399bet Privacy Policy — Data Protection for Malaysian Players

399bet takes the privacy of Malaysian members very seriously. In today's digital landscape where data breaches are increasingly common, we believe every player deserves to know exactly what happens to their information when they register and play on our platform.

This Privacy Policy applies to all users of the 399bet platform — including visitors browsing without an account, registered members, and VIP members — across all access channels: website, mobile app, and any other interfaces provided by 399bet. It also covers all our products, including slots, live casino, football and badminton betting, and e-sports betting.

In the event of any conflict between this Privacy Policy and any applicable local data protection laws, the legal requirements shall take precedence. 399bet reserves the right to update this Policy from time to time — the latest version will always be available on this page with a clear update date.

399bet only collects data that is strictly necessary to provide platform services, meet legal compliance requirements, and improve the user experience. Below are the categories of data we collect and the purpose behind each:

Data We Do Not Collect

399bet does not directly collect or store your full credit/debit card numbers, eWallet passwords, or banking PINs. All sensitive payment information is processed directly by certified payment gateways that comply with PCI-DSS security standards. We also do not collect biometric data or real-time location data unless you explicitly grant permission for specific security verification purposes.

Data collected by 399bet is used for the following purposes, and these purposes only, unless you provide additional consent:

• Account Management: Creating and maintaining your member account, processing registration, identity verification, and account recovery.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and managing withdrawals in Malaysian Ringgit (MYR) securely and efficiently.
• Provision of Gaming Services: Grants access to all 399bet products, including slots, Live Casino, Malaysia Super League and EPL Sports Betting, BWF badminton, and MPL Malaysia e-sports.
• Legal Compliance: To fulfil Know Your Customer (KYC) requirements, anti-money laundering (AML) obligations, and applicable regulatory reporting requirements.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-account usage, bonus abuse, and other security threats to the platform and its members.
• Responsible Gaming: Monitoring gaming activity patterns to identify signs of problem gambling and providing assistance through available self-control tools.
• Service Communications: Sending you important account information, transaction confirmations, security updates, and changes to our terms that require your attention.
• Promotional Communications (with consent): Sending you information about bonuses, exclusive offers, and 399bet promotions — only if you have opted in to receive them.
• Platform Improvement: Analysing usage patterns in aggregated, anonymised form to improve platform performance, user interface, and game offerings.

399bet does not sell member personal data to any third party. This is an absolute principle with no exceptions. However, in the course of operating the platform, we may share certain data with the following categories of parties — and only to the extent necessary for specific purposes:

Approved Service Providers

We work with carefully selected third-party service providers to manage specific aspects of the platform's technical operations. These include game providers such as Evolution Gaming, Pragmatic Play, and PG Soft for game content delivery; payment gateway providers that process Touch 'n Go, GrabPay, DuitNow, and FPX transactions; and server infrastructure and cybersecurity providers. All such providers are bound by strict data confidentiality agreements and may only use the data shared with them for the purposes specified in their agreements with 399bet.

Legal Authorities

399bet may be required to disclose members' personal data to government authorities, regulatory bodies, or law enforcement agencies when mandated by Malaysian law or a valid court order. In such cases, we will only disclose the minimum necessary data and will notify you of the disclosure where permitted by law.

In Cases of Confirmed Fraud

Where there is strong evidence of fraudulent activity, money laundering, or other financial crimes, relevant data may be shared with the appropriate authorities or financial institutions involved as part of a lawful investigation.

Protecting member personal data from unauthorised access, breaches, or misuse is a core responsibility of 399bet. We continuously invest in our security infrastructure to keep your data safe:

• Data Encryption in Transit: All communications between your device and 399bet servers are protected by 256-bit SSL/TLS encryption. No sensitive data is transmitted in unencrypted form.
• Encryption of Data at Rest: Sensitive data stored on our servers — including identity information and transaction records — is encrypted using industry-certified encryption algorithms.
• Role-Based Access Controls: 399bet staff can only access member data to the extent required by their specific role. Access to sensitive data is restricted to those who genuinely need it, and every access is audited.
• Real-Time Threat Monitoring: Our security monitoring system operates 24/7 to detect and respond to unauthorised access attempts, activity anomalies, and potential data breaches.
• Regular Security Testing: The 399bet platform undergoes regular independent penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): 2FA is available to all members as an additional layer of protection for your account.

