This Privacy Policy explains how Lisboa33 collects, processes, stores, and protects the personal data of its users. We are committed to handling your information responsibly, transparently, and in accordance with applicable data protection principles.
Lisboa33 ("the Company", "we", "us", "our") operates the online gambling platform accessible at lisboa33.cam (the "Platform"). This Privacy Policy ("Policy") governs how the Company collects, uses, processes, stores, discloses, and protects personal information submitted by or obtained from users ("Player", "you", "your") who access or use the Platform in any capacity.
We recognise that personal data is a matter of trust and take our obligations as data controller seriously. This Policy is intended to give you a clear, transparent account of our data practices so you can make an informed decision about using Lisboa33's services.
This Policy should be read in conjunction with the Lisboa33 Terms & Conditions, which govern your overall use of the Platform. By registering an Account or using the Platform, you confirm your acceptance of this Policy.
The following terms used in this Policy carry the meanings set out below:
The categories of Personal Data collected by Lisboa33 vary depending on the nature of your interaction with the Platform. The following table summarises the primary categories:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad / passport number | Registration & KYC verification |
| Contact Data | Email address, mobile number, city of residence (e.g., Kuala Lumpur, Penang, JB) | Registration & Account updates |
| Financial Data | Payment method details, deposit/withdrawal records, transaction amounts in MYR | Deposits, withdrawals & KYC |
| Technical Data | IP address, device type, browser version, operating system, session tokens | Platform access (automatic) |
| Usage Data | Games played, wagers placed, betting history, bonus utilisation, session duration | Ongoing Platform use |
| Communication Data | Live chat transcripts, support email correspondence, feedback submissions | Customer support interactions |
| KYC Documentation | Images of identity documents, selfie verification photos, proof of address documents | KYC verification process |
The Company does not intentionally collect Sensitive Personal Data categories such as racial or ethnic origin, health data, political opinions, or biometric data beyond what is strictly required for identity verification purposes. Where such data is incidentally included in KYC documentation, it is processed solely for verification and is not used for any other purpose.
The majority of Personal Data we hold is provided directly by Players during the following interactions:
When you access or use the Platform, certain Technical Data and Usage Data is collected automatically through our systems and third-party analytics tools. This includes IP address logging, session tracking, device fingerprinting (for fraud prevention purposes), and behavioural analytics relating to game play and navigation patterns.
In limited circumstances, we may receive Personal Data from third-party sources, including:
Lisboa33 processes Personal Data for the following clearly defined purposes only:
Each processing activity carried out by Lisboa33 is grounded in one or more of the following lawful bases:
Lisboa33 may share Personal Data with carefully selected third-party service providers who process data on our behalf as Data Processors, strictly pursuant to written data processing agreements. Categories of such processors include:
Lisboa33 may disclose Personal Data to competent authorities, regulators, law enforcement agencies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of the Company, its users, or third parties.
Lisboa33 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | Regulatory compliance, AML obligations |
| KYC Documents | 5 years after account closure | Identity verification record-keeping |
| Transaction Records | 7 years | Financial record-keeping requirements |
| Technical & Usage Data | 24 months from collection | Fraud analysis & platform improvement |
| Support Communications | 3 years from interaction date | Dispute resolution & quality assurance |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
Following expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with industry-standard data destruction protocols.
Lisboa33 uses the following categories of cookies and similar tracking technologies on the Platform:
You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some Platform features. Strictly necessary cookies cannot be disabled as they are essential to Platform operation.
Subject to applicable law and the legitimate interests of the Company (including AML and regulatory compliance obligations), you have the following rights in respect of your Personal Data held by Lisboa33:
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of any inaccurate or incomplete Personal Data held in your Account.
Request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
Request temporary restriction of processing in certain circumstances, such as while data accuracy dispute is under review.
Request a structured, machine-readable copy of your Personal Data where processing is based on consent or contractual necessity.
Object to processing based on legitimate interests or direct marketing. Marketing opt-outs can be actioned immediately via our support team.
To exercise any of the above rights, please contact our support team via live chat or by email (see Section 16). We will acknowledge requests within 5 business days and aim to fulfil them within 30 calendar days. Identity verification may be required before a request is actioned to ensure data security.
Lisboa33 implements a comprehensive, multi-layered security framework to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
While we implement robust security measures, no digital platform can guarantee absolute security. We encourage Players to maintain strong, unique passwords and to enable two-factor authentication on their Accounts.
As part of our KYC process, all Players are required to provide satisfactory proof of age before withdrawal rights are activated. Date of birth is collected at registration and cross-referenced against submitted identity documentation (such as a Malaysian MyKad) during the verification process.
If you are a parent or guardian and believe that a minor has registered an Account on Lisboa33 or submitted Personal Data to our Platform, please contact our support team immediately so the matter can be addressed without delay.
Lisboa33 operates under international gaming licensing and may process and store Personal Data on servers located outside of Malaysia. When Personal Data is transferred across international borders, the Company ensures that appropriate safeguards are in place to protect the data, including:
By using the Platform, you acknowledge that your Personal Data may be transferred to, stored, and processed in jurisdictions outside Malaysia. We take all reasonable steps to ensure that such transfers are conducted securely and with appropriate protections in place.
The Lisboa33 Platform integrates with certain third-party services necessary for its operation, including payment gateways (such as Touch 'n Go eWallet, Boost, DuitNow, and FPX) and game content providers. When you interact with these integrated services, data may be processed by those third parties in accordance with their own privacy policies.
Lisboa33 is not responsible for the data practices of third-party services. We encourage Players to review the privacy policies of any third-party service they interact with. Our integration with payment providers such as Maybank, CIMB, and Public Bank is solely for the purpose of facilitating transactions and does not involve any additional sharing of your Lisboa33 Account data beyond what is strictly necessary.
Lisboa33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or platform functionality. The date of the most recent revision is displayed at the top of this page.
Where changes are material — particularly where they affect your rights as a data subject or the purposes for which we process your data — we will notify you via the email address registered to your Account or via a prominent notice on the Platform prior to the changes taking effect.
For any privacy-related queries, data subject access requests, consent withdrawals, or data breach notifications, please contact the Lisboa33 support team through the following channels:
When submitting a data subject rights request, please state clearly the nature of your request and provide sufficient information to allow us to verify your identity securely. This protects your Personal Data from being disclosed to unauthorised third parties.
Privacy is not an afterthought at Lisboa33 — it is built into how we operate. Here is a plain-language summary of our key data protection commitments.
Your Personal Data is never sold to third parties for commercial or marketing purposes. Full stop. Data is shared only with processors who need it to deliver the service and who are bound by strict confidentiality obligations.
Every data transmission between your device and Lisboa33's servers is protected by 256-bit Transport Layer Security encryption — the same standard used by global financial institutions and major banks including Maybank and CIMB.
We collect only the data we need and process it only for the purposes stated in this Policy. We do not repurpose your data for undisclosed uses. Every processing activity has a clear, documented lawful basis.
Access, rectification, erasure, portability — your data rights are real and actionable at Lisboa33. Submit a request via live chat or email and we will fulfil it within 30 days, subject to legal retention requirements.
We do not hold Personal Data indefinitely. Retention periods are documented, enforced, and aligned with our regulatory obligations. Data that is no longer required is securely and irreversibly deleted.
Our mandatory identity verification process protects not just the platform but every Player — by ensuring that account access, withdrawals, and bonuses are tied to verified, real identities. Your MyKad data is handled with full confidentiality.
Our support team handles data enquiries, access requests, and consent withdrawals around the clock. Malaysian players across Kuala Lumpur, Penang, and Johor Bahru are always welcome to reach out.