Privacy Policy

1. Introduction

bodabet ("we", "us", "our") operates the online sports betting and casino platform available at bodabet.co (the "Platform"), serving registered members across Malaysia, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and beyond. As part of providing our services, bodabet processes personal data relating to our members and website visitors.

This Privacy Policy describes how bodabet collects, uses, discloses, stores, and protects personal data in connection with your use of the Platform. It has been prepared to reflect bodabet's obligations under applicable data protection legislation and the data protection requirements of the internationally recognised gaming authority under whose standards bodabet operates.

This policy should be read alongside bodabet's Terms & Conditions and Responsible Gaming Policy, both of which incorporate privacy-related obligations and form part of the overall agreement between you and bodabet.

2. Personal Data We Collect

bodabet collects the following categories of personal data from members and Platform visitors:

bodabet does not collect sensitive personal data (such as biometric data, health information, or political opinions) except where expressly required by applicable law or gaming authority compliance obligations.

3. How We Collect Your Data

3.1 Directly From You

The majority of personal data bodabet holds is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.

3.2 Automatically

When you access the bodabet Platform, we automatically collect certain technical data via cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser type, and browsing activity on our Platform. Please refer to Section 7 (Cookies & Tracking) for further details.

3.3 From Third Parties

bodabet may receive data about you from third parties in the following circumstances:

• Payment providers (e.g., Touch n Go eWallet, Boost, Maybank, CIMB) — transaction confirmation and fraud signals;
• Identity verification services — verification of identity documents submitted during KYC;
• Fraud and AML screening databases — to comply with anti-money laundering obligations;
• Gaming studio partners — game session logs for dispute resolution purposes.

4. How We Use Your Personal Data

bodabet uses your personal data for the following purposes:

• Account management: Creating and maintaining your bodabet account, processing login requests, managing your wallet balance, and recording your transaction history;
• Service delivery: Providing access to sports betting markets, live casino tables, slot games, crash games, and poker rooms on the Platform;
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with KYC obligations;
• Payment processing: Processing your deposit and withdrawal requests through your chosen payment method and reconciling your account balance;
• Fraud prevention and security: Detecting and preventing unauthorised account access, money laundering, fraudulent payment activity, and abuse of bonuses;
• Responsible gaming monitoring: Identifying and responding to indicators of problem gambling behaviour, and providing access to responsible gaming tools;
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions;
• Legal and regulatory compliance: Fulfilling obligations under the applicable gaming authority's licensing conditions, including transaction monitoring and suspicious activity reporting;
• Marketing communications: Sending you promotional offers and updates about bodabet — only where you have provided consent or where permitted under applicable law. You may opt out of marketing communications at any time;
• Platform improvement: Analysing usage data to improve the functionality, performance, and content of the bodabet Platform.

5. Legal Basis for Processing

bodabet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and bodabet — including account registration, game delivery, and payment processing;
• Legal obligation: Processing required to comply with applicable law and gaming authority licensing conditions — including KYC, AML monitoring, and age verification;
• Legitimate interests: Processing carried out for bodabet's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, provided these interests are not overridden by your data protection rights;
• Consent: Where processing is based on your consent — such as marketing communications — you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

bodabet does not sell your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors: Your financial data is shared with your chosen payment provider (Touch n Go eWallet, Boost, Maybank, CIMB, Visa, etc.) solely to process your transactions;
• Identity verification providers: Your identity documents are shared with our KYC service partners to fulfil verification obligations;
• Game studio partners: Technical session data may be shared with our licensed game providers (e.g., Evolution, Pragmatic Play) for game audit and dispute resolution purposes;
• Regulatory authorities: bodabet will disclose personal data to the applicable gaming authority or law enforcement agencies where required by law or where we have a legal obligation to report suspicious activity;
• Responsible gaming organisations: Where you request self-exclusion, your details may be shared with relevant responsible gaming registries as required by the applicable gaming authority;
• Group companies: bodabet may share data with related group entities for internal administrative and compliance purposes, subject to equivalent data protection obligations;
• Professional advisers: Lawyers, auditors, and insurers on a confidential, need-to-know basis.

