Privacy Policy —
How Betlah Protects Your Data

1. Introduction

This Privacy Policy (hereinafter the "Policy") applies to all personal data processed by Betlah (the "Platform", "We", "Us", or "Our") in connection with the website at https://betlah.cam and all associated gaming services, mobile interfaces, and support channels operated under the Betlah brand.

Betlah is operated as an internationally licensed online gaming platform. We act as the data controller with respect to the personal data of registered players and website visitors, meaning we determine the purposes and means by which personal data is processed.

By registering an account, making a deposit, placing a bet, or otherwise using the Betlah Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, date of birth, national identity number, financial details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. Betlah is the data controller with respect to player data.
• "Data Processor" — a third party that processes personal data on behalf of the data controller under a contractual arrangement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data.
• "KYC Data" — identity verification documents and information submitted pursuant to Know Your Customer and Anti-Money Laundering obligations, including but not limited to copies of government-issued identification (such as MyKad for Malaysian players), proof of address, and payment method verification.
• "Cookies" — small text files placed on your device by the Betlah website to facilitate session management, preference storage, analytics, and marketing attribution.
• "Third-Party Service Provider" — any external entity contracted by Betlah to deliver services supporting platform operations, including payment processors, KYC providers, IT infrastructure suppliers, and analytics vendors.

3. Categories of Personal Data We Collect

Betlah collects personal data across several categories depending on the nature of your interaction with the Platform:

3.1 Identity & Account Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (collected to enforce the 21+ age requirement).
• National identity number (MyKad number for Malaysian residents) or passport number.
• Username and encrypted password hash.
• Profile photograph (where submitted voluntarily or as part of KYC).

3.2 Contact Data

• Email address.
• Mobile phone number.
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam) and postcode.

3.3 Financial & Transaction Data

• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, Boost wallet ID, bank account last four digits, GrabPay reference, FPX transaction reference).
• Deposit and withdrawal history including amounts in MYR and cryptocurrency.
• Bonus and promotional transaction records.
• Wagering history and game participation records.

3.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, page visits, feature interactions, and clickstream data.
• Login history including date, time, and IP of each session.

3.5 Communications Data

• Records of live chat sessions with our support team.
• Email correspondence with [email protected].
• Voluntary feedback and survey responses.

4. How We Collect Personal Data

Betlah collects personal data through the following means:

• Account Registration: You directly provide identity, contact, and age verification data when creating your account.
• KYC Verification Submissions: You upload identity documents and supporting materials as part of the mandatory KYC process.
• Payment Transactions: Financial data is captured automatically when you initiate deposits or withdrawals via Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, or cryptocurrency.
• Platform Interaction: Technical and usage data is collected automatically through server logs, cookies, and analytics tools as you navigate the Platform.
• Support Interactions: Communications data is retained when you contact our support team via live chat or email.
• Third-Party Identity Verification Services: Where you use a third-party KYC verification tool integrated into our registration flow, data may be transmitted between that provider and Betlah under a data processing agreement.

5. Legal Basis for Processing

Betlah relies on the following legal bases for processing your personal data:

6. Purposes of Data Processing

Betlah processes your personal data for the following purposes:

• To create and manage your registered player account.
• To verify your identity and age (21+) in compliance with KYC and responsible gambling obligations.
• To process deposits, withdrawals, and bonus transactions in Malaysian Ringgit (MYR) and cryptocurrency.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity.
• To provide customer support and resolve disputes via live chat, email, and account review.
• To personalise your gaming experience, including game recommendations and promotional offers tailored to your account activity.
• To send you transactional communications, including deposit confirmations, withdrawal status updates, and security alerts.
• To send marketing communications where you have provided explicit opt-in consent, including information about new games, promotions, and seasonal offers.
• To improve the Platform through analysis of aggregated usage data and A/B testing.
• To comply with our obligations under applicable licensing authority requirements and applicable law.
• To enforce our Terms & Conditions, including identifying and actioning bonus abuse, multi-accounting, and other prohibited conduct.

