OFFICIAL PRIVACY POLICY

Privacy Policy cobra33 – How We Protect the Personal Data of Malaysian Members

Cobra33 takes every member's privacy seriously. This document clearly explains what data we collect, why it is needed, how it is protected, and your rights as the owner of that data. No convoluted legal language — we wrote this so you can genuinely understand it.

Last updated: 1 July 2026
256-bit SSL
No Data Sales
Right to Access Data
Full Compliance
TABLE OF CONTENTS

Cobra33's Six Privacy Commitments to You

Here is how cobra33 manages the personal data of every Malaysian member — straightforward, transparent, and trustworthy

Bank-Grade Encryption

All data you submit to cobra33 — from registration details to financial transaction information — is protected with 256-bit SSL encryption. This is the same security standard used by Maybank, CIMB, and other major Malaysian financial institutions.

256-bit SSL
Your Data Is Never Sold

Cobra33 has never sold and will never sell members' personal data to any third party for marketing, commercial analytics, or any other purpose unrelated to platform operations. Your data belongs to you — it is not a commodity for us to trade.

No Data Sales
Secure & Restricted Storage

Data is retained only for as long as required by operational needs and legal obligations. Cobra33 uses servers protected by a layered access control system — only authorised personnel who genuinely need access for specific tasks are permitted to view member data.

Restricted Access
Right to Access & Data Correction

You have the right to know what data we hold about you, request a copy of it, correct any inaccurate information, and in certain circumstances, request its deletion. All such requests can be submitted to the cobra33 support team via email or Live Chat.

Your Full Rights
Malaysian Legal Compliance

The cobra33 Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international data protection standards applicable to licensed platform operations. Your rights as a data subject are fully protected under this legal framework.

PDPA 2010 Compliant
Marketing Preferences in Your Hands

You may opt out of marketing communications from cobra33 at any time — either through your account settings or by contacting our support team. Your preference will take effect within 48 hours and you will not receive any further promotional communications after that.

Easy Opt-Out

Summary: Data cobra33 Collects & Why

Data Type Example Purpose Shared?
Identity Data Full name, date of birth, MyKad number Age verification, KYC, fraud prevention No
Contact Data Email address, phone number Account communications, support, security notifications No
Financial Data EWallet account number, MYR transaction history Deposit & withdrawal processing, AML No
Game Data Betting history, games played Auditing, fairness, fraud detection No
Technical Data IP address, device type, web browser Account security, unusual location detection No
Cookie Data Login sessions, language preferences, analytics cookies User experience, platform performance Limited (analytics)
1

Personal Data cobra33 Collects

Cobra33 only collects data that is strictly necessary to provide a safe, fair, and responsible service. We do not collect data excessively or for purposes unrelated to platform operations. The following are the categories of data we collect:

Data you provide directly:

  • Full name, date of birth, and MyKad number at the point of registration and during the KYC process
  • Active Malaysian email address and mobile phone number
  • Residential address for identity verification purposes if requested
  • Payment method details — eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank account details for withdrawals via FPX, Maybank2u, or CIMB Clicks
  • Information you share when contacting the cobra33 support team

Automatically collected data:

  • IP address and general location information (state/city) derived from IP
  • Device type, operating system, and web browser version you are using
  • Login session history and account activity timestamps
  • Cookie data and similar tracking technologies (further details in Section 6)
Data Minimisation Principle: cobra33 adheres to the principle of minimal data collection — we only ask for what we need. If you ever wonder why certain data is being requested, our support team will provide a clear and reasonable explanation.
2

How cobra33 Uses Your Data

Every piece of data cobra33 collects serves a specific purpose. We do not use your data for undisclosed or unexpected purposes. The following are the primary purposes for which data is used at cobra33:

  • Account management and security: To verify your identity during login, detect suspicious activity, and protect your account from unauthorised access.
  • Financial transaction processing: To process deposits and withdrawals in MYR via your chosen payment method, and to ensure funds are credited to the correct account.
  • Legal and regulatory compliance: To fulfil KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting obligations to licensing bodies and relevant authorities.
  • Provision of gaming services: To record gaming history, calculate winnings accurately, and ensure all bonuses and promotions are administered fairly in accordance with the stated terms.
  • Fraud detection and prevention: To identify activity patterns that may indicate fraud, collusion, bonus abuse, or money laundering attempts.
  • Customer support: To help the cobra33 support team understand the context of your issue and provide an accurate, timely resolution.
  • Service communications: To send important account-related notifications such as deposit confirmations, successful withdrawals, password changes, or security alerts.
  • Marketing (with consent): To send information about cobra33's latest promotions, bonuses, and offers — only where you have given consent to receive marketing communications.
cobra33 does not use your data to make automated decisions that have legal or significant consequences for you without human involvement in the evaluation process.
3

