to third parties. Register for free today and enjoy safe, responsible online casino and Sports Betting.

256-bit SSL Encryption Compliant with PDPA 2010 No Data Selling Deposit via TNG & GrabPay

18+ only. By using this platform, you agree to our Privacy Policy and Terms & Conditions Lotus33. Bet responsibly.

Bahasa Melayu