Privacy Policy betlah – Personal Data Protection for Malaysian Users

This Privacy Policy ("Policy") is published by Betlah ("we", "Platform") and applies to all users who access or use the betlah.click website, the Betlah mobile app, and all services provided under the Betlah brand in Malaysia.

Betlah is committed to protecting the privacy of every user. As an online Sports Betting and casino platform operating in Malaysia, we understand that your trust in how we handle your personal information is just as important as your confidence in the accuracy of our odds and the speed of our payouts.

This policy explains:

• Types of personal data Betlah collects from users;
• How and why that data is used;
• Who data may be shared with, under limited and restricted circumstances;
• The security measures Betlah takes to protect your data;
• Your rights under Malaysia's Personal Data Protection Act 2010 (PDPA);
• How to contact us regarding privacy matters.

By registering an account or continuing to use the Betlah platform, you confirm that you have read, understood and agreed to the terms of this Privacy Policy. This Policy should be read together with Betlah Terms & Conditions.

Betlah collects several categories of personal data depending on how you interact with our platform. We adhere to the principle of data minimisation — only data genuinely necessary to deliver a safe and quality service will be collected.

Betlah collects your personal data through various interaction points throughout your use of our platform:

• During Account Registration: When you register a Betlah account, you will be asked to provide basic information such as your name, Malaysian phone number, email address, and date of birth. This information is required to create and verify your account.
• During Identity Verification (KYC): When you make your first withdrawal, or when Betlah requires identity verification, you may be asked to upload a copy of your Malaysian MyKad or passport.
• During Financial Transactions: Your Malaysian bank account details are collected when you register a withdrawal method. Betlah stores your bank account name and number (in partially masked form) for withdrawal processing purposes.
• During Platform Use: Technical data such as IP addresses, device information and browsing activity are collected automatically when you access the Betlah platform.
• When Communicating with Us: When you contact the Betlah support team via live chat, WhatsApp or email, the content of those communications is retained for issue resolution and service quality improvement purposes.
• Via Cookies and Tracking Technologies: The Betlah platform uses cookies and similar technologies to collect data on how you interact with the platform. Further details are provided in Section 9.

Betlah uses the personal data collected for the following purposes, all of which are grounded in a valid legal basis under Malaysia's PDPA:

• Service Provision: Processing account registration, verifying your identity, handling deposits and withdrawals in MYR, settling bets, and crediting winnings to your Betlah account;
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, unauthorised access, and misuse of the Betlah platform;
• Legal Compliance: Meeting Betlah's legal obligations, including KYC/AML requirements, PDPA compliance, and cooperation with Malaysian authorities where required by law;
• VIP Rewards Programme: Calculating and crediting weekly cashback, tracking VIP level progress, sending birthday bonuses, and providing other benefits within the Betlah VIP Rewards programme;
• Responsible Gaming: Monitoring betting patterns to identify users who may need support and to enforce limits set by the users themselves;
• Platform Improvements: Analysing aggregated and anonymised usage data to understand how users interact with the Betlah platform and to improve the overall user experience;
• Communications: Sending important notifications related to your account, service updates, security alerts, and — with your consent — promotional offers relating to Betlah's services.

Betlah does not sell, rent, or share users' personal data with any third party for marketing or commercial purposes. However, under the following limited circumstances, Betlah may share your information with certain parties:

• Payment Service Providers: Payment gateways such as Touch 'n Go, GrabPay, DuitNow, and FPX receive the information necessary to process your financial transactions. These providers are governed by their own Privacy Policies and Malaysia's strict financial security standards;
• Technical Service Providers: Companies providing technical infrastructure services to Betlah (such as server hosting and analytics) may have limited access to data, and are bound by strict confidentiality agreements;
• Malaysian Authorities: Betlah will disclose user information to Malaysian authorities (such as the police, the Malaysian Anti-Corruption Commission, or the courts) when required by law, court order, or official investigation;
• Business Transfers: In the event of a merger, acquisition, or asset transfer involving Betlah, user data may form part of the transferred assets. Users will be notified in advance before any such transfer takes place.

In all instances of data sharing described above, Betlah ensures that recipients are bound by confidentiality and data protection obligations that are equivalent to or stricter than those practised by Betlah itself.

