Privacy Policy — How betso88 Protects Your Data

1 Introduction

This Privacy Policy ("Policy") is issued by betso88 ("betso88", "we", "us", "our") and applies to all personal data collected, processed, stored, or transmitted in connection with your use of the betso88 online gaming platform accessible at betso88.buzz and all associated services, features, and communications (collectively, the "Platform").

betso88 operates an online casino and sports betting platform primarily serving players across Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other cities and states. Our platform processes personal data in order to provide gaming services, fulfil payment transactions in Malaysian Ringgit (MYR) through payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks, and to comply with applicable regulatory and anti-money laundering obligations.

This Policy explains what personal data we collect about you, the purposes and legal bases for which we process it, with whom we share it, how long we retain it, and the rights available to you in relation to your data. We encourage you to read this Policy carefully. If you have any questions about our data practices, please contact us using the details set out in Section 15.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Data Controller" means betso88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of betso88 in accordance with betso88's instructions, under a binding data processing agreement.
• "Data Subject" means you — the individual whose Personal Data is being collected and processed.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "KYC" means Know Your Customer — the identity verification process required of all betso88 members before withdrawal processing and in accordance with anti-money laundering obligations.
• "Cookies" means small text files placed on your device by the betso88 Platform to facilitate authentication, analytics, and session management.

3 Personal Data We Collect

betso88 collects the following categories of Personal Data in connection with the operation of the Platform:

Category	Data Collected	When Collected
Identity Data	Full legal name, date of birth, nationality, MyKad / passport number, photograph	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration
Financial Data	Bank account details, e-wallet identifiers (TNG, Boost, GrabPay), transaction history, deposit and withdrawal records in MYR	Deposit / withdrawal processing
Technical Data	IP address, browser type and version, device identifiers, operating system, time zone, cookies	Platform access & session activity
Usage Data	Games played, bet history, session duration, navigation patterns, feature interactions	Throughout platform use
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions
Responsible Gambling Data	Self-exclusion requests, deposit limit settings, loss limit configurations, reality check preferences	When responsible gambling tools are used

We do not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) unless specifically required by applicable law or regulation and with appropriate safeguards in place.

4 How We Collect Your Personal Data

4.1 Direct Collection

The majority of Personal Data we hold about you is provided by you directly during the registration process, when completing KYC verification, when making deposits or requesting withdrawals, or when contacting our support team. You are under no legal obligation to provide this data; however, certain data is required for us to operate your account and fulfil our legal obligations, and failure to provide it may prevent us from offering you access to some or all Platform services.

4.2 Automated Collection

Technical Data and Usage Data are collected automatically when you access and use the betso88 Platform, using server logs, cookies, pixel tags, and similar tracking technologies. This data is collected to ensure platform security, optimise performance, prevent fraud, and analyse usage patterns in aggregate form.

4.3 Third-Party Sources

betso88 may receive Personal Data about you from third-party sources in the following circumstances:

• Identity verification and fraud prevention providers, for the purposes of KYC screening and anti-money laundering compliance;
• Payment processors and financial institutions, in connection with the processing of deposits and withdrawals via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and similar partners;
• Analytics providers, who may supply aggregate or pseudonymised behavioural data to help us improve the Platform.

5 Purposes of Data Processing

betso88 processes your Personal Data for the following purposes:

• Account Administration: To register, maintain, authenticate, and manage your betso88 account, including processing deposits and withdrawals in MYR, administering your VIP tier, and enabling access to gaming products.
• KYC & Identity Verification: To verify your identity, age (21+ requirement), and eligibility to use the Platform in accordance with our legal and regulatory obligations.
• Payment Processing: To process and record deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfers; and to process withdrawal requests to your designated account.
• Legal & Regulatory Compliance: To fulfil obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), data protection, and gaming licensing laws.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, collusion, and other prohibited conduct.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide ongoing player support in English, Bahasa Melayu, and Chinese.
• Responsible Gambling: To administer deposit limits, loss limits, self-exclusion requests, and reality check tools you have activated on your account.
• Platform Improvement: To analyse aggregated usage patterns and feedback to improve Platform features, game selection, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates relevant to your account, where you have given your consent or where we have a legitimate interest in doing so, subject to your right to opt out at any time.

