Bet1 Privacy Policy – Malaysia Player Personal Data Protection

This Privacy Policy ("Policy") is issued by bet1 ("we", "Platform") and applies to all users who access or use the bet1.plus platform, the bet1 mobile app, and all related services.

We understand that your privacy matters greatly. Your trust in us is the cornerstone of this relationship, and we do not take that responsibility lightly. Every decision we make regarding player data is made with your best interests and security as our top priority.

This Policy explains in detail: what types of personal data we collect, how and why we use it, with whom we share it (where applicable), how we protect it, and what rights you have over your personal data. If you have any questions not addressed in this document, our privacy team is ready to assist.

Bet1 collects your personal data only when it is strictly necessary to provide a quality and secure service. Below are the categories of data we collect along with their purposes:

We also collect data you voluntarily provide, such as feedback, reviews, or additional information submitted during the KYC verification process. All such data is handled with the same level of protection.

The personal data we collect is used for lawful and transparent purposes. bet1 does not use your data for any purpose other than those stated below, unless with your explicit consent:

• Account management: Creating, verifying, and managing your player account, including mandatory KYC processes.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and suspicious activity.
• Service communications: Sending important notifications relating to your account, transactions, policy changes, and security updates.
• Platform enhancement: Analysing usage patterns to improve platform performance, interface, and overall experience.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
• Legal compliance: Meeting reporting and record-keeping obligations required by law and regulatory bodies.
• Marketing communications: Sending relevant promotions and offers — only if you have given your consent to accept it.

The legal bases we rely on to process your data include: performance of a contract (account agreement), legal obligations, our legitimate interests in operating a secure business, and your consent for marketing purposes. You may withdraw your marketing consent at any time through your account settings.

Bet1 does not sell or rent your personal data to any third party. However, in operating the platform, we may need to share certain information with trusted parties in the following limited circumstances:

• Payment providers: Transaction information required to be shared with payment processors, banks, and e-wallet providers to enable deposits and withdrawals to be processed securely.
• Game software providers: Minimum technical data required by third-party game providers to ensure games function correctly and fairly.
• Identity verification services: KYC information required to be shared with licensed identity verification service providers to meet compliance requirements.
• Legal authorities: Data required by courts, law enforcement agencies, or regulatory bodies pursuant to a valid legal order.
• IT service providers: Cloud and cybersecurity infrastructure providers that help us operate and protect the platform, bound by strict confidentiality agreements.

The security of your data is bet1's highest priority. We continuously invest in the latest security infrastructure to ensure your personal and financial data remains protected at all times. Key protective measures we have implemented include:

• Data encryption in transit: All communications between your device and bet1 servers are protected by TLS 1.3 protocol with 256-bit SSL encryption.
• Data encryption at rest: Sensitive data stored in our databases is encrypted using AES-256, ensuring it remains unreadable even in the event of unauthorised access.
• Two-factor authentication (2FA): All account logins are secured with 2FA options via an authenticator app or SMS, adding an extra layer of security.
• 24/7 security monitoring: Our cybersecurity team monitors the platform around the clock to detect and respond to any threats promptly.
• Regular penetration testing: Security audits and penetration testing are conducted regularly by independent security experts to identify and address any vulnerabilities.
• Role-based access control: Only authorised personnel with a legitimate business need may access player data, and every access is logged and monitored.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. We therefore encourage you to also safeguard your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

Bet1 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance cookies: Helping us understand how players use the platform by collecting anonymised usage data, enabling us to identify areas for improvement.
• Functional cookies: Saving your preferences such as language, display settings, and other options so you do not need to reconfigure them on every visit.
• Marketing cookies: Used to display relevant promotions and advertisements to you. This type of cookie is only activated with your consent and can be disabled at any time.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of parts of our platform. For more information on managing cookies, please refer to your web browser's help section.

As a bet1 player in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact our privacy team by email at [email protected]. We will verify your identity before processing any request to ensure your data remains fully protected.

Bet1 does not retain your personal data longer than necessary for the purpose it was collected, or beyond the period required by law. The following are general guidelines for our retention periods:

• Active account data: Retained for the duration of your active account plus 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial and anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of the active account period and 5 years after closure, or longer if required by a regulatory body.
• Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Technical data and access logs: Retained for 12 months for security and fraud detection purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be personally associated with you. This deletion process is carried out using industry-recognised methods to ensure the data cannot be recovered.

The bet1 platform is for adults aged 18 and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If we determine that personal data of a minor has been collected without proper age verification, we will take immediate action to delete that data and close the relevant account. If you believe your child has registered on our platform, please contact us immediately at [email protected] so that we may take appropriate action.

Bet1 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments. Any amendments will take effect as soon as the latest version is published on our website.

For material and significant changes, we will provide clear notice to all registered players via email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and decide whether you remain comfortable with the new terms.

We encourage you to review this page regularly to stay informed about how we protect your data. The "Last Updated" date at the top of this page indicates when this Policy was last revised.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our Data Protection Officer (DPO) team is ready to assist:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Response Time: Within 3 business days for general enquiries; 14 business days for player rights requests

We also accept written complaints submitted via direct support on the platform. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your jurisdiction.