Sharing Data with Third Parties

Cobra33 does not sell, rent, or share members' personal data for marketing or commercial purposes with any third party. However, there are limited situations where data may be shared with other parties in order to keep the platform running:

  • Payment processor: When you make a deposit or withdrawal, the required transaction details are shared with the payment processors handling Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks. This sharing is strictly limited to what is needed to complete the transaction.
  • Gaming service providers: Third-party game software providers may receive the minimum technical data necessary to deliver their games to you through the cobra33 platform.
  • Regulatory bodies and authorities: cobra33 is legally required to disclose certain information to licensing authorities, tax authorities, or law enforcement bodies upon receipt of a valid and legally binding request.
  • Identity verification service: For the KYC process, cobra33 may engage qualified third-party services to verify the identity documents you submit. These providers are bound by strict confidentiality agreements with cobra33.
Data Processing Agreement: All third parties that receive any cobra33 member data are required to sign a data processing agreement stipulating that the data may only be used for the stated purpose and must be protected to a security standard equal to or higher than that of cobra33.
4

Cobra33's Data Security Measures

Cobra33 invests heavily in security infrastructure to ensure that members' personal data is protected at every stage — during transmission, during processing, and during storage.

  • Encryption in transit: All communications between your device and cobra33's servers are secured with TLS 1.3 protocol and 256-bit SSL certificates. This means that even if someone were to intercept your network traffic, the intercepted data would be unreadable.
  • Sensitive data encryption at rest: Sensitive data such as financial information and identification numbers are stored in encrypted form on cobra33's servers — not as plain readable text.
  • Layered access controls: Access to member data within cobra33's internal systems is role-based. Only authorised staff who require access to perform specific tasks are permitted to view the relevant data.
  • 24/7 security monitoring: cobra33's automated monitoring system continuously tracks unusual activity that may indicate intrusion attempts or data breaches, with real-time alerts sent to the security team.
  • Regular security audits: Cobra33 undergoes regular security audits conducted by independent third parties to identify and address any vulnerabilities before they can be exploited.

In the event of a data breach: If cobra33 detects a data breach affecting members' personal information, we will notify affected members within the timeframe required by applicable law, including details of the data involved and the protective steps you should take. Contact cobra33 support if you suspect your account may have been compromised.

5

Data Retention Period

Cobra33 does not retain data longer than necessary. Retention periods are determined by a combination of operational requirements and applicable legal obligations:

  • Active account data: Retained for the duration your account is active and for two years after voluntary account closure, unless otherwise required by law.
  • Financial transaction records: Retained for a minimum of seven years following the date of transaction, in line with standard financial and tax compliance requirements within the licensed industry.
  • Gaming history: Retained for five years for audit purposes, dispute resolution, and licence compliance.
  • Support communication logs: Retained for two years for quality control purposes and as a reference in the event of any disputes relating to previous support interactions.
  • Security data and system logs: Retained for one year for security analysis and threat pattern detection purposes.

Once the relevant retention period expires, data will be securely deleted using industry-standard data disposal procedures. For accounts closed due to terms violations (fraud, money laundering, etc.), data may be retained longer if required for ongoing investigations or legal proceedings.

6

Cookies & Tracking Technologies

Cobra33 uses cookies and similar technologies to make your experience on the platform smoother and more secure. Cookies are small data files stored in your web browser when you visit the cobra33 website.

There are three categories of cookies that cobra33 uses:

Privacy Enquiries

For any queries relating to data privacy or to submit a data rights request, please contact us:

support@cobra33.best
Live Chat 24/7
Response within 72 hours
cobra33 Compliance
Malaysia PDPA 2010
256-bit SSL Encryption
Strict AML policy
No sale of data to third parties
Regular security audits
KYC for large transactions

Types of Cookies cobra33 Uses

A detailed breakdown of each cookie category operating on the cobra33 platform

Managing your cookies: You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may significantly affect the functionality of the platform. For guidance on managing cookies in Chrome, Firefox, Safari, or Edge, please refer to the help section of the respective browser.

Your Privacy Rights as a cobra33 Member

Under Malaysia's Personal Data Protection Act 2010 and cobra33's policy, you have the following rights with respect to your personal data

Right of Access

You have the right to request a copy of the personal data cobra33 holds about you. We will provide this information within 21 days of receiving a valid request.

Right to Rectification

If your personal data is inaccurate or outdated, you have the right to request a correction. Updates to your address, phone number, or other details can be made via your account settings or through cobra33 support.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. This right is subject to legal data retention obligations that may override your request in some situations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. Once an objection is received, cobra33 will immediately stop using your data for that purpose.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format. This allows you to transfer your data to another service provider should you choose to do so.

Right to Restrict Processing

In certain circumstances — such as when the accuracy of data is disputed or a deletion request is under review — you may ask cobra33 to temporarily restrict the processing of your data.

To submit any data rights request, email us at support@cobra33.best with the subject line "DATA RIGHTS REQUEST" along with your account number.

