Official Privacy Policy

Casabet Privacy Policy – Your Data is Fully Protected in Malaysia

Casabet takes member privacy very seriously. This Privacy Policy explains transparently how we collect, store, use, and protect your personal information — so you can play with peace of mind, free from concerns about your data security.

256-bit SSL Encryption Updated: 2026 Malaysia
256-bit
Bank-Grade SSL Encryption
0
Data Sold to Advertisers
24/7
Security Monitoring
100%
Transparent & Accountable

Casabet's Privacy Commitment to You

Six key reasons that demonstrate casabet's commitment to protecting the personal data of Malaysian members.

🚫
No Data Sold to Advertisers

Casabet has never and will never sell, rent, or commercialise members' personal data to any advertiser or third party for marketing purposes without your explicit written consent as the data owner.

🇲🇾
Malaysia PDPA Compliance

Casabet operates in accordance with the principles of the Personal Data Protection Act 2010 (PDPA) Malaysia. We collect only the data that is necessary, use it for stated purposes, and give members full rights to access and correct their data.

👁️
Full Transparency

Casabet believes you have the right to know exactly what happens to your data. This Privacy Policy is written in plain, easy-to-understand language — not deliberately obscure legal jargon — so every member can make informed decisions.

🛡️
24/7 Security Monitoring

Casabet's cybersecurity team monitors our systems around the clock to detect and respond to any threats or unauthorised access attempts. In the event of any incident affecting member data, we will notify those impacted without delay.

✊
Full Rights for Members

You have the right to access the data casabet holds about you, request corrections if there are errors, request deletion under certain circumstances, and object to the use of your data for specific purposes. All such requests can be submitted to our team.

Full Privacy Policy – Casabet

By using the casabet platform, you agree to the collection and use of information as described in this policy.

1 Information We Collect

Casabet collects various types of information when you register and use our platform. We only collect information that is genuinely necessary to provide quality service, comply with legal requirements, and ensure platform security. The information we collect falls into two main categories:

Information You Provide Directly:

  • Full name as stated on your MyKad
  • Date of birth for verification of the 18+ age requirement
  • Active email address for account communications
  • Valid Malaysian mobile phone number
  • Password (stored as an unreadable cryptographic hash)
  • Payment method details — eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, or FPX details for Maybank2u and CIMB Clicks
  • Identity document (copy of MyKad) when requested for identity verification purposes

Automatically Collected Information:

  • IP address and general location information (state within Malaysia)
  • Device type, operating system, and web browser version used
  • Navigation history within the casabet platform (pages visited, time of visit)
  • Betting and game history (for security, compliance, and customer support purposes)
  • Financial transaction history (deposits and withdrawals)
  • Cookie data and related tracking technologies associated with platform usage

casabet never collects credit or debit card information directly. All financial transactions are processed through certified third-party payment providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX.

2 How We Use Your Information

Casabet uses the information collected for legitimate and specific purposes. We do not use your data for purposes unrelated to the provision of casabet's services without first obtaining your consent. The following are the primary purposes for which data is used:

  • Account Management: Registering and verifying your identity, managing your casabet account, and processing logins securely.
  • Transaction Processing: Processing deposits and withdrawals in MYR via your chosen payment method, and maintaining accurate transaction records.
  • Legal Compliance: Meeting the requirements of Malaysia's Personal Data Protection Act 2010, anti-money laundering (AML) obligations, and other applicable regulatory requirements.
  • Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, and other cybersecurity threats against casabet and its members.
  • Customer Support: Resolving complaints, answering inquiries, and providing technical support to casabet members.
  • Service Improvement: Analysing usage patterns in aggregate (not individual data) to improve the interface, introduce new features, and enhance the overall playing experience on casabet.
  • Service Communications: Sends important account-related notifications — such as deposit confirmations, security alerts, or policy updates — via email or SMS.
  • Marketing (with consent): Sending promotional offers, bonuses, and the latest casabet news — only if you have opted in to receive marketing communications during registration or later via your account settings.

You may withdraw your consent to receive marketing communications at any time by contacting the casabet support team or through the notification settings in your account. Withdrawing consent will not affect the processing of data that occurred prior to the withdrawal.

3 Sharing Data with Third Parties

Casabet does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. However, there are limited circumstances in which casabet may need to share certain information with other parties for legitimate operational purposes:

  • Payment Providers: Required transaction details are shared with authorised payment providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) solely for the purpose of processing your deposits and withdrawals. These providers are subject to their own privacy policies and security standards.
  • Technical Service Providers: casabet works with carefully selected third-party service providers for technical operations such as cloud computing, usage analytics, and email services. These providers are granted access only to the data necessary for their specific tasks and are bound by strict confidentiality agreements with casabet.
  • Relevant Authorities: Where required by Malaysian law, a court order, or a valid request from a law enforcement agency, casabet will disclose the necessary information. casabet will endeavour to notify the affected member of any such disclosure unless prohibited by law from doing so.
  • Identity Verification: As part of the KYC (Know Your Customer) process, casabet may use approved third-party identity verification services to validate the authenticity of members' identity documents.

In all of the data-sharing scenarios described above, casabet ensures that only the minimum necessary information is disclosed, and all receiving parties are bound by confidentiality and security obligations equivalent to or higher than casabet's own standards.

4 Data Security

Casabet invests seriously in security infrastructure to protect members' personal data. The following are the key security measures we have implemented:

  • Data Encryption in Transit: All communications between your device and casabet's servers are protected by TLS 1.3 protocol and SSL 256-bit encryption, ensuring data cannot be intercepted in transit.
  • Stored Data Encryption: Sensitive data such as passwords is stored as a cryptographic hash that cannot be decoded. Sensitive financial information is stored in encrypted form within a secured database.
  • Internal Access Controls: Access to member data within casabet's systems is restricted to staff who require it to carry out their duties. All access is logged and monitored.
  • Real-Time Security Monitoring: The casabet security team uses advanced monitoring tools to detect and respond to suspicious activity or unauthorised access attempts in real time.
  • Regular Security Audits: casabet conducts regular internal security audits and engages independent third-party security auditors to assess and validate the strength of our security systems.
  • Two-Factor Authentication (2FA): casabet offers a two-factor authentication option to add an extra layer of security to your account login — highly recommended for all members.

While casabet takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% foolproof. In the event of a data security breach affecting member information, casabet will notify the affected members and relevant authorities within the timeframe required under Malaysia's data protection laws.

5 Cookies and Tracking Technologies

Casabet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the casabet website. The following are the types of cookies we use:

  • Essential Cookies: Required for the core functionality of the casabet platform, including login session management and security. These cookies cannot be disabled without affecting the platform's basic functionality.
  • Preference Cookies: Saves your preferences such as language (Bahasa Melayu), display settings, and game preferences so you do not have to reconfigure them every time you log in to casabet.
  • Analytical Cookies: Collects statistical data on how members use the casabet platform — such as the most frequently visited pages and time spent in each section. This data is used in aggregated form for platform improvement and does not identify individuals specifically.
  • Security Cookies: Helping detect suspicious activity and protecting your casabet account from unauthorised access such as brute force attacks or fraudulent attempts.

You can manage your cookie settings through your web browser. Most browsers allow you to delete existing cookies, block new ones, or receive alerts when new cookies are received. Please note, however, that blocking essential cookies may affect the functionality of the casabet platform and prevent you from logging in or completing transactions properly.

6 Your Rights as a casabet User

As a casabet member protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal data casabet holds about you. casabet will provide this information within 21 working days from the date a valid request is received.
  • Right to Rectification: If the personal data casabet holds about you is inaccurate or out of date, you have the right to request a correction. You can also update basic personal information directly from your casabet account control panel.
  • Right to Object to Marketing: You may object to the use of your data for direct marketing purposes at any time by notifying casabet via live chat or email. This will not affect the use of your data for legitimate platform operational purposes.
  • Right to Erasure (under certain conditions): In circumstances where there is no valid legal or operational requirement to retain your data, you may request that casabet delete your personal data. Please note that casabet is legally required to retain financial transaction and account records for the period prescribed by anti-money laundering regulations.
  • Right to Withdraw Consent: You may withdraw consent previously given for the processing of your data for specific purposes at any time, without affecting the validity of any processing that took place based on that consent prior to withdrawal.

To exercise any of the rights above, please submit a written request to casabet's privacy team by email at support@casabet.best with the subject line "Personal Data Rights Request". casabet will respond to your request within the timeframe required under Malaysian law.

