Privacy Policy

This Privacy Policy ("Policy") describes how Macaubet ("we", "us", "our", "Platform"), accessible at https://macaubet.cam, collects, processes, stores, and protects the personal data of individuals ("you", "User", "Player") who access or use our online casino and sports betting services. This Policy forms part of our broader legal framework alongside our Terms & Conditions and should be read in conjunction with that document.

By registering an account, making a deposit, or otherwise accessing any feature of the Macaubet platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the platform and contact our support team to request account closure.

Macaubet takes its data protection obligations seriously and is committed to handling personal data in a manner consistent with applicable data protection legislation and international best practices in the online gaming industry. We serve players primarily across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam — and operate payment integrations with local providers such as Touch 'n Go eWallet, Boost, DuitNow, and Malaysian banking institutions. The personal data associated with these transactions is handled with the same rigour applied to all data under this Policy.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information that identifies or could reasonably identify a natural person, directly or indirectly. Examples include full name, email address, phone number, IP address, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" — Macaubet, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — Any third party engaged by Macaubet that processes personal data on our behalf under contractual data processing obligations (e.g., payment service providers, KYC verification providers).
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer procedures carried out to verify a player's identity and comply with anti-money laundering (AML) obligations.
• "Cookie" — A small text file placed on your device by the platform to store session information, preferences, and usage analytics data.

The categories of personal data Macaubet may collect and process are set out in the table below. We collect only the data that is necessary and proportionate to the purpose stated.

The data categories listed above represent the maximum scope of data Macaubet may collect. Not all categories will be collected from every user — the specific data collected depends on the services you use and the features you access.

Macaubet collects personal data through the following means:

4.1 Direct Collection

Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting our support team, or participating in promotions. This represents the primary and most significant source of your personal data.

4.2 Automated Collection

Technical and usage data collected automatically when you access the platform, including IP address, browser information, device identifiers, and behavioural data generated during gameplay or site navigation. This data is collected via server logs, session cookies, and analytics tools operated by or on behalf of Macaubet.

4.3 Third-Party Sources

In limited circumstances, we may receive data from third-party sources, including:

• Identity verification and KYC service providers who assist us in confirming the authenticity of identity documents;
• Payment processors (such as our e-wallet integration partners for Touch 'n Go eWallet, Boost, and DuitNow) who confirm transaction status;
• Fraud prevention and sanctions-screening services that flag high-risk accounts or transactions.

In each case, third-party data sources are contractually obligated to ensure that personal data is shared with us lawfully and in compliance with applicable data protection standards.

Macaubet processes personal data on the following legal bases, depending on the purpose of each processing activity:

• Contractual Necessity: Processing required to perform the contract between Macaubet and you — including maintaining your account, processing deposits and withdrawals, settling bets, and delivering the services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and age verification mandates (21+).
• Legitimate Interests: Processing carried out in pursuit of Macaubet's legitimate business interests where these are not overridden by your fundamental rights — including fraud prevention, platform security, responsible gambling monitoring, and service improvement.
• Consent: Where no other legal basis applies, we will seek your explicit, informed consent before processing personal data for a specific purpose (e.g., optional marketing communications). You have the right to withdraw consent at any time without affecting prior processing.

Macaubet uses your personal data for the following specific purposes:

• To create, verify, and maintain your registered account;
• To process deposits and withdrawals in MYR via your nominated payment method (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, or cryptocurrency);
• To fulfil KYC and age verification requirements — ensuring all players are aged 21 or above;
• To detect and prevent fraud, money laundering, and other prohibited activities;
• To comply with applicable legal and regulatory obligations, including AML reporting requirements;
• To administer bonuses, promotions, and the VIP loyalty programme;
• To provide 24/7 customer support in English, Bahasa Melayu, and Chinese;
• To monitor and enforce responsible gambling commitments, including applying player-set deposit limits and processing self-exclusion requests;
• To analyse platform usage patterns for the purpose of improving our products and services;
• To send transactional communications relating to your account (e.g., deposit confirmations, withdrawal notifications, security alerts);
• Where you have provided consent, to send promotional communications about offers, bonuses, and new features.

Macaubet does not sell your personal data. We may share personal data with the following categories of recipients only where strictly necessary and under appropriate contractual safeguards:

7.1 Authorised Service Providers (Data Processors)

Third-party companies engaged by Macaubet to perform specific functions on our behalf, including:

• Payment processing and e-wallet infrastructure providers (including partners supporting Touch 'n Go eWallet, Boost, DuitNow, FPX, and Malaysian bank integrations);
• Identity verification and KYC service providers;
• Fraud screening and AML compliance tools;
• Cloud hosting and data storage infrastructure providers;
• Customer support platform providers (live chat infrastructure).

All such providers are bound by Data Processing Agreements that restrict their use of your data to the specific purpose for which it was shared and require them to implement adequate security measures.

7.2 Legal & Regulatory Disclosure

Macaubet may disclose personal data to competent authorities, regulators, law enforcement agencies, or courts where required to do so by law, court order, or in response to a lawful regulatory request — including where such disclosure is necessary to prevent, detect, or prosecute suspected fraud, money laundering, or other criminal activity.

