Privacy Policy — 65bet

1 Introduction

This Privacy Policy ("Policy") is issued by 65bet ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at https://65bet.lat and any associated mobile or web-based access points (collectively, "the Platform").

This Policy describes how 65bet collects, uses, stores, shares, and protects the personal data of all individuals who access or use the Platform ("Users", "Players", "you"). It applies to all data processing activities conducted by 65bet in connection with the operation of its online casino and sports betting services.

By registering an account, accessing the Platform, or interacting with any 65bet service, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not consent to the practices described in this Policy, you must discontinue use of the Platform immediately.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3 Data Controller Identity

The Data Controller for all personal data processed in connection with the 65bet Platform is the legal entity operating under the 65bet brand name, registered in the jurisdiction of its international gaming licence.

All data subject rights requests, privacy enquiries, and formal data protection complaints should be directed to the 65bet Data Protection contact, reachable via the support contact details provided in Section 15 of this Policy. Please include "Privacy — Data Request" in the subject line of your communication to ensure prompt routing to the responsible team.

4 Data We Collect

65bet collects personal data through several channels, including direct account registration, Platform usage, payment processing, and customer support interactions. The categories of data we collect are as follows:

4.1 Identity and Registration Data

• Full legal name and date of birth
• Email address and mobile phone number
• Username and encrypted account password
• Country of residence and mailing address (where provided)
• Government-issued identification document details (MyKad number, passport number — collected during KYC verification)
• Selfie photographs submitted for identity verification

4.2 Financial and Transaction Data

• Payment method type and masked account identifiers (e.g., last four digits of bank account, e-wallet registration name)
• Deposit amounts, dates, and reference numbers
• Withdrawal requests, processing status, and payout records
• Bonus crediting and wagering activity records
• We do not store full bank account numbers, credit card numbers, or e-wallet PINs. Payment processing is handled by third-party payment processors under their own security frameworks.

4.3 Behavioural and Usage Data

• Games played, bet amounts, session duration, and win/loss history
• Sports markets accessed, odds viewed, and betting patterns
• Device type, operating system, browser version, and screen resolution
• IP address and approximate geolocation (country/region level)
• Pages visited within the Platform, navigation paths, and feature usage
• Session timestamps and login history

4.4 Communication Data

• Live chat transcripts and support ticket records
• Email correspondence with the 65bet support team
• Feedback, complaints, and survey responses
• Records of promotional communications sent to your account

4.5 Data Collected Automatically

When you visit or use the Platform, certain data is collected automatically via cookies, web beacons, and similar tracking technologies. Please refer to Section 8 for details on our cookie practices.

5 How We Use Your Data

65bet uses the personal data it collects for the following specific purposes. We do not use your data for any purpose incompatible with the purposes listed here without first notifying you and, where required, obtaining your consent.

6 Lawful Bases for Processing

65bet processes personal data only where a valid lawful basis exists. The primary lawful bases on which we rely are as follows:

• Contractual necessity: Processing required to perform the contract between 65bet and the Player — including account creation, identity verification, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with anti-money laundering (AML) laws, gaming licensing requirements, and other applicable legal obligations — including mandatory KYC procedures and transaction reporting.
• Legitimate interests: Processing carried out for 65bet's legitimate business interests, including fraud prevention, platform security, abuse detection, and analytics, where those interests are not overridden by the Player's rights and freedoms.
• Consent: Processing for which the Player has provided specific, informed, and freely given consent — including the receipt of marketing communications and the use of non-essential analytics cookies. Consent may be withdrawn at any time by contacting support or adjusting account communication preferences.

7 Data Sharing & Third-Party Disclosure

65bet does not sell personal data to third parties. We may share personal data with the following categories of recipients, strictly for the purposes described:

• Payment processors: Malaysian e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow/FPX operators, and cryptocurrency settlement providers — for the purpose of processing deposits and withdrawals. Each processor is bound by contractual data protection obligations.
• Identity verification providers: Third-party KYC service providers used to verify government-issued identity documents and perform age verification checks.
• Game content providers: Platform game studios receive limited session and gameplay data necessary to deliver their games and apply game rules correctly. Game studios do not receive payment or identity data.
• Analytics and security providers: Service providers assisting with fraud detection, platform performance monitoring, and aggregated usage analytics, operating under data processor agreements with 65bet.
• Regulatory and law enforcement authorities: Where required by a valid legal order, court judgment, regulatory directive, or mandatory reporting obligation under applicable gaming or financial crime law. 65bet will not disclose data to authorities beyond what is legally compelled.
• Group companies: Related legal entities within the 65bet corporate group, where necessary for internal administrative, compliance, or technical support purposes, subject to equivalent data protection standards.

All third-party Data Processors engaged by 65bet are required to process personal data only on documented instructions, implement appropriate security measures, and not engage further sub-processors without prior authorisation.

8 Cookies & Tracking Technologies

65bet uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure gaming experience.

8.1 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without disrupting core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, game display options, and betting interface configurations. These improve your experience but are not required for basic functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data on how players use the Platform — including pages visited, session duration, and navigation paths. This data helps us improve the Platform's usability. Analytics cookies are only deployed where you have consented.
• Fraud Prevention Cookies: Help identify suspicious account activity, bot traffic, and coordinated abuse patterns. These are deployed as part of our legitimate interest in platform security.

8.2 Managing Your Cookie Preferences

You may control non-essential cookie categories through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling certain cookies may limit the functionality of the 65bet Platform. For example, disabling functional cookies may reset your language and display preferences on each visit.

9 Data Retention

65bet retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law or our licensing obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10 International Data Transfers

As an internationally operated platform, 65bet may transfer personal data to, and process it in, countries outside of Malaysia and outside of the European Economic Area (EEA). Such transfers occur in the following contexts:

• Processing of transactions by payment processors whose infrastructure is located internationally.
• Hosting of Platform data on cloud infrastructure with geographically distributed data centres.
• Provision of KYC verification services by third-party providers operating internationally.

Where personal data is transferred internationally, 65bet ensures that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to apply data protection standards equivalent to those described in this Policy. Players who wish to obtain further information about the specific safeguards applicable to international data transfers may contact us using the details in Section 15.

11 Your Rights as a Data Subject

65bet respects your rights in relation to your personal data. The following rights are available to all Platform users. To exercise any of these rights, contact our support team as described in Section 15. We will respond to all valid requests within 30 calendar days.

Please note that certain rights may be subject to limitations where processing is required to comply with legal obligations — for example, we cannot delete transaction records during the mandatory AML retention period even upon erasure request.

12 Children's Privacy

The 65bet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21.

Age verification is a mandatory step in the KYC process, and accounts that are found to belong to individuals under 21 years of age will be immediately suspended and all funds returned to the payment method of origin, subject to identity verification. If you believe a person under 21 has registered an account on the Platform, please notify us immediately at the contact address in Section 15.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. A list of filtering tools is available on our Responsible Gambling page.

13 Security Measures

65bet implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and the 65bet Platform is protected using TLS 1.2 or higher (256-bit SSL). This applies to all Platform pages, account interfaces, and payment flows.
• Encryption at rest: Sensitive personal data stored on 65bet servers — including identity documents, account credentials, and financial records — is stored in encrypted form using industry-standard algorithms.
• Access controls: Access to personal data by 65bet employees and contractors is restricted on a strict need-to-know basis. All internal access to sensitive data is logged and audited.
• Infrastructure security: The Platform operates on hardened server infrastructure with intrusion detection systems, DDoS protection, and regular vulnerability scanning.
• Password security: Account passwords are stored as salted cryptographic hashes. 65bet staff cannot view your password and will never ask you to disclose it.
• Incident response: 65bet maintains a documented data breach response procedure. In the event of a security incident that materially affects your personal data, we will notify affected users promptly and take immediate remediation steps.

While we implement robust security measures, no online system is entirely immune from risk. You are responsible for maintaining the confidentiality of your own login credentials and notifying 65bet support immediately if you suspect your account has been compromised.

14 Amendments to This Privacy Policy

65bet reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy — particularly changes that affect how we use your personal data or the rights available to you — will be communicated to registered users via email notification or a prominent notice displayed on the Platform, with a minimum of 14 days' notice before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We recommend reviewing this Policy periodically to remain informed of how your data is being handled. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes described.

If you have any concerns about changes made to this Policy, please contact our support team before the changes take effect. You may also request account closure if you do not wish to continue under the revised terms.

15 Contact Us

For all privacy-related enquiries, data subject rights requests, or complaints relating to this Privacy Policy, please contact the 65bet Data Protection team using the details below. Email addresses are provided as plain text and are not clickable links.

• Support Email: [email protected]
• Subject Line for Rights Requests: Privacy — Data Request — [Your Username]
• Subject Line for Complaints: Privacy — Complaint — [Your Username]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform interface. For complex privacy requests, email is preferred to ensure a documented audit trail.

We aim to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days. In cases of high complexity, we may extend the response period by a further 30 days, in which case we will notify you of the extension within the initial 30-day window.