Privacy Policy

This Privacy Policy ("Policy") describes how Betsson ("we", "us", "our", "the Company"), operator of the online gaming platform at https://betsson.buzz ("the Platform"), collects, uses, stores, and protects the personal data of individuals ("you", "your", "the User") who access or use the Platform.

Betsson takes the privacy of its users seriously. We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws and regulations, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

For the purposes of this Policy, the following terms carry the meanings set out below:

Betsson collects the following categories of personal data in the course of providing the Platform and its associated services:

We collect personal data through the following channels and mechanisms:

• Account Registration: Information provided directly by you when creating a Betsson account, including your name, date of birth, email address, and phone number.
• KYC Verification: Identity and address documents submitted by you during the mandatory verification process prior to your first withdrawal.
• Deposits and Transactions: Financial information shared with us or our payment processors when you make deposits or request withdrawals using methods such as DuitNow, FPX, or Touch 'n Go eWallet.
• Platform Usage: Data automatically collected as you navigate and use the Platform, including device information, IP address, session activity, pages visited, and game interactions.
• Customer Support Interactions: Information provided when you contact our support team via live chat, email, or any other communication channel.
• Cookies and Tracking Technologies: Data collected passively through cookies, web beacons, and similar technologies as described in Section 8.
• Third-Party Sources: In limited circumstances, we may receive data from fraud prevention agencies, identity verification providers, or payment processors to supplement and verify the information you have provided.

Betsson processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use each category of data:

We do not use your personal data for any purpose that is incompatible with the purposes stated above without obtaining your prior consent or where otherwise permitted by law.

Betsson processes personal data under the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions agreed to upon account registration — for example, processing deposits, settling withdrawals, and delivering the gaming services you have requested.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including KYC and anti-money laundering (AML) requirements under Malaysian law.
• Legitimate Interests: Processing carried out in furtherance of Betsson's legitimate business interests, including fraud detection, platform security, and improving user experience, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — principally for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To opt out of marketing emails, update your preferences within account settings or contact support.

7.1 Betsson does not sell, rent, or otherwise commercially exploit your personal data to third-party marketers or unaffiliated organisations.

7.2 We share personal data only in the following limited circumstances:

• Payment Processors: We share necessary financial and identity data with our payment service providers — including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong integrations — solely for the purpose of processing your transactions.
• KYC and Identity Verification Partners: We engage third-party identity verification services to authenticate your MyKad or passport and confirm your age and residency. These providers process identity documents under strict contractual data protection obligations.
• Fraud Prevention and Compliance Agencies: We may share data with specialist fraud detection providers and financial intelligence agencies where necessary to investigate or prevent fraudulent or criminal activity on the Platform.
• Regulatory and Law Enforcement Authorities: Where required by applicable Malaysian law, court order, or lawful regulatory demand, Betsson may disclose personal data to government authorities or law enforcement agencies.
• IT Infrastructure and Hosting Providers: Our platform is hosted on secure cloud infrastructure. Our hosting and technology service providers process technical data as processors under contractual data processing agreements.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

7.3 All third parties with whom Betsson shares personal data are required to process that data in accordance with applicable data protection laws and under written agreements that restrict their use of the data to the specified purpose.

8.1 Betsson uses cookies and similar technologies (including web beacons and local storage objects) on the Platform for the purposes described below:

8.2 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled without preventing the Platform from operating correctly.

8.3 Betsson does not use third-party advertising cookies or behavioural tracking pixels that share your browsing data with external advertising networks.

9.1 Betsson retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

9.2 The following indicative retention periods apply to key data categories:

• Account and Identity Data: Retained for the duration of your account and for a period ofseven (7) years following permanent account closure, in compliance with Malaysian AML and financial recordkeeping obligations.
• Transaction and Financial Records: Retained for a minimum of seven (7) years following each transaction, as required by applicable financial regulations.
• Gaming Activity Data: Retained forfive (5) years following the relevant gaming session, for dispute resolution and responsible gambling monitoring purposes.
• Customer Support Records: Retained for three (3) years following the close of the support interaction, unless the matter is subject to ongoing legal proceedings.
• Marketing Preference Data: Retained until you withdraw your consent or update your preferences, plus a brief period thereafter for suppression list management.
• Technical and Device Data: Retained for up to two (2) years for security analysis and fraud detection purposes.

9.3 Upon expiry of the applicable retention period, personal data is either securely deleted, irreversibly anonymised, or rendered inaccessible in accordance with our internal data disposal procedures.

10.1 Betsson implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data exchanged between your device and the Platform is transmitted over HTTPS using256-bit TLS encryption.
• Encryption at Rest: Sensitive data stored in our databases, including identity documents and financial records, is encrypted at rest using AES-256 encryption standards.
• Access Controls: Personal data is accessible only to authorised Betsson personnel and service providers on a strict need-to-know basis. Access is controlled via role-based permissions and multi-factor authentication.
• Security Monitoring: Our infrastructure is subject to continuous monitoring for anomalous activity, intrusion attempts, and data exfiltration risks.
• Regular Security Audits: Betsson conducts periodic internal and third-party security assessments of its platform and data handling procedures.
• Staff Training: All personnel with access to personal data undergo regular data protection and security awareness training.

10.2 In the event of a personal data breach that poses a risk to the rights and freedoms of affected users, Betsson will notify affected individuals and the relevant regulatory authorities as required by applicable law, without undue delay.

Under the Malaysian Personal Data Protection Act 2010 and applicable data protection principles, you have the following rights in relation to your personal data held by Betsson:

To exercise any of the above rights, please contact our Data Protection team as set out in Section 15. We will respond to all valid requests within 21 days. In complex cases, this period may be extended to a maximum of 42 days, with prior notification to you.

Please note that certain rights are subject to limitations where processing is required by law, or where fulfilling a request would adversely affect the rights and interests of third parties.

12.1 The Betsson Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account.

12.2 If you are a parent or guardian and you believe that a minor has registered on the Platform using false age information, please contact our support team immediately using the contact details provided in Section 15. We will investigate and resolve such reports promptly.

12.3 Betsson's age verification process is specifically designed to prevent underage access. All new accounts undergo age confirmation during registration, and withdrawals cannot be processed without successful KYC verification that confirms the account holder is 21 years of age or older.

13.1 In the course of operating the Platform, your personal data may be processed by our service providers in locations outside of Malaysia. This may occur in connection with cloud hosting infrastructure, identity verification services, or fraud prevention systems.

13.2 Where personal data is transferred outside Malaysia, Betsson takes appropriate steps to ensure that an adequate level of data protection is maintained. These steps include:

• Entering into data processing agreements with recipient service providers that impose data protection obligations equivalent to those applicable in Malaysia;
• Transfering data only to jurisdictions that maintain data protection standards recognised as adequate;
• Applying technical safeguards such as end-to-end encryption to data transferred internationally.

13.3 By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia, subject to the safeguards described above.

14.1 Betsson reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The date of the most recent revision is displayed at the top of this page.

14.2 Where amendments are material — meaning they significantly affect how we use your personal data or rights in relation to it — we will notify active account holders by email prior to the changes taking effect. Minor editorial or clarificatory changes may be made without prior notice.

14.3 Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you should cease using the Platform and may close your account in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Betsson handles your personal data, please contact our Data Protection team through the following channels:

When submitting a data rights request, please include your registered email address and a clear description of your request. We may need to verify your identity before processing certain requests in order to protect your account security.

For complaints relating to Betsson's compliance with the Malaysian Personal Data Protection Act 2010, you may also contact the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi) through the appropriate official channels.