Kangbet Privacy
Policy

This Privacy Policy (hereinafter "this Policy" or "the Policy") is issued by Kangbet (hereinafter "kangbet", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at kangbet.cam. This Policy sets out the manner in which kangbet collects, uses, stores, discloses, and otherwise processes personal data in connection with the provision of its services.

This Policy applies to all individuals who interact with the kangbet platform, including registered account holders, prospective registrants who submit information in the course of an incomplete registration, and visitors who browse the platform without creating an account (hereinafter collectively referred to as "you", "the User", or "the Data Subject").

By accessing or using the kangbet platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the platform and may request closure of any existing account in accordance with our Terms and Conditions.

This Policy is to be read in conjunction with the kangbet Terms and Conditions and Responsible Gambling Policy, both of which form part of the overarching agreement between kangbet and its users.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means kangbet, which determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means any third party that processes personal data on behalf of kangbet, such as payment service providers, KYC verification partners, and cloud hosting providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for one or more specified purposes.
• "KYC Data" means identity and age verification documentation submitted by a User, including government-issued identity documents, proof of address, and source-of-funds documentation.
• "Cookies" means small text files placed on a User's device by the platform for the purposes of session management, analytics, and personalisation.

Kangbet collects personal data across the following categories, depending on how you interact with the platform:

Kangbet does not collect special category data (such as biometric data, health data, or political opinions) unless explicitly required for a specific regulatory obligation and with your prior informed consent.

Kangbet collects personal data through the following primary channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you visit or interact with the platform, including via cookies, server logs, and tracking pixels.
• Payment providers: Transactional confirmation data received from Malaysian payment processors, including DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank2u, CIMB Clicks, Public Bank Online, and cryptocurrency network confirmations (USDT, BTC).
• Third-party KYC services: Identity verification data confirmed through third-party KYC providers where you have been directed to complete verification externally.
• Fraud and risk monitoring: Risk signals received from third-party fraud prevention providers in connection with account activity review.

Kangbet processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your kangbet account, including authentication and security.
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, and all associated platform features.
• Payment processing: To facilitate deposits and withdrawals in MYR through your nominated payment channel, and to reconcile transaction records.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and that your identity is as declared.
• Regulatory compliance: To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable legal obligations, including record-keeping requirements.
• Customer support: To respond to your enquiries, resolve complaints, and provide assistance with account or platform issues.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other forms of platform abuse.
• Promotions and communications: To send you relevant promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.
• Platform improvement: To analyse usage patterns and technical performance in order to improve the platform experience for all users.
• Responsible gambling: To monitor player behaviour for indicators of problem gambling and to apply protective tools where required or requested.

Kangbet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered platform user, including account management, payments, and game access.
• Legal obligation: Processing required to comply with applicable legal requirements, including AML/KYC obligations under our international operating licence conditions.
• Legitimate interests: Processing carried out in kangbet's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your specific, informed consent — for example, the sending of promotional communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Kangbet does not sell personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment service providers: Malaysian payment processors (including FPX operator PayNet, Touch 'n Go eWallet operator TNG Digital, and participating banks) receive transaction data necessary to process your deposits and withdrawals.
• KYC verification partners: Identity verification service providers receive identity and document data to complete age and identity verification in accordance with our licensing obligations.
• Cloud infrastructure providers: Hosting and database service providers who store platform data on kangbet's behalf under contractual data processing agreements with equivalent security standards.
• Fraud prevention providers: Third-party risk and fraud monitoring services that help us detect suspicious activity and protect the platform.
• Legal and regulatory authorities: Law enforcement agencies, courts, or regulatory bodies where we are legally compelled to disclose personal data, or where disclosure is necessary to protect kangbet's legal rights.
• Professional advisers: Lawyers, auditors, and compliance consultants bound by confidentiality obligations, where required for the conduct of professional services.

Kangbet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.

