Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how betsapi ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal information relating to individuals ("User", "you", "your") who register for, access, or interact with the betsapi platform at https://betsapi.cam and any associated mobile-optimised interfaces.

betsapi takes data privacy seriously. We operate under internationally recognised data protection principles and are committed to handling your personal data responsibly, transparently, and in accordance with the purposes for which it was collected. This Policy should be read in conjunction with our Terms & Conditions, which form the overarching agreement between you and betsapi.

By creating an Account or continuing to use betsapi, you confirm that you have read and understood this Policy. If you do not agree with any part of this Policy, please do not use the Platform.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, betsapi.
• "Data Processor" means any third party that processes Personal Data on behalf of betsapi under contractual obligations.
• "KYC Data" means identity and verification documents collected as part of the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" means small data files placed on your device by the Platform to facilitate session management, security, and analytics functions.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia.

3 Data We Collect

betsapi collects the following categories of Personal Data from Users:

4 How We Collect Your Data

betsapi collects Personal Data through the following means:

4.1 Directly From You

• During the account registration process, including submission of your name, date of birth, email address, and contact number.
• When completing KYC verification by uploading identity documents such as your Malaysian MyKad or passport.
• When making a deposit or withdrawal using payment channels such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong.
• When contacting our support team via live chat, email, or any other communication channel.
• When updating your account profile or security settings.

4.2 Automatically

• Technical data (IP address, device identifier, browser and operating system type) is collected automatically when you access the Platform.
• Usage data relating to your betting activity, session duration, and in-platform navigation is collected through standard server logging and first-party analytics tools.
• Cookie data is collected when you browse the Platform, subject to the cookie practices described in Section 8.

4.3 From Third Parties

• Payment processing partners may share transaction confirmation data and fraud flags with betsapi to facilitate deposits and withdrawals.
• Identity verification service providers may share verification outcomes with betsapi as part of the KYC process.
• Where permitted, public fraud prevention and AML databases may be queried as part of our compliance obligations.

5 Legal Basis for Processing

betsapi processes Personal Data only where a valid legal basis exists. The bases we rely on are:

• Contractual necessity: Processing is required to fulfil our obligations under the Terms & Conditions — including operating your account, processing payments, settling bets, and providing customer support.
• Legal obligation: Processing is required to comply with anti-money laundering regulations, know-your-customer requirements, age verification mandates, and other applicable legal obligations.
• Legitimate interests: Processing is necessary to pursue betsapi's legitimate business interests, including fraud prevention, platform security, product improvement, and responsible gambling monitoring — where such interests are not overridden by your privacy rights.
• Consent: Where we process Personal Data for marketing communications or optional personalisation features, we rely on your explicit consent, which you may withdraw at any time.

6 How We Use Your Data

betsapi uses the Personal Data we collect for the following purposes:

• To create, maintain, and administer your betsapi account.
• To verify your identity and age (minimum 21 years) as required by our operational standards.
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via approved local payment channels.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct.
• To settle bets, resolve disputes, and calculate and pay out winnings.
• To monitor gambling behaviour and apply responsible gambling controls, including deposit limits, session reminders, and self-exclusion tools.
• To send transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.
• To send promotional communications, bonuses, and personalised offers — only where you have provided consent or have not opted out.
• To analyse platform usage and improve the quality, performance, and user experience of betsapi.
• To comply with regulatory, legal, and audit requirements.

7 Data Sharing & Disclosure

betsapi does not sell, rent, or trade your Personal Data. We may share your data with the following categories of third parties only where strictly necessary and under appropriate contractual or legal safeguards:

7.1 Service Providers

We engage third-party service providers who process Personal Data on our behalf, including payment processors (DuitNow, FPX, e-wallet operators), identity verification providers, cloud infrastructure operators, customer support platforms, and fraud detection services. These providers are bound by data processing agreements and are not permitted to use your data for any purpose other than providing services to betsapi.

7.2 Regulatory and Law Enforcement Authorities

betsapi may disclose Personal Data to government authorities, regulators, law enforcement agencies, or courts where required by law, court order, or valid legal process. We will notify affected Users of such disclosures to the extent permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of betsapi's business, Personal Data held by betsapi may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and any consequent changes to this Policy in advance.

