Privacy Policy

1 Introduction

Bilbet ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access our online casino and sports betting platform at https://bilbet.cam and all associated services (collectively, the "Services"). This Privacy Policy ("Policy") sets out in clear, transparent terms how Bilbet collects, uses, stores, shares, and protects your personal information.

This Policy applies to all registered players, visitors to the Bilbet website, and any individuals who interact with us through our platform, live chat, or email support. By registering an account or using our Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy. Where there is any inconsistency between those documents and this Policy on matters of data privacy, this Policy shall prevail.

2 Scope & Application

This Privacy Policy applies to all personal data collected by Bilbet through the following channels and interactions:

• Registration of a Bilbet player account, including the submission of identity documents for KYC (Know Your Customer) verification.
• Deposits and withdrawals made via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
• Browsing, gaming activity, and betting transactions conducted through the Bilbet web platform or mobile-optimised interface.
• Communications with Bilbet customer support via live chat or email.
• Participation in promotions, loyalty programmes, surveys, or competitions offered by Bilbet.
• Technical data collected automatically through cookies, log files, and device analytics when you access the Platform.

This Policy does not apply to third-party websites or services that may be linked from Bilbet's platform. Bilbet is not responsible for the privacy practices of any third-party operator, game studio, or payment provider. We encourage you to review the privacy policies of any external services you use in connection with your Bilbet account.

3 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including name, email address, phone number, date of birth, national identification number, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" — Bilbet, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party engaged by Bilbet to process personal data on our behalf and under our instructions, such as payment processors and identity verification providers.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a specified purpose.
• "Sensitive Data" — a subset of personal data that warrants heightened protection, including financial account information, government-issued identification numbers, and biometric data submitted for verification purposes.

4 Personal Data We Collect

Bilbet collects the following categories of personal data in the course of operating the Platform and providing the Services:

Bilbet does not intentionally collect any special categories of sensitive personal data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless strictly required by law and with explicit consent.

5 How We Collect Personal Data

Bilbet collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions.
• Automatically: Through cookies, web server logs, analytics tools, and device fingerprinting technologies when you access and use the Platform.
• From third-party providers: Identity verification agencies, payment processors (including Malaysian e-wallet providers and banks), fraud prevention services, and publicly available sanctions and politically exposed persons (PEP) databases.
• From regulatory sources: Where required by AML/KYC regulations, we may receive or verify personal data through regulated data checking services.

6 Purposes of Processing

Bilbet processes your personal data for the following specific purposes:

• Account Creation & Management: To register, authenticate, and administer your Bilbet player account.
• Identity Verification & KYC: To verify your age (21+ requirement), identity, and source of funds as required by applicable regulations.
• Payment Processing: To facilitate deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, DuitNow, FPX, and bank transfers in MYR.
• Platform Operation: To provide, maintain, and improve the gaming and betting services offered on Bilbet.
• Responsible Gambling: To monitor gambling behaviour, apply self-imposed deposit limits and session controls, and identify signs of problem gambling requiring intervention.
• Fraud & AML Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, and other unlawful activities.
• Customer Support: To respond to enquiries, resolve disputes, and provide assistance through our 24/7 support channels.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates — only where you have given consent or where we have a legitimate interest to do so.
• Legal & Regulatory Compliance: To comply with all applicable legal obligations, including data retention requirements, regulatory reporting, and law enforcement requests.

7 Legal Basis for Processing

Bilbet processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you — including operating your account, processing your transactions, and providing the Services described in our Terms & Conditions.
• Consent: Where you have provided explicit consent, such as for marketing communications or optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate Interests: Where processing is necessary for our legitimate business interests — including platform security, fraud prevention, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Legal Obligation: Where processing is necessary to comply with a legal requirement, including AML/KYC regulations, tax reporting obligations, and law enforcement requests backed by appropriate legal authority.

8 Data Sharing & Disclosure

Bilbet does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment Processors: Malaysian e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow/FPX intermediaries, and major banks (Maybank, CIMB, Public Bank, Hong Leong) — solely to process your financial transactions.
• Identity Verification Providers: Third-party KYC and age-verification service providers engaged to conduct identity checks and document authentication.
• Fraud Prevention & AML Services: Specialist providers that assist us in detecting and preventing fraudulent transactions and money laundering activity.
• Technology & Infrastructure Providers: Cloud hosting, content delivery, and platform technology vendors who process data on our behalf under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Where we are legally required to disclose personal data in response to a court order, government request, or regulatory investigation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections and notice to affected players.