All third parties with whom bodabet shares personal data are required to handle your information in accordance with applicable data protection law and equivalent security standards.

7. Cookies & Tracking Technologies

bodabet uses cookies and similar tracking technologies on the Platform to enhance your browsing experience, maintain your login session, and analyse usage patterns. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including session management and login state. These cannot be disabled.
• Performance cookies: Collect anonymised data on how visitors use the Platform, including page load times and navigation paths, to help us improve performance.
• Functional cookies: Remember your preferences (such as language and display settings) to personalise your bodabet experience.
• Analytics cookies: Used to understand aggregate usage patterns across the bodabet Platform for product development purposes. Data collected is anonymised where possible.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bodabet Platform, including your ability to stay logged in. bodabet does not use third-party advertising or retargeting cookies.

8. Data Retention

bodabet retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, as required by gaming authority licensing conditions and AML regulations;
• Transaction data: Retained for a minimum of 5 years from the date of the transaction;
• Support communications: Retained for 3 years from the date of the last interaction;
• Technical and usage data: Retained in identifiable form for up to 12 months, after which it may be anonymised and retained indefinitely for aggregate analytics purposes.

Where your account has been closed in connection with a fraud investigation, suspected money laundering, or a regulatory inquiry, bodabet may retain your data for longer periods as required by law or competent authority instruction.

9. Data Security

bodabet implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bodabet Platform;
• Encryption of sensitive data at rest within bodabet's database infrastructure;
• Role-based access controls ensuring that bodabet staff can only access personal data necessary for their specific role;
• Regular security audits, penetration testing, and vulnerability assessments;
• Strict third-party vendor due diligence, requiring all data processors to maintain equivalent security standards.

Notwithstanding the above, no method of electronic transmission or storage is entirely secure. bodabet cannot guarantee the absolute security of personal data transmitted over the internet. In the event of a personal data breach that poses a risk to your rights, bodabet will notify affected members and the applicable regulatory authority in accordance with legal requirements.

10. Your Data Protection Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by bodabet:

• Right of access: You may request a copy of the personal data bodabet holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to bodabet's legal retention obligations;
• Right to restriction: You may request that bodabet restrict processing of your data in certain circumstances;
• Right to data portability: You may request a machine-readable copy of personal data you provided to bodabet under a consent or contract basis;
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please contact bodabet's support team at [email protected]. bodabet will respond to verified requests within 30 days. In some cases, bodabet may need to verify your identity before acting on a request.

11. Children's Privacy

If you believe a minor has registered with bodabet, please contact us immediately at [email protected] so that we can take appropriate action.

12. International Data Transfers

Some of bodabet's data processing partners — including game studio providers and KYC verification services — may be located outside Malaysia. Where personal data is transferred internationally, bodabet takes steps to ensure that adequate safeguards are in place, including:

• Transferring data only to countries or recipients that provide an equivalent level of data protection;
• Implementing standard contractual clauses or equivalent contractual protections with international data processors;
• Ensuring that all international recipients of bodabet member data comply with the data protection standards required by the applicable gaming authority.

13. Updates to This Privacy Policy

bodabet may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or gaming authority guidelines. The current version will always be available at bodabet.co/privacy-policy with the effective date clearly marked at the top of the document.

Where amendments are material — such as a significant change in the categories of data collected or the purposes for which data is used — bodabet will notify registered members by email and/or by displaying a prominent notice on the Platform at least 14 days before the changes take effect. Continued use of the bodabet Platform after the effective date of any amendment constitutes acknowledgement of the updated policy.

14. Contact & Complaints

If you have any questions, concerns, or complaints about how bodabet handles your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 via the bodabet Platform — ask to be connected to the Data Protection team
• Response time: bodabet aims to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days.

If you are not satisfied with bodabet's response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, or with the applicable gaming authority that oversees bodabet's operations.