7.4 No Advertising Partnerships

betsapi does not share your Personal Data with advertising networks, data brokers, or social media platforms for the purpose of targeted advertising. Your betting history, financial data, and identity information are never used for external commercial purposes.

8 Cookies & Tracking Technologies

betsapi uses cookies and similar technologies to operate and improve the Platform. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without rendering the Platform non-functional.
• Performance Cookies: Collect anonymised data about how Users navigate the Platform — such as which pages are visited most frequently and how long sessions last. This data is used to identify and fix performance issues and improve the overall user experience.
• Functional Cookies: Remember your preferences, such as preferred language, display settings, and last-visited sports markets, to provide a more personalised experience on return visits.
• Security Cookies: Used to detect and prevent suspicious login attempts, bot activity, and other security threats.

betsapi does not deploy third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impact your ability to use the Platform.

9 Data Retention

betsapi retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, in accordance with AML and KYC record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of seven (7) years following each transaction, as required by financial record-keeping standards.
• Communications and Support Records: Retained for up to three (3) years following the relevant interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Logs: Retained for up to twelve (12) months, after which they are anonymised or deleted unless required for an ongoing investigation.
• Marketing Preference Data: Retained until you withdraw consent or request deletion, whichever occurs first.

Following the expiry of applicable retention periods, Personal Data is securely deleted or permanently anonymised in accordance with our internal data disposal procedures.

10 Data Security

betsapi implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and betsapi's servers.
• AES-256 encryption at rest for all sensitive data stored in our databases, including identity documents and financial records.
• Multi-factor authentication requirements for administrative access to systems holding Personal Data.
• Role-based access controls ensuring that only authorised personnel with a demonstrable need access specific categories of Personal Data.
• Continuous intrusion detection and monitoring of network traffic for anomalous behaviour.
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure.
• Mandatory security awareness training for all staff with access to Personal Data.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. In the event of a data breach that poses a risk to your rights and freedoms, betsapi will notify affected Users and, where applicable, relevant regulatory authorities, within the timeframes required by applicable law.

11 International Data Transfers

betsapi's infrastructure may involve the storage or processing of Personal Data in jurisdictions outside Malaysia. Where such transfers occur, betsapi ensures that appropriate safeguards are in place to maintain the protection of your Personal Data to a standard equivalent to that described in this Policy. Safeguards may include:

• Standard contractual clauses or data processing agreements with receiving entities.
• Transfer to jurisdictions assessed as providing an adequate level of data protection.
• Binding corporate rules where applicable within our corporate group.

By using betsapi, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia as described in this section.

12 Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights with respect to the Personal Data that betsapi holds about you:

• Right of Access: You may request a copy of the Personal Data we hold about you, including the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to Rectification: You may request that we correct any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to betsapi's legal retention obligations under AML, KYC, and financial record-keeping regulations.
• Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request a structured, machine-readable copy of your Personal Data for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your privacy rights override those interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact betsapi's Data Privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving your request.

13 Children's Privacy

betsapi is strictly an adult platform. Registration is limited to individuals aged 21 years and above. We do not knowingly collect or process Personal Data from individuals below this age. If we discover that Personal Data has been collected from an underage individual, we will immediately close the relevant Account and delete all associated Personal Data.

If you are a parent or guardian and believe that your child has registered an Account on betsapi, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.

14 Third-Party Links & Services

The betsapi Platform does not contain links to external third-party websites or services beyond what is strictly necessary to operate the Platform (such as payment gateway redirects). Where payment processing redirects occur — for example, when completing a transaction via Maybank2u, CIMB Clicks, or Public Bank PBe — you will be subject to the privacy policy of that payment provider during the redirect session.

betsapi is not responsible for the privacy practices or content of third-party payment providers or any other external services. We encourage you to review the privacy policies of any third-party services you interact with in connection with betsapi transactions.

15 Updates to This Policy

betsapi reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will provide reasonable advance notice to registered Users via email notification or a prominent notice displayed upon login.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

16 Contact Us

If you have any questions, concerns, or formal complaints regarding this Privacy Policy or betsapi's data handling practices, please contact our Data Privacy team through any of the following channels: