My bet Privacy Policy – Personal Data Protection for Malaysian Users

My bet is committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy has been drafted in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia, which sets the minimum standards for processing personal data in commercial activities.

This Policy applies to all registered my bet members, users browsing the platform without an account, and anyone who interacts with us via email, phone or other communication channels. It covers all personal data we process in connection with my bet's business operations in Malaysia.

We periodically review this Privacy Policy to ensure it remains accurate and up to date. Any material amendments will be communicated to members via registered email or a prominent notification on the my bet platform at least 14 days before the changes take effect.

My bet collects various types of personal data depending on how you interact with our platform. We only collect data that is strictly necessary for the stated purposes.

A. Data You Provide Directly:

• Identity information: Full name, identity card number (MyKad), date of birth, gender and nationality
• Contact information: Email address, mobile number and residential address in Malaysia
• Account information: Chosen username and password (stored as an irreversible hash that cannot be decrypted)
• Financial information: Payment method details used (Touch 'n Go eWallet, GrabPay, DuitNow, FPX) – we do not store full card numbers
• Verification documents: Copy of MyKad, utility bill or bank statement for KYC purposes when required

B. Data Collected Automatically:

• Device data: Device type, operating system, phone model and browser version
• Network data: IP address, Internet Service Provider (ISP) name, and approximate geographic location (state)
• Platform usage data: Pages visited, time spent, games played and betting patterns
• Session data: Login and logout times, active session duration
• Cookie data: Information stored via cookies and related tracking technologies (see Section 7)

My bet uses your personal data solely for legitimate purposes that are stated before or at the time of collection. The primary purposes for which data is used are as follows:

• Account management: To securely create, verify, and manage your my bet account
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as your winnings withdrawals
• KYC and AML compliance: Meeting Know Your Customer and anti-money laundering requirements as mandated under Malaysian law
• Service delivery: Enables you to play slots, Live Casino, Sports Betting (Malaysia Super League, EPL, badminton), lottery and all other games on the my bet platform
• Customer support: Effectively handling your complaints, enquiries and technical support requests
• Security and fraud prevention: Detecting and preventing fraudulent activity, account misuse and unauthorised access
• Platform improvements: Analysing usage patterns to improve the gaming experience and enhance platform features
• Marketing communications: Sending promotional information, bonuses and my bet offers – you may unsubscribe at any time
• Legal compliance: To fulfil relevant legal reporting and enforcement obligations

My bet will not use your personal data for any other purpose without first obtaining your consent or without a valid legal basis.

My bet does not sell or disclose members' personal data to third parties for marketing purposes. However, there are limited circumstances where data sharing is necessary for platform operations:

Third-Party Service Providers (Data Processors):

• Payment processors: Parties that handle Touch 'n Go eWallet, GrabPay, DuitNow and FPX transactions – only information necessary to process transactions is shared
• KYC service provider: Companies that assist in verifying member identities for legal compliance
• Cloud infrastructure provider: Server hosting services that process data under strict confidentiality agreements
• Platform analytics provider: Tools that help my bet understand usage patterns – only anonymised data is used
• Licensed game providers: Game session information is shared with game providers for auditing and dispute resolution purposes

Legally Required Disclosures:

My bet may be required to disclose personal data when mandated by Malaysian law, court order, law enforcement authorities, or relevant regulatory bodies. In all such cases, we will disclose only the minimum information necessary.

My bet implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or inadvertent disclosure:

• Encryption in transit: All data transmitted between your device and my bet's servers is protected by TLS 1.3 with 256-bit SSL encryption
• Storage encryption: Sensitive personal data is stored in encrypted form within a secured database
• Tiered access controls: Only staff who require access to specific data to carry out their duties are permitted to do so, in accordance with the principle of least privilege
• Two-factor authentication (2FA): 2FA is available for all my bet member accounts and is mandatory for accounts with elevated privilege levels
• 24/7 Security Monitoring: An automated monitoring system detects and alerts on suspicious activity in real time
• Periodic security audits: Internal and external security audits are conducted periodically to identify and address vulnerabilities
• Hashed password: Account passwords are stored as one-way cryptographic hashes — my bet staff cannot view your actual password

While my bet takes reasonable steps to protect your data, no system can guarantee absolute security. In the event of a security incident involving members' personal data, my bet will notify affected members and the relevant authorities within the timeframe prescribed by Malaysia's PDPA.

As a my bet member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

My bet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our site.

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the my bet platform. To manage your cookie preferences on my bet, go to "Privacy Settings" in your account profile.

In the course of providing my bet platform services, there may be instances where members' personal data needs to be processed by service providers operating outside Malaysia — for example, cloud infrastructure providers or international game software providers.

Where cross-border data transfers are necessary, my bet ensures that:

• The destination country or territory provides a level of data protection comparable to Malaysian standards
• Appropriate contractual arrangements (such as Standard Contractual Clauses) agreed upon with the receiving party
• Data transfers are carried out on the basis of legitimate business need and are limited in scope
• Full compliance with Malaysian PDPA provisions on international data transfers is maintained at all times

You may request a list of countries or regions where your data may be processed by contacting the my bet Data Protection Officer.

My bet retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are our data retention guidelines:

• Active account data: Retained for the duration your my bet account remains active
• Financial transaction data: Retained for a minimum of 7 years after the transaction, in line with Malaysian financial legal requirements
• KYC and identity verification data: Retained for a minimum of 5 years following account closure, in line with AML requirements
• Customer support communication logs: Retained for 3 years
• Session and security log data: Retained for 12 months
• Marketing data (with consent): Retained until you withdraw consent

When data is no longer needed and there is no legal obligation to retain it, my bet will dispose of it securely — whether through permanent deletion, anonymisation or physical destruction for printed records.

My bet encourages you to reach out if you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data.

• Data Protection Officer Email: privacy@mybet-bangla.com
• General Support Email: support@mybet-bangla.com
• 24/7 Live Chat: Available directly within the my bet platform after logging in
• Response Time: We are committed to responding to all privacy-related enquiries within 72 hours

If you are not satisfied with my bet's response to your privacy complaint, you have the right to lodge a formal complaint with Malaysia's Personal Data Protection Department (under the Ministry of Digital).