Privacy Policy Alibet Malaysia

This Privacy Policy ("Policy") describes how Alibet ("we", "Platform") collect, use, store, disclose, and protect your personal data when you register and use our services at alibet.vin.

Alibet is committed to protecting the privacy of every player on our platform. We take this responsibility seriously and uphold it in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

By using the platform Alibet or registering an account, you give us your consent to process your personal data as described in this Policy. If you do not agree, please stop using the platform and contact us to close your account.

Alibet collects various categories of personal data depending on how you interact with our platform. The table below summarises the types of data collected:

Your personal data is collected through various means as you interact with the platform Alibet:

• During account registration — you provide your name, email, phone number, and other basic information directly.
• During the KYC process — you upload an identity document for identity verification, which is required before your first withdrawal.
• During financial transactions — bank account or digital wallet information is collected to process deposits and withdrawals.
• Automatically during platform usage — technical data such as IP address, device information, and activity logs are collected automatically by our systems.
• Via cookies and similar technologies — to enhance the user experience and analyse platform usage patterns.
• Via customer support channels — when you contact us via live chat, email, or Telegram.

Alibet uses collected personal data solely for legitimate purposes directly related to platform operations. The following outlines the primary purposes for which your data is used:

• Creating and managing your user account on the platform.
• Verifying player identity through the KYC process to prevent fraud and money laundering.
• Processing deposits, withdrawals, and other financial transactions securely and accurately.
• Providing effective customer support whenever you need assistance.
• Sending important notifications related to your account, security, and transactions.
• Ensuring compliance with applicable laws and regulations.
• Detecting and preventing fraudulent activity, multi-account usage, and terms violations.
• Improving the alibet platform, products, and services based on usage data analysis.
• Sending promotional information and special offers — only if you have given your consent to receive them.

Alibet does not sell your personal data to any third party. However, in certain situations, we may need to share your data with the following parties:

• Payment service providers — such as FPX, DuitNow, and digital wallet processors that facilitate your transactions. They receive only the minimum data necessary for payment purposes.
• Technical service providers — who help us operate the platform, including cloud service providers and security analysts, subject to strict confidentiality agreements.
• Game providers — who require basic data to run the games you access through the alibet platform.
• Law enforcement agencies — if required by court order, regulatory directive, or other legally binding obligations applicable to alibet.
• Audit and compliance providers — who conduct independent audits to ensure alibet complies with applicable industry regulations and laws.

In all of the above cases, Alibet ensures that the third parties involved are bound by confidentiality obligations equivalent to or stricter than those we impose on ourselves.

Alibet implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or accidental disclosure:

• 256-bit SSL/TLS encryption for all data communications between your browser and the alibet server.
• Passwords are stored in hashed form using modern security algorithms — alibet cannot view your actual password.
• Two-step verification (2FA) is available for all accounts to add an extra layer of security.
• Multi-layered firewall and intrusion detection system (IDS) that continuously monitors all inbound and outbound traffic.
• Penetration testing is conducted regularly by independent security experts.
• Mandatory data security training for all staff with access to systems that store player data.

Alibet retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Active account data — retained for the duration your account is active and for 5 years after account closure to meet compliance requirements.
• Financial transaction records — retained for a minimum of 7 years in line with anti-money laundering legal requirements.
• KYC Documents — retained for the period specified by applicable compliance laws, typically no less than 5 years.
• Support communication logs — retained for 2 years to facilitate future reference and dispute resolution.
• Technical data and system logs — retained for 90 days for security monitoring and technical troubleshooting purposes.

Once the specified retention period has ended, your data will be securely deleted or anonymised in a way that is safe and irreversible.

The alibet platform uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns, and ensure the security of your login sessions.

Types of cookies we use:

• Session cookies — temporary cookies that expire when you close your browser. Required to maintain your login status during active sessions.
• Preference cookies — stores your preference settings such as display language and interface preferences for ease of use.
• Analytics cookies — helps us understand how players use the platform so we can continuously improve the overall user experience.
• Security cookies — helps detect and prevent fraudulent activity, including identifying suspicious login attempts.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some Alibet platform features.

Under Malaysia's PDPA and Alibet's internal policies, you have the following rights regarding your personal data:

• Right to access — you have the right to request a copy of the personal data we hold about you.
• Right to rectify — you may request the correction of any inaccurate or incomplete personal data.
• Right to withdraw consent — you may withdraw consent for certain data processing at any time, without affecting the validity of prior processing.
• Right to object — you may object to the processing of your data for specific purposes such as direct marketing.
• Right to request erasure — in certain circumstances, you may request that your data be deleted, subject to any legal retention obligations that may prevent this.

We will process your request within 14 business days and notify you of the outcome. For more complex cases, we reserve the right to extend this period to 30 days with prior notice to you.

In the course of operating the platform, Alibet may transfer your personal data to servers or systems located outside Malaysia for storage, processing, or analysis purposes. This may occur when we use international cloud service providers or game providers based in other countries.

In all cases of cross-border data transfers, Alibet ensures that:

• The recipient country or party provides an equivalent or higher level of data protection.
• Appropriate and binding contractual agreements are established before any data transfer takes place.
• Data transferred is limited to the minimum necessary, consistent with the principle of data minimisation.

The alibet platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from children or minors under the age of 18.

If we determine that personal data has been collected from individuals under 18 without proper age verification, we will take immediate action to delete that data and close the relevant account.

Alibet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the introduction of new platform features.

When significant changes are made, we will notify you through one of the following methods:

• In-account notification upon your next login.
• A notification email to your registered email address.
• A prominent notice on the alibet website homepage.

The date of the most recent update is always displayed at the top of this Policy. It is your responsibility to review this Policy periodically. Continued use of the alibet platform after changes are announced will be considered your acceptance of the amended Policy.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, the alibet privacy team is ready to assist you.

Our target response time for privacy-related inquiries is within 3–5 business days. For urgent cases involving potential data breaches, we will provide an initial response within 24 hours.