1. Home
  2. Privacy Policy
Updated: 1 January 2026

Rush33 Privacy Policy – Data Protection for Malaysian Players

Rush33 is committed to protecting the privacy of every member. This document clearly explains the types of information we collect, how it is used, how it is protected, and your rights as a player in managing your personal data with us.

Rush33's Six Privacy Commitments to Malaysian Players

This is not merely a promise on paper — it is the minimum standard Rush33 upholds in every aspect of managing your data.

256-bit SSL Encryption at All Times

All data transmitted between your device and Rush33's servers is protected with 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions. Your data cannot be intercepted by third parties while in transit.

No Sale of Data to Third Parties

Rush33 does not sell, rent, or disclose your personal information to advertisers, data brokers, or any third-party commercial parties. Your data belongs to you — we only use it for the purposes stated in this policy.

Full Control in Your Hands

You have the right to access, correct, transfer, or request the deletion of your personal data at any time. Such requests are processed within 30 calendar days through Rush33's support channels, which operate 24/7.

Minimum Data Collection

Rush33 only collects data that is strictly necessary to provide the services you request — account registration, payment processing and legal compliance. We do not collect excessive or irrelevant information beyond the scope of our services.

Time-Limited Data Retention

Your personal data is retained only for as long as necessary for the original purpose of collection, or as required under Malaysian law. Once the specified period has lapsed, data is deleted or permanently restricted from active use.

Immediate Notification in the Event of a Breach

In the unlikely event of a data security breach that may affect your information, Rush33 is committed to notifying affected members within 72 hours via the email address registered to their account.

256-bit SSL
Transit Encryption
Encrypted Data
Secure Storage
No Data Sales
No Third Parties
PDPA Compliance
Data Protection Act
Restricted Access
Internal Controls
Contents

1Introduction

This Privacy Policy describes how Rush33 ("we", "platform", "Rush33") collects, uses, stores, and protects your personal information when you use the rush33.online website and all services provided through it.

Rush33 respects the privacy of every member and is committed to ensuring your personal information is handled with care, responsibility, and in accordance with applicable laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA). By registering an account or using any Rush33 service, you agree to the practices set out in this Privacy Policy.

Important: This Privacy Policy is part of Terms & Conditions Rush33 and should be read together. If you do not agree with this Privacy Policy, please do not use Rush33's services.

We encourage you to read this document carefully and to reach out to us at support@rush33.online if you have any questions about how we handle your data.

2Information We Collect

Rush33 collects personal information through two primary means — information you provide directly to us, and information collected automatically as you use our platform.

Information you provide directly:

Full Name (MyKad/Passport) Date of Birth Malaysia Phone Number Email Address Residential Address Payment Method Information KYC Documents Support Communications

Information collected automatically:

  • Technical Data: IP address, web browser type, device operating system, screen resolution, and device information you use to access Rush33
  • Usage Data: Pages visited, time and duration of visits, games played, bets placed and full transaction history
  • Location Data: General geographic location based on IP address (country and state) for compliance and security purposes
  • Cookie Data: Information collected through cookies and similar tracking technologies — see Section 8 for further details

Rush33 never request your account password via email, LiveChat, or phone. If you receive any communication asking for your password on behalf of Rush33, please report it to us immediately at support@rush33.online as it may be a fraudulent attempt.

3How We Use Your Data

Every category of information Rush33 collects has a clear and legitimate purpose. We do not use your data for any purpose other than those stated below:

  • Account Management: To process your registration, verify your identity, enable secure login and manage your account settings at Rush33
  • Financial Transaction Processing: To process deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and to process winnings withdrawals to your Malaysian bank account
  • Legal Compliance (KYC/AML): To meet compliance obligations required by law, including identity verification, fraud prevention, and adherence to Anti-Money Laundering (AML) requirements
  • Customer Support: To respond to inquiries, resolve complaints, and provide technical support via LiveChat and email in Bahasa Malaysia
  • Platform Security: To detect and prevent fraud, multi-account usage, bonus abuse, and other unlawful activities that may harm other players or the integrity of Rush33
  • Service Improvement: To analyse usage patterns on an aggregated, anonymised basis — helping us understand which games Malaysian players enjoy most and how to improve the Rush33 user experience
  • Marketing Communications: To keep you informed about the latest promotions, new bonuses, and Rush33 platform updates — only if you have opted in to receive marketing communications during registration or subsequently through your account settings
  • Responsible Gambling: To monitor gaming patterns and identify players who may benefit from responsible gambling support, in line with Rush33's commitment to member wellbeing

