Rebet Privacy Policy – Our Commitment to Protecting Your Data in Malaysia

1Personal Data We Collect

Rebet collects several categories of personal data in the course of providing services to our members. Below are the types of data we collect and the sources from which we collect them:

Data you provide directly:

• Registration Information: Full name, Malaysian identity card number (MyKad), date of birth, email address, Malaysian mobile phone number, and the password you chose when registering your Rebet account.
• KYC Information (Identity Verification): A copy of your identity card, proof of current residential address (utility bill, bank statement), and in certain cases, a selfie with your identity card for additional identity verification.
• Financial Information: Details of the payment methods you use — including your FPX account number, Touch 'n Go eWallet, GrabPay, DuitNow, Boost or ShopeePay wallet information — to facilitate deposit and withdrawal processing. Rebet does not store credit or debit card numbers directly.
• Communication: Records of your conversations with the Rebet customer support team via live chat, email, or Telegram, including any complaints, enquiries, and feedback you have submitted.

Automatically collected data:

• Platform Usage Data: Records of the games you have played, bet amounts, winnings, losses, deposit and withdrawal transaction history, session duration, games visited and actions taken within the platform.
• Technical Data: Your device's IP address, web browser type, operating system, screen resolution, mobile device information (model, operating system), time zone, and language settings.
• Cookie Data: Information collected through cookies and similar tracking technologies while you use the Rebet platform. Further details are set out in Section 6.

2How Your Personal Data Is Used

Rebet uses collected personal data for the following purposes, each grounded in a valid legal basis under Malaysia's PDPA:

For marketing communications such as promotional emails and special offer notifications, Rebet will only send these if you have given your consent at registration or subsequently through your account settings. You may withdraw this consent at any time by updating your communication preferences in your Rebet account or by contacting our support team.

3Disclosure to Third Parties

Rebet may share your personal data with third parties only in the following limited situations:

• Payment Service Providers: To process your deposits and withdrawals via FPX, Touch 'n Go eWallet, GrabPay, DuitNow, Boost and ShopeePay, the data required to complete each transaction is shared with the respective payment service provider. All such providers are bound by strict data protection agreements.
• Game Providers: Live casino studios and slots providers such as Evolution Gaming and Pragmatic Play receive only the minimum data necessary to allow you to access and play their games within the Rebet platform. This data is typically limited to a unique player identifier and game session data.
• Legal Authorities: Rebet will disclose personal data to Malaysian government authorities or law enforcement agencies when required to do so by law, court order, or in the course of a legitimate criminal investigation. We will not disclose data beyond what is required by those legal obligations.
• Audit & Compliance Services: Independent auditors conducting security, compliance and game fairness audits may access data required within the scope of their audit. All auditors are bound by strict confidentiality agreements.
• Business Transfer: In the event of a merger, acquisition or sale of Rebet's assets, your personal data may be transferred to the successor entity. You will be notified before such a transfer takes place, and the successor entity's privacy policy will be made available for your review.

4Data Security on the Rebet Platform

Rebet continually invests in security infrastructure to ensure your personal data is protected at every stage — in transit, during processing, and in storage. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption: All communication between your browser or application and Rebet's servers is protected by TLS protocol with 256-bit encryption. This means your data cannot be read by any third party, even if they successfully intercept the transmission.
• Password Hashing: Your password is stored as a one-way hash using a strong cryptographic algorithm. This means your actual password is not known to anyone — including Rebet's engineers and staff. Only you know your password.
• Two-Factor Authentication (2FA): Rebet offers two-factor authentication via SMS OTP for additional protection during login and financial operations. We encourage all members to enable 2FA.
• Real-Time Security Monitoring: Our automated monitoring system operates 24/7 to detect suspicious activity, unauthorised access attempts and unusual usage patterns. Any identified threats are addressed promptly by our security team.
• Internal Access Controls: Access to members' personal data within Rebet's internal systems is restricted and based on a need-to-know basis. All staff access to personal data is logged and audited regularly.
• Regular Security Testing: The Rebet platform undergoes regular penetration testing and security audits conducted by independent third parties to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. We encourage you to take your own protective measures as well — such as using a strong password, not sharing your login credentials, and ensuring your devices are protected by up-to-date security software.

5Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (Malaysia's PDPA) and Rebet's policies, you have the following rights regarding your personal data:

• Right to Access Data: You have the right to request a copy of the personal data we hold about you. Data access requests can be submitted by email to support@rebet.club. We will respond within 21 days of receiving your request.
• Right to Correct Data: If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Basic information such as your phone number and email address can be updated directly through your Rebet account settings.
• Right to Restrict Processing: Under certain circumstances, you have the right to request that we temporarily suspend the processing of your data — for example, while you are disputing the accuracy of that data or while we are assessing whether you have valid grounds to request its deletion.
• Right to Withdraw Consent: For any data processing activities you have consented to (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.
• Right to Object: You have the right to object to the processing of your data for certain purposes, particularly for direct marketing.
• Right to Request Deletion: In certain circumstances where data is no longer needed for the purpose it was originally collected and there is no legal obligation to retain it, you may request the deletion of your personal data. Please note that some data may need to be retained for a specified period to fulfil legal requirements such as financial and AML records.

To exercise any of the above rights, contact the Rebet privacy team by email at support@rebet.club with the subject line "Privacy Rights Request" and clearly state the right you wish to exercise. We will verify your identity before processing the request to ensure the security of your data.

6Cookies & Tracking Technologies

The Rebet platform uses cookies and similar tracking technologies to enhance your experience and ensure essential platform functions operate correctly. Below are the categories of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login sessions, language preferences, and security. Without them, certain parts of the Rebet platform will not work properly. Essential cookies cannot be disabled.
• Functional Cookies: These cookies store your preferences such as your preferred live casino table layout, frequently used bet limits, and display settings. They allow the Rebet platform to deliver a more personalized experience.
• Analytics Cookies: We use analytics cookies to understand how players use the Rebet platform — which pages are visited most, which games are most popular, and where players encounter issues. This information is used for ongoing platform improvements. Analytics data is aggregated and cannot be used to identify you individually.
• Session Cookies: Session cookies are stored temporarily in your browser's memory and are automatically deleted when you close your browser. They are used to maintain your session state while you are using the platform.

You can manage your cookie preferences through your web browser settings. Most modern browsers allow you to view, delete, and block cookies. Please note that disabling certain cookies may affect the functionality of the Rebet platform. For cookies that require consent, you will be given the option to accept or decline on your first visit to the platform.

7Data Retention Period

Rebet retains your personal data for as long as necessary to fulfill the original purpose for which it was collected, or for as long as required under applicable Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active on Rebet, your personal data will be retained to enable the continued provision of services.
• Data Following Account Closure: Once your account is closed, Rebet will retain certain data for a minimum period of 7 years to meet Malaysia's financial compliance and AML requirements.
• Financial Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of 7 years from the date of the transaction, in line with Malaysia's financial regulatory requirements.
• Customer Support Records: Customer support chat logs are retained for 3 years from the date of the last interaction for reference and dispute resolution purposes.
• Marketing Data: If you have withdrawn your consent for marketing communications, we will retain a record of that withdrawal indefinitely to ensure we do not send you unwanted communications.

Once the retention period expires and there is no longer any legal obligation to keep the data, Rebet will securely delete or anonymise it using industry-recognised methods.

8International Data Transfers

In the course of its operations, Rebet may need to transfer personal data to servers or service providers located outside Malaysia. This arises primarily in the context of game providers and global technical infrastructure.

Whenever an international data transfer takes place, Rebet ensures that appropriate safeguards are in place to protect your data, including:

• Ensuring that data recipients in the destination country maintain a level of data protection equivalent to or higher than Malaysia's PDPA.
• Using legally binding data transfer agreements that require recipients to comply with the privacy standards set by Rebet.
• Minimising data transferred — only data strictly necessary for the service purpose is transferred overseas.

9Children's Privacy

The Rebet platform is strictly for users aged 21 and above. Rebet does not knowingly collect or process personal data from individuals under the age of 21.

If you are a parent or guardian and discover that your minor child has registered a Rebet account or provided us with their personal data without your consent, please contact us immediately at support@rebet.club. We will take prompt action to close the account in question and delete all associated data.

Rebet applies age verification during registration and KYC processes to prevent access by minors. If our checks determine that an account was registered by someone under the legal age, the account will be closed immediately without prior notice.

10Changes to This Privacy Policy

Rebet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, regulatory developments, or platform improvements. We are committed to notifying you of any material changes through:

• A clear notice on the main page of the Rebet platform or within your account dashboard.
• A notification email to your registered email address if the changes are significant and materially affect your privacy rights.
• Update the "Last Updated" date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy page periodically. Your continued use of the Rebet platform after any changes take effect constitutes your acceptance of the updated policy. If you disagree with the changes made, you have the right to stop using the platform and request account closure.

For any enquiries regarding this Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer by email at support@rebet.club with the subject line "Privacy Policy Enquiry".