Privacy Policy

Introduction

This Privacy Policy (the "Policy") is issued by plaebet, the operator of the online gambling and betting platform accessible at https://plaebet.cam (the "Platform"). It describes how plaebet collects, processes, stores, transfers, and protects personal data relating to individuals who access or use the Platform, whether as registered account holders, visitors, or prospective users.

plaebet operates primarily in the Malaysian market and serves players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across Malaysia. We understand that entrusting a gambling platform with your personal data requires confidence in how that data is handled. This Policy is designed to give you that confidence — written plainly and structured so that you can find answers to specific questions without reading the entire document.

This Policy should be read alongside our Terms and Conditions, which govern the contractual relationship between plaebet and its users. By registering an account or accessing the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Definitions

The following defined terms are used throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other available information. This includes name, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, disclosure, or deletion.
• "Data Controller" means plaebet, as the entity that determines the purposes and means of processing Personal Data relating to Platform users.
• "Data Processor" means any third party engaged by plaebet to process Personal Data on plaebet's behalf, under written contract and subject to plaebet's instructions.
• "User" or "You" means any natural person who accesses, registers on, or uses the Platform in any capacity.
• "Cookies" means small text files stored on your device by the Platform that allow us to recognise your browser and retain certain session or preference information.
• "KYC" means Know Your Customer — the identity and age verification procedures applied by plaebet to comply with anti-money laundering obligations and enforce age restrictions.
• "Sensitive Personal Data" means categories of data that warrant heightened protection under applicable law, including financial information, identification documents, and any data that could be used to facilitate fraud or identity theft.

Personal Data We Collect

plaebet collects the minimum data necessary to operate the Platform safely and in compliance with our legal obligations. The following table sets out the categories of Personal Data we collect and the primary purpose for each category.

plaebet does not collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or political opinions) unless specifically required by law or disclosed voluntarily by the user in a support context.

How We Collect Personal Data

plaebet collects Personal Data through the following channels and methods:

4.1 Directly From You

The majority of your Personal Data is provided directly by you when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or engage with promotional activities on the Platform.

4.2 Automatically Through Platform Use

Technical and Usage Data is collected automatically as you interact with the Platform through cookies, server logs, and analytics tools. This includes your IP address, session data, and behavioural interaction data on the Platform. See Section 8 for detailed information on cookies.

4.3 From Third Parties

In limited circumstances, plaebet may receive Personal Data from third parties, including:

• Payment Processors: When you initiate a deposit or withdrawal via FPX, DuitNow, Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency networks, the payment provider may share transaction confirmation data and payer identity information with us.
• Identity Verification Services: Third-party KYC service providers may provide us with identity verification results, fraud risk scores, and document authentication reports.
• Fraud Prevention Databases: We may cross-reference your data against industry-shared fraud and money laundering databases as part of our compliance obligations.

Legal Basis for Processing

plaebet processes your Personal Data only where a valid legal basis exists. The applicable legal bases for our processing activities are:

How We Use Your Personal Data

Your Personal Data is used by plaebet for the following specific purposes:

• Account Management: Creating, maintaining, and administering your plaebet account, including profile updates and password management.
• Identity and Age Verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity to prevent fraud and comply with licensing obligations.
• Transaction Processing: Processing deposits via FPX, DuitNow, and e-wallets (Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay), and processing withdrawal requests to your verified payment accounts.
• Service Delivery: Operating the betting and casino services, resolving betting disputes, and crediting winnings to your account balance.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and other prohibited conduct on the Platform.
• Responsible Gambling: Monitoring betting patterns to identify signs of problem gambling behaviour and, where appropriate, proactively communicating responsible gambling tools and information.
• Customer Support: Responding to your inquiries, processing complaints, and maintaining records of communications for quality assurance and dispute resolution purposes.
• Legal Compliance: Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the functionality, design, and user experience of the Platform.
• Marketing Communications (Consent-Based): Where you have opted in, sending you information about promotions, bonuses, and new features relevant to your preferences. You can unsubscribe at any time.

Data Sharing & Disclosure

plaebet does not sell, rent, or trade your Personal Data to third parties for commercial or marketing purposes. We share your data only in the limited circumstances described below, and always subject to appropriate contractual protections.

7.1 Service Providers and Data Processors

plaebet engages trusted third-party service providers who process Personal Data on our behalf under written data processing agreements. These providers are bound to process data only as instructed and are not permitted to use it for their own purposes. Categories of service providers include:

• Payment processing partners (FPX network operators, e-wallet providers, cryptocurrency payment gateways)
• Identity verification and KYC service providers
• Fraud detection and AML screening services
• Cloud infrastructure and hosting providers
• Customer support platform providers
• Analytics and platform performance tools (processing aggregated, anonymised data only)

7.2 Legal and Regulatory Disclosures

We may disclose Personal Data to law enforcement agencies, regulatory authorities, courts, or other public bodies where required to do so by applicable law, court order, or where we believe disclosure is necessary to protect our legal rights, prevent fraud, or address an emergency involving risk to a person's safety.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of plaebet's business assets, Personal Data held by us may be transferred to the acquiring entity as part of that transaction. We will notify registered users by email prior to any such transfer and the acquiring entity will be required to honour this Privacy Policy or provide equivalent protections.

