Privacy Policy mybet — Protection of Your Personal Data

1 Introduction and Scope of Privacy Policy

Mybet ("we", "Platform" or "company") values the privacy of every individual who interacts with our online entertainment platform at mybet.cx. This Privacy Policy has been carefully drafted to clearly and transparently explain how we collect, store, process, use and protect your personal data.

This policy applies to all users of the mybet platform — including website visitors, prospective members, registered members and former members. It covers all your interactions with mybet through the official website, the mybet mobile app, customer support channels and any related electronic communications.

We understand that your trust is the most valuable asset we hold. That is why we are committed to always handling your personal data with the highest level of care, transparency and responsibility — not merely because the law requires it, but because it is simply the right thing to do.

2 Information We Collect

Mybet collects various types of information depending on how you interact with our platform. Generally, this information falls into two main categories: information you provide directly, and information we collect automatically when you use the platform.

Information you provide directly:

• Registration information: Full name, date of birth, identification card or passport number, email address, mobile number, residential address
• Identity verification information (KYC): Copies of identity documents, utility bills or bank statements as proof of address
• Financial information: Bank account number, account holder name, digital wallet information (excluding PIN or password)
• Communications with us: Records of live chat sessions, support emails, feedback and complaints you have submitted
• Account preferences: Language settings, game limits you have set yourself, marketing communication history

Information collected automatically:

• Technical data: IP address, device type, operating system, browser version, screen resolution
• Platform activity data: Pages visited, session duration, game history, betting history, deposit and withdrawal records
• Location data: General geographic location based on IP address (not precise GPS location)
• Cookie and session data: Login session tokens, display preferences, game session details

Data Category	Primary Purpose	Legal Basis
Registration Information	Identity verification, account management	Contract / Legal
KYC Documents	AML/KYC compliance, fraud prevention	Legal obligation
Financial Information	Deposit & withdrawal processing	Contract / Legal
Activity Data	Service improvement, security	Legitimate interests
Technical Data	Platform security, fraud prevention	Legitimate interests
Marketing Preferences	Promotional communications & personalised offers	Consent

3 How We Use Your Information

Every piece of information we collect is used for a specific and reasonable purpose. mybet never uses your data beyond what is necessary to deliver the services you request or as required by law.

In detail, we use your information for the following purposes:

• Account management: Creating and maintaining your account, processing registration, verifying identity and managing account settings
• Financial transaction processing: Processing deposits, withdrawals and all financial transactions securely and accurately
• Legal compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering) and reporting requirements to the relevant authorities
• Platform security: Detecting and preventing fraud, account abuse, hacking attempts and other suspicious activity
• Service improvement: Analysing usage patterns to improve the interface, performance and overall user experience
• Service communications: Sending important account notices, security updates, policy changes and transaction information
• Marketing (with your consent): Sending promotional offers, personalised bonuses and new product information — only if you have agreed to receive them
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and provide appropriate support

4 Sharing Information with Third Parties

Mybet does not sell, rent, or trade your personal data to third parties for any commercial purpose. However, in the course of operating the platform safely and lawfully, there are limited circumstances where information may need to be shared with trusted parties.

Third parties that may receive some of your data include:

• Payment providers: FPX, Touch 'n Go eWallet, GrabPay, ShopeePay and banking institutions that process your financial transactions. Only information necessary for transaction processing is shared.
• Technology service providers: Companies providing technical infrastructure, such as server hosting, analytics services and fraud prevention tools — all bound by strict confidentiality agreements.
• Regulatory authority: Licensing bodies, law enforcement agencies and regulatory authorities when required by applicable law in Malaysia.
• Independent Auditor: Third-party audit and verification firms that verify the fairness of games and compliance with our platform's security standards.

All third parties we work with are required to sign data protection agreements binding them to the same security standards as mybet. They are only permitted to use your data for the specific purposes stated and may not use it for any other purpose.

5 Data Security and Protection

Mybet continuously invests in the latest security technologies and procedures to ensure your personal data remains protected at all times. We adopt a multi-layered security approach encompassing technical, organisational, and physical safeguards.

• Data encryption in transit: All communications between your device and mybet's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption
• Stored data encryption: Sensitive data such as financial information and KYC documents are encrypted at rest using AES-256 encryption
• Strict access control: Only authorised personnel with a legitimate business need may access members' personal data, with all access logged and audited
• 24/7 Monitoring: Real-time threat monitoring systems operate around the clock to detect and respond to any unauthorised access attempts
• Periodic penetration testing: Independent security experts conduct regular security testing to identify and close any vulnerabilities before they can be exploited.
• Incident response plan: Clear, tested procedures to respond swiftly in the event of any security breach

In the event of a data breach affecting your personal information, mybet is committed to notifying you within 72 hours of becoming aware of the incident — in line with international best practices.

6 Cookies and Tracking Technologies

The mybet platform uses cookies and similar tracking technologies to provide you with a better, more personalised and more secure experience. Cookies are small text files stored in your browser when you visit our website.

We use several types of cookies for different purposes:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference cookies: Saving your preferences such as language, display theme and game settings for a more personalised experience.
• Analytics cookies: Helping us understand how members use the platform so we can improve its design and performance. Data collected is aggregated and does not identify individuals.
• Security cookies: Used to detect suspicious activity, prevent fraud and protect your account from unauthorised access.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect certain functions of the mybet platform.

7 Data Retention Period

Mybet only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. Once the retention period expires, data will be securely deleted or anonymised.

Data Type	Retention Period
Active account information	Throughout active account + 7 years
Financial transaction records	7 years (legal requirement)
KYC Documents	5 years after account closure
Platform activity logs	2 years
Support communication records	3 years
Analytics cookie data	13 months

8 Your Rights as a Data Owner

As a mybet member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data. We respect and facilitate the exercise of all these rights.

To exercise any of the above rights, please contact our Data Protection Officer via email [email protected] or via 24/7 live chat. Your request will be processed within 14 working days. We may require identity verification before processing your request to ensure the security of your data.

9 Children's Privacy

The mybet platform is intended exclusively for individuals aged 18 and above. We do not accept registrations from minors and do not knowingly collect any personal information from children or individuals under 18.

If we find that we have inadvertently collected data from an individual under 18, the account in question will be closed immediately and all related data will be deleted without delay. Parents or guardians who believe their child has registered on our platform are encouraged to contact us immediately.

10 Links to External Websites

The mybet platform may contain links to third-party websites or services in certain contexts, such as payment providers or licensed game providers. mybet's Privacy Policy does not apply to those third-party websites or services.

We encourage you to read and understand the privacy policy of every website you visit before providing any personal information. mybet is not responsible for the privacy practices or content of third-party websites.

11 Privacy Policy Amendments

Mybet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements. Any amendments will be displayed on this page with an updated revision date.

For significant amendments, we will notify members via an in-platform notice or email at least 7 days before the amendments take effect. Continued use of the platform after the effective date constitutes your acceptance of the latest version of this Privacy Policy.

12 How to Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or the way we handle your personal data, we are here to listen and assist. The mybet Data Protection Team can be reached via:

• Live Chat: Available 24/7 directly on the mybet platform in Malay, English and Mandarin
• Email: [email protected] — response within 1–2 business days

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Department of Personal Data Protection or the relevant regulatory body.