Privacy Policy Indobet – Personal Data Protection for Malaysian Members

Indobet (referred to as "we", "the Platform", or "Indobet") takes our responsibility to protect the privacy of every member and user of our platform seriously. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and covers all services provided through the indobet.life website.

This policy applies to all individuals who register an account, access the platform, make enquiries, or interact with any of our services Indobet – including slots, live casino, baccarat, blackjack, EPL and Malaysia Super League sports betting, lottery, and all of our customer support services.

By using the platform Indobet, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Indobet collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown:

Indobet collects personal data through several different methods:

• Account Registration: Information you provide when completing the registration form, including your name, email, phone number, and date of birth.
• KYC Process: Identity verification documents you have submitted, including copies of your MyKad and proof of address.
• Financial Transactions: Information relating to deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks).
• Platform Activity: Data collected automatically when you play slots, baccarat, blackjack, or place sports bets – including game history, wager amounts, and outcomes.
• Cookies and Tracking Technologies: Technical data is collected automatically through cookies, server logs, and similar technologies as described in Section 8.
• Communications: Any information you provide when contacting customer support Indobet via live chat, email, or WhatsApp.

Indobet processes your personal data only for legitimate and necessary purposes. The following are the primary purposes of data processing:

• Account Management: Creating, verifying, and managing your member account on the Indobet platform.
• Transaction Processing: Processing deposits and withdrawals securely through approved Malaysian payment methods.
• Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, and platform abuse.
• Legal Compliance: Fulfilling legal obligations under PDPA 2010, anti-money laundering (AML) requirements, and other applicable regulations.
• Service Improvement: Analysing usage patterns to improve the user experience, introduce new games, and optimise the platform.
• Service Communications: Sending important information regarding your account, transactions, security updates, and changes to our terms.
• Marketing (with consent): Sending promotional information, bonus offers, and Indobet news – only where you have given your consent.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.

Indobet does not sell your personal data to any third party. However, we may share your personal data in the following limited circumstances:

• Payment Providers: Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX banks to securely process your deposits and withdrawals.
• Game Providers: Third-party gaming companies such as slots and live casino providers, limited to data necessary for processing your gameplay.
• KYC Services: Identity verification providers that help us comply with anti-money laundering legal requirements.
• Authority: Government agencies, law enforcement bodies, or regulators where required under Malaysian law.
• Technology Providers: Companies providing IT infrastructure, hosting, and cybersecurity services – bound by strict confidentiality agreements.

All third parties that receive your personal data from Indobet are required to meet data protection standards equivalent to or higher than those we ourselves uphold.

Indobet retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law:

• Active Account Data: Retained for the duration your account remains active.
• Data After Account Closure: Retained for 7 years following account closure, in line with financial record-keeping requirements under Malaysian law.
• KYC Data: Retained for 7 years from the date of last verification, in accordance with Malaysia's AML requirements.
• Technical Logs: Retained for a maximum of 12 months for security and troubleshooting purposes.
• Communication Records: Retained for 3 years for reference and dispute resolution purposes.

Upon expiry of the applicable retention period, Indobet will securely delete or anonymise your data using methods that comply with accepted information security standards.

Indobet implements multiple layers of technical and organisational security to protect your personal data against unauthorised access, misuse, loss, or destruction:

• 256-bit SSL/TLS Encryption: All data communications between you and Indobet's servers are fully encrypted.
• Stored Data Encryption: Sensitive data such as financial information and KYC details are encrypted within our databases.
• Tiered Access Controls: Only staff with a legitimate business need are permitted to access members' personal data.
• Two-Factor Authentication (2FA): Available to all member accounts and mandatory for Indobet staff accessing internal systems.
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent third parties.
• Staff Training: All Indobet staff undergo regular data protection and information security training.

Platform Indobet uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect your ability to fully access the platform Indobet.

As a member Indobet, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) Malaysia:

To exercise any of the above rights, please contact us by email at privacy@indobet.life. We will respond to your request within 30 working days. Some requests may be subject to legal conditions that prevent deletion or restrict certain types of processing.

Platform Indobet is not directed at individuals under the age of 18. We do not knowingly collect or process personal data from minors.

Parents and guardians are responsible for ensuring that children in their care do not access the Indobet platform. We encourage the use of parental control software to restrict children's access to online betting platforms.

Platform Indobet may contain links or integrations with third-party services such as payment providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX), game providers, and support services.

Each of these third-party services has its own privacy policy, separate from the Privacy Policy of Indobet. We are not responsible for the privacy practices of such third parties. We encourage you to read the privacy policy of each third-party service you use.

However, all third-party providers we work with are required to sign data processing agreements obligating them to protect your data in accordance with standards equivalent to Malaysia's PDPA 2010.

Indobet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other legitimate reasons.

You will be notified of any material changes through:

• A notification email will be sent to your registered address at least 14 days before the changes take effect.
• In-platform notification on Indobet when you log in.
• By updating the "Last Updated" date at the top of this page.

Continued use of the platform Indobet after an amendment takes effect will be considered acceptance of the revised policy. If you do not agree, you may close your account without any penalty related to the privacy policy amendment.

For any enquiries, complaints, or requests relating to your personal data, please contact our Data Protection Officer Indobet through the following channels:

• Dedicated Privacy Email: privacy@indobet.life
• General Support Email: support@indobet.life
• Live Chat: Available 24/7 within the Indobet platform

We are committed to responding to all privacy-related enquiries within 30 working days. For urgent cases involving a personal data security breach, we will respond within 72 hours.