7. Data Sharing with Third Parties

Betlah does not sell your personal data. We may share your data with the following categories of third parties only to the extent strictly necessary to operate the Platform and fulfil our legal obligations:

• Payment Processors: Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency network operators receive transaction data necessary to execute your payments.
• KYC and Identity Verification Providers: Third-party identity verification services receive the documents and data you submit as part of the KYC process.
• Gaming Content Providers: Game studios and platform providers (e.g., Pragmatic Play, PG Soft, Microgaming) may receive your session and wagering data to deliver game content and calculate outcomes.
• IT Infrastructure and Cloud Services: Hosting, database, and security vendors receive access to platform data as necessary to maintain technical infrastructure.
• Regulatory and Law Enforcement Authorities: Where required by our licensing authority or by applicable law, Betlah will disclose personal data to the relevant regulators, law enforcement agencies, or judicial bodies.
• Fraud Prevention Networks: We may share data with shared fraud-intelligence systems to identify and block fraudulent activity across the industry.

8. International Data Transfers

As an internationally operated platform, Betlah may transfer your personal data to third-party service providers or infrastructure located outside Malaysia. Where such transfers occur, Betlah takes reasonable steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under internationally recognised privacy frameworks.

Safeguards may include contractual clauses, data processing agreements, and transfer impact assessments. You may request information about the specific safeguards applicable to any international transfer of your data by contacting us at the details provided in Section 16.

9. Data Retention

Betlah retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following indicative retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

10. Data Security

Betlah implements a comprehensive technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including passwords (stored as salted hashes) and payment identifiers.
• Multi-factor authentication (MFA) requirements for internal system access by Betlah staff.
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis.
• 24/7 automated intrusion detection and DDoS mitigation systems.
• Regular penetration testing and third-party security audits.
• Incident response procedures including mandatory breach notification protocols.

11. Cookies and Tracking Technologies

11.1 Types of Cookies Used

Betlah uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Essential for platform functionality, including session authentication, security token management, and user preference storage. These cannot be disabled without impairing Platform function.
• Performance & Analytics Cookies: Used to collect aggregated, pseudonymised data about how visitors interact with the Platform — page views, session duration, device type, and feature usage. This data helps us improve the Platform experience.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and notification settings across sessions.
• Marketing & Attribution Cookies: Used where you have consented to receive personalised promotions, or to attribute your registration to a referring marketing channel. You may opt out of marketing cookies without affecting core Platform functionality.

11.2 Cookie Management

You may manage your cookie preferences at any time through your browser's cookie settings, or via our cookie preference centre accessible from the cookie banner displayed on your first visit to the Platform. Please note that disabling certain categories of cookies may impair your experience of some Platform features.

12. Your Data Subject Rights

Subject to applicable law, you have the following rights in respect of your personal data held by Betlah:

• Right of Access: You may request a copy of the personal data Betlah holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: You may request a copy of personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time, including automated profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please submit a written request to [email protected]. We will respond to all valid requests within 30 calendar days. We may request verification of your identity before processing any data subject request to prevent unauthorised disclosure.

13. Minors and Age Restriction

The Betlah Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory component of the KYC process for all registered accounts.

If Betlah becomes aware that personal data has been collected from a person under 21 years of age — whether through incorrect information provided at registration or any other means — the relevant account will be immediately suspended, the personal data will be securely deleted to the extent permissible by legal obligation, and any deposits associated with the account will be returned.

If you believe that an underage individual may have registered an account on the Platform, please contact our support team immediately at [email protected].

14. Third-Party Links and Services

The Betlah Platform may contain links to third-party websites, game provider portals, or payment service interfaces operated by entities independent of Betlah. This Privacy Policy applies solely to data processed by Betlah within the scope of the Platform and does not extend to the privacy practices of any third-party website or service.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of Betlah, particularly payment method providers such as Touch 'n Go eWallet, Boost, GrabPay, and your banking institution.

15. Changes to This Privacy Policy

Betlah reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality. The date of the most recent revision is displayed prominently at the top of this page.

Where changes are material — meaning they substantially affect the nature of how your data is used or your rights as a data subject — we will notify you in advance via the email address registered to your account and/or by displaying a prominent notice on the Platform. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

We recommend reviewing this Policy periodically to remain informed about how your data is being handled.

16. Contact Us — Data & Privacy Enquiries

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by Betlah, please contact us using the following details:

• Email (plain text): [email protected]
• Live Chat: Available 24/7 via the Betlah Platform — include "Privacy Request" in your opening message to be routed to our data team.
• Response Commitment: We aim to acknowledge all privacy-related enquiries within 2 business days and resolve them within 30 calendar days.
• Languages: Requests may be submitted in English, Bahasa Melayu, or Chinese.

For related legal documents, please also refer to our Terms & Conditions and our Responsible Gambling Policy.