Privacy Policy

This Privacy Policy ("Policy") is published by Takabet ("the Company", "we", "us", "our") and applies to all individuals ("User", "you", "your") who access or use the Takabet online betting platform, available at takabet.cam and its associated subdomains or mobile-optimised interfaces.

Takabet processes personal data in connection with the provision of its online sports betting, live casino, slots, and instant-games services. This Policy sets out in full: the categories of personal data we collect; the purposes for which we process that data; the legal bases upon which processing is conducted; the circumstances under which we share data with third parties; your rights as a data subject; and how you may exercise those rights.

By creating an account on the Takabet platform and using our services, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions, which govern the broader contractual relationship between you and the Company.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or indirectly — including name, identification number, email address, device identifiers, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means Takabet, which determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of Takabet under a written agreement.
• "KYC" means Know Your Customer — the identity verification process conducted in compliance with international anti-money-laundering (AML) obligations.
• "Cookies" means small text files stored on a User's device by the platform browser for functional, analytical, or preference-retention purposes.
• "Sensitive Data" means a subset of Personal Data requiring heightened protection, including financial account details, government-issued identity documents, and biometric data.

Takabet collects personal data across the following categories. We do not collect any category of data unless it serves a documented, legitimate purpose.

We collect personal data through three primary channels:

Direct Collection

Data you voluntarily provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, participate in a promotion, or update your account profile. This is the primary source of Identity, Contact, and Financial Data.

Automated Collection

Technical Data is collected automatically when you access the Takabet platform through standard web technologies including cookies, server logs, and session tracking. This data is used to maintain platform security, detect fraudulent access, and improve user experience. See Section 11 for full cookie details.

Third-Party Sources

In limited circumstances, we may receive data from third-party sources, including:

• Payment processors and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX) for transaction verification;
• Identity verification service providers engaged to assist with KYC document authentication;
• Fraud detection and AML screening services that cross-reference submitted data against compliance watchlists.

Takabet processes your personal data for the following documented purposes:

• Account Management: Creating, maintaining, and administering your registered account, including authentication and access control.
• KYC & Identity Verification: Verifying your identity and age (21+ minimum) in compliance with our international licensing requirements and AML obligations.
• Payment Processing: Processing deposits and withdrawals through your selected payment method (including Touch 'n Go eWallet, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and cryptocurrencies).
• Platform Delivery: Operating and maintaining all features of the Takabet platform, including the sports betting engine, live casino games, slots, and instant games.
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited conduct.
• Regulatory Compliance: Meeting record-keeping and reporting obligations under our international licensing framework.
• Customer Support: Responding to support requests, resolving account disputes, and communicating service updates.
• Responsible Gambling: Monitoring for signs of problem gambling behaviour and implementing protective interventions where warranted.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and feature development.
• Direct Marketing (with consent): Sending promotional emails, bonus notifications, and platform news to Users who have opted in to marketing communications.

Takabet processes personal data only where a valid legal basis exists. The primary legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accept at registration — including account management, payment processing, and platform delivery.
• Legal Obligation: Processing required to comply with applicable laws and the requirements of our international licensing authority — including KYC, AML record-keeping, and age verification.
• Legitimate Interests: Processing conducted in pursuit of our legitimate business interests (fraud prevention, platform security, analytics) where those interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing purposes, where you have explicitly opted in to receive such communications. Consent may be withdrawn at any time without affecting your account status.

Takabet does not sell, rent, or trade your personal data. We share personal data with third parties only in the following defined circumstances and only to the extent strictly necessary:

• Payment Service Providers: Financial data is shared with payment processors and e-wallet providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX banking partners) solely for the purpose of processing your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Identity documents are shared with our contracted third-party KYC service providers operating under strict data processing agreements.
• Fraud & AML Screening Services: Identifying information may be cross-referenced against compliance watchlists maintained by contracted third-party AML service providers.
• Regulatory Authorities: We may be required to disclose personal data to our licensing authority or to competent legal authorities in response to a lawful request, court order, or regulatory investigation.
• Game Content Providers: Certain game studios contracted by Takabet may receive session identifiers for the purpose of game delivery and fairness auditing. These providers do not receive your personal identity information.
• Corporate Transactions: In the event of a merger, acquisition, or sale of company assets, personal data may be transferred to the successor entity, subject to the same privacy protections outlined in this Policy.

