Privacy Policy Sportsbet Malaysia –
Your Data, Our Protection

This Privacy Policy ("Policy") is published by sportsbet ("we", "the company", "the platform") and applies to all users who access or use the sportsbet-win.com website and all related services we offer to Malaysian players.

As an online sports betting and casino platform operating in Malaysia, sportsbet understands that your trust is our most valuable asset. We take this responsibility seriously and are committed to ensuring that every aspect of how we handle your personal data meets the highest standards of privacy protection, including full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia.

This policy explains:

• The types of personal information we collect from you.
• How we use that information to deliver sportsbet's services.
• Who we share your information with and under what circumstances.
• Your rights regarding your personal data and how to exercise them.
• The security measures we take to protect your data.

Sportsbet collects various types of information from you depending on how you interact with our platform. Data collection is limited to what is necessary to deliver a high-quality service.

Data You Provide Directly:

• Identity Information: Full name, date of birth, MyKad or passport number (for KYC verification purposes).
• Contact Information: Malaysian phone number, email address, and residential address.
• Financial Information: Bank account number or e-wallet details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) for deposits and withdrawals in MYR.
• Proof of Identity: A copy of your MyKad or other identity document requested during the KYC process.

Automatically Collected Data:

• Your IP address, browser type, and device information used to access sportsbet.
• Platform activity records including pages visited, visit times, and actions taken.
• Betting records and transaction history in your account.
• Usage data collected through cookies and similar tracking technologies.

Sportsbet uses your personal data only for legitimate purposes directly relevant to the services we provide. The following are the primary purposes for which sportsbet uses your data:

• Account Management: Creating, maintaining, and updating your sportsbet account, including processing registration and identity verification.
• Transaction Processing: Processing deposits via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX, as well as handling withdrawal requests to your account in MYR.
• Service Delivery: Enabling you to access all sportsbet services including Sports Betting, Live Casino, slots, and lottery.
• Account Security: Detecting and preventing fraudulent activity, money laundering, or platform abuse.
• Service Communications: Sends important notifications related to your account, such as transaction confirmations, policy updates, and security information.
• Marketing (with Consent): Sending you information about sportsbet promotions, bonuses, and special offers — only where you have given consent to receive marketing communications.
• Legal Compliance: Fulfilling sportsbet's obligations under applicable Malaysian law, including the PDPA 2010, anti-money laundering (AML) requirements, and regulatory directives.
• Platform Improvements: Analysing usage patterns to improve the user experience and develop new sportsbet features.

Sportsbet does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in certain limited circumstances, sportsbet may share your information with the following parties:

• Payment Service Providers: Malaysian e-wallet and online banking providers (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX) that process your financial transactions. Data sharing is limited strictly to the information needed to complete each transaction.
• Technology Service Provider: Companies providing the technical infrastructure for the sportsbet platform — including web hosting, cybersecurity, and analytics providers — all bound by strict confidentiality agreements.
• Game Providers: Gaming providers such as Evolution Gaming and Pragmatic Play that supply Live Casino and slots games on the sportsbet platform. Data shared is kept to the minimum necessary to enable gameplay.
• Regulatory Authority: Where required by Malaysian law, court order, or direction from a relevant regulatory or law enforcement authority.
• Business Transfers: In the event of a merger, acquisition, or sale of sportsbet assets, user data may be transferred as part of the business assets, with advance notice provided to users.

Sportsbet continually invests in the latest security technologies and practices to keep your personal data protected at all times. The security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communications between your browser and sportsbet's servers are encrypted using 256-bit SSL/TLS protocol — the same standard used by leading banking institutions in Malaysia.
• Data-at-Rest Encryption: Sensitive personal data stored in sportsbet's databases is encrypted using AES-256, ensuring it remains unreadable even in the event of unauthorised access.
• Strict Access Controls: Access to user data is restricted on a minimum-privilege basis — only staff who require access to perform their duties are permitted to do so.
• Two-Factor Authentication (2FA): 2FA is available for all sportsbet accounts to provide an additional layer of security.
• Continuous Monitoring: Sportsbet's systems are monitored 24/7 to detect and respond to any security threats or unauthorised access attempts.
• Regular Security Audits: Independent security audits are conducted periodically by third parties to assess and strengthen the security posture of the sportsbet platform.

While we take all reasonable precautions, no system can guarantee absolute security. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

Under Malaysia's PDPA 2010 and sportsbet's own policies, you have the following rights regarding your personal data. Sportsbet is committed to making it easy for you to exercise these rights:

To exercise any of the rights above, please contact sportsbet's Data Protection Officer (DPO) by email privacy@sportsbet-win.com or via the in-platform live chat. We aim to respond to all data-related requests within 30 business days.

Sportsbet uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and deliver relevant content. The following are the types of cookies we use:

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the sportsbet platform. For more information on managing cookies, please refer to your browser's help documentation.

Sportsbet services are exclusively for individuals aged 18 and above. Sportsbet does not knowingly collect, store, or process any personal information from individuals under the age of 18.

If we find that we have collected data from someone under the age of 18 without appropriate age verification, we will promptly delete that information and close the account in question. Parents or guardians who discover that their child has registered a sportsbet account without permission are urged to contact us immediately.

In the course of sportsbet's operations, some third-party service providers we work with (such as cloud infrastructure providers and international gaming providers) may store or process data outside Malaysia. In such cases, sportsbet ensures that:

• Data transfers are made only to countries or entities that provide a level of data protection equivalent to or greater than that of Malaysia's PDPA.
• Appropriate data processing agreements are signed with all relevant third-party providers.
• Data transferred is kept to the minimum necessary to deliver the relevant service.

Sportsbet retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required under Malaysian law. General retention periods are as follows:

• Active Account Data: Retained for as long as your sportsbet account remains active.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction in accordance with Malaysian financial legislation.
• Communication Records: Retained for 2 years from the date of communication.
• KYC Data: Retained for 5 years after account closure in accordance with anti-money laundering requirements.
• Log & Technical Data: Retained for 12 months.

Once the relevant retention period expires, your data will be securely deleted or anonymised. You may also request early deletion through the channels listed in Section 06, subject to any legal obligations that may require us to retain certain data.

Sportsbet may update this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other relevant reasons. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Sends email notifications to all registered sportsbet members with an active email address.
• Displaying a prominent notice on the sportsbet homepage for a minimum of 30 days.

It is your responsibility to review this Privacy Policy periodically. Continued use of the sportsbet platform following any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how sportsbet handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Commissioner reachable through the official portal of the Malaysian Ministry of Communications and Digital.