7.4 Responsible Gambling Partners

Where a player activates self-exclusion or is referred to problem gambling support services, anonymised or pseudonymised data may be shared with responsible gambling programme coordinators solely for the purpose of enforcing that exclusion across related platforms.

Cookies & Tracking Technologies

plaebet uses cookies and similar tracking technologies to operate the Platform, maintain your session state, and understand how users interact with our services. The following cookie categories are used:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling performance or marketing cookies does not affect your ability to bet or access games.

We do not use tracking pixels or similar technologies that send your data to social media platforms or unrelated third parties for external advertising purposes.

Data Retention

plaebet retains your Personal Data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following retention principles apply:

• Active Account Data: Retained for the duration of your active account relationship with plaebet, plus a minimum of five (5) years following account closure for AML and licensing compliance purposes.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven (7) years from the date of the transaction to comply with financial record-keeping obligations.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Live chat transcripts and support email records are retained for a period of three (3) years from the date of the communication, or until resolution of any active dispute.
• Technical and Usage Data: Server log data and session records are retained for a maximum of twelve (12) months from the date of generation, after which they are either anonymised or deleted.
• Self-Excluded Accounts: Basic account and exclusion records for self-excluded users are retained for the duration of the exclusion period and a further five (5) years to prevent re-registration during that period.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that makes re-identification impossible.

Data Security

plaebet implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security architecture includes but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, including all transactions and login sessions.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Two-factor authentication (2FA) available for all account holders and mandatory for administrative access to our systems.
• Regular third-party penetration testing and security audits of our infrastructure.
• Role-based access controls ensuring that plaebet employees access only the data necessary for their specific job function.
• Automated monitoring and alerting for anomalous login patterns, mass data access events, and other security indicators.
• Segregation of player fund accounts from operational systems, reducing the attack surface for financial data exposure.

While plaebet maintains rigorous security standards, no internet-based system is entirely immune to risk. In the event of a data breach that poses a risk to your rights or freedoms, plaebet will notify you within 72 hours of becoming aware of the breach (or as soon as reasonably practicable), in accordance with our notification obligations under applicable data protection frameworks.

You play an important role in account security. You should use a strong, unique password for your plaebet account, enable two-factor authentication, and never share your credentials with any third party. If you believe your account has been compromised, contact [email protected] immediately.

Your Rights Over Your Personal Data

As a data subject, you hold a number of rights in relation to the Personal Data plaebet holds about you. These rights are set out below. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of your request.

Children, Minors & Age Restrictions

The Platform is strictly intended for individuals aged 21 years and above. plaebet does not knowingly collect or process Personal Data from individuals under the age of 21. Any account found to belong to a person under 21 will be immediately closed and all associated Personal Data will be deleted, except where retention is required to record and report the breach or to prevent re-registration.

Where plaebet has reason to believe that an account may be held by or accessed by a person under 21, we will suspend the account pending identity verification and, if the suspicion is confirmed, close the account permanently. We encourage parents and guardians to monitor internet usage by young persons in their care and to contact us at [email protected] if they suspect that a minor has registered or accessed the Platform.

International Data Transfers

plaebet operates as an internationally licensed platform. Your Personal Data may be transferred to, stored, or processed in countries outside Malaysia, including in the jurisdiction where our primary licensing authority is based and in the countries where our infrastructure and service providers operate.

Where Personal Data is transferred internationally, plaebet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which would apply within a jurisdiction with recognised data protection laws. These safeguards include contractual data protection clauses incorporated into all service provider agreements, and where relevant, adequacy assessments of the receiving jurisdiction's data protection framework.

By using the Platform, you acknowledge that your Personal Data may be transferred and processed outside Malaysia and consent to such transfers in connection with the services you have contracted to receive.

Amendments to This Privacy Policy

plaebet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational context. All amendments will be published on this page with a revised "Last Reviewed" date.

Where amendments are material — meaning they significantly affect how your Personal Data is used or your rights in relation to it — plaebet will provide at least fourteen (14) days' advance notice to registered users via email to the address on file. For minor or administrative changes (such as corrections or clarifications that do not affect the substance of our data practices), we may update this Policy without advance notice.

We encourage you to review this Policy periodically to stay informed about how your data is protected. The current version is always accessible at https://plaebet.cam/privacy-policy.

Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how plaebet handles your Personal Data, please contact us through the following channels:

plaebet takes all privacy complaints seriously and treats them as an opportunity to improve our data practices. We commit to handling all complaints fairly, confidentially, and without prejudice to your continuing use of the Platform.