telor33 Privacy Policy

This Privacy Policy ("Policy") sets out how telor33 ("we", "us", "our", "the Platform") collects, processes, stores, shares and protects the personal data of individuals ("Users", "you") who access or use the telor33 website at telor33.cam and all associated digital services operated under the telor33 brand.

telor33 is an English-language online entertainment and information platform serving Malaysian adults aged 21 and above. We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your engagement with the platform.

This Policy should be read alongside the telor33 Terms and Conditions and Responsible Gambling Policy. In the event of any conflict between this Policy and other telor33 documents, this Policy governs data protection matters. telor33 reserves the right to amend this Policy at any time. The "Last reviewed" date at the top of this page will be updated accordingly.

The following terms carry the meanings defined below throughout this Policy.

telor33 collects personal data through several channels: directly from Users during registration and account use, automatically through platform interactions, and from third-party service providers where necessary for compliance or operational purposes.

3.1 Registration and account data

• Full legal name as it appears on official identification documents.
• Date of birth, used to verify that the User meets the 21+ age requirement.
• Malaysian identity document number (MyKad number or passport number for non-citizens).
• Residential address, including city references such as Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru or Shah Alam.
• Email address and mobile phone number for account communication and two-factor authentication.
• Preferred currency (Malaysian Ringgit / MYR) and language settings.

3.2 Financial and payment data

• Bank account or e-wallet details associated with deposit and withdrawal transactions, including accounts held at Maybank, CIMB, Public Bank and Hong Leong Bank, or linked to Touch 'n Go eWallet, Boost, GrabPay or DuitNow.
• Transaction history including deposit amounts in MYR, withdrawal requests and bonus activity.
• Cryptocurrency wallet addresses where USDT or other supported digital asset transactions are processed.

3.3 KYC verification data

• Scanned or photographed copies of identity documents such as MyKad, passport or driving licence.
• Proof of residential address documents such as utility bills or bank statements issued in Malaysia.
• Proof of payment method ownership where requested by the compliance team.

3.4 Technical and usage data

• IP address and approximate geolocation at the time of login or transaction.
• Device type, operating system version, browser type and screen resolution.
• Session duration, pages visited, game titles accessed and betting patterns.
• Referral source data indicating how the User arrived at the telor33 platform.

telor33 processes personal data for the following specific purposes. Each purpose is tied to a defined legal basis, set out in Section 5 of this Policy.

telor33 processes personal data under the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform the agreement between telor33 and the User, including account creation, payment facilitation and customer support.
• Legal obligation: Processing necessary for telor33 to comply with applicable laws, including anti-money laundering requirements, KYC obligations and record-keeping duties.
• Legitimate interests: Processing for purposes such as fraud detection, security monitoring and platform improvement, where such processing does not override the User's fundamental privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where telor33 has obtained the User's explicit, informed consent prior to processing. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

telor33 does not sell, rent or trade personal data with third parties for commercial or advertising purposes. Personal data may be shared in the following limited circumstances only:

• Payment processors: Financial data is shared with licensed payment processing partners — including those operating the FPX network, DuitNow infrastructure and supported e-wallet providers — strictly to the extent necessary to complete deposit and withdrawal transactions.
• KYC and compliance providers: Identity verification documents may be processed by contracted third-party KYC service providers who operate under strict confidentiality and data processing agreements with telor33.
• Platform technology providers: Technical service providers including cloud infrastructure, game content licensors and analytics tools may have access to limited usage or session data in the course of providing their services.
• Legal and regulatory authorities: telor33 will disclose personal data to regulators, law enforcement agencies or courts of competent jurisdiction where required to do so by applicable law, a lawful order or a regulatory obligation.
• Business transfers: In the event of a merger, acquisition or sale of substantially all assets of telor33, personal data held by the platform may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by telor33 are required to process personal data solely on documented instructions from telor33 and to implement appropriate technical and organisational security measures.

telor33 uses cookies and similar tracking technologies to enable core platform functionality, maintain user sessions and collect anonymised analytical data to improve the platform experience.

7.1 Types of cookies used

• Essential cookies: Required for the platform to function. These include session authentication tokens, security cookies and language preference storage. Essential cookies cannot be declined without impairing platform access.
• Analytical cookies: Used to collect anonymised data on how Users navigate the platform — pages visited, session duration and device type. This data helps telor33 identify areas for improvement and does not personally identify individual Users.
• Functional cookies: Store User preferences such as display settings, responsible gambling notification frequency and notification dismissal states.
• Marketing cookies: Used only where a User has given explicit consent. These cookies track interactions with promotional content to measure campaign effectiveness. No marketing cookies are placed without prior opt-in.

7.2 Managing cookies

Non-essential cookies can be declined or removed at any time through your browser settings. Most modern browsers allow you to block third-party cookies, delete existing cookies and receive notifications when new cookies are set. Note that declining essential cookies may prevent certain platform features from working correctly.

telor33 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

telor33 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption applied to all data transmissions between the User's device and the telor33 platform.
• Encryption at rest for stored personal data including KYC documents and financial records.
• Role-based access controls restricting internal access to personal data to authorised personnel with a documented operational need.
• Regular security assessments and vulnerability testing of the platform's infrastructure.
• Multi-factor authentication required for administrative access to systems containing personal data.
• Incident response procedures to detect, contain and report data breaches in accordance with applicable notification obligations.

In the event of a data security incident that poses a material risk to your rights or interests, telor33 will notify affected Users via the registered email address on file without undue delay and will take all reasonable steps to contain and remediate the incident.

Subject to applicable law and certain platform-specific limitations, registered Users of telor33 hold the following rights in respect of their personal data. Requests to exercise any of these rights should be directed to the support team at the contact details provided in Section 12.

telor33 will respond to verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or high in volume, we may extend this period by a further sixty (60) days, with notice provided to you within the initial thirty-day window.

The telor33 platform is intended exclusively for adults aged 21 and above. telor33 does not knowingly collect, process or store personal data belonging to individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If telor33 becomes aware that an account has been registered by a person under the age of 21, or that personal data has been collected from a minor, the following steps will be taken without delay:

• The account will be immediately suspended pending review.
• All personal data associated with the account will be securely deleted upon confirmation that the account holder is under 21.
• Any funds deposited will be returned to the original payment source following identity verification of the actual account holder.
• The incident will be documented as part of telor33's ongoing compliance monitoring activities.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how telor33 handles your personal data, please contact our support team through the following channel:

• Platform website: telor33.cam
• Support email: [email protected] (plain text — not a clickable link)
• Support languages: English, Bahasa Melayu, Chinese
• Availability: 24 hours a day, 7 days a week via live chat

Please mark your enquiry clearly as a "Privacy Request" or "Data Rights Request" so that it is directed to the appropriate team. telor33 aims to acknowledge all privacy-related written enquiries within 48 hours and to provide a substantive response within thirty (30) calendar days.

For concerns that remain unresolved after contacting telor33 directly, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.