Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by Cashbet (referred to herein as "Cashbet", "we", "us", or "our"), the operator of the online betting and live casino platform accessible at https://cashbet.cam (the "Platform"). This Policy describes how Cashbet collects, uses, discloses, stores, and protects the personal data of users ("you", "User", "Player") who access or use the Platform.

Cashbet is committed to handling personal data responsibly and in accordance with applicable data protection principles under our international gaming licence. While Malaysia does not currently have a comprehensive personal data protection statute specifically applicable to offshore online gambling operators, Cashbet voluntarily applies internationally recognised data protection standards — including principles aligned with the General Data Protection Regulation (GDPR) — as a baseline for all user data we process.

By registering an account on the Cashbet Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, you must not register or continue to use the Platform.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, either directly or in combination with other data. This includes your name, email address, phone number, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, deletion, or any combination thereof.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, Cashbet.
• "Data Processor" means a third party that processes Personal Data on behalf of Cashbet, such as a payment gateway operator or identity verification provider.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data for a specific purpose.
• "KYC" (Know Your Customer) means the identity and age verification process conducted by Cashbet or an authorised verification partner before withdrawals are processed.
• "Cookie" means a small data file stored on a User's device by the Platform for the purpose of maintaining session state, remembering preferences, or gathering anonymised analytics.
• "Platform" means the Cashbet website at https://cashbet.cam, including all features, tools, services, and content made available through it.

Personal Data We Collect

Cashbet collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises the key categories:

Cashbet does not intentionally collect data from individuals under the age of 21. If we become aware that a User is under 21, the Account will be immediately suspended and any personal data collected will be deleted or anonymised as soon as reasonably practicable, except where retention is required by law.

How We Collect Personal Data

Cashbet collects Personal Data through the following channels:

4.1 Directly From You

The majority of Personal Data we hold is provided directly by you when you register an account, complete our KYC verification process, make a deposit or withdrawal, contact our support team, or update your account settings. You have full control over what you provide — however, certain data (such as identity verification documents) is mandatory for processing withdrawals.

4.2 Automatically During Platform Use

When you access the Cashbet Platform, we automatically collect Technical Data and Usage Data through server logs, cookies, and similar tracking technologies. This data helps us maintain Platform security, detect fraud, and improve user experience. It does not require any action on your part beyond visiting the Platform.

4.3 From Third-Party Service Providers

We may receive limited Personal Data from authorised third-party service providers — for example, identity verification results from our KYC partner, transaction status updates from FPX or DuitNow payment processors, or fraud risk scores from our security screening provider. This data is used solely in connection with your Cashbet account and is not used for any unrelated purpose.

Purposes of Processing & Legal Basis

Cashbet processes your Personal Data for the following specific purposes, each supported by one of the legal bases listed below:

• Account Registration and Management — Processing is necessary to fulfil the contract between you and Cashbet (i.e., to operate your betting account). This covers account creation, login authentication, balance management, and account settings.
• Transaction Processing — Processing is necessary to perform the contract. This covers all deposits and withdrawals in MYR via FPX, DuitNow, e-wallets, cryptocurrency, and direct bank transfer.
• Identity Verification (KYC) — Processing is necessary to comply with our legal and licensing obligations, including age verification (21+), anti-money-laundering checks, and responsible gambling requirements.
• Customer Support — Processing is necessary to fulfil the contract and to pursue Cashbet's legitimate interest in maintaining customer satisfaction and resolving disputes fairly.
• Fraud Detection and Platform Security — Processing is based on Cashbet's legitimate interest in protecting the Platform from abuse, unauthorised access, and financial crime.
• Platform Improvement and Analytics — Processing is based on Cashbet's legitimate interest in understanding how the Platform is used so that it may be improved. Analytics data is anonymised or aggregated where possible.
• Marketing Communications — Processing is based on your prior consent. You may withdraw consent for marketing communications at any time by contacting our support team. Withdrawal of consent does not affect your ability to use the Platform.
• Legal and Regulatory Compliance — Processing is necessary to comply with applicable legal obligations, including record-keeping requirements imposed by our international gaming licence.

Data Retention

Cashbet retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to any legal, regulatory, or contractual obligations that require longer retention. As a general guide:

• Account Data: Retained for the duration of the account's active status, plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping obligations and to handle any post-closure disputes.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction in compliance with our licensing authority's financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC process, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication, to support dispute resolution and service improvement.
• Marketing Consent Records: Retained for as long as the consent remains valid, plus an additional three (3) years following withdrawal of consent, as evidence of the consent lifecycle.
• Technical and Usage Data (Cookies / Logs): Typically retained for no longer than thirteen (13) months, after which aggregate or anonymised insights may be retained indefinitely.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where full deletion is not immediately technically feasible (e.g., data in backup archives), the data is isolated from active processing until it can be securely deleted.

