Privacy Policy

This Privacy Policy ("Policy") describes how Beton138 ("the Platform", "we", "us", "our"), operating through the website accessible at beton138.cam, collects, processes, stores, and protects personal data provided by or collected from individuals ("User", "you", "your") who access or use the Beton138 online casino and sports betting platform and its associated services.

Beton138 operates primarily as a service for players based in Malaysia and processes personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, and the requirement that all processing be underpinned by a lawful basis.

By registering an Account on Beton138, accessing the Platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

The following terms carry the meanings assigned to them below throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" — Beton138, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Subject" — any living individual whose Personal Data is processed by the Data Controller; in this context, a registered User of the Platform.
• "Third Party" — any natural or legal person, authority, or body other than Beton138 and the Data Subject.
• "KYC" — Know Your Customer procedures undertaken for identity verification and anti-money laundering (AML) compliance purposes.
• "Cookies" — small text files placed on a User's device by the Platform for operational, analytical, or preference-management purposes.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the Data Subject's wishes signifying agreement to the processing of their Personal Data.

Beton138 collects personal data across several categories, depending on how you interact with the Platform. The following table summarises the categories of data we may collect, along with representative examples:

We do not intentionally collect Special Categories of Personal Data (such as health information, racial or ethnic origin, or political opinions) unless this is strictly necessary for responsible gambling assessments or as required by applicable law.

Beton138 collects personal data through the following means:

• Direct Collection: Information you provide voluntarily when creating an Account, completing identity verification, making deposits or withdrawal requests, contacting our support team, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, cookies, and session activity logs. This data is collected regardless of whether you are a registered User.
• Payment Processors: Transaction reference data and payment status information received from our payment partners including FPX, DuitNow, and e-wallet providers such as Touch 'n Go, Boost, and GrabPay.
• Third-Party Verification Services: Identity confirmation data received from KYC and AML service providers as part of our legal compliance obligations.
• Publicly Available Sources: In limited circumstances, information that is lawfully available from public registries or databases may be used to supplement identity verification.

Beton138 processes personal data only for specified, explicit, and legitimate purposes. The following table sets out the primary purposes for which we process your data:

Beton138 will not process your personal data for purposes incompatible with those listed above without first providing you with notice and, where required, obtaining your consent.

Every instance of personal data processing by Beton138 is underpinned by one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform our contract with you as a registered User — including Account management, transaction processing, and customer support.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC/AML obligations, financial record- keeping requirements, and cooperation with lawful authority requests.
• Legitimate Interests: Processing necessary for the legitimate interests of Beton138, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gambling monitoring, and anonymised analytics for product improvement.
• Consent: Processing based on your explicit consent, particularly in relation to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Beton138 does not sell, rent, or trade personal data to unrelated third parties for their own marketing purposes. We share personal data only in the circumstances described below, and only to the extent strictly necessary:

• Payment Service Providers: Financial data is shared with payment processors (including FPX operators, DuitNow, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong) solely to facilitate deposit and withdrawal transactions in MYR.
• Identity Verification Partners: Identity and document data is shared with accredited KYC and AML service providers for the purpose of fulfilling our verification obligations.
• Game Content Providers: Limited technical and transactional data may be shared with game studios and platform providers to deliver game content, record game outcomes, and resolve game-related disputes.
• IT and Infrastructure Providers: Hosting, cloud storage, and security service providers may access personal data as necessary to deliver infrastructure services to Beton138, subject to binding data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to competent authorities, regulators, courts, or law enforcement agencies where required by applicable law, court order, or regulatory direction.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of the Beton138 business, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

Beton138 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention approach is as follows:

