Privacy Policy

This Privacy Policy ("Policy") is issued by CBRBet ("CBRBet", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at cbrbet.click ("the Platform"). It describes how CBRBet collects, uses, stores, shares, and protects the personal data of individuals ("Players", "Users", "you") who access or use the Platform.

This Policy applies to all personal data collected from Players based in Malaysia — including those located in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other regions — as well as any data collected from individuals in other jurisdictions where CBRBet operates. By registering an account on the Platform, you acknowledge that you have read, understood, and accepted the data practices described in this Policy.

This Policy should be read alongside CBRBet's Terms & Conditions, which govern your broader use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions regarding a privacy matter, this Policy shall prevail.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and behavioural data.
• "Processing" — any operation performed on Personal Data, including collection, storage, organisation, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" — CBRBet, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — any third party engaged by CBRBet to process Personal Data on its behalf, under a written agreement specifying obligations and restrictions.
• "KYC Data" — documentation and information submitted by a Player to satisfy Know Your Customer verification requirements, including identity documents, proof of address, and source-of-funds materials.
• "Transaction Data" — records of financial activity on a Player's Account, including deposit and withdrawal history, payment method details, and wager records.
• "Cookies" — small text files placed on a Player's device by the Platform to store session and preference information.

CBRBet collects only the personal data necessary to provide the Services, comply with legal and regulatory obligations, prevent fraud, and improve the Platform experience. The following categories of data may be collected:

CBRBet collects personal data through the following channels:

• Direct submission — information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated technical collection — data collected passively through the use of cookies, web analytics, and server logs as you navigate and use the Platform.
• Payment processors — transaction confirmation and fraud-screening data received from Malaysian payment service providers including FPX, DuitNow, and e-wallet operators (Touch 'n Go, Boost, GrabPay) when you make deposits or withdrawals.
• Identity verification partners — KYC-related data validation results from regulated third-party identity verification services contracted by CBRBet.
• Fraud prevention services — risk signals and device fingerprint data from anti-fraud partners used to protect the Platform and its players.

CBRBet processes your personal data for the following purposes:

1. Account administration: Creating, maintaining, and managing your CBRBet Account, including the application of your preferences and settings.
2. Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that your Account details are accurate and genuine.
3. Payment processing: Facilitating deposits and withdrawals in MYR through your chosen payment method (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency).
4. Regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) requirements.
5. Fraud prevention and security: Detecting and preventing unauthorised access, fraudulent transactions, multi-accounting, bonus abuse, and other security threats.
6. Responsible gambling: Monitoring betting patterns and account activity to identify signs of problem gambling behaviour, and to administer deposit limits, session controls, and self-exclusion requests.
7. Customer support: Responding to enquiries, resolving disputes, and providing assistance via live chat and email.
8. Platform improvement: Analysing aggregated and anonymised usage data to improve game performance, interface design, and the overall player experience on CBRBet.
9. Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may opt out at any time.

CBRBet processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between CBRBet and the Player (i.e. to operate your Account, process payments, and deliver the Services).
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML, KYC, and age verification requirements.
• Legitimate interests: Processing is necessary for CBRBet's legitimate interests, including fraud prevention, network security, and platform analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your explicit consent — such as marketing communications or optional personalisation features — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

CBRBet does not sell, rent, or disclose your personal data to unaffiliated third parties for their own marketing or commercial use. Your data may be shared with the following categories of recipients under strict confidentiality and data processing agreements:

• Payment processors and financial institutions: Including FPX, DuitNow, and Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay), as well as banking partners (Maybank, CIMB, Public Bank, Hong Leong), to facilitate transaction processing and fraud screening.
• Identity verification providers: Third-party KYC and AML service providers engaged by CBRBet to verify Player identities and meet regulatory requirements.
• Technology and hosting providers: Cloud infrastructure, database, and security service providers who process data on CBRBet's behalf under binding data processing agreements.
• Customer support platforms: Live chat and helpdesk software providers used to deliver support services.
• Regulatory and law enforcement authorities: CBRBet may be required to disclose personal data in response to a valid legal request, court order, or regulatory obligation. Such disclosures will be limited to the minimum data necessary to comply with the request.
• Professional advisers: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations.