Betlah continually invests in security infrastructure to ensure that users' personal data is protected at all times. The technical and organisational measures we implement include:

• Data Encryption in Transit: All communications between your device and Betlah's servers are secured using TLS 1.3 and 256-bit SSL encryption — the highest standards currently available;
• Encryption of Stored Data: Sensitive data stored in betlah's databases — including bank account information and identity verification documents — is encrypted using industry-standard encryption algorithms;
• Strict Access Controls: Only Betlah staff with a legitimate operational need are granted access to user data, and all access is logged and continuously monitored;
• Two-Factor Authentication: Two-factor authentication (2FA) is available and encouraged for all Betlah user accounts as an added layer of security;
• Regular Security Audits: The Betlah platform undergoes regular penetration testing and security audits conducted by independent third-party firms to identify and remediate any vulnerabilities;
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect and respond to any suspicious or unusual activity on the Betlah platform.

Betlah retains users' personal data only for as long as necessary for the purposes set out in this Policy, or as required by applicable Malaysian law.

• Active Account Data: For as long as your Betlah account remains active, your personal data is retained to ensure uninterrupted access to all platform services;
• After Account Closure: Once an account is closed, Betlah retains financial transaction records and identity verification data for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legal requirements;
• Communication Data: Communication logs with the Betlah support team are retained for 3 years from the date of communication for dispute resolution purposes;
• Technical & Log Data: System access logs and technical data are retained for 12 months for security and technical troubleshooting purposes;
• Cookie Data: Session cookies are deleted automatically when you close your browser. Preference and analytics cookies are stored for the duration specified in the Betlah platform's cookie settings.

Once the retention period has ended, Betlah will securely delete or destroy your personal data using methods that ensure it cannot be recovered or accessed again.

As a Betlah user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) regarding your personal data held by Betlah:

To exercise any of the rights above, please contact Betlah's Data Protection Officer by email at support@betlah.click by specifying the particular right you wish to exercise along with your account information for identity verification. Betlah will respond within 21 business days of receiving your request.

The Betlah platform uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following types of cookies are in use:

• Essential Cookies (Required): These cookies are required for the core functionality of the Betlah platform, such as maintaining your login session and processing transactions. Disabling these cookies will affect the platform's functionality;
• Preference Cookies: Saving your preferences such as language, favourite sports markets, and display settings to deliver a more personalised experience on Betlah;
• Analytics Cookies: Betlah uses aggregated, anonymised analytics data to understand how users interact with the platform and identify areas for improvement;
• Security Cookies: Helps detect suspicious activity, protect accounts from unauthorised access, and verify user identity during betting sessions.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality or your overall experience on the Betlah platform.

Betlah strictly prohibits the use of its platform by anyone under the age of 18. Our platform is neither designed for nor directed at children or underage individuals.

Betlah does not knowingly collect personal data from individuals under the age of 18. Should we discover that personal data belonging to a minor has been collected without valid parental or guardian consent, Betlah will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe your underage child has registered an account with betlah, please contact us immediately at support@betlah.click so we can take the appropriate action.

The Betlah platform may contain links to or integrations with third-party services such as payment gateways (Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, CIMB Clicks) used to process your financial transactions.

When you use these third-party services, you will be subject to their own Privacy Policies. Betlah is not responsible for the privacy practices or content of any third-party websites or services.

Betlah recommends that you read the Privacy Policy of the payment gateway you use to understand how they handle your financial information when processing your deposit and withdrawal transactions on betlah.

Betlah reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect user data.

When material changes are made to this Privacy Policy, Betlah will:

• Updating the "Last Updated" date at the top of this document;
• Notifying users via email or in-platform notification at least 14 days before changes take effect (for material changes);
• In the case of significant changes, obtaining fresh consent from users before those changes take effect.

Your continued use of the Betlah platform after any Privacy Policy update is published will be considered your acceptance of the updated terms. We encourage you to review this page periodically for the latest information on how Betlah protects your privacy.

Betlah has appointed a Data Protection Officer (DPO) responsible for ensuring our platform's compliance with Malaysia's PDPA and for addressing privacy-related enquiries from users.

If you have any questions, concerns, or complaints regarding this Privacy Policy, the way we handle your personal data, or wish to exercise any of your rights under the PDPA, please contact us via:

• Email (Privacy Enquiries): support@betlah.click – include "Privacy Enquiry / PDPA" in your email subject line;
• Live Chat: Available 24/7 via the chat icon within the Betlah platform – select the "Privacy & Data" category;
• WhatsApp: Available via the support button within your betlah account.

Betlah is committed to responding to all privacy enquiries within 21 working days from the date of receipt. For more complex requests, additional time may be required, and we will notify you accordingly within that period.

The betlah support team operates 24 hours a day, 7 days a week, providing full service in Bahasa Melayu. For information on responsible gambling, please visit our Betlah Responsible Gaming. For the platform's full terms of use, please refer to Betlah Terms & Conditions.