All third parties with whom Bilbet shares personal data are required to handle that data in accordance with applicable data protection standards and are contractually prohibited from using it for any purpose other than those specified by Bilbet.

9 International Data Transfers

Some of Bilbet's service providers and technology partners operate servers or offices outside of Malaysia. Where personal data is transferred to processors located in other countries, Bilbet ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under applicable Malaysian data protection requirements.

Such safeguards may include data processing agreements incorporating standard contractual clauses, processor certifications, or transfers to jurisdictions that provide an adequate level of data protection. If you have questions about specific international transfers affecting your data, please contact us using the details in Section 16.

10 Data Retention

Bilbet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with Bilbet.
• Post-Closure Account & Transaction Data: Retained for a minimum of five (5) years following account closure to comply with AML record-keeping requirements and to resolve any outstanding disputes.
• KYC & Identity Documents: Retained for the period required by applicable AML regulations, typically five years from the end of the business relationship.
• Marketing Preferences: Retained until you withdraw consent or opt out. Opt-out records are retained indefinitely to honour your preference.
• Technical / Log Data: Typically retained for up to twelve (12) months for security and fraud detection purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

11 Cookies & Tracking Technologies

Bilbet uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit our website. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core features such as session management, account authentication, and security controls. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your language preference, display settings, and recently viewed game categories. These cookies improve your experience but are not strictly required.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — including page visits, session duration, and navigation paths. This data helps us understand and improve the user experience.
• Security Cookies: Used for fraud detection, bot prevention, and platform integrity purposes — including device fingerprinting to identify suspicious login activity.

You can manage or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect your ability to use some features of the Bilbet Platform. By continuing to use the Platform with cookies enabled, you consent to their use as described in this Policy.

12 Security Measures

Bilbet implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Internal access to personal data is restricted to authorised personnel only, on a strict least-privilege and need-to-know basis. Access is logged and audited regularly.
• Data at Rest Encryption: Sensitive data stored on our servers — including financial records and KYC documents — is encrypted at rest.
• Two-Factor Authentication (2FA): Available for all player accounts to add an additional layer of security beyond username and password.
• Automated Fraud Monitoring: Real-time systems monitor transactions and account activity for patterns indicative of fraud, money laundering, or account takeover attempts.
• Regular Security Audits: Our platform undergoes periodic penetration testing and security assessments by qualified third-party security professionals.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Bilbet will notify affected individuals in accordance with applicable data breach notification requirements, without undue delay.

13 Your Data Rights

Bilbet respects your rights in relation to your personal data. Subject to applicable legal limitations, you have the following rights:

• Right of Access: You may request a copy of the personal data Bilbet holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 10).
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances — for example, while we investigate a rectification request.
• Right to Data Portability: You may request a copy of data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notice provided to you.

14 Minors & Age Verification

Bilbet's Services are strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process and is conducted before any player account is fully activated.

Where Bilbet discovers that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to:

• Suspend and permanently close the relevant account.
• Delete all personal data associated with the account, subject to any overriding legal retention obligations.
• Void any transactions, bets, or bonus claims made through the account.

If you believe an underage individual has registered or is using a Bilbet account, please contact us immediately at [email protected] so we can take appropriate action promptly.

15 Changes to This Privacy Policy

Bilbet may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or platform features. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are significant — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — we will notify registered players by email or via a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how Bilbet protects your privacy.

Your continued use of the Bilbet Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the Platform and request account closure.

16 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way in which Bilbet processes your personal data, please do not hesitate to contact us through any of the following channels:

• Live Chat: Available 24/7 directly through the Bilbet Platform. Live chat is the fastest way to reach our team for account-specific privacy queries.
• Email: [email protected] — for formal data subject rights requests, complaints, and data breach reports. Please allow up to 48 hours for an initial response. Complex data subject requests will be acknowledged within 5 business days and resolved within 30 calendar days.

When contacting us regarding a data subject rights request, please include your registered email address, your account username, and a clear description of your request to help us process it efficiently. We may ask for additional identity verification before proceeding.