At bet22, your privacy is not an afterthought — it is a design principle. This Privacy Policy explains exactly what personal data we collect from Malaysian players, how we use and protect it, who we share it with, how long we keep it, and what rights you hold over your own information.
bet22 ("bet22", "the Company", "we", "us", "our") operates the online sports betting and casino platform available at bet22.casa. In the course of providing our services to players in Malaysia and beyond, we necessarily collect and process personal data relating to our registered users and platform visitors.
This Privacy Policy ("Policy") sets out in clear and transparent terms: (a) the categories of personal data that bet22 collects; (b) the purposes for which that data is processed; (c) the legal bases on which we rely to process your data; (d) the circumstances in which we share data with third parties; (e) the measures we take to keep your data secure; and (f) your rights as a data subject and how to exercise them.
This Policy applies to all persons who access or use the bet22 platform, including registered players, prospective players who visit our website without registering, and any individual whose personal data we receive in connection with the operation of our services. It covers data collected via our website at bet22.casa and through any associated communication channels including our live chat support system and email correspondence.
If you have any questions about this Policy or how we handle your personal data, please contact our Data Protection team at [email protected] before using the platform.
The following terms carry the meanings assigned to them below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person — including names, identification numbers, location data, online identifiers, or factors specific to that person's physical, economic, or social identity. |
| Data Subject | The natural person to whom the personal data relates — in the context of this Policy, primarily registered players and website visitors. |
| Data Controller | The entity that determines the purposes and means of processing personal data. bet22 acts as the Data Controller for all personal data collected via the bet22 platform. |
| Data Processor | Any third party that processes personal data on behalf of bet22 under a data processing agreement, such as payment service providers and KYC verification vendors. |
| Processing | Any operation performed on personal data, including collection, storage, organisation, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| PDPA | The Personal Data Protection Act 2010 (Malaysia), the primary legislation governing the processing of personal data in commercial transactions in Malaysia. |
| Consent | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose. |
The categories of personal data that bet22 collects vary depending on your interaction with the platform. The following table summarises the main categories of data we collect and the context in which each is collected.
| Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, copy of MyKad, International Passport, or Malaysian Driver's Licence (front and back), selfie holding identity document. |
| Contact Data | Email address, Malaysian mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam), postcode. |
| Account Data | Username, hashed password, account registration date, account status, VIP tier, communication preferences, self-exclusion or limit settings. |
| Financial Data | Deposit history, withdrawal history, transaction amounts in MYR, preferred payment method (e.g., Touch 'n Go eWallet, Maybank, DuitNow, FPX), partial payment identifiers. Full card numbers and bank account credentials are never stored by bet22. |
| Transaction & Betting Data | Wager history, bet amounts, markets wagered on (e.g., Liga Super Malaysia, EPL, UFC), winnings and losses, casino game history, bonus claims and wagering progress. |
| Technical Data | IP address, browser type and version, device type and operating system, screen resolution, session duration, pages viewed, referral source, login timestamps. |
| Communications Data | Records of live chat conversations, email correspondence, and support ticket history with our team. |
| Compliance Data | KYC document verification outcomes, source of funds declarations, responsible gambling self-assessment responses, self-exclusion records. |
bet22 collects personal data through the following primary channels:
The majority of data we hold is provided directly by you during the following interactions:
When you visit or use the bet22 platform, certain technical data is collected automatically by our systems, including your IP address, browser type, device identifier, session data, and navigation behaviour. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 10 of this Policy.
In limited circumstances, bet22 may receive personal data about you from third parties, including: (a) payment service providers confirming the status or method of a transaction; (b) KYC and identity verification service providers; (c) fraud detection and anti-money-laundering screening services; and (d) analytics providers who supply aggregated behavioural insights.
bet22 processes your personal data only where a valid legal basis exists for doing so under applicable data protection law, including the Personal Data Protection Act 2010 (PDPA) of Malaysia. The following legal bases apply to our processing activities:
Processing of identity data, contact data, financial data, and transaction data is necessary to perform our contractual obligations to you under the bet22 Terms & Conditions. This includes creating and managing your account, processing deposits and withdrawals in MYR, executing wagers, and administering bonuses and loyalty programme benefits.
Processing of KYC and compliance data is required for bet22 to comply with its legal obligations, including anti-money-laundering (AML) obligations, counter-financing-of-terrorism (CFT) requirements, and age verification obligations. We are legally required to retain certain records for defined periods.
Technical data and communications data may be processed on the basis of bet22's legitimate interests in maintaining platform security, preventing fraud, improving user experience, and ensuring the technical stability of the platform — provided these interests are not overridden by your fundamental rights and freedoms.
Where we process your data for purposes not falling within the above bases — such as sending you marketing communications about new promotions or Liga Super Malaysia betting markets — we will obtain your explicit prior consent. You may withdraw this consent at any time by contacting us or updating your communication preferences in your account settings.
bet22 processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or identifying a new valid legal basis.
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity data, contact data, account data |
| Identity verification (KYC) and age confirmation | Identity data, compliance data |
| Processing deposits and withdrawals in MYR | Financial data, identity data |
| Executing wagers and delivering betting services | Transaction and betting data, account data |
| Administering bonuses and loyalty programme | Account data, transaction data, identity data |
| Anti-fraud and AML/CFT compliance screening | Identity data, financial data, technical data, compliance data |
| Customer support and dispute resolution | Identity data, communications data, transaction data |
| Responsible gambling monitoring and intervention | Account data, transaction data, compliance data |
| Platform security and fraud prevention | Technical data, identity data |
| Marketing communications (with consent only) | Contact data, account data, betting data (for personalisation) |
| Platform performance analytics and improvement | Technical data (aggregated and anonymised where possible) |
bet22 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only with the categories of recipient described below, and only to the extent necessary for the stated purpose.
To process deposits and withdrawals in MYR, we share relevant financial data with our approved Malaysian payment service providers, including operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB, Hong Leong, DuitNow, and FPX. These providers are authorised by Bank Negara Malaysia and are subject to their own data protection obligations.
During the KYC process, we share identity documents and related data with our third-party identity verification partner(s) for the sole purpose of verifying your identity and age. These providers process your data under a data processing agreement with bet22 and are prohibited from using your data for any other purpose.
bet22 may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, where necessary to defend against legal claims, or where we have a good-faith belief that disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
We use trusted third-party service providers to assist with platform operations, including cloud hosting infrastructure, customer support software, analytics tools, and email delivery services. These providers act as Data Processors and process data only on bet22's documented instructions.
bet22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data (active accounts) | Duration of the account relationship plus 5 years after account closure |
| KYC / identity verification documents | 5 years from the date of submission or account closure, whichever is later |
| Financial transaction records | 7 years from the date of the transaction (AML/CFT regulatory requirement) |
| Betting and game history | 5 years from the date of each transaction |
| Support communications and correspondence | 3 years from the date of the interaction |
| Technical and access logs | 12 months from the date of collection |
| Marketing consent records | Until consent is withdrawn, plus 1 year for record-keeping |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
bet22 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:
Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. If you have reason to believe that your bet22 account or personal data has been compromised, please contact us immediately at [email protected].
The bet22 website uses cookies and similar tracking technologies to provide a functional and personalised experience, to analyse platform performance, and to support security operations. A cookie is a small text file placed on your device when you visit a website.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the platform to function — session management, login authentication, security token validation. Cannot be disabled without impairing core functionality. | Session or up to 30 days |
| Functional | Remember your preferences — language selection (English, Bahasa Melayu, Chinese), preferred payment method, and display settings. | Up to 12 months |
| Analytics | Measure platform usage patterns — pages visited, session duration, error events — to improve the platform experience. Data is aggregated and anonymised where possible. | Up to 24 months |
| Security | Detect and prevent fraudulent activity, identify unusual login patterns, and protect against bot traffic and automated attacks. | Session or up to 12 months |
You can control and manage cookies through your browser settings. Most browsers allow you to refuse, delete, or selectively accept cookies. Please note that disabling strictly necessary cookies will impair the functionality of the bet22 platform and you may not be able to log in or use core features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
Under applicable data protection law, including the PDPA 2010 (Malaysia), you hold the following rights in relation to your personal data held by bet22. These rights are subject to certain legal limitations and exceptions.
Request confirmation of whether bet22 processes your personal data and, if so, obtain a copy of that data together with information about how it is processed.
