Privacy Policy

This Privacy Policy ("Policy") describes how iBetMY ("Company", "we", "us", "our"), operator of the online betting and casino platform accessible at ibetmy.cam ("the Platform"), collects, uses, stores, discloses, and protects the personal information of players and visitors ("you", "your", "User") who access or use our services.

iBetMY serves players across Malaysia — including those based in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and other regions — and we recognise the importance of safeguarding the personal information you entrust to us when using our platform. Whether you are depositing funds via Touch 'n Go eWallet, placing a bet on an EPL match, or contacting our support team, we handle your data with the same standard of care throughout.

This Policy is designed to be transparent and readable. Where legal or technical language is unavoidable, we provide plain-language explanations alongside the formal text. If you have any questions about how we handle your personal information, please contact us using the details provided in Section 14.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which contain provisions relevant to data handling in specific contexts.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, deletion, or any other form of handling.
• "Data Controller" means iBetMY, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of iBetMY, acting only on our documented instructions.
• "KYC Data" means identity verification documentation collected as part of our Know Your Customer obligations, including government-issued identity documents and proof of address.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including financial account details, biometric identifiers, and data relating to health conditions relevant to responsible gambling assessments.
• "Cookie" means a small data file stored on your device by your browser when you visit the Platform, used to maintain session state, preferences, and analytical data.
• "Platform" means the iBetMY website, mobile web application, and all associated digital services accessible via ibetmy.cam.

We collect Personal Data across three broad categories: data you provide directly, data generated by your use of the Platform, and data received from third parties for verification and compliance purposes.

3.1 Data You Provide Directly

3.2 Data Generated by Platform Use

• Betting and Gaming Data: Sports markets wagered on (e.g., EPL, Liga Super Malaysia, UFC), bet amounts, game sessions, win/loss records, bonus usage history.
• Technical Data: IP address, browser type, operating system, device identifiers, screen resolution, time zone settings.
• Usage Data: Pages visited, navigation patterns, session duration, features accessed, click-through paths.
• Cookies and Tracking Data: As described in Section 8 of this Policy.

3.3 Data Received from Third Parties

• Identity Verification Providers: Results of identity and age verification checks conducted through our KYC partners.
• Payment Processors: Transaction confirmation and status data from Malaysian payment partners including FPX, DuitNow, and e-wallet operators such as Touch 'n Go and Boost.
• Fraud Prevention Services: Risk scoring, device fingerprint data, and flagged activity signals provided by third-party fraud detection services.

iBetMY collects Personal Data through the following mechanisms:

• Direct interactions: Data you actively submit through account registration forms, KYC document uploads, payment forms, support requests, surveys, or any other form of direct communication with us.
• Automated technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, server logs, and similar tracking technologies. For further detail, see Section 8.
• Third-party sources: Data received from identity verification providers, payment processors, and fraud prevention services as described in Section 3.3.
• Publicly available sources: In limited circumstances, we may supplement your information with publicly available data to assist with fraud detection or regulatory compliance. Any such supplementation is conducted lawfully and proportionately.

iBetMY processes your Personal Data only where we have a lawful basis to do so. The primary purposes and corresponding legal bases are set out below:

Where we rely on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, contact us or update your notification preferences in your account settings.

6.1 Service Providers (Data Processors)

We share data with third-party service providers who process it strictly on our behalf and under our instruction. These include:

• Payment processors and e-wallet operators (Touch 'n Go, Boost, GrabPay, FPX, DuitNow, and associated banks including Maybank, CIMB, Public Bank, Hong Leong, and RHB);
• Identity verification and KYC service providers;
• Fraud detection and cybersecurity service providers;
• Customer support platform operators;
• Cloud hosting and infrastructure providers;
• Analytics service providers used for platform performance monitoring.

All service providers are subject to contractual data processing agreements that require them to maintain appropriate security standards and process your data only as instructed by iBetMY.

6.2 Regulatory and Legal Disclosures

iBetMY may disclose your Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory obligation. Such disclosures are made only to the extent legally required and with appropriate verification of the requesting authority's legitimacy.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of iBetMY's business, your Personal Data may be transferred as part of that transaction. We will notify affected players prior to any such transfer and ensure that the receiving entity commits to data handling standards equivalent to those set out in this Policy.

6.4 Professional Advisors

We may share data with legal advisors, auditors, and compliance consultants under strict confidentiality obligations where necessary to obtain professional advice or defend legal claims.

iBetMY retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following indicative retention periods apply:

At the end of the applicable retention period, data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised data that cannot reasonably be re-identified may be retained indefinitely for statistical and analytical purposes.

iBetMY uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyse how the Platform is used. The categories of cookies we use are as follows:

8.1 Strictly Necessary Cookies

These cookies are required for the Platform to function correctly. They manage user session authentication, maintain your login state across pages, enable secure payment flows, and support core security features. These cookies cannot be disabled without impairing core Platform functionality.

8.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, notification settings, and display options — so you do not need to re-configure them on each visit. These cookies do not track your activity for marketing purposes.

8.3 Analytics Cookies

We use analytics cookies to understand how players use the Platform — which features are popular, where users encounter difficulty, and how navigation flows can be improved. This data is aggregated and does not identify individual users. Analytics processing is carried out on the basis of our legitimate interests in improving the Platform.

8.4 Your Cookie Choices

You can manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use certain Platform features. Most modern browsers provide controls to manage cookie preferences on a per-site or per-category basis. Refer to your browser's help documentation for specific instructions.

iBetMY implements a multi-layered security framework to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher, equivalent to the standards used by Malaysian financial institutions.
• Encryption at rest: Sensitive personal and financial data stored on our systems is encrypted using AES-256 at rest.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with access to personal data undergo privacy and security training as part of their onboarding and at regular intervals thereafter.
• Infrastructure security: Our servers are hosted in accredited, access-controlled data centres with physical security, redundant power, and network intrusion detection systems.
• Fraud monitoring: Automated systems monitor accounts and transactions around the clock for patterns indicative of fraud, account compromise, or abuse.
• Vulnerability management: We conduct regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.

No system is entirely immune to security risks. While we take all reasonable precautions, we cannot guarantee absolute security of data transmitted over the internet. You are responsible for maintaining the security of your account credentials and should notify us immediately if you suspect unauthorised access to your account.

Subject to applicable law and the terms of this Policy, you have the following rights in respect of your Personal Data held by iBetMY:

Right of Access

You have the right to request a copy of the Personal Data we hold about you, including confirmation of what data is held, the purposes for which it is processed, and the categories of recipients to whom it has been disclosed.

Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update many account details directly through your account settings; for data that cannot be self-corrected, contact [email protected].

Right to Erasure ("Right to Be Forgotten")

You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that certain data must be retained for legal and regulatory reasons regardless of erasure requests — such as KYC and financial transaction records. Where erasure is not possible, we will explain the specific legal obligation that prevents it.

Right to Restriction of Processing

In certain circumstances — such as where you contest the accuracy of data or object to processing on legitimate interest grounds — you may request that we restrict processing while the matter is resolved. Restricted data may be stored but not further processed without your consent.

Right to Data Portability

Where processing is based on your consent or performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.

Right to Object

You have the right to object to processing based on our legitimate interests, including profiling carried out for direct marketing purposes. Where you object to marketing, we will cease that processing immediately. Where you object to other legitimate-interest processing, we will balance your objection against our interests and cease processing where your interests override ours.

Rights Related to Automated Decision-Making

If we make decisions about you solely through automated processing — including profiling — that produce significant effects on you (for example, account suspension following automated fraud detection), you have the right to request human review of that decision, to express your point of view, and to contest the outcome.

Exercising Your Rights

To exercise any of the rights described above, please submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account name and email address. We will respond within 30 days of receiving a valid request. Where a request is complex or involves a high volume of data, we may extend the response period by a further 30 days and will notify you of the extension.

iBetMY employs mandatory KYC identity verification to confirm that all registering users meet the minimum age requirement of 21 years. Where we identify or have reasonable grounds to suspect that an account is held by a person under the age of 21, we will immediately suspend the account, conduct a review, and close it if the suspicion is confirmed. Any balance associated with an underage account will be handled in accordance with applicable regulatory guidance.

If you believe that a minor may have registered an account on our platform, please notify us immediately at [email protected].

In the course of operating the Platform and engaging third-party service providers, your Personal Data may be transferred to, stored in, or processed in countries other than Malaysia. This may occur in connection with cloud hosting, KYC verification, fraud detection, or customer support infrastructure operated by our service providers.

Where such transfers occur, iBetMY takes appropriate steps to ensure that your Personal Data receives a level of protection equivalent to that provided under applicable data protection frameworks. Such steps include:

• Entering into data processing agreements with service providers that incorporate appropriate data transfer safeguards;
• Conducting due diligence on service provider data security and privacy practices prior to engagement;
• Limiting the scope of data transferred to what is strictly necessary for the relevant service.

If you would like further information about the countries to which your data may be transferred or the safeguards in place, please contact us using the details in Section 14.

iBetMY reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform operations. When material changes are made, we will provide notice through the Platform and, where appropriate, by email to the address registered with your account, prior to the changes taking effect.

The updated Policy will be published on this page with a revised effective date. Your continued use of the Platform following publication of any changes constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms and Conditions.

We encourage you to review this Policy periodically to stay informed of how we protect your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact our Data Protection team using any of the following channels. All data-related enquiries are handled with priority and in strict confidence.