8

Child Safety & Age Protection

Cobra33 strictly prohibits the use of the platform by anyone under the age of 18. Our platform contains gambling content that is unsuitable for children and minors, and we have both a legal and moral responsibility to ensure this protection is enforced.

Cobra33 does not knowingly collect any personal data from individuals under the age of 18. If we discover that personal data from a minor has been collected without proper age verification, we will take immediate action to delete that data and close the account.

Recommendations for parents: If you share a device with children at home, we recommend enabling password protection on your cobra33 account, activating parental control settings on the device, and ensuring you log out of your cobra33 account after every session. These are important child protection measures that we fully support.

If you suspect that a minor has accessed or is currently using the cobra33 platform, please contact our support team immediately at support@cobra33.best. All such reports will be handled with the highest priority and in strict confidence.

9

Privacy Policy Amendments

Cobra33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, applicable legislation, or the way the platform operates. The revised Privacy Policy will be published on this page with the latest update date.

For material amendments — meaning changes that significantly alter how we use or protect your data — cobra33 will endeavour to notify members via their registered email or in-account notification before the changes take effect. This gives you the opportunity to review the updates and make an informed decision about your continued use of the platform.

Your continued use of the cobra33 platform after an updated Privacy Policy has been published will be considered acceptance of the revised privacy terms. If you do not agree with the changes, you have the right to close your cobra33 account and request data deletion as set out under Section 7.
10

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how cobra33 handles your personal data, we encourage you to reach out to us directly. We are committed to providing clear and helpful responses within a reasonable timeframe.

  • Email: support@cobra33.best — use the subject line "PRIVACY ENQUIRY" to expedite routing to the relevant team
  • Live Chat: Available 24/7 within your cobra33 account — for general privacy enquiries that require a quick response
  • WhatsApp: 24/7 WhatsApp Support — accessible via the cobra33 homepage

We aim to respond to all privacy enquiries within 72 working hours. For more complex data rights requests — such as full data access requests or deletion requests — processing may take up to 21 calendar days in accordance with applicable legal requirements.

Complaints to the regulatory authority: If you are not satisfied with how cobra33 has handled your privacy request after going through our internal complaints process, you have the right to lodge a complaint with the data protection regulatory authority relevant to cobra33's licensing jurisdiction. Our support team can provide further information on how to contact that authority if needed.

Cobra33 Privacy FAQ

Answers to the most frequently asked questions from members about how cobra33 manages personal data

Absolutely not. Cobra33 does not sell, rent, or share members' personal data with any advertising companies or third parties for marketing purposes. Your data is used solely for platform operations, payment processing, legal compliance, and account security as outlined in this Privacy Policy. This is a core commitment cobra33 makes to the trust of our members.

KYC documents such as MyKad copies are transmitted via a fully encrypted 256-bit SSL connection. Once received, documents are stored on secure servers with strict access controls — only authorised KYC personnel may access them, and only for as long as necessary to complete the verification process. Once verification is finalised and legal retention requirements are met, the original documents are securely deleted.

Yes, you have the right to request deletion of your personal data under certain circumstances. However, please note that cobra33 may be legally required to retain certain data — in particular, financial transaction records and gaming history — for a minimum period (typically 5–7 years) for regulatory compliance purposes. Data within this mandatory retention period cannot be deleted upon request. Data that exceeds the legal retention requirement may be deleted upon a valid request from you.

Yes. When you make a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow, the transaction is processed through a secure, encrypted payment gateway. Cobra33 does not store your full eWallet account number — only the minimum information needed to identify your payment method for future withdrawals. Your complete eWallet details are handled directly by the relevant payment processor, not by cobra33.

In the unlikely event that cobra33 ceases operations, our Privacy Policy mandates responsible data handling. Member data will not be sold to third parties as an asset. Members will be notified and given the opportunity to request a copy or deletion of their data before any transfer or operational wind-down. Data that must be retained under applicable law will be managed in accordance with the relevant regulatory requirements.

There are two easy ways to stop receiving promotional emails from cobra33. First, click the "unsubscribe" link found at the bottom of any marketing email you receive from cobra33. Second, log in to your cobra33 account, go to Account Settings, and turn off the marketing communications option. Your preference will take effect within 48 hours. Note: You will still receive important account-related emails such as transaction confirmations, security alerts, and service notices — these are not marketing emails and cannot be turned off, as they are essential to your account security.

Your Data Is Protected. Play with Peace of Mind.

Cobra33 builds trust not through words, but through action — real encryption, clear policies, and a consistent commitment to every member's privacy. Join over 250,000 Malaysians who enjoy peace of mind with cobra33.

Data protected by 256-bit SSL No data sales PDPA 2010 Compliant 24/7 BM Support
Internationally Licensed
256-bit SSL
Audited RNG
24/7 Support
MY Local Payment
Responsible Gaming
Bahasa Melayu