Alibet Privacy Policy

1. Introduction

Alibet ("we", "us", "our", "the Platform") operates the online gaming and sports betting website at https://alibet.cam. We are committed to safeguarding the privacy of all users ("you", "your", "the User") who access our Platform, particularly our players based in Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

This Privacy Policy describes in detail how Alibet collects, processes, stores, shares, and protects personal data in the course of providing our services. It also sets out the rights you have over your personal data and the means by which you may exercise those rights.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete legal framework governing your relationship with Alibet.

2. Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data linked to an individual.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For users of the Alibet Platform, Alibet is the Data Controller.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, subject to a data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer verification procedures, including identity and address verification required under applicable anti-money laundering and regulatory obligations.
• "Cookies" — small data files placed on your device by the Platform to facilitate session management, analytics, and personalisation.

3. Data We Collect

Alibet collects personal data from users in the following categories:

3.1 Registration Data

When you create an Alibet account, we collect your full name, date of birth, email address, mobile phone number, and preferred currency (Malaysian Ringgit / MYR). This information is required to create and maintain your account.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to enforce our 21+ age requirement, we may request copies of your national identity card (MyKad), passport, or other government-issued identification, as well as proof of residential address such as a utility bill or bank statement.

3.3 Financial Data

We collect information about deposits and withdrawals made via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank, as well as cryptocurrency wallet addresses where applicable. We do not store full payment card numbers or e-wallet PINs on our servers.

3.4 Transactional and Gameplay Data

We record your betting activity, game history, session duration, wager amounts, and withdrawal history. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.

3.5 Technical and Device Data

We automatically collect your IP address, browser type and version, device type and operating system, screen resolution, language settings, referring URL, and session timestamps when you access the Platform. This data is used for fraud detection, security monitoring, and service optimisation.

3.6 Communications Data

Records of your interactions with our customer support team via live chat and email — including the content of those communications — are retained for quality assurance, dispute resolution, and regulatory audit purposes.

3.7 Voluntary Data

You may voluntarily provide additional information, such as responsible gambling self-assessments or feedback submissions. This data is processed only for the stated purpose at the time of collection.

4. Data Processing

Alibet processes your personal data for the following purposes:

5. Legal Basis for Processing

Alibet processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and dispute resolution.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering rules, age verification requirements, and regulatory reporting obligations under our gaming licence.
• Legitimate Interests: Processing carried out in pursuit of Alibet's legitimate business interests — such as fraud prevention, security monitoring, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, revocable consent. You may withdraw consent at any time by contacting our support team or updating your account preferences.

6. Data Sharing

Alibet does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: Including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners (Maybank, CIMB, Public Bank, Hong Leong) — solely to process your deposits and withdrawals.
• Identity Verification Partners: Third-party KYC service providers engaged to assist with document verification and age confirmation, operating under binding data processing agreements.
• Game Content Providers: Software providers who supply casino games and sports betting infrastructure may receive anonymised session data necessary to facilitate gameplay.
• Fraud and Security Services: Specialist providers engaged to detect and prevent fraudulent activity, operating under strict confidentiality obligations.
• Regulatory and Legal Authorities: Where we are required by law, court order, or regulatory authority to disclose personal data, we will comply with such obligations and, where legally permissible, notify you in advance.
• Professional Advisers: Legal, compliance, and financial advisers who process personal data on a strictly need-to-know basis and under professional confidentiality obligations.

7. Data Retention

Alibet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and thereafter for the minimum period required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of 5 years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of each interaction.
• Marketing preferences and consent records: Retained for the duration of your account and for 1 year following account closure or withdrawal of consent.
• Device and access logs: Retained for 12 months from the date of access, unless retained longer for the purpose of fraud investigation or regulatory audit.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

8. Cookies & Tracking Technologies

The Alibet Platform uses cookies and similar tracking technologies to facilitate your use of the service and to help us understand how players interact with the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and cookies required to process payments. These cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how users navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used to improve Platform performance.
• Functional Cookies: Allow the Platform to remember your preferences — such as language settings and display preferences — so that you do not need to re-enter them on each visit.
• Marketing Cookies: Used only where you have provided explicit consent. These cookies track your interactions with Alibet promotions and may be used to deliver relevant offers.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may impair some functionality of the Platform. You may withdraw consent for marketing cookies at any time by contacting our support team.

9. Data Security

Alibet implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Industry-standard TLS/SSL encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data, including KYC documents and financial records, using AES-256 or equivalent encryption standards.
• Role-based access controls ensuring that only authorised personnel can access personal data, strictly on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure.
• Multi-factor authentication requirements for staff accessing systems that hold personal data.
• Incident response procedures for the identification, containment, and notification of personal data breaches in accordance with applicable regulatory requirements.

10. User Rights

Subject to applicable law and regulatory constraints, you have the following rights in relation to the personal data Alibet holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared. We will respond to access requests within 30 days.
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal or regulatory retention obligations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We may need to verify your identity before processing your request. There is no fee for exercising these rights in ordinary circumstances.

11. Protection of Minors

The Alibet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Our registration process requires users to confirm their age, and all accounts are subject to KYC age verification.

If Alibet becomes aware that personal data has been collected from a user who is under 21 years of age, all associated data will be deleted promptly and the account will be permanently closed. Any funds deposited by an underage user will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

12. International Data Transfers

In the course of providing our services, your personal data may be transferred to and processed in countries other than Malaysia. This may occur, for example, when data is processed by our cloud infrastructure providers, game content suppliers, or KYC verification partners based in other jurisdictions.

Where such transfers occur, Alibet takes appropriate safeguards to ensure that your data remains protected to a standard equivalent to that described in this Privacy Policy. Such safeguards may include data processing agreements incorporating standard contractual clauses, or transfers to entities operating in jurisdictions that provide an adequate level of data protection.

13. Amendments to This Policy

Alibet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. When material changes are made, we will notify registered users via the email address on file or through a prominent notice on the Platform, at least 7 days before the changes take effect.

The effective date at the top of this document indicates when the current version came into force. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which Alibet handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Alibet Platform. Our English-language support team is on hand to assist with all privacy-related enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line for prompt routing. We aim to respond within 2 business hours.

For data subject rights requests — including access, rectification, erasure, or portability — please include your registered email address and a brief description of your request when contacting us. We may ask you to verify your identity before processing your request.

This Privacy Policy was last updated on 1 January 2026. The governing version is the English-language document published at https://alibet.cam/privacy-policy.