Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by allbet ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at allbet.cam. It describes how we collect, use, disclose, and safeguard the personal data of individuals ("you", "Player", "User") who access or use the allbet Platform, including all games, payment services, promotions, and customer support functions.

allbet serves Malaysian players across Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and elsewhere. We are committed to processing personal data lawfully, fairly, and transparently. This Policy applies to all data subjects who interact with the Platform, regardless of how they access it — via desktop browser, mobile browser, or any other means.

2 Definitions

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person — including name, email address, date of birth, IP address, payment details, and account activity.
"Processing"	Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, alteration, or deletion.
"Data Controller"	allbet — the entity that determines the purposes and means of processing personal data.
"Data Processor"	A third party that processes personal data on behalf of allbet — for example, licensed payment processors or fraud-prevention service providers.
"Cookies"	Small text files placed on your device by the Platform to store session information, preferences, and analytics data.
"KYC"	Know Your Customer — the identity and document verification process required under our licensing obligations.
"Platform"	The allbet website, mobile interface, and all associated services accessible at allbet.cam.

3 Personal Data We Collect

allbet collects the following categories of personal data:

• Registration Data: Full legal name, date of birth, email address, mobile phone number, country and city of residence, and preferred currency.
• Identity & KYC Documents: Government-issued identification (Malaysian MyKad, Driver's Licence, Passport), proof of address (utility bill, bank statement), and self-portrait photographs submitted during the verification process.
• Financial Data: Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), FPX transaction references, DuitNow transfer records, and cryptocurrency wallet addresses used for deposits and withdrawals.
• Transaction Data: A complete record of all deposits, withdrawals, bonuses claimed, bets placed, games played, and winnings or losses.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, session timestamps, referring URLs, and geolocation data.
• Communication Data: Emails, live chat transcripts, and support tickets sent to or received from our customer support team.
• Marketing Preferences: Records of whether you have opted in or out of marketing communications and your stated interests or preferred product categories.

4 How We Collect Personal Data

Personal data is collected through the following means:

• Direct submission: Information you provide when registering, completing KYC, making a deposit, contacting support, or filling out any form on the Platform.
• Automated collection: Technical and usage data collected automatically as you browse and interact with the Platform, via cookies, server logs, and analytics tools.
• Third-party sources: Identity verification services, fraud prevention databases, and payment processors may provide supplementary data to verify your identity or assess fraud risk.
• Publicly available sources: Where relevant to KYC or fraud prevention, we may cross-reference data against publicly available registers or databases.

5 Data Processing & Use

We process your personal data for the following purposes:

Purpose	Description
Account Management	Creating and maintaining your allbet Account; verifying your identity; processing deposits and withdrawals; providing access to games and services.
KYC & Compliance	Satisfying our obligations under applicable licensing requirements, including anti-money-laundering (AML) and counter-terrorism financing (CTF) rules.
Fraud Prevention	Detecting, investigating, and preventing fraudulent activity, money laundering, chargebacks, multi-accounting, and other prohibited conduct.
Customer Support	Responding to queries, resolving disputes, and processing responsible gambling requests such as deposit limit changes or self-exclusion applications.
Product Improvement	Analysing usage patterns to improve Platform functionality, game recommendations, and overall user experience.
Marketing	Sending promotional communications, bonus offers, and event notifications — only where you have given explicit consent or have an existing relationship with us.
Legal Obligations	Complying with court orders, regulatory requests, and any other legally imposed disclosure obligations.

6 Legal Basis for Processing

allbet processes personal data under the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account setup, payment processing, and game provision.
• Legal obligation: Processing mandated by applicable licensing conditions, AML regulations, or court orders.
• Legitimate interests: Processing undertaken for fraud prevention, security monitoring, and internal analytics, where our interests do not override your fundamental rights.
• Consent: Processing of data for direct marketing communications, where you have expressly opted in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Third-Party Sharing & Disclosure

allbet does not sell, rent, or trade personal data to third parties for commercial purposes. We may disclose personal data to the following categories of recipients, solely as necessary to deliver our services or comply with legal obligations:

• Payment Processors: Licensed providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, and cryptocurrency network operators — who receive only the data necessary to process your transactions.
• KYC & Identity Verification Providers: Third-party services used to validate government-issued documents and confirm identity during the verification process.
• Fraud Prevention Services: Industry-standard fraud detection platforms that cross-reference account activity against known patterns of fraudulent behaviour.
• Regulatory Authorities: Licensing bodies, law enforcement agencies, or financial intelligence units — where disclosure is required by law or court order.
• Technology Infrastructure Providers: Cloud hosting, CDN, and security service providers operating under strict data processing agreements with allbet.

