Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out how KampungBet ("the Company", "we", "us", "our") collects, uses, stores, processes, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the KampungBet online platform at https://kampungbet.cam (the "Platform").

KampungBet operates in a regulated environment and is subject to applicable data protection and anti-money laundering legislation. The processing of your personal data is carried out in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

By creating an account, accessing the Platform, or using any of our services — including sports betting, live casino, slot games, or customer support — you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings assigned below:

3 Data We Collect

KampungBet collects personal data through several channels and at various stages of the user journey. The categories of data collected are outlined below:

3.1 Registration Data

When you create an account, we collect information including your full legal name, date of birth, residential address, email address, mobile telephone number, and preferred currency (MYR). This data is essential to establish and maintain your account.

3.2 Identity Verification (KYC) Data

To process withdrawals and comply with anti-money laundering obligations, we require copies of government-issued identification (such as your Malaysian MyKad or passport), proof of address, and in some cases, proof of payment method ownership. KYC documents are processed through a secure verification system and retained only for as long as legally required.

3.3 Financial Transaction Data

We record deposit and withdrawal transactions, including the payment method used (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, USDT TRC20, BTC, or 7-Eleven Cliq), transaction amounts in MYR or cryptocurrency equivalent, timestamps, and transaction identifiers. KampungBet does not store full card numbers or banking login credentials on our servers.

3.4 Behavioural & Usage Data

As you use the Platform, we automatically collect technical data including IP address, device type and operating system, browser type, session duration, pages visited, game history, bet records, and feature usage patterns. This data is used to improve the Platform, personalise your experience, and detect unusual activity.

3.5 Communications Data

When you contact our support team via live chat or email, we retain records of those communications including the content of messages, timestamps, and the agent who assisted you. These records are kept for quality assurance, training, and dispute resolution purposes.

4 Data Processing & Legal Basis

KampungBet processes personal data on the basis of one or more of the following lawful grounds, in accordance with the PDPA and applicable data protection law:

• Contractual Necessity: Processing is required to perform the contract between KampungBet and the User — including account management, deposit processing, bet settlement, and withdrawal execution.
• Legal Obligation: KampungBet is subject to legal requirements including anti-money laundering (AML) obligations, know-your-customer (KYC) regulations, and responsible gambling mandates. Processing necessary to satisfy these obligations is carried out on this legal basis.
• Legitimate Interests: We process certain data — including behavioural and technical data — on the basis of our legitimate interests in operating a secure, functional, and commercially viable platform. Such processing does not override the fundamental rights and freedoms of our users.
• Consent: Where processing is not required by contract or legal obligation — such as the sending of marketing communications or the use of non-essential cookies — we will seek your explicit prior consent. You may withdraw consent at any time without detriment to your account standing.

5 How We Use Your Data

Personal data collected by KampungBet is used exclusively for the purposes set out below. We do not use your data for purposes beyond those stated without obtaining fresh consent or establishing a new lawful basis for processing.

• Account Management: To create, verify, maintain, and close your account; to process login and authentication requests; to communicate account-related notices
• Transaction Processing: To process deposits and withdrawals across all supported Malaysian payment methods; to detect and prevent fraudulent or unauthorised transactions; to reconcile financial records
• Regulatory Compliance: To fulfil KYC, AML, and responsible gambling obligations; to report to competent authorities as required by law; to maintain records mandated by regulation
• Platform Personalisation: To remember your preferences and settings; to surface content and promotions relevant to your betting history and interests; to improve the overall user experience
• Security & Fraud Prevention: To detect unusual account behaviour and suspicious transactions; to investigate potential abuse, collusion, or multi-accounting; to protect the integrity of our betting markets
• Customer Support: To respond to your enquiries, complaints, and requests; to maintain a record of support interactions for quality assurance and dispute resolution
• Marketing Communications (with consent only): To send promotional offers, bonus notifications, and news relevant to KampungBet — only where you have opted in and not subsequently withdrawn consent
• Responsible Gambling: To monitor for signs of problematic gambling behaviour; to administer self-exclusion, deposit limit, and cooling-off requests; to maintain audit records as required by our responsible gambling obligations

6 Data Sharing & Disclosure

KampungBet does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We share your data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers & Data Processors

We engage trusted third-party service providers who process data on our behalf under strict contractual obligations. These include payment processors for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other Malaysian banking services; KYC and identity verification providers; cloud infrastructure and hosting providers; fraud detection and AML screening services; and customer support platform providers. All processors are required to implement appropriate data protection measures.

6.2 Legal & Regulatory Disclosure

KampungBet may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of KampungBet's assets, personal data held by us may form part of the transferred assets. We will provide advance notice to affected users in such circumstances, and any successor entity will be bound by this Policy.

7 Cookies & Tracking Technologies

KampungBet uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your web browser. The categories of cookies used are as follows:

Strictly necessary cookies are required for the Platform to function and cannot be disabled. All other cookie categories require your consent, which you may grant or withdraw via the cookie preferences panel accessible at any time from the Platform footer. Note that disabling certain cookie categories may affect the functionality of the Platform.

