Privacy Policy

Introduction

GDBet ("we", "us", "our", "Platform") operates the online gambling entertainment platform accessible at gdbet.cam. We are committed to handling the personal data of our users ("you", "your", "User", "Player") with the highest standards of care, transparency, and security.

This Privacy Policy describes how GDBet collects, uses, stores, discloses, and safeguards personal information in connection with your use of the GDBet platform, including our website, mobile-optimised interface, customer support services, and all associated features. It applies to all registered Users and visitors, including Malaysian players accessing our services from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia.

By registering an account on GDBet, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should discontinue use of the Platform and contact us to close your account.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data We Collect

GDBet collects personal data across several categories. Below is a comprehensive account of the information we may hold about you:

3.1 Registration Data

• Full legal name (as it appears on government-issued identification);
• Date of birth (to verify the minimum age of 21 years);
• Email address;
• Malaysian mobile phone number;
• Residential address in Malaysia;
• Preferred username and encrypted password.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification: Malaysian MyKad, Driver's License, or Passport;
• Proof of address: utility bill, bank statement, or official correspondence dated within three months;
• Selfie photograph holding the identity document;
• Payment method verification documents where required.

3.3 Financial Data

• Deposit and withdrawal transaction records in Malaysian Ringgit (MYR);
• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, Boost account ID, GrabPay identifier, bank account name for FPX/DuitNow, cryptocurrency wallet address);
• Transaction timestamps, amounts, and processing statuses;
• Bonus credits, wagering activity, and balance history.

3.4 Gambling Activity Data

• Bets placed, games played, and wager amounts;
• Win/loss history across all game categories (slots, live dealer, sports betting, lottery, poker);
• Session duration and frequency of Platform use;
• Responsible gambling tool usage (deposit limits, self-exclusion status, cooling-off periods).

3.5 Technical & Device Data

• IP address and geolocation data (country and city level);
• Device type, operating system, and browser version;
• Session logs, access timestamps, and navigation behaviour;
• Cookie identifiers and locally stored preference data.

3.6 Communications Data

• Content of support conversations via live chat and email;
• Feedback, complaints, and dispute correspondence;
• Marketing communication preferences and consent records.

How We Collect Your Data

GDBet collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact support, or update your account settings;
• Automatically — when you browse the Platform, cookies, session logs, and device fingerprinting tools capture technical and behavioural data;
• From third-party payment processors — when you transact via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, or cryptocurrency networks, relevant transaction data is shared with us by those services to confirm and reconcile payments;
• From identity verification providers — GDBet may use third-party KYC and anti-fraud services to assist in verifying the identity and eligibility of registered Users;
• From publicly available sources — where required for fraud prevention, sanctions screening, or responsible gambling compliance.

Purposes of Data Processing

GDBet processes personal data exclusively for the following defined purposes:

Legal Basis for Processing

GDBet processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the agreement between you and GDBet, including operating your account, processing bets, and handling payments;
• Legal obligation: Processing required to comply with applicable laws, including KYC verification, anti-money laundering reporting, and responsible gambling requirements;
• Legitimate interests: Processing carried out for GDBet's legitimate business interests in preventing fraud, ensuring platform security, and improving services, provided such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, which is only carried out where you have provided freely given, specific, and informed consent. You may withdraw consent at any time without penalty.

Data Sharing & Disclosure

GDBet does not sell your personal data. We may share your personal data with the following categories of recipients solely for the purposes described in this Policy:

• Payment Processors: Malaysian payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX partner banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency network operators — to facilitate deposits and withdrawals;
• Identity Verification Partners: Third-party KYC and fraud prevention services engaged to verify identity documents and screen against sanctions lists and self-exclusion registers;
• IT Service Providers: Cloud hosting, data centre, and cybersecurity partners who process data on GDBet's behalf under data processing agreements requiring equivalent data protection standards;
• Game Providers: Software providers supplying casino games and sportsbook data to the Platform may receive pseudonymised session and outcome data for game settlement purposes;
• Regulatory Authorities: GDBet may be required to disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies in response to lawful demands;
• Professional Advisers: Legal counsel, auditors, and accountants operating under professional confidentiality obligations.

International Data Transfers

GDBet's primary data infrastructure is hosted within secure data centres. In the course of providing our services, personal data may be transferred to, or accessed from, jurisdictions outside Malaysia for purposes including cloud hosting, identity verification, and game provision.

Where such transfers occur, GDBet ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses, data processing agreements, and verification that recipient jurisdictions or entities maintain adequate data protection standards equivalent to those applicable under Malaysian law.

Data Retention

GDBet retains personal data only for as long as is necessary for the purposes for which it was collected, and as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Account and Registration Data: Retained for the duration of the account and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later;
• Financial Transaction Records: Retained for a minimum of seven (7) years as required by applicable financial regulations;
• Customer Support Records: Retained for three (3) years following resolution of the relevant enquiry;
• Marketing Consent Records: Retained for as long as the consent is active and for a reasonable period thereafter as evidence of consent;
• Technical Logs: Retained for up to twelve (12) months for security and debugging purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Cookies & Tracking Technologies

GDBet uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may significantly impair your ability to use the Platform.

Security Measures

GDBet implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and GDBet's servers;
• 256-bit AES encryption for data at rest in our databases;
• Multi-factor authentication for internal administrative access to personal data systems;
• Role-based access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular penetration testing and vulnerability assessments by independent security specialists;
• Automated intrusion detection and real-time breach monitoring;
• Segregated storage of KYC documents with enhanced access logging.

Notwithstanding these measures, no electronic transmission or storage system is entirely infallible. In the event of a data breach that is likely to result in risk to your rights and freedoms, GDBet will notify affected Users and relevant authorities in accordance with applicable data breach notification requirements.

Your Rights

As a User whose personal data is processed by GDBet, you have the following rights. GDBet is committed to facilitating the exercise of these rights without undue delay and without charge.

To exercise any of the above rights, please contact GDBet's privacy team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and respond substantively within 30 days.

Children & Minors

GDBet's Platform is strictly prohibited for use by individuals under the age of 21. We do not knowingly collect personal data from persons under this age. The 21-year minimum is enforced through mandatory date-of-birth collection at registration and KYC age verification prior to first withdrawal.

If GDBet discovers or has reason to believe that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, void any associated transactions, and permanently delete all personal data collected from that individual to the extent permissible by law.

If you believe that a minor has registered an account on GDBet, please notify us immediately at [email protected].

Third-Party Links

The GDBet Platform may contain references to third-party services such as payment processors (e.g., Touch 'n Go, Boost, GrabPay, Maybank, DuitNow) for the purpose of facilitating transactions. GDBet is not responsible for the privacy practices of these third-party services.

When you interact with a third-party payment gateway during a deposit or withdrawal, that interaction is governed by the third party's own privacy policy and terms of service. GDBet recommends that you review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

Policy Amendments

GDBet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, GDBet will provide reasonable notice to registered Users via their registered email address or by posting a prominent notice on the Platform before the changes take effect.

The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use and contact us to close your account.

Contact Us

For all privacy-related enquiries, requests to exercise your data rights, or concerns about how GDBet handles your personal information, please contact our privacy team through the following channels:

• Email: [email protected] — please include "Privacy Policy" or "Privacy Rights Request" in the subject line for faster routing;
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Our support agents can initiate formal privacy requests on your behalf.

GDBet's privacy team acknowledges all requests within 5 business days and aims to provide a substantive response within 30 calendar days. For complex requests, we may extend this period by a further 30 days and will inform you accordingly.

This Privacy Policy was last reviewed and updated on 1 January 2026. GDBet reserves all rights not expressly granted herein.