At Rush333, privacy is more than a term in a legal document. It is a genuine responsibility we take seriously every day – from how we collect your information and how we use it, to how we protect it from any unauthorised access. This document explains clearly and honestly how Rush333 manages the personal data of its Malaysian members.
The principles that shape how Rush333 handles every piece of member information in Malaysia
All data transmitted between your device and the Rush333 platform is protected with 256-bit SSL encryption – the same standard used by Malaysia's leading online banking systems, including Maybank2u and CIMB Clicks. Your personal information, passwords, and financial details cannot be read by any unauthorised party.
Rush333 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we have a legal obligation to handle your data properly – not merely a moral promise. Any breach of the PDPA can result in legal action against Rush333.
Rush333 has never sold, rented, or commercialised members' personal data to advertisers, marketing companies, or any other third party – and never will. Your data is not a commodity we trade in; it is a trust we uphold.
As a Rush333 member, you have the right to access your personal data, request corrections if anything is inaccurate, and request deletion of your account and associated data. All such requests will be processed within a reasonable timeframe without unnecessary delays.
Rush333 only collects data that is strictly necessary to operate your account and deliver our services. We do not collect excessive or irrelevant data — this reflects the data minimisation principle at the core of PDPA 2010.
You have full control over whether you receive marketing communications from Rush333. Unsubscribe at any time through your account settings or by contacting support — no complicated procedures required.
This Privacy Policy explains how Rush333 ("we", "the Platform") collects, uses, stores and protects your personal information ("Member", "you") when you use the Rush333 platform on rush333.asia or any related applications.
Rush333 takes member privacy seriously. We understand that you trust us with your personal information when creating an account, making deposits via Touch 'n Go eWallet, DuitNow, GrabPay or other Malaysian payment methods, and using our services. We do not take that trust lightly.
This Privacy Policy is formulated in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and constitutes a legally binding document. By using the Rush333 platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of it, please discontinue use of the platform and contact us to close your account.
Note: This Privacy Policy applies only to data collected through the Rush333 platform. It does not cover third-party websites or services you may access via links on our platform – even though no active external links exist within Rush333.
Rush333 practises data minimisation – we only collect information that is genuinely necessary to provide the services you request. Below are the categories of data we collect and the reasons for collecting them:
Full name, MyKad number, date of birth, and gender – used for identity verification (KYC) and legal compliance.
Phone number and email address – used for account communications, transaction notifications and customer support.
Bank account details, e-wallet account numbers (Touch 'n Go, GrabPay, DuitNow, etc.) – used to process deposits and withdrawals.
Username and password (stored in encrypted hash format) – for security and account access purposes.
MyKad copy, verification selfie, and other KYC supporting documents requested for identity verification.
Records of conversations with customer support, emails, and feedback you have submitted to Rush333.
When you use the Rush333 platform, our systems automatically record certain technical information needed to keep the platform running smoothly and securely:
Rush333 does not collect precise location data (GPS), does not access your phone contacts, and does not monitor your activity outside of the Rush333 platform.
Every piece of data Rush333 collects has a clear and legitimate purpose. We do not use your data for any purpose not stated in this policy without obtaining your consent first.
| Purpose of Use | Data Types Used | Legal Basis |
|---|---|---|
| Registration & account management | Name, phone number, email, password | Contract fulfilment |
| Deposit & withdrawal processing | Bank account details, e-wallet data, transaction records | Contract fulfilment |
| Identity verification (KYC) | MyKad, selfie, supporting documents | Legal obligation |
| Security & fraud prevention | IP address, login data, activity patterns | Legitimate interest |
| Customer support | Communication records, account information | Contract fulfilment |
| Responsible gaming | Gaming activity records, betting patterns | Legal obligation |
| Marketing communications (if consented to) | Phone number, email, game preferences | Consent |
| Analytics & platform improvement | Anonymised usage data | Legitimate interest |
Rush333 may send you marketing communications about new bonuses, promotions and exclusive offers – only where you have given your consent during registration or via your account settings. You may withdraw this consent at any time by updating your communication preferences in your account or by contacting our support team.
Rush333 will not use your data to build advertising profiles or sell it to advertisers. Any marketing communications we send relate solely to Rush333's own products and offers — not third-party advertisements.
Rush333 does not sell, rent, or disclose your personal data to third parties except in the circumstances outlined below. Any data sharing that occurs is limited strictly to what is necessary.
Rush333 works with select third-party service providers to operate the platform. These providers may have limited access to your data, strictly within the scope of their function:
All of these service providers are bound by legally enforceable data confidentiality agreements and are prohibited from using your data for any purpose beyond their specific authorised function.
Rush333 may be required to disclose your data to authorities if mandated by Malaysian law or a valid court order. This includes requests from the Royal Malaysia Police (PDRM), Bank Negara Malaysia, the Securities Commission, or any regulatory body with valid jurisdiction over Rush333.
Important: Rush333 does not share your data with third parties for marketing, advertising or any other commercial purposes without your explicit consent. If you receive any communication from a party claiming to hold your data from Rush333, please report it to us immediately.
Should Rush333 be involved in a merger, acquisition, or asset sale in the future, members' personal data may be transferred as part of that process. Members will be notified in advance via an in-platform notification and have the right to close their account before any transfer takes place if they do not consent.
Rush333 invests seriously in security infrastructure to ensure your data is protected at every stage – in transit, at rest, and during processing.
Internally, Rush333 restricts access to members' personal data to only those staff who genuinely need it to carry out their duties. All personnel with access to sensitive data are bound by strict confidentiality agreements and undergo regular data protection training.
Rush333 also conducts regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
In the Event of a Data Breach: If Rush333 detects a data breach that may affect members' information, we will notify the affected members and the relevant authorities within the timeframe required by Malaysian law, and take immediate remedial action.
Rush333 does not retain your personal data indefinitely. Data is kept only for as long as necessary for the stated purpose or as required under Malaysian law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account data | For the duration of the active account | Ongoing account management |
| Financial transaction records | 7 years after transaction | Malaysian legal & tax requirements |
| KYC Documents | 5 years after account closure | AMLA Compliance & Regulatory Requirements |
| Support communication logs | 2 years | Dispute referral & quality assurance |
| Gaming activity records | 5 years | Responsible gaming & disputes |
| Technical log data | 90 days | Security & fraud detection |
| Marketing data (if consented) | Until consent is withdrawn | Promotional communications |
Once the applicable retention period has expired, data will be securely deleted or anonymised so it can no longer be linked to any individual.
Rush333 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit the Rush333 platform.
You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the Rush333 platform. For specific instructions, refer to your browser's documentation.
Rush333 does not use third-party cookies for advertising or to track your activity outside our platform. All cookies in use serve solely to operate and improve the Rush333 platform.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding your personal data. Rush333 fully respects these rights and provides straightforward mechanisms for you to exercise them.
You have the right to obtain a copy of the personal data Rush333 holds about you. Requests will be processed within 14 business days.
If the data we hold is inaccurate or outdated, you may request a correction, which we will carry out within 7 business days.
You may request deletion of your personal data upon closing your account, subject to any applicable legal retention obligations.
You may object to the processing of your data for marketing purposes at any time, without needing to provide a reason.
Under certain circumstances, you may request Rush333 to restrict the processing of your data while a matter is being resolved.
You may request the data you have provided to Rush333 in a machine-readable format for transfer to another platform.
To exercise any of the rights above, contact Rush333 via:
Rush333 will acknowledge your request within 3 business days and resolve it within a reasonable timeframe. If we require additional information or are unable to fulfil your request, we will clearly explain the reason.
The Rush333 platform is strictly restricted to individuals aged 18 years and above. Rush333 does not knowingly collect or process personal data from individuals under the age of 18.
If Rush333 discovers that we have collected personal data from anyone under the age of 18 without proper age verification, we will take immediate steps to delete that data and close the account in question.
To Parents & Guardians: If you discover that your child under the age of 18 has registered a Rush333 account, please contact us immediately at support@rush333.asia. We will take prompt action to close the account and delete all associated data.
In some cases, Rush333 members' personal data may be processed or stored on servers located outside Malaysia – for example, by international cloud service providers or overseas gaming software vendors.
When cross-border data transfers occur, Rush333 ensures that the receiving country or entity provides a level of data protection equivalent to or higher than that required under Malaysia's PDPA 2010. This is achieved through:
You may contact Rush333 for more information about the safeguards in place for cross-border data transfers related to your account.
Rush333 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.
When material changes are made to this Privacy Policy, Rush333 will notify you via an in-platform notification or by email to your registered address, at least 14 days before the amendments take effect. This gives you sufficient time to review the changes and decide whether to continue using the platform.
Minor amendments that do not materially affect how your data is used may be made without specific notice, but the "updated" date at the top of this document will always reflect the date of the latest version.
We recommend reviewing this Privacy Policy periodically to stay informed about how Rush333 protects your information. Continued use of the platform after any amendments take effect will be considered acceptance of the revised policy.
If you have any questions, concerns, or complaints regarding how Rush333 handles your personal data, or wish to exercise any of the privacy rights set out in this document, please contact us:
Rush333 is committed to responding to all privacy-related enquiries within 3 business days. For complaints requiring further investigation, we will keep you informed of the case progress within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.
Read the relevant documents for a full understanding of your rights and protections at Rush333
Now you know exactly how Rush333 protects your privacy and personal data. We believe transparency is the foundation of trust – and trust is the foundation of the Rush333 community, which now has over 850,000 members across Malaysia.