Betticket Privacy Policy – Our Commitment to Protecting Your Data

1. Introduction

Betticket (operating under the domain betticket.biz ) takes personal data protection seriously. We understand that your trust is our most valuable asset, and we are committed to ensuring your personal information is always handled with the utmost respect, transparency, and security.

This Privacy Policy applies to all users who access or use the betticket platform via our website, mobile app, or any digital channel we operate. It covers all information we collect from you — whether directly when you register and use our services, or indirectly through tracking technologies used within the platform.

This policy has been drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and applicable international privacy standards. If you have any questions about how we handle your personal data, our privacy team is available to be contacted at any time.

2. Personal Data We Collect

Betticket collects various categories of personal data depending on the nature of your interaction with our platform. Below is a detailed breakdown of the data we may collect:

Identity & Contact Data

• Full name as stated on your official identification document
• Date of birth and gender
• Email address and mobile phone number
• Current residential address
• National identification number (MyKad) or passport number

Financial & Transaction Data

• Bank account or e-wallet details used for deposits and withdrawals
• Records of all deposit, withdrawal, and wagering transactions
• Payment history and account balance

Technical & Usage Data

• IP address, device type, operating system, and web browser
• Login session data including time, duration, and access location
• Records of gaming and wagering activity on the platform
• Cookie data and similar tracking technologies

3. How We Use Your Data

The data we collect is used solely for legitimate and stated purposes. betticket uses your personal information for the following purposes:

Betticket will not use your data for purposes beyond the scope stated above without first obtaining fresh consent from you, except where required by law.

4. Basis for Data Processing

Betticket only processes your personal data where there is a valid legal basis for doing so. The bases we rely on are:

• Contract performance: Processing required to provide betticket's services to you in accordance with the terms of the agreement you accepted upon registration.
• Legal obligation: Processing required to fulfil betticket's legal obligations, including PDPA compliance, anti-money laundering (AML) requirements, and regulatory directives.
• Legitimate interest: Processing for the purposes of fraud detection, platform security, internal analytics, and service improvement, provided these interests do not override your privacy rights.
• Consent: For direct marketing activities, the use of non-essential cookies, and promotional communications, we request your explicit consent, which may be withdrawn at any time.

5. Data Sharing with Third Parties

Betticket does not sell your personal data. However, in certain situations we may need to share your information with carefully selected third parties. All data sharing is conducted with strict controls and safeguards:

• Payment service providers: Payment gateways and e-wallet providers integrated within the betticket platform to securely process your financial transactions.
• Game software providers: Licensed game developers who provide casino, fish shooting, and other game content within the platform, requiring minimal session data for technical functionality.
• Cloud & infrastructure service providers: Hosting and infrastructure companies that provide a secure server environment for the operation of the betticket platform.
• Regulatory authorities & law enforcement: When required by law, court order, or direction from a legitimate regulatory authority.
• Identity verification (KYC) services: Licensed third-party KYC service providers engaged to verify member identities in accordance with compliance requirements.

All third parties we work with are required to sign strict data confidentiality agreements and are only permitted to use your data for the specific purposes agreed upon with betticket.

6. Cookies & Tracking Technologies

The betticket platform uses cookies and similar tracking technologies to ensure a smooth, secure, and personalised user experience. The following are the categories of cookies we use:

Essential Cookies (Cannot Be Disabled)

These cookies are required for core platform functions such as login session authentication, account security, and page navigation. Without them, the platform will not function properly.

Performance & Analytics Cookies

These cookies help us understand how members interact with the platform — which pages are visited most, where users encounter issues, and how we can improve the overall experience. All data is collected in aggregate and without individual identification.

Functional Cookies

These cookies store your personal preferences such as display language, interface settings, and favourite game selections so you do not need to reconfigure them each time you log in.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the betticket platform.

7. Data Security

The security of your personal data is betticket's top priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• Data encryption in transit: All communications between your browser and the betticket server are secured by TLS 1.3 protocol with 256-bit encryption.
• Data encryption at rest: Sensitive data stored in our databases is encrypted using the industry-standard AES-256 algorithm.
• Layered access control: A role-based access control (RBAC) system ensures that only authorised staff who require access can view specific data, supported by comprehensive audit logs.
• 24/7 security monitoring: Our information security team continuously monitors our infrastructure to detect and respond to any threats or suspicious activity.
• Regular penetration testing: betticket conducts regular security testing by independent third-party auditors to identify and address any system vulnerabilities.
• Incident response plan: We have clear, tested procedures in place to respond to any data breach, including notifying affected members within the timeframe required by law.

8. Data Retention Period

Betticket does not retain your personal data longer than necessary for the stated purposes, or as required by law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account remains active and in good standing with betticket.
• Data after account closure: Identity and financial transaction information is retained for a minimum of 7 years after account closure to meet financial compliance and tax regulatory requirements.
• Technical & security logs: Access and technical activity logs are retained for 12 months for fraud detection and security analysis purposes.
• Marketing data: If you have withdrawn consent for marketing communications, your data for that purpose will be deleted within 30 days.
• KYC Data: Identity verification documents are retained for the period required by regulators, typically no less than 5 years after the business relationship ends.

When data is no longer required and the mandatory retention period has expired, betticket will securely delete or destroy the data using methods that ensure it cannot be recovered.

9. Your Privacy Rights

As a data subject, you hold rights protected under Malaysia's PDPA and applicable privacy laws. betticket fully respects the following rights:

To exercise any of the above rights, please contact the betticket privacy team by email at [email protected] or via live chat within the platform. We will process your request within 30 days from the date of receipt, in accordance with applicable legal requirements.

Please note that some requests may be subject to prior review, and in certain circumstances betticket may need to decline or limit your request where there are legal obligations that prevent us from doing so.

10. International Data Transfers

In the course of its operations, betticket may need to transfer your personal data to servers or service providers located outside Malaysia. Any such data transfer is carried out with adequate safeguards:

• We only transfer data to countries or regions that maintain an equivalent or higher level of data protection than Malaysia.
• Data transfers to third-party service providers are protected by standard contractual clauses that mandate equivalent levels of data protection.
• We consistently ensure compliance with Malaysia's PDPA requirements on cross-border data transfers, including obtaining the necessary consent where applicable.

11. Child Protection

The betticket platform is exclusively for individuals aged 18 years and above. betticket does not intentionally collect or process personal data of individuals under 18 years of age.

If we determine that personal data of a child has been collected without valid parental or guardian consent, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who suspect their child has registered on the betticket platform are urged to contact us immediately.

12. Privacy Policy Amendments

Betticket reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments. Any changes made will be posted on this page with an updated "Last Updated" date.

• For material or significant amendments, we will notify members via their registered email or an in-platform notice at least 14 days before the changes take effect.
• Continued use of the betticket platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy.
• It is your responsibility to review this page periodically. We recommend checking it at least once every three months.

13. Contact Our Privacy Team

We welcome any inquiries, concerns, or complaints regarding your data privacy. The betticket Data Protection Officer (DPO) team can be reached via:

• Privacy Email: [email protected] (displayed as text only)
• Live Chat: Available 24/7 via the chat icon within the betticket platform
• FAQ: Visit our FAQ page for quick answers on privacy and account security

We are committed to responding to all privacy inquiries within 3 working days, and to fulfill data rights requests within 30 days as required by Malaysia's PDPA.

If you are not satisfied with the response provided by betticket, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia as the relevant regulatory body.