7 Data Retention & Deletion

Casabet retains members' personal data for as long as their account remains active and for a defined period following account closure, depending on the type of data and the applicable legal or operational requirements:

  • Active Account Data: Retained for as long as your casabet account remains active and has not been officially closed.
  • Financial Transaction Records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's anti-money laundering (AML) legal requirements and applicable accounting standards.
  • Support Communication Logs: Retained for 3 years for complaint reference and service improvement purposes.
  • Aggregated Analytics Data: Platform usage data in aggregated, non-personally identifiable form is retained indefinitely for trend analysis and the ongoing improvement of casabet's products.

Once the relevant retention period has expired, casabet will delete or anonymise personal data securely so that it cannot be recovered or re-identified. The data deletion process follows strict security procedures to ensure no data is recoverable after deletion.

If you voluntarily close your casabet account, casabet is still required under Malaysian law to retain your financial transaction records for the prescribed period. This is a regulatory requirement outside of casabet's control.

8 Changes to This Privacy Policy

Casabet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements in how we protect member privacy. Any changes will be published on this page with a clear update date.

For material changes — that is, changes that significantly affect how your data is used — casabet will notify members via email or in-platform notification before the changes take effect. This gives you the opportunity to review the changes and, if necessary, make decisions about your account before the new policy applies.

Continued use of the casabet platform after a revised Privacy Policy has been published will be considered acceptance of the changes. If you do not agree with any part of the updated Privacy Policy, you may close your casabet account and withdraw any eligible remaining balance. For any questions about this Privacy Policy, please contact us at support@casabet.best.

Your Rights as a casabet Member

Casabet recognises and respects your rights regarding personal data in accordance with the Malaysian PDPA.

Right of Access

Request a copy of your data

Right to Amendment

Correct Inaccurate Data

Right to Erasure

Request data deletion

Right to Object

Object to direct marketing

Withdraw

Withdraw consent

Contact Us

Support@casabet.best

Summary of Data Collected & Its Purpose

A quick overview of the types of data collected, their purposes, and retention periods at casabet.

Data Type Primary Purpose Retention Period
Name & Date of Birth Identity & age verification Duration of active account + 7 years
Email & Phone No. Communication & account security For the lifetime of the active account
Payment Information Deposits & withdrawals RM 7 years (AML requirement)
Transaction History Financial records & compliance Minimum 7 years
Game History Security & Support 3 years
Communication Logs Customer Support 3 years
Cookie / Analytics Data Platform improvement Aggregated, no time limit

Further Information on Privacy

Resources and tools related to the privacy and security of your casabet account.

Casabet Terms & Conditions

Read the full Terms & Conditions to understand your rights and responsibilities as a casabet member, including account and payment policies. Read now →

Responsible Gaming

Casabet provides self-control tools to support healthy gameplay. Learn about deposit limits, time limits, and self-exclusion options. Learn more →

Frequently Asked Questions (FAQ)

Answers to the questions casabet members ask most often about accounts, privacy, payments, and games. View FAQ →

Contact the Privacy Team

For any enquiries regarding this Privacy Policy or to exercise your personal data rights, contact us at support@casabet.best with the subject line "Data Privacy".

Why Data Privacy Matters to Casabet and Its Members

In today's digital world, personal data has become one of the most valuable — and most vulnerable — assets. Malaysians are increasingly aware of the importance of protecting their personal information online, and casabet fully supports this awareness. We believe that member trust is a more valuable asset than any short-term gain that could be made through unethical use of data.

When you register a casabet account and deposit funds via Touch 'n Go eWallet, GrabPay, or DuitNow, you are entrusting us with not only your money but also your personal information. We take that trust seriously. Every data-related decision at casabet — from how we store passwords to how long we retain transaction records — is made with member protection as the top priority.

One of the things we take pride in is the "minimum data" approach we practise at casabet — meaning we only collect data that is strictly necessary to deliver our services. We do not gather additional data "just in case" or for unrelated future analysis. Every field of information you provide when registering or using casabet has a clear and specific purpose.

Casabet and Compliance with Malaysia's PDPA

The Personal Data Protection Act 2010 (PDPA) is Malaysian legislation that governs how organisations collect, store, and use individuals' personal data. casabet operates in full compliance with the PDPA's principles, including the Notice and Choice Principle (you are informed about data collection and can make choices), the Disclosure Principle (we only disclose data for stated purposes), the Security Principle (we protect data from threats), the Data Integrity Principle (we ensure stored data is accurate), and the Access Principle (you can access and correct your data).