While we take all reasonable steps to protect your data, no digital system can guarantee 100% security at all times. In the unlikely event of a data breach affecting members, 399bet is committed to notifying affected members within the timeframe required by applicable law, along with details of the actions taken and recommended protective measures.

Platform 399bet uses cookies and similar tracking technologies to keep the platform running smoothly and deliver a better user experience. Below are the types of cookies we use:

Strictly Necessary Cookies

These cookies are required for the platform to function properly and cannot be disabled. They include login session cookies that identify you as a verified member, security tokens that prevent CSRF attacks, and language preference settings. Without these cookies, you will not be able to log in or use the platform.

Performance & Analytics Cookies

We use analytics tools to understand how members interact with the platform — which pages are visited most, how long gaming sessions last, and where users encounter difficulties. This data is used in aggregated, anonymised form for platform improvements. You can opt out of this cookie category through our cookie settings.

Functional Cookies

These cookies remember your preferences — such as display language, game display settings, and Live Casino table preferences — so you don't have to reconfigure them each time you log in. Disabling these cookies will not prevent you from using the platform but may reduce convenience.

As a member 399bet As a Malaysia-based member, you have the following rights regarding the personal data we hold about you. All requests relating to these rights can be submitted to our support team via live chat or email at support@399bet-khelo.net:

399bet retains personal data only for as long as it is needed for the purposes set out in this Policy, or as required by applicable law. Our general principle is to minimise retention periods to the shortest duration sufficient to fulfil the processing purpose.

Data Retention Period Guide

• Active account data: Retained for as long as the account is active and for a minimum of 5 years after account closure for financial and legal compliance purposes.
• Financial transaction records (MYR deposits & withdrawals): Retained for a minimum of 7 years from the date of transaction for financial reporting and AML compliance purposes.
• Gaming activity history: Retained for 5 years for compliance, responsible gaming, and dispute resolution purposes.
• Support communication records: Retained for 3 years for service reference and quality improvement purposes.
• Cookie and analytics data: Temporary session data is deleted when the session ends. Analytics data is aggregated and anonymised within 26 months.
• KYC information (identity verification documents): Retained for a minimum of 5 years after the business relationship ends, in line with anti-money laundering legislation requirements.

When data is no longer needed and there is no legal obligation to retain it, 399bet will securely delete or anonymise that data using methods that ensure it cannot be recovered.

In the course of its operations, 399bet may need to transfer member personal data outside Malaysia — for example, to international gaming service providers such as Evolution Gaming, or to server infrastructure located in other countries. Such transfers are carried out only when necessary and with adequate safeguards in place:

• Transfers are only made to countries or entities that offer a level of data protection equivalent to or higher than that required in Malaysia.
• Legally binding data processing agreements are signed with all data recipients outside Malaysia, ensuring 399bet's data protection standards are upheld at every level.
• Transfers to game providers such as Pragmatic Play, PG Soft, and Evolution Gaming are necessary for the technical delivery of game content and represent the minimum required for platform functionality.

Platform 399bet is intended for individuals aged 18 and above only. We do not knowingly collect or process personal data from anyone under the age of 18. This policy is strictly enforced without exception.

All 399bet registration processes require age verification. If we discover that personal data belonging to an individual under the age of 18 has been collected — whether through inaccurate information provided during registration or by other means — we will take the following steps immediately:

• Suspending the relevant account immediately
• Deleting all personal data belonging to that individual from our systems
• Voiding all winnings, bonuses, or credits associated with that account
• Reporting cases to the relevant authorities where required

Parents or guardians who suspect that a minor may have registered a 399bet account without their consent are urged to contact our support team immediately at support@399bet-khelo.net.

If you have any questions or concerns, or wish to exercise any of your data rights as outlined in this Policy, please contact 399bet through the following channels:

• Privacy Email: support@399bet-khelo.net (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 via the 399bet platform — for non-sensitive privacy enquiries
• In-Account Notifications: For privacy preference changes and account-related communications directly

We recommend submitting sensitive privacy enquiries via email to ensure a written record exists and for added security. The 399bet team will respond to all privacy-related enquiries within 14 business days.

This Privacy Policy is a living document — it is updated whenever there are changes to our practices or legal requirements. The effective date of the current version is 1 January 2026. We encourage you to review this page periodically to stay informed about how we protect your privacy.