As an internationally operated platform, CBRBet may store and process personal data on servers located outside of Malaysia. Where personal data is transferred outside Malaysia, CBRBet ensures that appropriate safeguards are in place, including but not limited to:

• Transfer to countries or territories that provide an adequate level of data protection as determined by relevant data protection standards.
• Implementation of contractual data protection clauses between CBRBet and the receiving entity that are consistent with internationally recognised data transfer standards.
• Use of encryption and access controls during transit and at rest to protect data regardless of its physical location.

All third-party processors engaged by CBRBet — regardless of jurisdiction — are contractually required to process personal data only for specified, authorised purposes and to maintain security standards consistent with CBRBet's own practices.

CBRBet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account data: Retained for the duration of the Account's existence and for a period of up to five (5) years after Account closure, to meet regulatory, legal, and dispute resolution obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, in accordance with AML regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, to support financial audits, disputes, and regulatory enquiries.
• Communication records (live chat, email): Retained for up to three (3) years from the date of the interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing data: Retained until you opt out of marketing communications or request deletion, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information.

CBRBet implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all data transmission channels between your device and the CBRBet Platform.
• Encrypted data storage for all sensitive personal data fields, including financial information and identity documents, at rest.
• Role-based access controls limiting employee access to personal data strictly to those whose job functions require it.
• Two-factor authentication options for Player Accounts to reduce the risk of unauthorised access.
• Regular security audits and penetration testing of Platform infrastructure conducted by qualified third-party security professionals.
• Fraud detection systems that monitor Account activity in real time for anomalous patterns indicative of unauthorised access or fraudulent behaviour.

While CBRBet takes all reasonable steps to protect your data, no electronic system is entirely immune to security risk. In the event of a data breach that is reasonably likely to result in harm to affected individuals, CBRBet will notify affected Players and relevant regulatory authorities in accordance with applicable breach notification obligations.

CBRBet uses cookies and similar tracking technologies to operate the Platform and improve your experience. The following types of cookies may be placed on your device:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, currency display (MYR), and game lobby filters. Disabling these may reduce the personalisation of your experience.
• Analytics cookies: Used by CBRBet to understand how Players navigate the Platform — which pages are visited most, where sessions begin and end, and how performance can be improved. Analytics data is aggregated and does not identify individual users.
• Fraud prevention cookies: Used to assign a consistent identifier to your device session for the purpose of detecting multi-accounting, automated bot activity, and other fraudulent behaviours.

CBRBet does not deploy third-party advertising cookies or tracking pixels for external retargeting or behavioural advertising purposes. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to use the Platform.

CBRBet respects your rights over your personal data. Depending on applicable law, you may exercise the following rights in relation to the personal data we hold about you:

To exercise any of the above rights, please contact CBRBet's support team via live chat or at [email protected]. CBRBet will respond to all legitimate requests within 30 days. Complex or high-volume requests may take up to 60 days, and CBRBet will inform you of any extended timeline.

Please note that certain rights are subject to limitations. For example, CBRBet cannot delete data that it is legally obligated to retain under AML or KYC regulations, and data deletion requests may result in Account closure where the data is essential to maintaining the Account.

CBRBet is strictly an adult platform. The minimum age requirement to register and use the Platform is 21 years of age. CBRBet does not knowingly collect, store, or process personal data from individuals under the age of 21.

During the registration process and KYC verification, CBRBet takes reasonable steps to verify that all Players meet the age requirement. Where CBRBet discovers that personal data has been collected from an individual under 21, that data will be deleted promptly and the associated Account will be closed in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has created an Account with CBRBet, please contact our support team immediately via live chat or email so that we can take appropriate action without delay.

CBRBet reserves the right to amend, update, or replace this Privacy Policy at any time. Where changes are material — for example, where CBRBet begins processing a new category of personal data or sharing data with a new category of third party — CBRBet will provide advance notice to registered Players via email or a prominent notification on the Platform, before the updated Policy takes effect.

Non-material changes (such as typographical corrections, clarifications of existing practices, or updates to contact details) may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should cease using the Platform and may request Account closure and deletion of your personal data as described in Section 12.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by CBRBet, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the quickest way to reach our support team for privacy-related enquiries.
• Email: [email protected] — for detailed privacy requests, data access enquiries, or formal complaints. We aim to acknowledge all emails within 2 business days and resolve them within 30 days.

If you are not satisfied with CBRBet's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. CBRBet will cooperate fully with any legitimate regulatory enquiry.

For questions specifically relating to your Account's Terms & Conditions, please refer to our Terms & Conditions page. For responsible gambling tools including self-exclusion, please visit our Responsible Gambling page.