Privacy Policy

moon33 acts as the controller of personal information collected directly through the moon33 website and related service interfaces, except where another organisation independently determines how information is processed. This policy should be read together with the moon33 Terms & Conditions and Responsible Gambling information.

By accessing moon33 or submitting personal information, you acknowledge that your data may be processed as described in this Privacy Policy. This acknowledgement does not remove any rights granted to you under applicable law. If you do not agree with the practices described here, you should discontinue use of moon33 and contact support regarding the closure of any existing account.

The categories of information collected by moon33 depend on how you use the platform. Information may be provided directly by you, generated through your use of moon33, or received from an approved identity, security, game, or payment service provider.

moon33 collects information when you register an account, enter profile details, upload verification documents, contact support, activate a deposit limit, request self-exclusion, join a promotion, place a sports bet, play a casino game, or complete a payment. Information is also generated automatically when you browse moon33 or sign in from a device.

Approved service providers may send moon33 transaction confirmations, identity-check results, fraud indicators, game records, or technical information needed to deliver the platform. For example, a deposit using DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong Bank may generate a payment reference and status confirmation. moon33 does not need to receive your complete online banking password or e-wallet login credentials.

moon33 may process personal information for the following purposes:

• Creating, maintaining, securing, and administering your moon33 account;
• Confirming that players meet the minimum age requirement of 21 years;
• Completing KYC checks and verifying the identity of an account holder;
• Processing deposits, withdrawals, refunds, and related financial records;
• Providing casino games, live dealer services, slots, and sports betting markets involving events such as Liga Super Malaysia, EPL football, and UFC;
• Detecting account takeover, payment fraud, collusion, bonus abuse, money laundering, and other prohibited activity;
• Responding to questions, complaints, account requests, and technical support enquiries;
• Applying self-exclusion, cooling-off periods, session reminders, and deposit limits;
• Improving website stability, mobile performance, accessibility, navigation, and service quality;
• Maintaining accounting, audit, security, complaint, and legal records;
• Communicating material changes to moon33 services, policies, or account status.

Where moon33 uses information to personalise the platform, such use may include displaying relevant game categories, payment guidance, or support information. Personalisation does not alter game outcomes, certified random processes, or confirmed sports betting results.

Depending on the circumstances and the law that applies, moon33 may process information because it is necessary to provide a requested service, fulfil contractual obligations, comply with a legal requirement, protect legitimate security or business interests, establish or defend legal claims, or act with your consent.

Where processing relies on consent, you may withdraw that consent subject to applicable legal and operational limitations. Withdrawal does not invalidate processing completed before the request. Certain information remains necessary to maintain an account, process a withdrawal, satisfy security checks, or preserve records required by law. If essential processing cannot continue, moon33 may need to restrict or close the account.

moon33 processes payment information to confirm deposits, review withdrawals, prevent unauthorised transactions, resolve disputes, and maintain accurate financial records. Payment providers may separately collect and control information under their own privacy practices. moon33 receives only the data reasonably required to confirm and reconcile a transaction.

KYC information may include a valid identification document, proof of address dated within three months, a selfie holding the identification document, and source-of-funds evidence for higher-value or unusual activity. These checks protect players and help moon33 identify duplicate accounts, underage access, stolen payment methods, and fraudulent withdrawals.

moon33 may use essential cookies and similar technologies to maintain login sessions, remember security preferences, prevent fraud, balance website traffic, and support reliable platform performance. Analytical technologies may also help moon33 understand page usage, device compatibility, errors, and general navigation patterns.

Browser settings can usually be used to block or delete cookies. However, disabling essential cookies may prevent sign-in, payment verification, saved preferences, or other core moon33 functions from operating correctly. Device and security information may continue to be processed where necessary to protect accounts and the platform.

moon33 does not sell personal information. Data may be disclosed only where reasonably necessary to an approved category of recipient, including payment processors, identity verification providers, hosting and security suppliers, game and sportsbook platform providers, professional advisers, auditors, dispute-resolution bodies, or competent authorities.

Service providers receive only the information needed for their assigned function and are expected to apply appropriate confidentiality and security protections. moon33 may also disclose information to investigate suspected fraud, protect a player or another person, respond to a valid legal request, enforce the Terms & Conditions, or support a legitimate corporate reorganisation.

Some technology, security, game, support, or payment services used by moon33 may operate from locations outside Malaysia. As a result, personal information may be stored or processed in another jurisdiction whose data protection rules differ from those in Malaysia.

Where an international transfer occurs, moon33 takes reasonable steps to use suitable contractual, organisational, and technical safeguards. Access is limited according to operational need, and recipients are required to protect information consistently with their service obligations and applicable law.

moon33 uses layered security measures intended to protect personal data from accidental loss, unauthorised access, alteration, disclosure, or destruction. Measures may include encrypted network connections, restricted administrative access, password hashing, monitoring, logging, verification controls, network protection, and staff confidentiality procedures.

No online system can provide an absolute guarantee against every threat. Players also have an important role in account security. Use a unique password, keep login details private, sign out on shared devices, and contact moon33 promptly if you notice an unfamiliar login, payment, or account change.

moon33 retains information for the period reasonably necessary to provide services, meet financial and legal obligations, prevent fraud, enforce self-exclusion, resolve disputes, and protect legal rights. Different categories of information may be retained for different periods.

Closing a moon33 account does not necessarily result in immediate deletion of all records. Transaction histories, verification records, complaint files, security logs, self-exclusion records, and evidence connected with a dispute may need to be preserved after closure. Once information is no longer reasonably required, moon33 will delete, anonymise, or securely isolate it in line with applicable retention procedures.

Subject to applicable law, identity verification, and relevant exemptions, you may exercise rights concerning personal information held by moon33. A request should clearly explain the information or action concerned. moon33 may ask for proof of identity before responding to prevent disclosure to an unauthorised person.

moon33 may process account, transaction, session, and gambling activity information to administer responsible gambling controls and identify potential indicators of harmful play. This may include unusually long sessions, rapid increases in deposits, repeated limit changes, cancelled withdrawals, or attempts to bypass a self-exclusion restriction.

Where appropriate, moon33 may send a responsible play reminder, request additional information, recommend a limit, temporarily restrict activity, or apply a requested self-exclusion. Records associated with self-exclusion may be retained after account closure to help prevent accidental or deliberate re-registration.

moon33 may revise this Privacy Policy to reflect changes in services, technology, security practices, legal requirements, or data processing activities. The effective date displayed at the top of the page will be updated when material revisions are published.

Where an update materially changes how moon33 uses personal information, reasonable notice may be provided through the platform or an account communication. Continued use after an updated policy takes effect indicates acknowledgement of the revised information, without limiting rights that cannot lawfully be waived.

Questions, correction requests, access requests, complaints, or other privacy enquiries may be directed to the moon33 support team. Please do not include passwords, one-time codes, or complete payment credentials in a request.

If moon33 cannot fulfil all or part of a request, an explanation may be provided where appropriate. Requests may be restricted where disclosure would affect another person's rights, compromise security, interfere with fraud prevention, or conflict with a legal retention requirement.