7.3 Business Transfers

In the event that Macaubet undergoes a merger, acquisition, or sale of all or part of its assets, personal data held by the platform may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected users will be notified prior to any such transfer where practicable.

Macaubet uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, and improve the user experience. Cookies are small text files stored on your device that allow the platform to recognise you on return visits.

8.1 Types of Cookies Used

• Essential Cookies: Required for the platform to function. These enable login sessions, account navigation, and security features. They cannot be disabled without impairing core functionality.
• Functional Cookies: Store your preferences such as language selection and display settings, so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymised information about how the platform is used — pages visited, session duration, features accessed — to help us improve the service. Data collected via analytics cookies does not personally identify you.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorised account access, including session validation tokens.

8.2 Managing Cookies

You may configure your browser to reject non-essential cookies or to alert you when cookies are being placed. Please note that disabling essential cookies will impair your ability to use the platform. Browser-level cookie management instructions vary by browser and device type — consult your browser's help documentation for guidance.

Macaubet implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Macaubet platform is encrypted using industry-standard TLS protocols;
• Encrypted Data Storage: Personal data at rest is stored in encrypted form on access-controlled infrastructure;
• Access Controls: Access to personal data is restricted to authorised Macaubet personnel and contractors who have a genuine need to access it in the course of their role;
• Two-Factor Authentication: Available and recommended for all player accounts to add a second layer of protection against unauthorised login;
• Intrusion Detection Systems: Continuous monitoring for suspicious activity patterns that may indicate attempted unauthorised access;
• Regular Security Audits: Periodic reviews of security controls, vulnerability assessments, and penetration testing carried out by qualified security professionals.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the event of a security breach that poses a risk to your personal data, we will notify affected users and, where required by applicable law, the relevant regulatory authority within the legally mandated timeframe.

Macaubet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account relationship with Macaubet, plus a minimum of five years following account closure to satisfy AML and regulatory record-keeping obligations;
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven years for accounting, tax, and AML compliance purposes;
• KYC Documents: Identity verification documents are retained for the duration of your account relationship and for a minimum of five years after account closure or the date of the last transaction, whichever is later;
• Support Communications: Live chat transcripts and email correspondence are retained for a period of 24 months from the date of the interaction, or longer where they are relevant to an open dispute or investigation;
• Technical and Usage Data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data. Identifiable usage logs are typically retained for 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to a specific individual.

As a data subject whose personal data is processed by Macaubet, you hold the following rights. These rights are not absolute and are subject to applicable legal limitations and exemptions, but Macaubet is committed to responding to all valid rights requests promptly and in good faith.

To exercise any of the above rights, please contact our Data Privacy team via the support email listed under Clause 15 of this Policy, or via our 24/7 live chat. Please include sufficient information to allow us to verify your identity before processing your request. We will acknowledge receipt within 48 hours and aim to provide a substantive response within 30 calendar days, in line with standard data subject request obligations.

The Macaubet platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals below this age. Persons under the age of 21 are expressly prohibited from registering an account or using any services offered on the platform.

Age verification is conducted during the registration process and again as part of KYC verification prior to first withdrawal. Where Macaubet discovers or reasonably suspects that an account is held by a person below the minimum age, the account will be immediately suspended, all activity voided, and the matter investigated. Any personal data collected from an underage individual will be deleted as soon as it is safe and lawful to do so, subject to any mandatory regulatory retention obligations.

If you believe that a minor may have registered an account using false age information, please contact our support team immediately so that the matter can be investigated and resolved promptly.

The Macaubet platform may display or reference content, tools, or services provided by third-party companies — including gaming software providers, payment gateway interfaces, and responsible gambling information resources. Where you interact with such third-party content, your personal data may be subject to the privacy policies of those third parties rather than this Policy.

Macaubet does not control the privacy practices of third-party providers and accepts no responsibility for their data processing activities. We encourage you to review the privacy policies of any third-party services you interact with directly. Macaubet selects third-party partners with due regard for their data protection standards, but cannot guarantee compliance on their behalf.

Macaubet reserves the right to update, amend, or replace this Privacy Policy at any time, including in response to changes in applicable data protection legislation, evolving platform functionality, or updated industry standards. All amendments will be posted on this page with a revised "Last Updated" date.

For material changes — particularly those that affect how your personal data is used or shared, or that alter your rights as a data subject — we will provide advance notice via email to your registered address or via a prominent notification on the platform, no less than 14 calendar days before the changes take effect.

Your continued use of the Macaubet platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of, and where applicable, consent to, the updated terms. If you do not agree with the amended Policy, you must cease using the platform and request account closure through our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact Macaubet through one of the following channels:

• Live Chat: Available 24/7 directly from the platform — fastest channel for routine privacy queries;
• Email: [email protected] (displayed as plain text — this is not a clickable link);
• Languages: Privacy correspondence is handled in English, Bahasa Melayu, and Chinese.

For formal data subject rights requests (access, erasure, portability, rectification), please indicate clearly in your message that you are exercising a specific data subject right. Include your registered email address and, where relevant, a description of the specific data category your request relates to. We will verify your identity before processing any rights request.

Response times: general privacy enquiries are typically answered within 48 hours via live chat and within 3–5 business days via email. Formal data subject rights requests are acknowledged within 48 hours and substantively responded to within 30 calendar days.