• Active Account Data: Retained for the duration of the Account's active status plus a reasonable period after Account closure to allow for dispute resolution and regulatory enquiries.
• Financial and Transaction Records: Retained for a minimum of five (5) years from the date of the relevant transaction, in accordance with standard financial record-keeping requirements applicable to online payment processing.
• KYC Documentation: Retained for a minimum of five (5) years after the end of the business relationship, consistent with AML compliance obligations.
• Support and Communications Data: Retained for a period of two (2) years from the date of the interaction, or longer if the communication relates to an unresolved dispute or ongoing legal matter.
• Technical and Usage Logs: Retained for up to twelve (12) months in identifiable form, after which they may be aggregated or anonymised for analytical purposes.
• Marketing Consent Records: Retained for the duration of the consent plus three (3) years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Beton138 uses cookies and similar tracking technologies to deliver, maintain, and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential to the functioning of the Platform. These cookies enable core features such as session management, login authentication, and security controls. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences and settings — such as language preferences and responsible gambling tool configurations — to provide a more personalised experience.
• Analytical Cookies: Help us understand how Users interact with the Platform by collecting aggregated data on page visits, session duration, navigation paths, and feature engagement. This data is used to improve the platform experience.
• Security Cookies: Used to detect and prevent fraudulent access, bot activity, and account takeover attempts.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled via browser settings as they are essential for the Platform to operate.

As a Data Subject, you have the following rights in relation to the personal data that Beton138 holds about you. Requests to exercise these rights should be directed to our support team via live chat or by email:

Beton138 will respond to valid rights requests within a reasonable timeframe, generally within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by up to a further sixty (60) days and will notify you accordingly. We may need to verify your identity before processing a rights request.

Beton138 implements appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Users and the Platform.
• Encrypted data storage for sensitive fields including passwords, financial identifiers, and identity document data.
• Access controls and role-based permissions limiting internal access to personal data to staff who require it for legitimate operational purposes.
• Regular security audits and penetration testing to identify and remediate vulnerabilities.
• Intrusion detection systems and real-time monitoring for anomalous access patterns.
• Two-factor authentication options available to all registered Users to reduce the risk of unauthorised Account access.

While Beton138 takes data security seriously and applies industry-standard protections, no digital transmission or storage system can be guaranteed as completely impenetrable. Users are encouraged to maintain strong, unique passwords for their Beton138 Account and to report any suspected unauthorised access to our support team immediately.

In the course of delivering our services to Malaysian players, personal data may be transferred to, stored, or processed in jurisdictions outside Malaysia, including where our server infrastructure, game content providers, or technology partners are located. Where such transfers occur, Beton138 ensures that appropriate safeguards are in place to protect the transferred data, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection.
• Implementing contractual protections with overseas data processors requiring them to handle data in accordance with this Policy.
• Ensuring that all third-party recipients are bound by data processing agreements consistent with applicable data protection standards.

Beton138 strictly prohibits the use of the Platform by individuals under the age of 21 years. We do not knowingly collect or process personal data from individuals below this age threshold. Age verification is a mandatory step in our KYC process, and we reserve the right to request documentary proof of age at any time.

If Beton138 discovers or has reasonable cause to believe that personal data has been collected from a person under 21, we will take immediate steps to delete that data, suspend the associated Account, and return any deposited real-money balance following identity confirmation.

If you are a parent or guardian and believe that a minor has created a Beton138 account or provided personal data to the Platform without your consent, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

The Beton138 Platform integrates with a number of third-party service providers to deliver its full range of features. These include payment processors, game content providers, live streaming studios, and technical infrastructure suppliers. Each of these providers maintains their own privacy practices and data handling policies.

When you use a third-party payment method such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank2u, CIMB Clicks, Public Bank Online, or Hong Leong Connect, you are subject to the privacy policy of that payment provider in addition to this Policy. Beton138 is not responsible for the privacy practices of third-party providers beyond the contractual obligations we impose on them as data processors.

Beton138 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. The most current version of this Policy will always be accessible at beton138.cam/privacy-policy, with the "Last Updated" date revised accordingly.

Where amendments are material — meaning they significantly affect how we process your personal data or reduce your rights — Beton138 will provide advance notice to registered Users via email or in-platform notification. Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the Beton138 data team through the following channels:

• Live Chat: Available 24/7 on all pages of the Beton138 Platform. This is the fastest way to reach us.
• Email (non-clickable): [email protected]
• Subject Line for Data Requests: Please use "Privacy Request – [Your Account Username]" to ensure prompt routing to the correct team.

We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days. Where a request requires additional time to process, we will inform you of the extended timeline and the reason for the delay.