Warbet Privacy Policy
This Privacy Policy explains how warbet collects, uses, stores, and protects the personal data of all registered players and website visitors. We are committed to handling your data with transparency and in accordance with applicable data protection standards.
Privacy at a Glance
Six Things You Should Know
Here is a plain-English summary of how warbet handles your personal data. The complete legal text follows in the sections below.
What We Collect
We collect only the personal data necessary to operate your account, verify your identity, process payments, and comply with our regulatory obligations. We do not collect data we do not need.
How We Use It
Your data is used to manage your warbet account, process deposits and withdrawals via Malaysian payment methods, send you important account communications, and fulfil our legal compliance obligations.
Who Sees It
We share your data only with payment processors, KYC verification partners, and regulatory authorities where required by law. We do not sell your personal data to third-party advertisers or marketing agencies — ever.
How We Protect It
All personal data is stored with 256-bit AES encryption at rest and transmitted over TLS-secured connections. Access to player data is restricted to authorised personnel on a strict need-to-know basis.
How Long We Keep It
Account data is retained for the period your account is active plus a minimum retention period required by our operating licence and applicable anti-money-laundering regulations. You may request deletion of non-mandatory data at any time.
Your Rights
You have the right to access, correct, port, and request deletion of your personal data. You may also object to certain processing activities or withdraw consent where consent is the legal basis for processing.
Introduction
This Privacy Policy ("Policy") describes how Warbet ("Company", "We", "Us", "Our") collects, processes, stores, and protects personal data in connection with the operation of the online sports betting and live casino platform accessible at warbet.cam and its associated subdomains and mobile applications (collectively, the "Platform").
Warbet takes the privacy of its players seriously. We are committed to processing personal data lawfully, fairly, and transparently. This Policy is designed to inform you — as a registered player, prospective player, or visitor to our Platform — of your rights and our obligations regarding the personal data we hold about you.
This Policy should be read in conjunction with warbet's Terms and Conditions, which are incorporated herein by reference. By registering an account or otherwise using the Platform, you confirm that you have read and understood this Policy.
ℹ️ This Policy applies to all personal data processed by warbet regardless of the medium through which it was collected — including data submitted during account registration, data collected automatically through Platform use, and data received from third-party verification partners.
Data Controller
For the purposes of this Policy, the data controller responsible for your personal data is Warbet, the operator of the Platform. As data controller, warbet determines the purposes for which, and the means by which, your personal data is processed.
Where third-party service providers process personal data on warbet's behalf — including payment processors, KYC verification providers, and cloud infrastructure operators — they do so as data processors acting on warbet's documented instructions and are contractually required to maintain appropriate security measures and process data only for the purposes specified by warbet.
If you have any questions about how warbet processes your personal data, or wish to exercise any of the rights described in Section 11 of this Policy, please contact us using the details set out in Section 15.
Definitions
In this Policy, the following terms carry the meanings set out below:
Any information relating to an identified or identifiable natural person — including but not limited to name, identification number, location data, online identifiers, or factors specific to the physical, economic, or social identity of that person.
Any operation or set of operations performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.
The identified or identifiable natural person to whom personal data relates — in the context of this Policy, primarily registered players and Platform visitors.
A natural or legal person that processes personal data on behalf of warbet pursuant to a written data processing agreement.
Freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data for a stated purpose, expressed by a clear affirmative act.
Personal Data We Collect
Warbet collects personal data through several channels. The categories of data we collect, and the context in which each category is collected, are set out below:
| Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport number, nationality | Account registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, postcode) | Account registration and profile updates |
| Financial Data | Bank account details, DuitNow / FPX reference numbers, e-wallet identifiers, cryptocurrency wallet addresses, transaction history | Deposit and withdrawal processing |
| KYC Documents | Copies of government-issued photo ID, proof of address documents, payment method verification documents | Identity verification prior to first withdrawal |
| Transaction Data | Betting history, casino game records, deposit and withdrawal amounts and timestamps, bonus redemption records | Ongoing Platform use |
| Technical Data | IP address, device type, operating system, browser type, session duration, page visit logs, login timestamps | Automatically during Platform access |
| Communications Data | Live chat transcripts, email correspondence, support ticket contents | When you contact warbet support |
| Preferences Data | Responsible gambling settings, deposit and loss limits, marketing communication preferences | Account dashboard interactions |
Warbet does not intentionally collect special categories of personal data (including data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data) unless such data is volunteered by you in the context of a responsible gambling interaction or support request, in which case it will be handled with enhanced care and used solely for the purpose for which it was provided.