As an internationally licensed platform, Takabet and certain of its contracted Data Processors may store or process personal data on servers located outside of Malaysia. Where personal data is transferred to jurisdictions that do not provide an equivalent level of data protection, the Company implements appropriate safeguards including:

• Standard contractual clauses incorporated into Data Processing Agreements with all international processors;
• Technical security measures (encryption in transit and at rest) ensuring data security regardless of storage location;
• Strict access controls limiting personnel access to personal data on a need-to-know basis.

By using the Takabet platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia. The Company takes all reasonable steps to ensure such transfers are conducted securely and in compliance with applicable data protection frameworks.

Personal data is retained for no longer than is necessary for the purposes set out in this Policy. Specific retention periods are as follows:

• Account Data (Identity & Contact): Retained for the duration of the active account relationship plus a period of five (5) years following account closure, in compliance with AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification in accordance with our international licensing requirements.
• Financial & Transaction Data: Retained for seven (7) years from the date of transaction to satisfy audit and regulatory reporting requirements.
• Betting & Game Records: Retained for five (5) years for dispute resolution, regulatory compliance, and responsible gambling monitoring purposes.
• Technical & Log Data: Retained for a period of twelve (12) months for security monitoring and fraud investigation purposes.
• Marketing Communications Data: Retained until you withdraw consent or for a maximum of two (2) years of inactivity, whichever is earlier.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with any individual.

Takabet takes the security of your personal data seriously and implements a multi-layered approach to data protection across technical, organisational, and procedural dimensions.

Technical Controls

• AES-256 encryption for all data stored at rest;
• TLS 1.2/1.3 encryption for all data transmitted between your browser or device and our servers;
• Multi-factor authentication available for all registered accounts;
• Intrusion detection and prevention systems (IDPS) monitoring platform infrastructure;
• Regular automated vulnerability scanning and scheduled penetration testing by independent security firms.

Organisational Controls

• Role-based access controls ensuring platform staff access personal data only to the extent their job function requires;
• Background screening for personnel in roles with access to sensitive personal or financial data;
• Mandatory data privacy training for all staff with access to personal data.

The Takabet platform uses cookies and similar tracking technologies to operate correctly, maintain session security, and understand how users interact with our pages. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for platform functionality including login session maintenance, cashier security tokens, and fraud prevention signals. These cannot be disabled without disrupting platform access.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how pages are used — including page load times, error rates, and navigation paths. This data informs platform improvement decisions.
• Preference Cookies: Stores non-sensitive user preferences such as language setting, display options, and last-visited game category to improve your return experience.

You can control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impact platform functionality. We do not use third-party advertising cookies or behavioural retargeting pixels.

Subject to applicable law and our regulatory obligations, you hold the following rights in relation to the personal data Takabet holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed. We will respond within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request correction. Account profile data can be updated directly through your account settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected. Note that regulatory retention obligations (AML, KYC) may mean that certain data cannot be deleted immediately.
• Right to Restriction: You may request that we restrict processing of your personal data in specific circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing conducted on the basis of legitimate interests, including direct marketing. Marketing opt-outs take effect immediately upon receipt of your request.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We may require you to verify your identity before processing the request. We aim to acknowledge all requests within 5 business days.

The Takabet platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals below this age. If we become aware that personal data has been submitted by a person under the minimum age, we will promptly delete all such data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered an account on the Takabet platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

The Takabet platform does not contain links to third-party websites or external services within its main interface. However, certain promotional materials or email communications may reference external resources. Takabet is not responsible for the privacy practices of any third-party website or service. Users who follow any external link do so at their own risk and are advised to review the applicable third-party privacy policy before submitting any personal data.

Takabet reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. Material changes — defined as changes that affect how your personal data is collected, used, or shared — will be communicated to you via:

• An email notification to the address registered on your account, sent at least 14 days before the changes take effect; and
• A prominent banner notice displayed on the Takabet platform during the notice period.

Minor non-material changes (such as typographical corrections or clarifications that do not affect your rights) may be made without prior notice. The "Last Reviewed" date at the top of this Policy always reflects the date of the most recent revision. We recommend you review this Policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data Takabet holds about you, please contact our support and data team using the details below. Please include the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate for efficient routing.