8 International Data Transfers

As an internationally operated platform, allbet may transfer personal data to servers or processors located outside of Malaysia. Where such transfers occur, we take steps to ensure that an adequate level of data protection is maintained, including through the use of contractual safeguards with data processors and adherence to the security standards required by our licensing obligations.

By using the allbet Platform, you acknowledge and consent to the potential transfer of your personal data to countries outside of Malaysia for the purposes described in this Policy.

9 Data Retention

allbet retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Active Accounts: All personal and transactional data is retained for the duration of the Account's active status.
• Closed Accounts: Data is retained for a minimum of five (5) years following Account closure, consistent with AML regulatory requirements and potential dispute resolution needs.
• KYC Documents: Identity documents are retained for a minimum of five (5) years from the date of submission or from the date of Account closure, whichever is later.
• Communication Records: Support chat transcripts and email correspondence are retained for a minimum of two (2) years.
• Marketing Data: Records of marketing consent are retained until you withdraw consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10 Data Security

allbet employs a layered approach to data security, incorporating both technical and organisational safeguards:

• Transport Encryption: All data exchanged between your device and the allbet Platform is protected by 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive personal data stored on allbet's infrastructure is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorised personnel who require it in order to perform their job functions, enforced through role-based access controls.
• Audit Trails: All access to and modifications of personal data are logged and subject to regular audit review.
• Penetration Testing: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach affecting your personal data, allbet will notify affected users and relevant authorities in accordance with applicable obligations.

11 Cookies Policy

The allbet Platform uses cookies and similar technologies (including local storage and session tokens) to operate core Platform functions and enhance your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as language, currency, and display settings to personalise your experience across sessions.
• Analytical Cookies: Collect anonymised usage data to help us understand how players interact with the Platform and identify areas for improvement.
• Marketing Cookies: Used where you have consented to track cross-Platform engagement with promotional content.

You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect Platform performance or restrict access to some features. Strictly necessary cookies cannot be disabled.

12 Minors & Age Verification

The allbet Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21.

Age verification checks are applied during the registration process and during KYC verification. Where allbet becomes aware that personal data has been collected from an individual below the minimum age requirement, the relevant Account will be suspended and the data will be deleted or anonymised as promptly as practicable, following any regulatory retention obligations.

13 Your Data Rights

Subject to applicable law and certain limitations arising from our regulatory obligations, you have the following rights in relation to your personal data:

To exercise any of the above rights, please submit a written request to [email protected]. We aim to respond to all data rights requests within 30 calendar days of receipt. Complex requests may require additional time, in which case we will notify you.

Please note that certain rights may be limited by our legal and regulatory obligations — for example, we cannot delete KYC documents that we are required to retain under AML regulations.

14 Marketing Communications

allbet may send you marketing communications — including bonus offers, promotional notifications, and product updates — by email or push notification, where you have:

• Explicitly opted in to marketing communications during or after registration, or
• Not opted out of communications where we have an existing relationship and the communication relates to similar products and services.

You may withdraw consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email;
• Updating your communication preferences in the Account settings; or
• Contacting our support team at [email protected].

Opting out of marketing communications does not affect transactional or account-related communications, which we are required to send for operational and compliance purposes.

15 Changes to This Policy

allbet reserves the right to revise this Privacy Policy at any time. Material changes will be communicated to registered Players via email or a prominent notice on the Platform, at least seven (7) days before taking effect where reasonably practicable.

The most current version of this Privacy Policy is always accessible at allbet.cam/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent revision was made. Continued use of the Platform after any update constitutes acceptance of the revised Policy.

16 Contact Us

For any privacy-related enquiries, data rights requests, or concerns regarding how your personal data is handled, please contact the allbet privacy team using the details below:

• Email: [email protected] — please mark the subject line "Privacy Request" for faster routing.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform dashboard.
• WhatsApp: Available through the member area after login.

For questions related to our Terms & Conditions, visit our Terms & Conditions page. For responsible gambling support tools and resources, visit our Responsible Gambling page.

This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all prior versions.