ac33 Privacy Policy — How We Handle Your Account Data
When you use ac33, the data connected to your account — login details, transaction records, and payment method information — is managed under this policy. Availability of this service depends on local law and applies only where local regulations permit access.
Touch 'n Go eWallet data handling
DuitNow & FPX transaction records
Account security practices
Your data access rights
POLICY SCOPE DETAIL
What This Policy Covers on ac33
This policy sets out how ac33 collects, uses, and holds the personal data tied to your account. That includes registration details you submit when opening an account, transaction data generated when you fund your wallet via Touch 'n Go eWallet, DuitNow, or FPX, and device and session data recorded during each visit. We collect only what is necessary to operate your account and process the payment methods connected to it. Data linked to your Touch 'n Go eWallet or DuitNow transfers is retained for the period required to resolve disputes or satisfy record-keeping obligations under applicable law. We do not sell personal data to third parties. Third-party payment processors handling your FPX or DuitNow transactions operate under their own data terms, and we recommend reviewing those directly. This policy applies to ac33 services accessed in regions where local law permits such access. Where law restricts or prohibits access, this policy does not extend eligibility — it simply describes our data practices for those who do access the service lawfully.
Touch 'n Go eWallet
Transaction data tied to Touch 'n Go eWallet funding is recorded in your account wallet history and retained as required by applicable financial record rules.
DuitNow Transfers
DuitNow transfer references are logged for reconciliation. Your DuitNow identifier is not shared beyond what the transfer process requires.
FPX Online Banking
FPX sessions generate a transaction reference stored against your account. The full banking credentials remain with your bank — we receive only confirmation of the transfer outcome.
Account Registration Data
Name, contact details, and verification information submitted at registration are held for the duration your account remains active and for any post-closure period required by law.
INSIDE VS OUTSIDE SCOPE
Where This Policy Applies and Where It Does Not
Not every interaction with ac33 falls under the same data rules. Understanding the boundary helps you know which questions to direct to us and which to raise with the relevant third party.
Account Access
Login sessions, password resets, and account authentication steps are fully within this policy. Any data generated when you access your account dashboard is governed here.
Transactions via Local Payment Rails
The transaction reference and amount are within our scope. The internal processing by Touch 'n Go eWallet, DuitNow, or FPX follows those providers' own data terms, not ours.
Site Content and Game Sessions
Game session records — rounds played, results, and wallet movements — are within this policy. Game logic and RNG certification reside with the relevant studio and fall outside our data policy.
Third-Party Links and Services
If a page links to an external site or service, that destination operates its own privacy terms. Leaving ac33 takes you outside the coverage of this policy entirely.
YOUR ACCOUNT RIGHTS
Actions Available to You Under This Policy
You have practical choices about the data we hold on your account. Reviewing your own records is the starting point — log in and open the account dashboard to see transaction history, registered contact details, and any saved payment method references. If something looks incorrect, the account settings page shows the fields you can update directly. For details that require our team to amend — such as verification records — raise a request through the support channel and provide the specific correction needed. Data held for legal or financial compliance purposes cannot always be erased on request, but we will tell you clearly what can and cannot be removed and why. We do not hold data beyond the period required for its stated purpose.
Review Your Records
Log into the account dashboard to see your full transaction history, including Touch 'n Go eWallet and DuitNow entries. No request to us is needed for this step.
Correct Account Details
Contact and registration details can be updated in account settings. For fields that are locked after verification, submit a correction request through the support channel with the accurate information.
Raise a Data Question
Any question about what data we hold, why we hold it, or how long we keep it can be directed to our support team. We will respond with the specific answer for your account.
Request Account Closure
Closing your account initiates the data retention review. We will confirm which records are deleted immediately and which are held for the minimum period required under applicable law.
PRIVACY CONTACT PATHS
How to Reach Us About This Policy
Privacy questions and data correction requests can come through any of the contact paths below. For account-specific matters, have your account details ready so the support team can locate your records without delay.
Live Chat Support
Open the live chat window from the account page to raise a data or privacy question with the support team in real time. Available for accounts in eligible Malaysia regions.
Email Request
Send a written data request or correction query to the support email address shown on the contact page. Include your registered account identifier so the team can locate your records.
Account Dashboard
For transaction records tied to Touch 'n Go eWallet, DuitNow, or FPX, the account dashboard after login shows the current state of your wallet and payment history without needing to contact support.
DATA HANDLING PRACTICES
How ac33 Manages Data Day to Day
Sound data handling comes down to specific practices, not broad statements. Here is what we do in each area that touches your account.
Cookies and Session Data
We use session cookies to keep your account authenticated during a visit and analytics cookies to understand how pages load on your device. You can review cookie settings through the preference controls shown on first visit. Disabling non-essential cookies does not affect account login or payment processing.
Account Security
Passwords are stored in hashed form — we cannot read them, and neither can support staff. Login activity is logged so anomalous access attempts can be flagged. The security status of your account is visible in the account dashboard after login.
Data Retention
Transaction records — including those linked to Touch 'n Go eWallet and FPX — are kept for the period required by applicable financial regulations. Profile data beyond the legally required period is removed when an account is closed on request.
Policy Updates
When this policy changes, the updated version is posted here with the revision date noted at the top of the page. Continued use of the account after a change constitutes acknowledgement of the updated terms, to the extent permitted by local law.
POLICY FAQ
Privacy Policy Questions We Get Asked Most
These are the questions members in Malaysia most commonly raise about how their data is handled on ac33.
What personal data does ac33 collect when I open an account?
We collect the registration details you submit — name, contact information, and any verification documents required for your account type. Once you transact, payment references from Touch 'n Go eWallet, DuitNow, or FPX are logged against your account record. We do not collect banking credentials directly.
Can I see all the data held on my account?
Yes. Log in and open the account dashboard to view your transaction history, registered details, and payment method references. If you need a full export of records beyond what the dashboard shows, raise a request through the support chat or email channel and the team will compile it.
How long do you keep my transaction data after I close my account?
Transaction records, including those tied to Touch 'n Go eWallet and FPX payments, are kept for the minimum period required by applicable financial record-keeping regulations. After that period, the data is removed. We will confirm the specific retention period for your account when you request closure.
Does ac33 share my data with third parties?
We do not sell personal data. Payment processing via DuitNow or FPX requires passing transaction references to those processors, and they handle that data under their own privacy terms. Beyond payment processing, data is shared only where required by law or to protect account security.
How do I correct a mistake in my registered account details?
Contact and preference fields can be updated directly in account settings after login. For locked fields — such as verified identity records — submit a correction request through live chat or the support email address. Include the specific field and the correct information so the team can act on it promptly.
How does ac33 handle cookies, and can I turn them off?
We use essential cookies for account sessions and optional analytics cookies. Cookie preferences are shown on first visit and can be adjusted at any time. Turning off non-essential cookies does not affect your ability to log in or process payments through Touch 'n Go eWallet, DuitNow, or FPX.