• Account data is retained for the duration of the active account relationship and for a period of five (5) years following account closure, in accordance with standard AML record-keeping obligations.
• KYC documentation is retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records are retained for a minimum of five (5) years to comply with financial record-keeping requirements under our international operating licence.
• Support communications are retained for up to three (3) years from the date of the last communication.
• Marketing consent records are retained for the period during which consent remains active, plus one (1) year following withdrawal of consent.
• Technical and usage data in anonymised or aggregated form may be retained indefinitely for platform analytics and improvement purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of individual identities.

Kangbet uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without rendering key platform features inoperable.
• Functional Cookies: Used to remember your preferences such as language settings, preferred payment method, and display options. Disabling these cookies may affect platform personalisation.
• Analytics Cookies: Used to collect aggregated data on how users interact with the platform, including page views, session durations, and feature usage. This data is used to improve platform performance and user experience.
• Marketing Cookies: Used to track the effectiveness of promotional campaigns and to deliver relevant offers based on your platform activity. These are subject to your consent and may be disabled at any time.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the kangbet platform.

Kangbet operates under an international online gambling licence and may store or process personal data on servers located outside of Malaysia. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as Malaysian law, kangbet implements appropriate safeguards including:

• Standard contractual clauses approved by the relevant data protection authority in the applicable jurisdiction.
• Data processing agreements with third-party processors requiring equivalent data protection standards.
• Technical and organisational security measures appropriate to the risk level of the data being transferred.

By using the kangbet platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside of Malaysia where necessary for the provision of our services, subject to the safeguards described above.

As a Data Subject whose personal data is processed by kangbet, you hold the following rights, exercisable by submitting a written request to the contact details provided in Section 15 of this Policy:

• Right of Access: You may request a copy of the personal data kangbet holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations that require retention.
• Right to Restrict Processing: You may request that kangbet limits the processing of your personal data in certain circumstances, for example while the accuracy of data is under dispute.
• Right to Data Portability: You may request a copy of the personal data you have provided to kangbet in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Kangbet will respond to verified data subject requests within thirty (30) days of receipt. Where requests are complex or numerous, this period may be extended by a further sixty (60) days with written notice to you.

Kangbet's platform is not directed at, and must not be used by, any person under the age of 21 years. Kangbet does not knowingly collect personal data from persons under the age of 21.

Where kangbet becomes aware that personal data has been collected from a person under the age of 21 — whether through self-disclosure, parental notification, or internal detection — kangbet will immediately suspend the relevant account and delete the associated personal data, except where retention is required for legal or compliance purposes.

If you believe that a minor has registered an account or submitted personal data to kangbet, please contact us immediately at the address provided in Section 15. Concerns of this nature are treated as urgent and will be investigated within 24 hours of receipt.

Kangbet implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between user devices and kangbet servers.
• Encryption of sensitive data fields (including payment credentials and identity document numbers) at rest in kangbet's database infrastructure.
• Two-factor authentication (2FA) available to all registered users and mandatory for administrative personnel.
• Role-based access controls ensuring that only authorised personnel with a defined operational need may access personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Audit logging of all administrative access to personal data, with logs retained for a minimum of twelve (12) months.
• Incident response procedures providing for rapid containment, investigation, and notification in the event of a data breach.

Notwithstanding the above, no method of transmission over the internet or method of electronic storage is completely secure. Kangbet cannot guarantee the absolute security of personal data. You are responsible for maintaining the confidentiality of your login credentials and for notifying kangbet immediately if you suspect unauthorised access to your account.

Kangbet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our data processing practices. Material changes will be communicated to registered users via a prominent notice on the platform and/or by email to the registered address on file, with advance notice of at least fourteen (14) days before the revised Policy takes effect.

The "Last Updated" date at the top of this page will reflect the date of the most recent amendment. We encourage you to review this Policy periodically to remain informed of how your personal data is being processed. Your continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a concern about how kangbet has handled your personal data, please contact our Data Protection team through the following channel:

Email: [email protected]

Live chat support is available 24 hours a day, 7 days a week on the platform. For privacy-specific queries, please indicate "Privacy — Data Request" in your opening message so that your enquiry is routed directly to the appropriate team.

Kangbet aims to acknowledge all privacy-related requests within 48 hours and to resolve them within the timeframes specified in Section 11. We take data protection enquiries seriously and will handle all communications with the confidentiality they deserve.