You may also control cookies through your browser settings. Instructions for managing cookies are available in your browser's help documentation. Clearing cookies will log you out of your KampungBet session and reset your stored preferences.

8 Data Retention

KampungBet retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

• Account and registration data is retained for the duration of your account's active status and for a minimum of five (5) years following account closure, as required by AML regulations.
• KYC and identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records — including deposits and withdrawals processed via Malaysian payment methods such as Maybank, CIMB, DuitNow, and cryptocurrency channels — are retained for seven (7) years in accordance with financial regulatory requirements.
• Betting and gaming records are retained for a minimum of three (3) years from the date of the relevant activity.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Responsible gambling records, including self-exclusion requests and deposit limit settings, are retained for five (5) years to ensure compliance with reactivation restrictions.
• Marketing preference data is retained until consent is withdrawn, after which it is deleted within 30 days.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be attributed to an identifiable individual.

9 Security Measures

KampungBet implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for all databases containing sensitive personal data, including KYC documents and financial records
• Two-factor authentication (2FA) available for all player accounts
• Role-based access controls restricting internal employee access to personal data on a need-to-know basis
• Regular independent penetration testing and vulnerability assessments by accredited third-party security firms
• Real-time fraud detection and anomaly monitoring across all account activities and financial transactions
• Secure, redundant cloud infrastructure with geographic failover and regular data backups
• Staff training on data protection obligations and security best practices, conducted at least annually

Whilst KampungBet employs robust security measures, no method of data transmission or storage is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to the rights and freedoms of affected individuals, KampungBet will notify relevant supervisory authorities and affected users in accordance with applicable notification requirements.

10 User Rights

As a user of KampungBet and a data subject under applicable data protection law, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our Data Protection team using the details provided in Section 14.

11 Minors & Age Verification

KampungBet's services are strictly for individuals aged 21 years and above. We do not knowingly collect, store, or process personal data from persons under the age of 21. All new accounts are subject to mandatory age verification as part of the KYC process.

Where KampungBet identifies or has reasonable grounds to believe that a registered account is held by a person under 21 years of age, the account will be immediately suspended, all associated balances frozen pending investigation, and the matter referred to our compliance team. The account will subsequently be closed and any funds returned to the originating payment source following verification of the rightful account owner's identity.

If you believe that a minor has accessed or registered on the KampungBet Platform using false information, please notify us immediately at [email protected]. We will act on all such reports promptly and in confidence.

12 Third-Party Services

The KampungBet Platform may contain references to third-party services, payment processors, and technology providers. KampungBet engages the following categories of third-party service providers in the course of operating the Platform:

• Payment Processors: Licensed financial institutions and e-wallet operators facilitating transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks including Maybank, CIMB, Public Bank, Hong Leong, and RHB
• Identity Verification Providers: Specialist KYC and document verification services operating under applicable data protection obligations
• Cloud Infrastructure: Hosting and storage providers operating on secure, enterprise-grade infrastructure with data residency controls
• Analytics Platforms: First-party analytics tools used to monitor Platform performance and identify user experience improvements — no personal data is shared with advertising networks
• Customer Support Systems: Live chat and email management platforms used to facilitate our 24/7 support operations

All third-party processors engaged by KampungBet are bound by written data processing agreements requiring them to implement appropriate security measures, process data only on KampungBet's instructions, and notify us promptly of any data security incidents. KampungBet conducts due diligence on third-party processors prior to engagement and reviews these relationships periodically.

KampungBet is not responsible for the privacy practices of third-party websites or services that are not operated by KampungBet, even if linked to from the Platform. Users are encouraged to review the privacy policies of any third-party services they access independently.

13 Policy Amendments

KampungBet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. The "Last Updated" date at the top of this page will be revised upon each update.

Where amendments are material — meaning they significantly affect how we collect, use, or share your personal data — KampungBet will provide advance notice by email to the address registered to your account, or by displaying a prominent notice on the Platform, prior to the changes taking effect. A minimum notice period of 14 days will be provided for material changes.

For non-material changes, including corrections, clarifications, and minor updates, the revised Policy will be published on this page without advance notification. Your continued use of the Platform following any amendment constitutes acceptance of the updated Policy. If you do not agree to any amendment, you should cease using the Platform and may request account closure as described in our Terms & Conditions.

Archived versions of previous Privacy Policies are available on request by contacting our Data Protection team.

14 Contact & Data Protection Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the following channels. All data subject requests will be acknowledged within 5 business days and resolved within 30 days of receipt.

If you are not satisfied with KampungBet's response to your data protection enquiry, you have the right to lodge a complaint with the relevant supervisory authority for data protection matters in your jurisdiction. In Malaysia, data protection oversight is administered under the framework of the Personal Data Protection Act 2010 (PDPA), administered by the Department of Personal Data Protection (JPDP).