Privacy Policy

This Privacy Policy ("Policy") is issued by Indobet ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("you", "your", "Member "User") who access or use the website located at indobet.buzz, including all associated services, features, and content provided thereon.

Indobet operates as an online gaming and sports betting platform primarily serving players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other cities and regions throughout the country. This Policy applies equally to all users regardless of their geographic location.

We are committed to protecting your privacy and ensuring that your personal data is handled with the highest standards of care, transparency, and security. This Policy explains in plain terms what data we collect, why we collect it, how it is used, and what rights you hold in relation to it.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, phone number, IP address, payment details, and identification documents.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — Indobet, as the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" — any third party that processes personal data on behalf of Indobet pursuant to a written data processing agreement.
• "Data Subject" — any natural person whose personal data is processed by Indobet; for the purposes of this Policy, this primarily refers to registered Members and website visitors.
• "Consent" — any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a specified purpose.
• "Cookie" — a small text file placed on your device by a website, used to recognise returning visitors, store preferences, and support analytics functions.
• "KYC" — Know Your Customer; the process of verifying the identity and documentation of Members in accordance with regulatory requirements.

Indobet collects personal data that is necessary to provide you with a functional, secure, and compliant gaming platform. The categories of personal data we collect are set out below:

We collect personal data through the following methods:

• Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, submitting payment information, or contacting our support team.
• Automated Technical Collection: Data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you interact with the platform.
• Third-Party Service Providers: Data received from our identity verification partners, payment processors (including banks, DuitNow, FPX, Touch'n Go eWallet, Boost, and GrabPay providers), and fraud detection services in connection with account verification and transaction processing.
• Publicly Available Sources: Information available in public registers, databases, or other publicly accessible records that we may consult for the purpose of verifying your identity or satisfying our AML obligations.

Indobet processes your personal data only where a lawful basis exists. The lawful bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing required to enter into or perform our contract with you as a registered Member — including account creation, transaction processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC requirements, AML obligations, licensing conditions, and regulatory reporting duties.
• Legitimate Interests: Processing undertaken in pursuit of our legitimate business interests — including fraud prevention, platform security, improving user experience, and internal analytics — provided such interests do not override your fundamental privacy rights.
• Consent: Processing based on your explicit consent where we have specifically requested it, such as for direct marketing communications. You may withdraw consent at any time by contacting us at [email protected].

Indobet uses personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your Indobet account, including processing deposits and withdrawals, managing your VIP tier status, and delivering promotions to which you are entitled.
• Identity Verification (KYC): To verify your identity and age in accordance with our regulatory obligations, and to comply with our anti-money laundering and counter-terrorism financing requirements.
• Transaction Processing: To process deposits and withdrawals via supported Malaysian payment methods, including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, and GrabPay.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and other prohibited conduct, and to protect the integrity of the platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance in English, Bahasa Melayu, or Mandarin as requested.
• Responsible Gambling Compliance: To monitor gameplay patterns and identify members who may be displaying indicators of problem gambling, in order to implement appropriate responsible gaming interventions where warranted.
• Marketing Communications: To send promotional communications, bonus notifications, and platform updates where you have provided your consent to receive such communications. You may opt out at any time.
• Legal and Regulatory Compliance: To meet our obligations under applicable licensing requirements, tax laws, and any other statutory duties applicable to the operation of an online gaming platform.
• Analytics and Platform Improvement: To analyse usage patterns, game performance, and customer behaviour in aggregated and anonymised form to improve the quality and functionality of our services.

Indobet does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following circumstances:

• Payment Service Providers: Banks, e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX), and card networks (Visa, Mastercard) as necessary to process your financial transactions.
• Identity Verification Partners: Specialist KYC and AML compliance providers who assist us in verifying your identity and satisfying our regulatory obligations.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and software infrastructure providers who process data on our behalf pursuant to binding data processing agreements.
• Regulatory and Law Enforcement Authorities: Government agencies, regulators, courts, or law enforcement bodies where disclosure is required by applicable law, court order, or regulatory obligation.
• Professional Advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where access to data is necessary to provide professional services to Indobet.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of Indobet's business, personal data may be transferred to the relevant acquirer as part of that transaction, subject to appropriate confidentiality obligations.

All third-party data processors engaged by Indobet are subject to binding data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only on Indobet's documented instructions.

Indobet uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and collect analytics data. By continuing to use the platform, you consent to our use of cookies as described in this section.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the platform and your ability to log in or complete transactions.

Indobet retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Specific retention periods applicable to key data categories are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and licensing regulatory requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the date of the relevant transaction, in accordance with financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years following the completion of the verification, or as required by the applicable regulatory framework.
• Customer Support Communications: Retained for up to three (3) years following the resolution of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Retained for up to twenty-four (24) months from collection for analytics and security monitoring purposes, after which it is anonymised or deleted.
• Marketing Preferences: Retained for the duration of your active membership and for up to two (2) years following account closure or withdrawal of consent, whichever is earlier.

The operation of the Indobet platform may require your personal data to be transferred to and processed in jurisdictions outside of Malaysia, including jurisdictions where data protection laws may differ from those in force in Malaysia. Such transfers may occur connection with our use of cloud infrastructure, technology service providers, and data processing partners operating in various countries.

Where personal data is transferred internationally, Indobet ensures that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable. By using the Indobet platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

You have the following rights in relation to your personal data held by Indobet. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within thirty (30) calendar days of receipt.

• Right of Access: You may request confirmation of whether we hold personal data about you and, if so, a copy of that data along with supplementary information about how it is processed.
• Right to Rectification: You may request correction of any personal data that is inaccurate, incomplete, or out of date. Some corrections can be made directly via your account settings page.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to our legal and regulatory retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another data controller.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights Related to Automated Decision-Making: Where Indobet makes decisions about you solely through automated means that produce legal or similarly significant effects, you have the right to request human review of that decision and to contest the outcome.

The Indobet platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, use, or process personal data from any individual under the age of 21. Our registration process includes age verification checks, and our KYC procedures require submission of valid government-issued identification to confirm eligibility.

In the event that we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on our platform, please contact us immediately at [email protected].

Indobet implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures in place include:

• 256-Bit SSL Encryption: All data transmitted between your device and Indobet's servers is protected by industry-standard SSL/TLS encryption.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access permissions and audit logging.
• Data Minimisation: We collect only the minimum personal data necessary for each specified purpose, in accordance with the principle of data minimisation.
• Regular Security Audits: Our infrastructure undergoes regular penetration testing and security audits conducted by qualified independent specialists.
• Incident Response: We maintain a documented data breach response procedure ensuring timely identification, containment, and notification in the event of any security incident.

Notwithstanding the above, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorised access to your account.

Indobet reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our business operations, or data processing practices. Where changes are material, we will provide advance notice by publishing the updated Policy on this page and, where appropriate, notifying Members via their registered email address.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Indobet platform following publication of an updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to remain informed of any changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data subject rights, please contact the Indobet privacy team using the details below. We aim to respond to all privacy-related enquiries within 30 calendar days.