Bodabet Privacy Policy

01 Introduction

This Privacy Policy describes how Bodabet ("we", "us", "our", or "the platform") collects, uses, retains, shares, and protects personal data provided by or generated about individuals who access Bodabet, register an account, deposit funds, place wagers, use customer support, or otherwise interact with platform services.

By using Bodabet, you acknowledge that you have read and understood this policy. Where consent is required for a specific processing activity, we will seek that consent separately. This policy should be read alongside the Bodabet Terms & Conditions and Responsible Gambling guidelines. If you are under 21 years of age, you must not use Bodabet or provide any personal information to us.

02 Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• Personal Data means any information relating to an identified or identifiable natural person, including name, contact details, identity document number, IP address, device identifier, and payment information.
• Processing means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• Controller means Bodabet as the entity that determines the purposes and means of processing Personal Data obtained through the platform.
• Processor means a third party that processes Personal Data on Bodabet's behalf under a written service agreement.
• Player means a natural person who has registered and maintains a verified Bodabet account.
• KYC means know-your-customer identity, age, and source-of-funds verification conducted to satisfy security and compliance obligations.

03 Data We Collect

3.1 Information You Provide Directly

When you register, verify your account, deposit, or contact support, Bodabet may collect:

• full legal name, date of birth, and gender as stated on official documentation;
• residential address and, where relevant, nationality;
• email address, mobile phone number, and preferred contact language;
• identity document details such as MyKad number or passport particulars;
• payment method details including bank account number, registered e-wallet identifier (Touch 'n Go eWallet, Boost, GrabPay), or payment reference — but never full card numbers stored in plaintext;
• source-of-funds documentation when required by our compliance programme;
• any other information you voluntarily provide in support correspondence or feedback forms.

3.2 Information Generated Automatically

When you access Bodabet, we automatically collect technical and behavioural information to deliver the service securely:

• IP address, approximate geolocation derived from IP, and connection timestamps;
• device type, operating system, browser version, and screen resolution;
• session data including pages visited, game sessions opened, bet history, and navigation path;
• cookies, session tokens, and similar tracking technologies (see Clause 08);
• transaction logs including deposit amounts in MYR, withdrawal requests, wager values, and platform events.

3.3 Information from Third Parties

Bodabet may receive personal data from payment processors (including FPX, DuitNow, and Malaysian banking partners), identity verification providers, fraud detection services, and, where lawfully permitted, publicly available sources. Such information is used solely to verify your identity, prevent fraud, or meet compliance obligations.

04 Purposes and Legal Bases for Processing

Bodabet processes personal data for the following purposes, under the applicable lawful basis in each case:

• Account registration and management — to create, verify, maintain, and close your Bodabet account, including performing KYC checks as required by our compliance programme.
• Payment processing — to receive deposits and authorise withdrawals via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX, and to reconcile transaction records.
• Service delivery — to provide access to casino games, sports betting markets covering events such as EPL matches, Liga Super Malaysia fixtures, UFC cards, and live football, as well as to deliver account notifications and balance updates.
• Security and fraud prevention — to detect and investigate suspected fraud, money laundering, unauthorised account access, bonus abuse, and other prohibited conduct.
• Responsible gambling — to identify patterns that may indicate problem gambling, to apply self-exclusion, deposit limits, or cooling-off measures, and to communicate with at-risk players.
• Legal and regulatory compliance — to meet obligations under applicable data protection, anti-money-laundering, and financial-crime-prevention laws and to respond to lawful requests from competent authorities.
• Customer support — to receive, investigate, and respond to enquiries, complaints, and disputes.
• Platform improvement — to analyse aggregate and anonymised usage data in order to improve game selection, interface usability, loading performance, and support quality.

05 Disclosure and Data Sharing

Bodabet does not sell your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Service Providers and Processors

We engage third-party Processors for hosting, cloud storage, payment processing, identity verification, game platform delivery, fraud detection, and customer communications. Each Processor is bound by a written data-processing agreement that restricts use of your data to the specific service they provide.

5.2 Payment Partners

When you deposit or withdraw, relevant transaction details are shared with your chosen payment provider — for example, confirming a DuitNow transfer or authorising an FPX payment — to the extent required to complete the transaction.

5.3 Legal and Regulatory Disclosure

Bodabet may disclose personal data when required by applicable law, a valid court order, regulatory direction, or lawful law-enforcement request. We will notify affected players where we are legally permitted to do so.

5.4 Business Restructuring

In the event of a merger, acquisition, or transfer of Bodabet's business operations, personal data may be transferred to a successor entity under confidentiality protections equivalent to those in this policy. Affected players will be notified.

06 International Data Transfers

Bodabet's primary data infrastructure serves players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. Where personal data is transferred to a country outside Malaysia, Bodabet ensures that appropriate safeguards are in place, including contractual data-protection clauses or equivalent mechanisms, before any transfer takes place.

You may request further information about the safeguards applied to cross-border transfers by contacting support at the address in Clause 12.

07 Data Retention

Bodabet retains personal data for as long as your account is active and for a period thereafter as required by applicable law or necessary for the resolution of disputes, enforcement of agreements, or prevention of fraud. Specific retention periods vary by data category:

• Account and identity records: retained for the duration of the account relationship and for a period of up to seven years after account closure, unless a longer period is required by law.
• Transaction records (MYR deposits, withdrawals, wagers): retained for a minimum of seven years to satisfy financial-record and anti-money-laundering obligations.
• Customer support records: retained for up to three years from the date of the last interaction unless relevant to an open dispute or legal proceeding.
• Technical and log data: typically retained for up to 12 months and then deleted or anonymised.
• Self-exclusion records: retained indefinitely or for the minimum period required by responsible gambling policy to prevent circumvention.

08 Cookies and Tracking Technologies

Bodabet uses cookies and similar tracking technologies to operate the platform, maintain your session, authenticate your account, apply security controls, and gather aggregate usage statistics. The following categories apply:

• Strictly necessary cookies: required for login sessions, account security, and core platform functionality. These cannot be disabled without preventing the site from working correctly.
• Functional cookies: used to remember your preferences, such as language and display settings, so you do not have to reconfigure them on each visit.
• Analytics cookies: used to collect aggregated, anonymised information about how players navigate Bodabet, which helps us improve usability. No individual player is identified from analytics data.

Bodabet does not use third-party behavioural advertising cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality.

09 Security Measures

Bodabet applies technical and organisational security measures proportionate to the sensitivity of the data and the risks involved. These include 256-bit SSL/TLS encryption for data in transit, encryption at rest for sensitive fields, access controls restricting data to authorised personnel only, regular security monitoring and logging, and internal data-handling training for all relevant staff.

No transmission over the internet or electronic storage method is completely secure. If Bodabet becomes aware of a data breach that is likely to result in significant risk to affected individuals, we will take steps to contain the breach, assess the risk, and notify affected parties in accordance with applicable law.

10 User Rights

Subject to applicable law, you may have the following rights with respect to personal data Bodabet holds about you:

• Right of access: to request a copy of the personal data we hold about you and the purposes for which it is processed.
• Right of rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data where processing is no longer necessary, consent has been withdrawn, or processing was unlawful — subject to Bodabet's legal retention obligations.
• Right to restrict processing: to request that Bodabet limit processing of your data in certain circumstances, such as while a correction request is pending.
• Right to data portability: to receive a structured, commonly used copy of data you provided to Bodabet, where technically feasible and permitted by law.
• Right to object: to object to processing carried out on the basis of legitimate interests, where your particular circumstances justify it.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact support at the address in Clause 12. We will verify your identity before processing any rights request, and we will respond within a reasonable period as required by applicable law. Requests may be refused or limited where permitted by law, for example where they would adversely affect the rights of another person or obstruct a legal obligation.

11 Children and Underage Players

Bodabet services are strictly available to persons aged 21 and above. Bodabet does not knowingly collect personal data from anyone under 21. If we discover that personal data has been collected from an underage individual, we will take steps to delete it promptly and close any associated account. If you believe a minor has registered on Bodabet, please contact support immediately.

12 Contact Us

If you have a question about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern, please contact Bodabet customer support. Provide enough detail to identify your account and the nature of your request. Do not include your account password or one-time verification codes in any message.

13 Policy Updates

Bodabet may update this Privacy Policy from time to time to reflect changes in data-protection law, platform services, or internal processing practices. The revised policy will be published on this page with an updated effective date. Where a change materially affects how we process your personal data, we will provide notice through the platform or by email before the change takes effect.

Continued use of Bodabet after a policy update constitutes acceptance of the revised terms where permitted by applicable law. We encourage you to review this page periodically.