4Legal Basis for Data Processing

Rush33 processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You give explicit consent when you register a Rush33 account and accept this Privacy Policy. For marketing communications, separate consent is requested and you may withdraw it at any time.
  • Contract Performance: Processing required to fulfil the agreement between you and Rush33 — including the processing of deposits and withdrawal of winnings
  • Legal Obligation: Processing required to comply with applicable Malaysian law, including KYC and AML obligations
  • Legitimate Interests: Processing for platform security, fraud prevention and service improvement purposes, where those interests do not override your privacy rights

5Information Sharing & Disclosure

Rush33 does not sell, rent or share your personal information with third parties for their own commercial marketing purposes. Disclosure of information occurs only in the following limited circumstances:

  • Trusted Service Providers: Rush33 shares necessary data with third-party service providers that help us operate the platform — including payment processors for Touch 'n Go, GrabPay, DuitNow, and FPX transactions, live game providers such as Evolution Gaming and Pragmatic Play Live, and technical infrastructure providers. All such providers are required to meet data protection standards equivalent to or higher than our own
  • Legal Requirement: Rush33 will disclose information to the relevant authorities when required by a court order, Malaysian law, or a directive from an applicable regulatory body. In such circumstances, we will endeavour to notify you of the disclosure unless prohibited by law
  • Protection of Rights and Safety: Rush33 may disclose information to protect the legal rights, property, or safety of Rush33, our members, or the public — including in connection with fraud investigations or related legal proceedings
  • Business Transfer: If Rush33 is involved in a merger, acquisition, or sale of assets, user data may form part of the transferred assets. You will be notified in advance and your choices will be respected

In all cases where data is shared with third-party providers, Rush33 ensures that binding contractual agreements and strict data protection standards are upheld by all parties involved.

6Data Security

Rush33 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or unintentional disclosure.

Technical security measures in place:

  • Data Encryption in Transit: All communications between your browser and Rush33's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate — the same standard used by Maybank2u and Malaysia's major banks
  • Data-at-Rest Encryption: Sensitive personal information stored in Rush33's databases — including financial information and KYC documents — is encrypted using AES-256 at rest
  • Strict Access Controls: Only Rush33 staff who require access to specific data for their particular job responsibilities are granted permission. All access is logged and continuously monitored
  • Two-Factor Authentication (2FA): All Rush33 internal systems containing user data are protected with two-factor authentication to prevent unauthorised access even in the event of a compromised password
  • Continuous Security Monitoring: An automated monitoring system operates 24/7 to detect suspicious activity, intrusion attempts, or anomalies in data access patterns
  • Regular Security Audits: Rush33 conducts independent security audits on a regular basis to ensure all security controls are functioning as intended and meet the latest industry standards

While Rush33 takes all reasonable steps to protect your data, no security system can guarantee 100% protection under all circumstances. You also play an important role in keeping your account secure by using a strong password and not sharing it with anyone.

7Data Retention Period

Rush33 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy or as required by applicable Malaysian law.

  • Active Account Data: For as long as your Rush33 account remains active, we retain all account data necessary to provide our services to you
  • After Account Closure: After account closure, Rush33 retains financial transaction records and identity information for a minimum of 7 years as required by financial and tax legislation in Malaysia. This is a legal obligation we are unable to waive at a user's request
  • Support Communication Logs: LiveChat conversation records and support emails are retained for 3 years for quality control and dispute resolution purposes
  • Marketing Data: If you unsubscribe from Rush33 marketing communications, your preference is updated immediately and we retain a record of that choice to ensure we do not contact you again by mistake
  • Cookie Data: Session cookies expire automatically when you close your browser. Persistent cookies have a set expiry period of between 30 days and 2 years, depending on their type and function

Once the designated retention period has elapsed, data is securely deleted or permanently anonymised so that it can no longer be linked to any individual.

8Cookies & Tracking Technologies

Rush33 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and understand how players interact with our website.

Types of cookies we use:

  • Essential Cookies: These cookies are required for the core functionality of the Rush33 website — login, session tracking, security, and transaction processing. Without them, Rush33 cannot function properly. These cookies cannot be disabled
  • Functional Cookies: These cookies store your preferences such as language, display settings, and recent game history to provide a more personalised experience each time you visit Rush33
  • Analytics Cookies: These cookies collect information about how players use Rush33 in aggregate and anonymised form — including the most visited pages, time spent in each section, and navigation patterns. This helps us identify areas for improvement
  • Security Cookies: These cookies are used to detect suspicious activity and unauthorised login attempts, and to help Rush33 systems distinguish real users from automated bots

You can manage or disable certain cookies through your web browser settings. However, disabling essential cookies may affect Rush33's functionality and you may be unable to log in or carry out transactions normally.

9Your Data Protection Rights

As a Rush33 member, you have the following rights regarding your personal data, in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA):

Right of Access

You have the right to request a copy of all personal data Rush33 holds about you. Requests are processed within 30 calendar days and can be submitted via LiveChat or support@rush33.online.

Right to Rectification

If your personal data held by Rush33 is inaccurate or outdated, you have the right to request a correction. Basic information can be updated directly within your account settings.

Right to Erasure

You may request deletion of your personal data under certain circumstances. Please note that some data must be retained in accordance with Malaysian legal obligations even after a deletion request.

Right to Object

You may object to the processing of your personal data for marketing purposes at any time via the unsubscribe link in our emails or by contacting Rush33 support.

Right to Data Portability

You have the right to receive the personal data you have provided to Rush33 in a structured, machine-readable format, for the purpose of transferring it to another platform where applicable.

Right to Restrict Processing

Under certain circumstances, you may request Rush33 to restrict the processing of your data — for example, while we are handling your correction request or objection.

To exercise any of the above rights, contact us at support@rush33.online with the subject line "PRIVACY RIGHTS REQUEST" or via 24/7 LiveChat. Rush33 will process your request within 30 calendar days and notify you of the action taken.

10International Data Transfers

In operating the Rush33 platform, certain data may be processed by service providers operating outside Malaysia — in particular, live game providers such as Evolution Gaming and Pragmatic Play Live, which manage their server infrastructure internationally.

In all such cases, Rush33 ensures that:

  • Data transfers are only carried out to countries or organisations that maintain equivalent or higher data protection standards
  • Legally binding data processing agreements are signed with all international data recipients
  • Data transferred is limited to the minimum necessary for the specific service purpose — additional information that is not required will not be shared
  • You have the same rights over your data regardless of where it is physically processed

11Minors & Age Restrictions

Rush33 services are strictly for individuals aged 18 and above only. Rush33 does not knowingly collect or process personal data from individuals under the age of 18.

If you discover that a child under the age of 18 has registered an account with Rush33 or provided us with their personal data, please notify us immediately at support@rush33.online. We will take prompt action to close the account and delete all associated data.

Parents and guardians are advised to monitor their children's online activity. Use the parental controls provided by your web browser or device to prevent unintended access to online gambling platforms.

12Changes to This Privacy Policy

Rush33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When material changes are made, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending a notification to the email address registered to your account at least 14 days before the changes take effect, for changes that materially affect your privacy rights
  • Displaying a clear notice on the rush33.online homepage regarding upcoming changes

Your continued use of the Rush33 platform after any Privacy Policy changes take effect will be considered acceptance of the updated terms. We encourage you to review this page periodically.