Disclosure to Third Parties

Cashbet does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may disclose your Personal Data to the following categories of third party, strictly on a need-to-know basis:

• Payment Processors: FPX-connected banks, DuitNow network operators, Touch 'n Go eWallet, Boost Pay, and cryptocurrency exchange or custody partners — solely for the purpose of processing your deposits and withdrawals.
• Identity Verification (KYC) Providers: Third-party identity verification services used to validate your identity documents and conduct age and liveness checks as required by our licensing obligations.
• Fraud Prevention and Security Services: External fraud screening and IP intelligence providers used to identify and prevent abuse of the Platform.
• IT Infrastructure and Hosting Providers: Cloud hosting and data centre providers that store or process Platform data on Cashbet's behalf under contractual data processing agreements.
• Legal and Regulatory Authorities: Law enforcement, courts, licensing authorities, or other governmental bodies where disclosure is required by applicable law, valid legal process, or our licensing obligations.
• Professional Advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations, where their engagement requires access to relevant data.

All third-party Data Processors engaged by Cashbet are required to process Personal Data only on Cashbet's documented instructions and are prohibited from using your data for any purpose beyond what is strictly necessary for the service they provide.

International Data Transfers

Cashbet operates under an international gaming licence and may store or process your Personal Data on servers located outside Malaysia. Where Personal Data is transferred to jurisdictions that may not provide the same level of data protection as the jurisdiction in which it was originally collected, Cashbet takes reasonable steps to ensure that appropriate contractual safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to protect your data during transit and in the destination jurisdiction.

By creating an account and using the Cashbet Platform, you consent to the transfer of your Personal Data to our servers and processing infrastructure in accordance with the terms of this Privacy Policy.

Cookies & Similar Tracking Technologies

Cashbet uses cookies and similar client-side storage technologies to provide a functional, secure, and personalised Platform experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. They enable core features such as session authentication, maintaining your logged-in state, and securing your account from session hijacking. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences — such as your preferred language, display settings, and any responsible gambling limits you have set. These improve your experience but are not essential.
• Analytics Cookies: Used to collect anonymised or pseudonymised information about how Users navigate the Platform — such as which pages are visited most frequently and how long users spend on particular sections. This helps us identify areas for improvement. Analytics data is not linked to your identity.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot traffic, and other security threats to the Platform and individual User accounts.

Most web browsers allow you to control cookie settings through browser preferences. Blocking or deleting strictly necessary cookies may impair your ability to use the Platform. Blocking analytics or functional cookies will not prevent you from using core betting and casino features.

Security Measures

Cashbet implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the Cashbet servers — the same encryption standard used by major Malaysian banking platforms including Maybank2u and CIMB Clicks
• Encryption of sensitive stored data, including KYC documents and financial transaction records, at rest using AES-256 or equivalent standards
• Secure password hashing using industry-standard algorithms — Cashbet never stores plain-text passwords
• Two-factor authentication (2FA) available for all user accounts as an additional login security layer
• Role-based access controls ensuring that Cashbet staff can only access Personal Data to the minimum extent required for their specific job function
• Regular security vulnerability assessments and penetration testing of the Platform infrastructure
• Formal incident response procedures for handling any suspected data breach, including notification protocols

User Rights Regarding Personal Data

Subject to applicable law and our legitimate operational and regulatory obligations, you may exercise the following rights with respect to your Personal Data held by Cashbet:

1. Access: Request confirmation of whether we hold Personal Data about you, and receive a copy of that data in a commonly used format.
2. Rectification: Request correction of any Personal Data that is inaccurate or incomplete. You may also update certain details directly from your Account Settings page.
3. Erasure ("Right to be Forgotten"): Request deletion of your Personal Data, subject to our legal retention obligations. We cannot delete data that is required to be retained under applicable law or our licensing terms.
4. Restriction of Processing: Request that we temporarily suspend processing of your data in specific circumstances, such as while a dispute about data accuracy is pending.
5. Data Portability: Request a structured, machine-readable copy of your Personal Data to transfer to another service provider where technically feasible.
6. Objection: Object to processing based on Cashbet's legitimate interests, including any profiling or automated decision-making that produces legal or similarly significant effects on you.
7. Withdrawal of Consent: Where processing is based on consent (such as marketing communications), withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact Cashbet's Data Protection team at the contact details provided in Section 12. We will respond to all valid requests within thirty (30) calendar days. In complex or high-volume cases, this period may be extended by a further sixty (60) days, with notice provided to you.

We may need to verify your identity before processing any data rights request to prevent fraudulent or unauthorised requests for access to another person's data.

Contact Us — Data & Privacy Enquiries

For any questions, concerns, or requests related to this Privacy Policy or the handling of your Personal Data, please contact Cashbet through the following channels:

• Email (Data & Privacy): [email protected] — please include "Privacy Request" in the subject line
• Live Chat: Available 24/7 on the Cashbet Platform — select "Account & Privacy" as the subject category
• Support Hours: Around the clock, Malaysia Standard Time (MYT, UTC+8)

Cashbet is committed to resolving data privacy concerns promptly and fairly. If you are not satisfied with our response to a data rights request or a privacy complaint, you may escalate the matter to the relevant supervisory authority under the jurisdiction of our international gaming licence.

This Privacy Policy was last reviewed and updated on 1 January 2026. We reserve the right to update this Policy at any time. Where changes are material, we will notify registered Users via email or a prominent notice on the Platform prior to the changes taking effect. Continued use of the Platform following notification of changes constitutes acceptance of the updated Policy.