Legal Basis for Processing
Warbet processes personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you have accepted — including account management, bet settlement, payment processing, and customer support.
- Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, know-your-customer (KYC) verification requirements, and tax reporting obligations imposed by our operating licence.
- Legitimate Interests: Processing necessary for the pursuit of warbet's legitimate business interests — including fraud prevention, Platform security, responsible gambling monitoring, and service quality improvement — where those interests are not overridden by your data protection rights.
- Consent: Where no other legal basis applies, warbet will seek your explicit consent before processing your personal data. You may withdraw consent at any time by contacting us, without affecting the lawfulness of processing carried out prior to withdrawal.
How We Use Your Personal Data
Warbet uses the personal data it collects for the following purposes:
To create and maintain your warbet account, process your registration, verify your identity, communicate important account-related information, and enable you to log in and use the Platform.
To process deposit transactions via approved Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and approved cryptocurrency channels; to verify payment method ownership; and to execute withdrawal requests to verified accounts.
To fulfil warbet's obligations under its operating licence, including conducting ongoing KYC and AML checks, reporting suspicious transactions to relevant authorities where required, and maintaining transaction records for the mandated retention period.
To monitor gaming activity for indicators of problem gambling behaviour, to apply player-requested responsible gambling controls (deposit limits, loss limits, self-exclusion), and to intervene proactively where our monitoring systems identify a player at elevated risk.
To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the Platform. Technical data including IP addresses and device fingerprints are used for this purpose.
To respond to your enquiries, resolve complaints, and provide assistance via live chat and email. Support communications are logged and retained in accordance with the retention schedule in Section 9.
To analyse aggregated and anonymised usage data for the purpose of improving Platform performance, user experience, and product development. Individual player data is not used for these purposes without appropriate anonymisation or aggregation.
Data Sharing & Disclosure
Warbet does not sell, rent, or trade your personal data to third parties. We share personal data only where necessary and only with the following categories of recipient, each of whom is contractually bound to appropriate data protection obligations:
- Payment Service Providers: Banks, e-wallet operators, and payment gateway providers involved in processing your deposit and withdrawal transactions — including but not limited to providers of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency transaction infrastructure.
- KYC & Identity Verification Partners: Third-party identity verification services that assist in validating the authenticity of identification documents and confirming player age and address.
- Fraud Prevention Services: Providers of fraud scoring, IP analysis, and device fingerprinting services used to maintain Platform integrity.
- Cloud Infrastructure & Hosting Providers: Secure cloud hosting providers on whose infrastructure Platform data is stored, subject to contractual data processing agreements.
- Regulatory & Law Enforcement Authorities: Where warbet is legally required to disclose information pursuant to a court order, regulatory investigation, AML reporting obligation, or other mandatory legal process.
- Professional Advisers: Legal, accounting, and compliance advisers who require access to data in connection with the provision of professional services to warbet, subject to confidentiality obligations.
⚠️ Warbet will never share your personal data with third-party advertising networks, data brokers, or marketing agencies for purposes of targeted advertising or audience profiling. This commitment is absolute and is not subject to any opt-out mechanism because the sharing never occurs in the first place.
Cookies & Tracking Technologies
The warbet Platform uses cookies and similar tracking technologies to enable core Platform functionality, maintain your logged-in session, and gather anonymised usage analytics. Cookies are small text files stored on your device by your web browser at the instruction of the websites you visit.
| Cookie Type | Purpose | Can be Disabled? |
|---|---|---|
| Essential | Session management, login state, security tokens, fraud prevention flags | No — Platform will not function without these |
| Functional | Language preferences, responsible gambling settings, display preferences | Yes — via browser settings |
| Analytics | Aggregated page view counts, session duration statistics, feature usage patterns — all data is anonymised before analysis | Yes — via cookie preference centre |
Warbet does not deploy third-party advertising cookies or cross-site tracking technologies. You can manage your cookie preferences at any time through your browser settings or via the cookie preference centre accessible from the Platform footer. Disabling essential cookies will prevent you from logging in to your account.