13Contact Us About Privacy

If you have any questions, concerns, or complaints regarding Rush33's Privacy Policy or how we handle your personal data, please contact us:

  • Privacy Email: support@rush33.online — use the subject line "PRIVACY & DATA" for faster handling
  • LiveChat: Available 24/7 directly on rush33.online — the fastest response channel for urgent enquiries

Rush33 has a dedicated team responsible for handling all data privacy inquiries and requests. All inquiries will receive a response within 5 business days, and data rights requests (such as access or deletion) will be processed within 30 calendar days.

If you are not satisfied with how Rush33 has handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.

Your Data Summary at Rush33

A quick overview of what we collect, why we collect it, and how long it is retained.

Data Type Purpose of Use Legal Basis Retention Period
Identity Information Account verification, KYC Contract + Legal 7 years after account closure
Contact Information Communications, support Contract + Consent For the duration of active account
Financial Transaction Data Deposits, withdrawals, AML Contract + Legal 7 years (required under PDPA)
Betting History Responsible gambling, disputes Legitimate Interest 5 years after account closure
Technical Data (IP, device) Security, fraud prevention Legitimate Interest 90-day logs, 2-year reports
Support Communications Quality control, disputes Legitimate Interest 3 years

FAQ – Rush33 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at Rush33.

Rush33 only discloses transaction information to authorities when legally required under Malaysian law — for example, through a court order or an official investigation relating to anti-money laundering (AML). We do not routinely share transaction information with your bank or with government agencies without a valid legal basis. Payment processors such as Touch 'n Go, GrabPay, and FPX receive only the data necessary to process your requested transaction — they do not have access to your betting history or any other Rush33 account information.

Yes, you may request the deletion of your personal data from Rush33. However, please note that certain data must be retained to comply with Malaysian legal obligations — specifically, financial transaction records which must be kept for 7 years under local financial and tax laws. In such cases, the data will be "anonymised" so that it can no longer be linked to your identity, even though the underlying financial records are retained for legal compliance. Data not subject to legal retention obligations — such as marketing preferences and usage data — will be permanently deleted within 30 days of your request being received.

KYC documents such as copies of MyKad are among the most sensitive data Rush33 handles. These documents are encrypted using AES-256 both in transit and at rest within our systems. Access to KYC documents is restricted solely to Rush33 compliance team staff who have undergone background checks and have a specific operational need — no other part of the company has access to these documents in full. KYC documents are not shared with game providers, technology vendors, or any other third parties except where legally required. Once the KYC process is complete, original copies are typically retained in encrypted format and access to them is continuously monitored.

Rush33 uses your data to send internal marketing communications only — such as emails about the latest promotions, new bonuses or newly launched games that may be relevant to your interests based on the games you play. We do not sell or share your data with third-party advertising networks for targeted advertising purposes on other platforms. Any analytics cookies Rush33 uses are to understand overall platform usage patterns on an aggregated basis — not to build individual profiles for sale to advertisers. If you no longer wish to receive marketing communications from Rush33, you may unsubscribe at any time via the link at the bottom of any of our marketing emails, or by contacting Rush33 support.

If Rush33 is involved in any business transfer, merger, or acquisition, user data will be treated as a business asset that may be transferred. In any such scenario, Rush33 is committed to notifying all active members via email at least 30 days before any data transfer takes place, making clear who will receive the data and how it will be handled. You will be given the option to close your account and request deletion of your data before the transfer occurs if you do not wish your data to be passed to the new owner. The new data recipient will be required to comply with data protection standards equivalent to those set out in this Privacy Policy.
Your Data Is Safe with Rush33

Register Now & Play with Complete Confidence

Rush33 safeguards your privacy with 256-bit SSL encryption, no data sales to third parties, and full control in your hands. Register for free today and enjoy over 3,000 game titles with complete peace of mind.

Register Now – Free Login

⚠ This game is strictly for players aged 18 and above. Please gamble responsibly.

This Privacy Policy forms part of Rush33's legal framework. For a complete overview of your rights and responsibilities, please also read Terms & Conditions, Responsible Gaming and FAQ us. For any privacy-related enquiries, our team is available via LiveChat 24/7 or at support@rush33.online.

Bahasa Melayu