Indobet Privacy Policy – Malaysian Player Data Protection

1 Introduction

Indobet is an online betting and gaming platform operating for players in Malaysia. We understand that privacy is more than a legal requirement — it is a fundamental right of every user and the foundation of trust between a platform and its members.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices. We are committed to handling your personal data with the highest standards of confidentiality, transparency, and security.

This policy applies to all information you share with us — whether during account registration, while using the platform, through communications with our support team, or via the indobet mobile app. Every interaction you have with indobet is protected by this privacy commitment.

2 Information We Collect

To operate a safe and compliant platform, indobet collects several categories of information from members. This collection is carried out transparently and solely for legitimate purposes.

3 How We Use Your Data

Every piece of information we collect is used for a clear and legitimate purpose. indobet uses your personal data for the following purposes:

• Account Management: Creating, verifying, and maintaining your account, including mandatory KYC processes.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and suspicious activity.
• Legal Compliance: Meeting legal and regulatory obligations, including reporting to competent authorities when required.
• Service Improvement: Analyzing usage patterns to enhance user experience, develop new features, and optimize platform performance.
• Communications: Sending important account-related notifications, security updates, and promotional information (with your consent).
• Customer Support: Resolving enquiries, complaints, and providing technical assistance more effectively.
• Responsible Gaming: Monitoring gameplay patterns to identify potential gambling issues and offer appropriate support.

4 Data Sharing with Third Parties

Indobet does not share your personal information with third parties for commercial purposes. However, in the course of legitimate platform operations, there are limited situations where data sharing is necessary:

• Payment Processors: Required transaction information is shared with payment providers such as DuitNow, FPX, and approved e-wallets solely for the purpose of processing your transactions.
• Game Providers: Minimum technical data required to run games is shared with our gaming software providers, who have undergone rigorous security vetting.
• Authorities: indobet will disclose data when required by law, court order, or the direction of a legitimate authority in Malaysia.
• Fraud Prevention: In cases of suspected fraud or money laundering, relevant information may be shared with regulatory bodies or law enforcement agencies.

All third parties we work with are bound by strict confidentiality agreements and are required to meet data protection standards equal to or higher than those of indobet. We do not permit third parties to use your data for their own purposes.

5 Data Security

Indobet invests heavily in security infrastructure to ensure your personal and financial data remains protected at all times. Key security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and indobet's servers is protected with banking-grade encryption.
• Stored Data Encryption: Sensitive data such as banking information and KYC documents are stored in encrypted form within a secure database.
• Two-Factor Authentication (2FA): An additional security layer is available on all member accounts to prevent unauthorized access.
• 24/7 Monitoring: An automated threat detection system monitors suspicious activity around the clock and takes immediate action when required.
• Internal Access Control: Only authorized and experienced staff have access to members' personal data, with every access logged and audited.
• Regular Security Audits: indobet's security systems undergo independent audits on a regular basis to identify and address potential vulnerabilities.

6 Cookies & Tracking Technologies

Indobet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform for technical improvement purposes.
• Functional Cookies: Saving your preferences such as language and display settings for a more personalized experience.
• Analytics Cookies: Collecting anonymized aggregate usage data to help us understand traffic patterns and improve content.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the indobet platform. For more information on managing cookies, refer to your web browser's help guide.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by indobet. We fully respect and facilitate the exercise of these rights:

8 Data Retention & Deletion

Indobet retains your personal data for as long as necessary to fulfil the stated purpose of collection, or for as long as required by Malaysian law, whichever is longer.

• Active Account Data: Retained for as long as your account is active and in use.
• Post-Account Closure Data: Certain records such as transaction history and KYC documents are retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• Communication Data: Customer support logs are retained for 3 years for reference and dispute resolution purposes.
• Technical Data: Access logs and technical data are retained for 12 months for security and debugging purposes.

Once the retention period expires or data is no longer needed, indobet will securely delete or anonymise your personal data using methods that ensure it cannot be recovered or accessed again.

9 Child Protection

Indobet is a betting platform exclusively for adults aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

Should we discover that we have collected data from a minor without proper age verification, we will take immediate action to delete the relevant account and all associated data.

Parents and guardians who discover that a minor in their care has registered on the indobet platform are urged to contact our support team immediately via the in-platform live chat.

10 Privacy Policy Amendments

Indobet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant amendments will be communicated to you via:

• Prominent notifications on the indobet platform homepage.
• Email notification sent to your registered email address.
• Notifications within the indobet mobile app.

Amendments take effect 14 days after notification, unless immediate changes are required for security or legal compliance reasons. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy.

11 Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, indobet's Data Privacy Officer team is ready to assist. You can reach us via live chat, available 24 hours a day, 7 days a week, directly within the indobet platform.

We will endeavour to respond to all privacy-related enquiries within 7 working days from the date of receipt. For more complex requests such as data exports or deletion requests, processing may take up to 30 business days.