PDPA compliance is more than a legal obligation for casabet — it is part of our commitment to Malaysian members to operate as a responsible and trustworthy entity. We stay current with data protection developments in Malaysia and will update our data handling practices in line with any relevant legislative changes.

Payment Security – Multi-Layered Protection at Casabet

When you deposit RM100 or more via Touch 'n Go eWallet into your casabet account, or withdraw winnings via DuitNow, that transaction passes through multiple layers of protection. First, the connection between your app or browser and casabet's servers is fully encrypted. Second, your payment information is processed through a payment gateway that meets the stringent PCI DSS (Payment Card Industry Data Security Standard) security standards. Third, casabet never stores your full eWallet account details or FPX information in our systems — only the reference information needed to identify your payment method.

This means that even in the highly unlikely scenario of a casabet security breach, your sensitive financial information would not be exposed, as it is never stored in full within our systems. This is the principle of "data minimization" in action — protecting you by not collecting what does not need to be collected.

Best Practices for Protecting Your casabet Account Privacy

While casabet takes all reasonable steps to protect your data on our end, account security is a shared responsibility. Here are some best practices casabet recommends to all Malaysian members: use a unique, strong password that you don't use for any other account; enable two-factor authentication (2FA) in your casabet account settings; never share your login credentials with anyone, including family members; always log out of your casabet account when using a shared device; and keep your device's security software up to date. If you suspect your casabet account has been accessed without authorisation, contact our support team at support@casabet.best immediately so we can freeze the account and investigate.

FAQ – casabet Privacy Policy

The most frequently asked questions about privacy and data protection at casabet.

No. casabet has never and will never sell, rent, or commercialise members' personal data to any third party for marketing purposes. Your data is used solely for the operation of the casabet platform, legal compliance, and the provision of services to you. The only data sharing that takes place is with authorised payment providers (such as Touch 'n Go and GrabPay) to process your transactions, and even then only the minimum necessary information is involved.

casabet does not store your full eWallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX information in our systems. All payment transactions are processed directly through third-party secure payment gateways that comply with PCI DSS security standards. The connection between your device and casabet's systems, as well as our payment providers, is protected by 256-bit SSL encryption. This means your sensitive financial information cannot be intercepted during transmission and is not stored in casabet's systems where it could be exposed to risk.

Yes, under certain circumstances you can request the deletion of your personal data. However, please note that casabet is required by Malaysian law to retain financial transaction records for a minimum of 7 years in accordance with anti-money laundering (AML) requirements. This means that even if you close your account and request data deletion, your financial transaction records cannot be deleted within that period. Other data not subject to legal obligations will be deleted upon your request. Submit a written request to support@casabet.best with the subject line "Data Deletion Request".

casabet only discloses member data to authorities when presented with a valid court order, an official request from a Malaysian law enforcement agency, or an applicable statutory reporting obligation such as those under anti-money laundering laws. casabet does not voluntarily share member data with any government body without a clear legal basis. Where such disclosure occurs, we will endeavour to notify the affected member unless prohibited by law.

You can opt out of receiving promotional emails and marketing offers from casabet in several ways: click the "Unsubscribe" link at the bottom of any casabet promotional email; log in to your casabet account and update your notification preferences under your profile settings; or contact the casabet support team via live chat or email at support@casabet.best to request removal from the marketing mailing list. Please note that opting out of marketing emails will not stop important transactional emails related to your account, such as deposit confirmations or security alerts, as these are essential service communications.

In the highly unlikely scenario that casabet ceases operations, we are committed to notifying all members well in advance. In such a case, all member account balances will be refunded in full. Regarding personal data, any transfer to another entity will fully comply with Malaysia's PDPA requirements, and you will be informed and given the right to object to the transfer. Data not required for legal obligations will be securely deleted.
Related Documents – Read Alongside This Privacy Policy

This Privacy Policy forms part of casabet's comprehensive user protection framework. For the full picture, please also read Terms & Conditions which sets out the rules governing use of the platform, and Responsible Gaming which describes the self-control tools we provide. Together, these three documents form casabet's complete commitment to every Malaysian member.

Play with Peace of Mind – Your Data is Safe at Casabet

Over 500,000 Malaysian members have trusted casabet with their data and funds. Register now and enjoy a safe, fair, and fully protected online casino and Sports Betting experience.

SSL 256-bit Encryption Data Not Sold Malaysia PDPA Compliance 24/7 Support in BM
Bahasa Melayu