Privacy Policy Sportybet Malaysia – Our Commitment to Protecting Your Personal Data

This Privacy Policy was prepared by Sportybet to clearly explain how we manage the personal data of users on our platform in Malaysia. It covers all your interactions with Sportybet – from the moment you first browse our website, create an account, make a deposit via Touch 'n Go or DuitNow, place a bet on the Malaysia Super League, right through to when you request a withdrawal to your bank account.

This policy applies to all users who access or use Sportybet's services through the sportybet-khelo.com website, regardless of the device used — whether a mobile phone, tablet, or personal computer. If you are using the Sportybet platform on behalf of another person (for example, registering an account for a family member), you are responsible for ensuring that person understands and agrees to this privacy policy.

By using the Sportybet platform, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use Sportybet's services.

Sportybet collects several categories of personal data from users of our platform. Each category is collected for a distinct purpose and protected according to its level of sensitivity. Below is a full description of the data we may collect:

Sportybet does not collect sensitive data categories such as health information, criminal records, or biometric data unless specifically required to meet legal obligations or with your explicit consent.

Every piece of data collected by Sportybet has a clear and legitimate purpose. We do not collect data "just in case" without a specific reason. Below is a full explanation of why Sportybet needs your data:

Provision of Betting Services: Registration and account data is required to create and manage your Sportybet account, process deposits and withdrawals in MYR, record and verify the bets you place, and credit winnings to your account. Without this data, Sportybet is unable to provide betting services to you.

Identity Verification (KYC): Sportybet is required by law to verify user identities, particularly before processing withdrawals above a certain amount. This is a protective measure to prevent fraudulent use of accounts and to comply with anti-money laundering (AML) requirements.

Account Security: Technical data such as IP addresses and device information is used to detect suspicious login activity, prevent unauthorised access to your Sportybet account, and identify fraud attempts or bot usage. Sportybet uses this information to protect you — not to block legitimate access.

Platform Improvements: Anonymised usage analytics help Sportybet understand how Malaysian users interact with our platform — which pages are visited most, which betting markets are most popular, and where users encounter technical difficulties. This information is used to continuously improve the Sportybet user experience.

Communication & Support: Your contact data enables Sportybet to send you important account information, security notifications, and responses to your support enquiries. We may also send you promotional communications — however, you can opt out of these at any time through your account settings.

Under Malaysia's PDPA 2010, Sportybet has a lawful basis for processing your personal data. The primary bases on which we process your data are:

• Contractual Performance: Data processing required to deliver the betting services you request – account registration, processing deposits and withdrawals in MYR, and managing Sports Betting and Live Casino wagers.
• Legal Obligation: Processing required to comply with applicable Malaysian law, including PDPA, KYC requirements under anti-money laundering legislation, and directives from lawful authorities.
• Legitimate Interest: Processing for security and fraud prevention purposes that serves the legitimate interests of Sportybet and our players – provided it does not override your privacy rights.
• Consent: For processing that falls outside the three categories above – such as using your data for marketing communications – Sportybet will request your explicit consent beforehand.

You have the right to withdraw any consent you have given at any time. Withdrawing consent does not affect the validity of any processing that took place before the withdrawal, but it may mean Sportybet is no longer able to provide certain services to you.

Sportybet does not sell players' personal data to any third party. However, there are limited situations where Sportybet needs to share your data with certain parties in order to deliver our services effectively. All such data sharing is carried out with appropriate safeguards in place.

Payment Service Providers: When you make a deposit via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks, and others), Sportybet shares the necessary transaction data with the relevant payment service provider to process the transaction. These providers are subject to their own privacy policies and security standards.

Game Providers: Sportybet uses live casino and slots gaming software from world-class providers. These providers may receive the technical data required to deliver the games, but they do not receive any personally identifiable information belonging to Sportybet players.

Regulatory Authority: Sportybet will disclose data to Malaysian authorities when required by law — for example, pursuant to a court order, criminal investigation, or a formal request from a legitimate Malaysian law enforcement agency.

Sportybet will not share your personal data with advertisers, marketing companies, or third-party data brokers for targeted advertising purposes without your explicit prior consent.

Sportybet takes significant investment in data security infrastructure seriously, because we understand that your trust depends on how well we protect the sensitive information you entrust to us. Below are the concrete security measures we have in place:

Data Encryption: All data transmitted between your browser or app and Sportybet's servers is encrypted using TLS (Transport Layer Security) protocol with 256-bit encryption keys. This is the same level of encryption used by Malaysia's major banking institutions, including Maybank and CIMB. Data stored in Sportybet's databases is also encrypted for additional protection.

Access Controls: Access to player personal data within Sportybet's internal systems is strictly limited on a need-to-know basis. Only staff whose specific job responsibilities require access to that data are granted it, and all access is logged for internal audit purposes.

Two-Factor Authentication: Sportybet offers two-factor authentication (2FA) for all user accounts. We strongly encourage all members to enable this feature, as it adds a significant extra layer of protection against unauthorised access.

Security Monitoring: Sportybet's systems are continuously monitored to detect any suspicious activity, unauthorised access attempts, or patterns that may indicate a security threat. Our technical security team responds to identified threats in real time.

Sportybet does not retain your personal data indefinitely. We have a clear data retention policy that defines how long each type of data is kept before it is securely deleted or anonymised.

Once the specified retention period has lapsed, Sportybet will securely delete your data using methods that ensure it cannot be recovered, or will anonymise it in such a way that it can no longer be linked to you as an individual.

Sportybet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the Sportybet website. They help us remember your preferences and understand how you use our platform.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect Sportybet platform functionality, such as your ability to log in or save your preferences. Analytics and marketing cookies can be disabled without impacting core platform functions.

As a Sportybet user and an individual protected under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold about you. Sportybet respects and facilitates the exercise of these rights:

To submit any request relating to your data rights, please contact the Sportybet support team by email at support@sportybet-khelo.com or via Live Chat. We may need to verify your identity before processing a data rights request to ensure the security of your information.

Sportybet's services are strictly for individuals aged 21 and above. Sportybet does not knowingly collect or process the personal data of children or individuals under the age of 21. This is not only a privacy policy – it is a business and legal requirement that we take very seriously.

Sportybet encourages parents and guardians to use appropriate parental control software to restrict children's access to betting websites. If you have any concerns about child protection in relation to the Sportybet platform, please contact our support team by email at support@sportybet-khelo.com.

Sportybet may update this Privacy Policy from time to time in response to changes in how we operate, updates to Malaysian data protection laws, or the introduction of new services that involve processing data in new ways. We are committed to keeping you informed of any material changes to how we manage your data.

When significant changes are made to this Privacy Policy, Sportybet will notify all active members via their registered email address and through in-platform notifications at least 14 days before the changes take effect. This gives you sufficient time to review the changes and decide whether to continue using the Sportybet platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Sportybet handles your personal data, we encourage you to reach out to us through the channels below. Our team is ready to assist you in English and will provide clear, honest responses to every privacy enquiry.

When submitting a privacy-related enquiry, please include your Sportybet account number (if applicable), a clear description of your enquiry or request, and contact details we can use to update you on the status of your request. Sportybet takes all privacy enquiries seriously and is committed to providing timely, meaningful responses.