Privacy Policy Betis — Our Commitment to Protecting Your Personal Data

Betis ("we", "platform", "Betis") is the data controller for your personal data in the context of your use of the betis.pro online gaming platform. We understand that entrusting personal information to any online platform is a decision that should not be taken lightly — particularly in the context of a gaming platform involving financial transactions. That is why we have taken the time to write this Privacy Policy in clear, plain language rather than confusing legal jargon.

This Privacy Policy explains in detail what data we collect when you register for and use the services of Betis, why we need it, how we use it, who we may share it with, and what your rights are in relation to that data. Please read this document carefully — it is an important part of the trust relationship between Betis and every one of our members across Malaysia.

Betis collects various categories of personal information depending on your interactions with our platform. Generally, the information we collect falls into three main categories:

We wish to emphasise that Betis never directly collects credit card numbers or sensitive banking information — all financial transactions are processed through licensed and recognised third-party payment providers such as Bank Negara Malaysia's FPX system, Touch 'n Go eWallet, GrabPay, and other Malaysian eWallet platforms. Betis only receives transaction confirmation, not your full financial details.

Betis uses the personal information collected solely for legitimate, pre-defined purposes. We do not use your data for anything unrelated to the provision of our platform's services. The primary purposes for which we use your data are as follows:

• Account management and maintenance: Creating, verifying, and managing your member account at Betis including the required KYC (Know Your Customer) process.
• Financial transaction processing: Processing deposits via methods such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and securely managing your withdrawal of winnings.
• Provision of gaming services: Allows you to access and enjoy all games in the collection Betis including slots, table games, and more.
• Customer support: Resolving enquiries, complaints, and technical issues that you report to our support team.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, or any other misuse of the platform.
• Legal compliance: Fulfilling legal obligations including reporting requirements under applicable Malaysian laws.
• Product improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience on the platform Betis.
• Marketing communications (with consent): Sending information about promotions, bonuses, and new offers Betis — only if you have given consent to receive such communications.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), Betis processes your personal data based on one or more of the following valid legal grounds, depending on the type of processing carried out:

• Contract performance: Processing required to provide the services you agreed to use upon registering your account Betis.
• Consent: Processing for marketing and promotional communications purposes, which requires your explicit consent and may be withdrawn at any time.
• Legitimate interests: Processing for the purposes of security, fraud prevention, and product improvements, for which legitimate interests Betis does not override your fundamental rights.
• Legal obligation: Processing required to comply with legal obligations under Malaysian laws applicable to our operations Betis.

For any processing activity that relies on your consent, you have the right to withdraw that consent at any time without affecting the validity of processing carried out prior to the withdrawal.

Betis makes it explicitly clear that we do not sell members' personal data to any third party for commercial or marketing purposes. However, there are limited situations in which Betis may need to share some of your information with the following parties, all of which is done within the limits permitted by the PDPA:

• Payment service providers: Transaction information required to process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX is shared with the relevant providers solely for the purpose of completing those transactions.
• Technology service providers: Supporting companies Betis in technical operations such as server hosting, cybersecurity, and usage analytics — all bound by strict data protection agreements.
• Law enforcement authorities: Malaysian law enforcement authorities or regulatory bodies when Betis required to do so by law, or to prevent criminal activity.
• Auditors and consultants: Audit firms and professional consultants that assist Betis in legal compliance and business operations — subject to binding confidentiality agreements.

In all of the above data sharing cases, Betis ensures that only the minimum necessary information is shared, and that all recipient parties are bound by data protection obligations equivalent to or stricter than those we adhere to ourselves.

The security of members' personal data is the highest priority in the operations of Betis. We continuously invest in a comprehensive security infrastructure to ensure your information is always protected against unauthorised access, data leaks, or misuse. The key security measures we employ include:

• Transit encryption: All data transmitted between your device and the Betis is protected by 256-bit TLS/SSL protocols, rendering the data unreadable even if successfully intercepted by unauthorised parties.
• Data encryption at rest: Sensitive data stored in the database Betis — including personal information and transaction records — is encrypted using current industry encryption standards at rest.
• Strict access controls: Authorised staff only Betis who require access to specific data in order to carry out their authorised duties — strictly on a need-to-know basis.
• Continuous threat monitoring: A cyber threat detection system operating 24 hours a day to identify and respond to any suspicious activity within the network Betis.
• Regular security audits: Security assessments and penetration testing are conducted on a regular basis by independent third-party security experts to identify and address potential vulnerabilities.
• Two-factor authentication (2FA): 2FA option available for all member accounts Betis as an additional security layer that we strongly recommend enabling.

Betis only retains your personal data for as long as it is needed for the purpose for which it was collected, or for as long as required under applicable Malaysian law. Our data retention policy is as follows:

• Active account data: For as long as your account remains active and you continue to use the service Betis.
• After account closure: Identity data and transaction records are retained for the minimum period required under Malaysian laws governing financial records and compliance (typically between 5 and 7 years) before being securely deleted.
• Communication records data: Customer support communication records are retained for 3 years from the date of the last communication, for reference and dispute resolution purposes.
• Technical log data: Technical access logs are retained for 12 months for security purposes and system integrity monitoring.

Once the specified retention period has lapsed, Betis will delete or anonymise your data using secure, irreversible methods, ensuring it cannot be accessed or used by any party thereafter.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to your personal data held by Betis. All requests relating to these rights may be submitted to us by email at [email protected]:

Platform Betis uses cookies and similar tracking technologies to ensure a smooth and fully functional user experience. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. Please be aware, however, that disabling essential cookies may affect your ability to access and use certain features of the platform. Betis in full.

Platform Betis is a gaming service exclusively for individuals aged 18 and above. We do not accept registrations from individuals under 18 years of age and do not knowingly collect any personal information from minors.

Should Betis discovers that personal data belonging to a child under the age of 18 has been collected without our knowledge — for example, through registration using inaccurate information — we will immediately take the following steps:

• Immediately closing the associated account with no obligation to refund any value already used.
• Permanently deleting all personal information relating to that individual from our systems.
• Reporting the incident to the relevant authorities where required under Malaysian law.

If you believe that a minor has registered an account on Betis, please contact us immediately at [email protected] so that prompt action can be taken to protect the individual concerned.

Betis reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or improvements to the data protection standards we offer our members.

When significant changes are made to this Privacy Policy, Betis will notify you through one or more of the following methods:

• In-platform notifications when you log in to your account Betis yours.
• Notification email sent to the email address registered to your account.
• A prominent notice on this Privacy Policy page with a clear effective date.

We encourage you to review this Privacy Policy periodically to stay informed of our latest data protection practices. Your continued use of the Betis after the changes take effect will be considered acceptance of the updated version of the Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Betis manage your personal data, please do not hesitate to reach us through any of the following channels:

• Email: [email protected] — for enquiries that require a detailed written response
• Live Chat: Available 24 hours a day, 7 days a week within the platform Betis
• WhatsApp: Accessible through official channels Betis as stated on the platform

Data privacy team Betis will endeavour to respond to all enquiries within 3 business days. For formal requests relating to PDPA rights, the response period is within 21 business days as required by law. We sincerely value every piece of feedback from our members, as it helps us become a better and more trusted platform.