Data Retention
Warbet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following retention periods apply to the principal categories of data held:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AML regulatory requirement |
| Financial transaction records | 5 years after transaction date | AML and licensing obligation |
| Betting and gaming history | Duration of account + 2 years | Contractual and regulatory |
| Customer support communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Self-exclusion records | Minimum 6 years from exclusion date | Responsible gambling compliance |
| Technical / server logs | 13 months from collection date | Security and fraud prevention |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent compliance |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Data Security
Warbet implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include:
- Encryption at Rest: All personal data stored in warbet's databases is encrypted using AES-256 encryption. KYC documents are stored in an access-controlled, separately encrypted document store.
- Encryption in Transit: All data transmitted between your device and the warbet Platform is protected by TLS 1.3 encryption. HTTPS is enforced across all Platform endpoints with HTTP Strict Transport Security (HSTS) headers.
- Access Controls: Access to player personal data is restricted to authorised warbet personnel who require it for their specific role. Access is governed by role-based permissions and is subject to multi-factor authentication requirements.
- Intrusion Detection: Continuous automated monitoring of server infrastructure and application logs for indicators of unauthorised access or anomalous activity.
- Vendor Due Diligence: All third-party data processors are subject to security assessment prior to onboarding and are contractually required to maintain equivalent security standards.
- Incident Response: Warbet maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified in accordance with applicable regulatory requirements.
ℹ️ While warbet takes all reasonable technical and organisational measures to protect your data, no internet transmission is completely secure. You are responsible for maintaining the security of your own account credentials. If you suspect unauthorised access to your account, contact support immediately.
Your Data Rights
Subject to applicable legal exceptions and the specific circumstances of your request, you have the following rights in relation to the personal data warbet holds about you. To exercise any of these rights, please contact us as described in Section 15. Warbet will respond to verified requests within 30 days of receipt.
Request a copy of the personal data warbet holds about you, along with information about how it is processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Request that we restrict processing of your data while a rectification or objection request is pending.
Request a machine-readable copy of personal data you have provided to us where processing is based on consent or contract.
Object to processing of your personal data where we rely on legitimate interests as the legal basis, including direct marketing.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with the relevant data protection authority if you believe your data has been processed unlawfully.
Please note that certain rights are subject to limitations. For example, we cannot delete financial transaction records or KYC documentation that we are legally required to retain under our operating licence and anti-money-laundering obligations. Where a right is partially limited, we will explain the reason clearly in our response to your request.
International Data Transfers
In the course of its operations, warbet may transfer personal data to third-party service providers located outside of Malaysia. Where such transfers occur, warbet takes appropriate steps to ensure that your data continues to be protected to an equivalent standard.
These steps include: (a) transferring data only to countries that maintain an adequate level of data protection as recognised by the relevant regulatory framework; (b) implementing appropriate contractual safeguards such as standard data protection clauses in agreements with international data processors; and (c) conducting transfer impact assessments where required.
For specific information about the safeguards in place for any particular international transfer of your personal data, please submit a request to our privacy contact as described in Section 15.
Minors
The warbet Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.
Warbet employs age verification procedures as part of the account registration and KYC process to minimise the risk of underage access. If you believe a minor has registered or is using the Platform, please contact us immediately at the details provided in Section 15.
🔞 This Platform is for players aged 21 and above only. If you are a parent or guardian and believe a minor has created an account on warbet, please contact us immediately so we can investigate and take appropriate action.
Changes to This Policy
Warbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page reflects when the most recent revision was published.
Where changes are material — meaning they significantly affect how we use your data or your rights in relation to it — we will notify registered players by email to the address on file at least 14 days before the changes take effect. For minor amendments, we will update the Policy page and revise the version number without separate notification.
We encourage you to review this Policy periodically to stay informed about our data practices. Your continued use of the Platform after any amendment constitutes acceptance of the revised Policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact warbet's privacy team using the details below. All privacy-related correspondence should be submitted in English.
Email: [email protected]
Subject line: "Privacy Request — [Your Account Username]"
Response time: Within 30 days for formal data subject access requests; within 5 business days for general privacy enquiries.
Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week via the warbet Platform.
Email: [email protected]
For matters relating to data processing agreements, legal correspondence, or regulatory compliance enquiries.
All email addresses listed on this page are displayed as plain text only. Warbet will never send unsolicited communications requesting your password, one-time PIN, or payment credentials. If you receive such a communication purportedly from warbet, treat it as fraudulent and report it immediately.
Your Data is Safe With Warbet
Transparency and security are not afterthoughts at warbet — they are built into every part of our Platform. If you have questions about your data, our support team is available 24/7.