6 Legal Basis for Processing

betso88 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

7 Data Sharing & Disclosure

7.1 Authorised Third Parties

betso88 does not sell, rent, or commercially exploit your Personal Data to third parties. We may share your Personal Data with the following categories of authorised recipients, solely to the extent necessary for the purposes described in Section 5:

• Payment processors and banking partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network participants (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency settlement providers — for transaction processing purposes;
• Identity verification and KYC service providers — for age verification, anti-money laundering screening, and fraud detection;
• Customer support technology providers — for live chat, ticketing, and communication platforms used to operate our 24/7 multilingual support;
• Analytics and platform optimisation providers — who process aggregated or pseudonymised Technical and Usage Data to help us improve the Platform;
• Regulatory and law enforcement authorities — where required or permitted by applicable law, regulation, court order, or our licensing authority.

All third parties with whom betso88 shares Personal Data are contractually required to process that data only in accordance with betso88's instructions, for the specific purpose for which it was shared, and in compliance with applicable data protection legislation.

7.2 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of betso88's assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and of any material changes to data processing practices that result therefrom.

8 International Data Transfers

betso88 may transfer your Personal Data to service providers or infrastructure located outside of Malaysia, including in jurisdictions that may not offer equivalent levels of data protection. Where such transfers occur, betso88 implements appropriate safeguards to ensure that your Personal Data remains protected to a standard consistent with applicable data protection requirements, including through contractual clauses, binding corporate rules, or other recognised transfer mechanisms.

9 Data Retention

betso88 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable minimum retention periods imposed by law or regulation. In practice, this means:

• Account data and KYC documentation are retained for a minimum of five (5) years from the date of account closure, in accordance with AML and gaming regulatory requirements;
• Transaction records (deposits, withdrawals, betting history) are retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications are retained for a period of three (3) years from the date of the most recent interaction;
• Technical and usage data held in system logs may be retained for up to twelve (12) months;
• Marketing consent records are retained for as long as you hold an account or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be associated with any individual.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. betso88 uses cookies and similar technologies (including pixel tags and session tokens) to enable core platform functionality, maintain your logged-in session, prevent fraud, and gather anonymised usage analytics.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without materially impairing platform use. They include session authentication tokens and security cookies.
• Functional Cookies: Store your preferences such as language selection (English, Bahasa Melayu, or Chinese), display settings, and responsible gambling tool configurations.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — which pages are visited, session durations, and feature engagement — to help us improve performance and user experience.
• Security Cookies: Help detect and prevent fraudulent activity, including multi-accounting attempts and suspicious login patterns.

10.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and security of the betso88 Platform. Strictly necessary cookies cannot be disabled via browser settings while the Platform is in use.

11 Your Rights as a Data Subject

Subject to applicable data protection legislation and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your Personal Data held by betso88:

To exercise any of these rights, please submit a written request to betso88 Support at [email protected] (plain text only — not a clickable link) or via the live chat facility. betso88 will respond to rights requests within a reasonable timeframe and in any event within the period required by applicable law. We may be required to verify your identity before processing a rights request.

12 Children's Privacy and Age Restriction

The betso88 Platform is not directed at, and is not intended for use by, persons under the age of 21 years. betso88 does not knowingly collect Personal Data from persons under the age of 21. If betso88 becomes aware that it has collected Personal Data from an individual under 21 without appropriate parental or legal guardian consent, we will take immediate steps to delete that data and close the associated account.

If you believe that a person under the age of 21 has registered for or is accessing a betso88 account, please contact our Support team immediately so that we can take appropriate action.

13 Security Measures

betso88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data in transit between your device and betso88 servers is encrypted using 256-bit SSL/TLS protocols;
• Encryption at Rest: Sensitive data including financial records and identity documents is stored in encrypted form on secured infrastructure;
• Access Controls: Strict role-based access controls ensure that Personal Data is accessible only to betso88 personnel who require it for their specific job function;
• Fraud Monitoring: Automated systems monitor platform activity for suspicious patterns, including unusual transaction volumes, login anomalies, and multi-accounting indicators;
• Regular Security Reviews: betso88 conducts periodic internal and external security assessments to identify and remediate vulnerabilities in our systems and processes.

Notwithstanding the foregoing, no data transmission or storage system can be guaranteed to be 100% secure. If you believe your account has been compromised or that there has been unauthorised access to your Personal Data, please contact betso88 Support immediately.

14 Amendments to This Privacy Policy

betso88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where material changes are made, betso88 will provide notice to registered members via the email address registered to your account or via an in-platform notification, prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the betso88 Platform following any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with an amended Policy, you should discontinue use of the Platform and contact Support to close your account.

15 Contact Us — Data Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by betso88, please contact us through the following channels: