Privacy Policy

1. Data Controller

allbet (the "Operator", "we", "us", "our") is the data controller responsible for personal data processed in connection with the allbet platform available at allbet.vu (the "Platform"). allbet operates under an international gaming authority licence and processes personal data in accordance with the obligations imposed by that licence and applicable data protection law.

This Privacy Policy applies to all personal data collected from users ("you", "your") who access, register on, or use the allbet Platform, including the casino, sportsbook, slots, and poker products available therein. By using the allbet Platform, you acknowledge that you have read and understood this Privacy Policy.

Questions regarding this Privacy Policy, requests to exercise data subject rights, or complaints about allbet's data handling practices should be directed to allbet's support team. Contact details are provided in Section 13 of this Policy.

2. Personal Data We Collect

allbet collects personal data in three principal ways: directly from you when you register and use the Platform; automatically through your use of the Platform; and from third parties in connection with KYC verification and fraud prevention.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, country of residence, and chosen username and password;
• KYC documentation: Government-issued photo identification (MyKad or passport for Malaysian players), proof of address, and payment method ownership documents where required;
• Financial data: Payment method details (eWallet identifiers, bank account or FPX reference information) used to process deposits and withdrawals;
• Support communications: Content of your communications with allbet's customer support team, including live chat transcripts, email correspondence, and complaint records;
• Responsible gaming data: Self-exclusion requests, deposit limit settings, and cooling-off period activations.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers;
• Usage data: Pages visited, game sessions played, bet history, transaction logs, login timestamps, session duration, and navigation patterns within the Platform;
• Cookie data: As described in Section 6 of this Policy.

2.3 Data from Third Parties

• Identity verification providers: Results of identity and document verification checks conducted by allbet's KYC service providers;
• Fraud and AML screening: Politically exposed person (PEP) status, sanctions list screening results, and adverse media findings from compliance screening providers;
• Payment processors: Transaction confirmation data from payment processors including Touch 'n Go eWallet, Boost, DuitNow, and FPX banking partners.

3. How We Use Your Personal Data

allbet does not use automated decision-making that produces legal or similarly significant effects on users — human review is involved in material account decisions including KYC rejection, account suspension, and self-exclusion processing.

4. Legal Basis for Processing

allbet processes personal data on the following legal bases depending on the purpose:

• Contractual necessity: Processing required to perform the agreement between allbet and you — including account registration, payment processing, and customer support;
• Legal obligation: Processing required to comply with allbet's obligations under its international gaming authority licence — including KYC verification, AML compliance, age verification, and regulatory reporting;
• Legitimate interests: Processing for fraud detection, Platform security, responsible gaming monitoring, and Platform analytics, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where allbet has obtained your prior consent. You may withdraw consent to marketing at any time without affecting other processing.

5. Data Sharing & Disclosure

allbet does not sell your personal data to third parties. allbet shares personal data with third parties only in the following circumstances:

• KYC and identity verification providers: Identity document data is shared with allbet's contracted KYC verification service providers solely for the purpose of completing identity verification;
• Payment processors: Financial transaction data is shared with payment processors (including FPX banking partners, Touch 'n Go, Boost, and DuitNow) as required to process deposits and withdrawals;
• AML and fraud screening providers: Relevant personal data is shared with sanctions screening and fraud detection providers as part of allbet's AML compliance programme;
• Gaming authority: allbet's licensing authority may require access to player data as part of regulatory oversight or investigation. allbet is required to comply with such requests;
• Law enforcement and regulators: allbet will disclose personal data to law enforcement or regulatory authorities where required by applicable law, court order, or lawful authority;
• IT infrastructure providers: Hosting, database, and security service providers who process data on allbet's behalf under written data processing agreements that impose equivalent data protection obligations.

6. Cookies & Tracking Technologies

allbet uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that enable allbet to recognise your browser, maintain your session, and analyse Platform usage patterns.

6.1 Cookie Categories

• Strictly necessary cookies: Required for the Platform to function — including session management, authentication tokens, and security cookies. These cannot be disabled without preventing Platform access;
• Functional cookies: Remember your preferences such as language settings and account display options. Disabling these may reduce Platform functionality;
• Analytics cookies: Collect aggregated usage data to help allbet understand how the Platform is used and where improvements can be made. Used internally only — not shared with advertising networks.

You may manage cookie preferences through your browser settings. Restricting strictly necessary cookies will affect your ability to use the allbet Platform. allbet does not use third-party advertising or tracking cookies that follow you across external websites.

7. Data Retention

allbet retains personal data for as long as is necessary for the purpose for which it was collected, subject to the following minimum retention periods imposed by allbet's gaming authority licence and applicable law:

• Account and KYC data: Retained for a minimum of 5 years from the date of account closure or last transaction — whichever is later — for AML compliance purposes;
• Transaction records: Retained for a minimum of 5 years for financial crime investigation and regulatory audit purposes;
• Customer support records: Retained for 3 years from the date of the last support interaction;
• Self-exclusion records: Retained indefinitely to prevent re-registration in violation of a self-exclusion commitment;
• Marketing consent records: Retained for the duration of the consent and 2 years thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8. Data Security

allbet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your browser and allbet's servers;
• Encryption at rest for sensitive personal data including KYC documentation and financial data;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Multi-factor authentication for staff access to systems containing personal data;
• Regular security assessments and penetration testing;
• Incident response procedures including data breach notification protocols.

No data transmission over the internet is entirely without risk. While allbet takes security seriously and applies industry-standard measures, allbet cannot guarantee absolute security of data in transit. You are responsible for maintaining the security of your allbet login credentials — see allbet's Terms & Conditions for credential security obligations.

9. Your Data Subject Rights

Subject to the limitations imposed by allbet's legal obligations (including AML and gaming licence compliance requirements), you have the following rights in respect of your personal data held by allbet:

• Right of access: Request a copy of the personal data allbet holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to retention obligations under allbet's licence;
• Right to restriction: Request that allbet restrict processing of your data in certain circumstances;
• Right to data portability: Request a machine-readable copy of personal data you have provided to allbet;
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Withdraw consent to marketing at any time without affecting prior processing.

To exercise any of these rights, contact allbet's support team as specified in Section 13. allbet will respond to data subject requests within 30 days of receipt. Where a request is complex or numerous, allbet may extend this period by a further 30 days — you will be notified of any extension.

10. International Data Transfers

allbet's operations and infrastructure may involve the transfer of personal data to countries outside Malaysia. Where personal data is transferred internationally, allbet ensures that such transfers are subject to appropriate safeguards — including contractual clauses that impose equivalent data protection standards on recipient entities. allbet's KYC and screening service providers may process data in jurisdictions where allbet's gaming authority licence is based.

11. Children & Minors

If you are a parent or guardian and believe that a minor has submitted personal data to allbet, please contact allbet's support team immediately so that the data can be located and deleted.

12. Changes to This Privacy Policy

allbet reserves the right to update or revise this Privacy Policy at any time. Revised versions will be published on this page with an updated effective date. Where changes are material to how allbet processes your personal data, allbet will notify you via your registered email address before the changes take effect where practicable.

Your continued use of the allbet Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you must cease using the Platform and may request account closure.

13. Contact & Complaints

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a complaint about allbet's data handling practices, please contact allbet's support team:

Email: support at allbet.vu

allbet will acknowledge data subject rights requests and privacy complaints within 48 hours and target substantive response within 30 calendar days. Where allbet is unable to resolve a complaint to your satisfaction, you may have the right to refer the matter to the data protection supervisory authority in your jurisdiction or to allbet's gaming authority under its licence dispute resolution mechanism.