Request correction of any inaccurate or incomplete personal data that bet22 holds about you. You may also update many details directly through your account profile.
Request deletion of your personal data where it is no longer necessary for the original purpose, where you withdraw consent, or where there is no legitimate overriding reason to retain it. Note that legal retention obligations may prevent full erasure.
Request that bet22 temporarily restricts processing of your data — for example, while accuracy is being verified or while a complaint is under investigation.
Request a structured, machine-readable copy of the personal data you have provided to bet22, where processing is based on consent or contract, for transmission to another service provider.
Object to processing of your personal data where it is based on legitimate interests, including profiling, or where it is used for direct marketing purposes. Objection to marketing will be acted upon immediately.
Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
If you believe bet22 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
To exercise any of the above rights, please submit a written request to our Data Protection team at [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 days, or inform you if additional time is required.
The bet22 platform is strictly intended for adults. Registration, access, and use of bet22's betting and casino services is prohibited for any person under the age of 21. bet22 does not knowingly collect, process, or retain personal data relating to children or minors.
Where bet22 becomes aware — through KYC verification, age verification processes, or otherwise — that personal data relating to a person under the age of 21 has been collected, we will take immediate steps to: (a) close the relevant account; (b) refund any deposits (net of any winnings) to the originating payment method; (c) delete all personal data relating to that individual from our systems subject to any overriding legal retention requirements.
Parents and guardians are encouraged to monitor and restrict their children's access to online gambling platforms. If you believe a minor may have registered an account on bet22, please contact us immediately at [email protected].
In the course of operating a global technology platform, some of the personal data bet22 collects may be transferred to, stored in, or processed in jurisdictions outside of Malaysia. Such transfers may occur in connection with our use of cloud infrastructure providers, KYC verification services, or other technology partners whose servers are located outside Malaysia.
Where personal data is transferred internationally, bet22 ensures that appropriate safeguards are in place to provide a level of data protection consistent with Malaysia's PDPA 2010 and applicable international standards. These safeguards include but are not limited to: contractual clauses requiring the recipient to process data in accordance with applicable data protection standards; and selection of service providers that maintain recognised data protection certifications.
If you have questions or concerns about the transfer of your personal data outside Malaysia, please contact us at [email protected].
bet22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. We will endeavour to provide reasonable advance notice of material changes — either via email to your registered address or through a prominent notice on the bet22 platform — before the amended Policy takes effect.
Your continued use of the bet22 platform after an updated Privacy Policy has taken effect constitutes your acceptance of the revised Policy. If you do not agree with any material changes, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.
The current version of this Privacy Policy is always available on this page at bet22.casa/privacy-policy. The effective date displayed at the top of this document reflects when the current version entered into force.
For all enquiries relating to this Privacy Policy, the personal data bet22 holds about you, or to exercise any of your data subject rights, please contact our Data Protection team using the details below. All contact information is provided as plain text only.
The full legal text above is comprehensive. Here are the six commitments that matter most to every bet22 player in Malaysia.
Your personal data is never sold, rented, or licensed to third parties for marketing purposes. Any sharing is limited strictly to service providers necessary to operate the platform and comply with law.
All data transmitted to and from bet22 is protected by TLS/SSL encryption. Sensitive stored data — including KYC documents — is encrypted at rest using AES-256, consistent with bank-grade security standards.
We apply specific retention periods to each category of data. Personal data is securely deleted or anonymised once the retention period expires — we do not hold data indefinitely without a legitimate reason.
You hold eight distinct rights over your personal data under the PDPA — including access, rectification, erasure, and portability. Submit a request to our team and we will respond within 30 days.
bet22 does not store full bank account numbers, internet banking passwords, or full e-wallet credentials. Payments via Touch 'n Go, Maybank, DuitNow, and FPX are authenticated directly by your provider.
We will never send you promotional communications without your explicit prior consent. You can withdraw this consent at any time through your account settings or by contacting our support team.
You've read how bet22 handles your personal data — with transparency, legal compliance, and genuine care for Malaysian players. Have a question about your data or want to exercise one of your rights? Our team is available 24/7.
Privacy enquiries: [email protected] · For players aged 21 and above only. Please play responsibly.