Privacy Policy — Sayangbet

This Privacy Policy ("Policy") is issued by Sayangbet ("we", "us", "our", "the Platform"), the operator of the online gaming and sports betting platform accessible at sayangbet.cam. It applies to all personal data collected from users ("you", "User", "Player") who access or register on the Platform.

Sayangbet is committed to protecting the privacy and security of your personal information. We process personal data in accordance with applicable international data protection standards. This Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you hold in relation to your data.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and Sayangbet. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For users of the Sayangbet Platform, the Data Controller is Sayangbet.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under contractual instruction. Examples include payment processors, KYC verification providers, and cloud hosting services.
• "KYC" (Know Your Customer) — The regulatory identity verification process required to confirm a user's identity, age, and source of funds before processing withdrawals or at any point required by applicable law.
• "Cookies" — Small text files placed on your device by the Platform to store session information, preferences, and anonymised analytics data.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of your personal data for a stated purpose.

Sayangbet is the Data Controller responsible for the personal data collected through the sayangbet.cam Platform. As Data Controller, Sayangbet determines what personal data is collected, the purposes for which it is processed, and the measures in place to protect it.

For data-related enquiries, requests, or complaints, you may contact our Data Protection team using the details provided in Section 16 of this Policy. We aim to respond to all data-related requests within 30 calendar days of receipt.

Sayangbet collects personal data through several channels: directly from you when you register and use the Platform, automatically through your device and browser interactions, and from trusted third-party verification providers. The categories of data we collect are detailed below:

Sayangbet does not collect special categories of personal data (e.g., health data, biometric data for identification, racial or ethnic origin, political opinions, or religious beliefs) except where strictly required by applicable law, in which case explicit consent will be sought separately.

Sayangbet processes personal data only where a valid lawful basis exists under applicable data protection law. The lawful bases we rely upon are:

1. Contractual necessity: Processing required to perform the contract between you and Sayangbet — including account creation, gameplay, payment processing, and withdrawal handling.
2. Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC obligations, and fraud prevention measures.
3. Legitimate interests: Processing carried out in pursuit of Sayangbet's legitimate business interests where those interests are not overridden by your rights — including platform security monitoring, fraud detection, product improvement, and responsible gambling programme operation.
4. Consent: Processing based on your freely given, informed, and specific consent — principally in relation to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Sayangbet uses your personal data for the following purposes:

• Account management: Creating, maintaining, and managing your registered account, including authentication, security, and profile updates.
• Service delivery: Providing access to games, betting markets, and all platform features. Processing your bets, deposits, and withdrawal requests.
• Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years for all gambling activities on the Platform.
• Payment processing: Facilitating deposits and withdrawals through Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks.
• Fraud prevention and security: Detecting, preventing, and investigating fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
• Responsible gambling: Monitoring account activity to identify signs of problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and providing access to responsible gambling tools.
• Customer support: Responding to your enquiries, resolving account disputes, and delivering assistance through live chat and email.
• Marketing (with consent): Sending promotional communications about bonuses, new games, and Sayangbet updates via email or SMS — only where you have opted in to receive such communications. You may opt out at any time.
• Legal compliance: Meeting our obligations under applicable anti-money laundering, sanctions screening, and other regulatory requirements.
• Platform improvement: Analysing aggregated usage data to improve game performance, user experience, and platform reliability.

Given the nature of the Sayangbet Platform, the handling of payment data and identity verification documents requires particular care. All financial transactions are processed through licensed third-party payment providers. Sayangbet does not store full bank account numbers or e-wallet credentials on its own servers — payment data is tokenised by the relevant payment processor.

KYC verification is mandatory for all withdrawal requests and may be triggered at any point where Sayangbet is required to verify your identity under its anti-money laundering obligations. KYC documents submitted through the Platform are:

• Transmitted securely using TLS encryption to our licensed KYC verification service provider.
• Reviewed by authorised personnel only, within a strictly controlled access environment.
• Retained for the period required by applicable AML regulations, typically a minimum of five years from the date of account closure.
• Never used for any purpose other than identity and age verification and AML compliance.

Sayangbet does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Service providers (Data Processors): Trusted third-party providers contracted to deliver specific services on Sayangbet's behalf — including KYC verification providers, payment processors (handling DuitNow, FPX, Touch 'n Go eWallet, and bank transfers), cloud infrastructure providers, and customer support platform operators. All Data Processors are bound by strict data processing agreements.
• Licensed game studios: Where gameplay involves real-time data exchange with licensed third-party game providers, the minimum technical data required for game function (session token, bet amount, game result) is transmitted. No identity data is shared with game studios.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory demand — including disclosures to financial intelligence units in connection with anti-money laundering investigations.
• Fraud prevention networks: Where necessary to prevent, detect, or investigate fraud — information may be shared with industry fraud prevention services on a strictly need-to-know basis.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of Sayangbet's business, your personal data may be transferred to the acquiring entity subject to equivalent data protection commitments.

In all cases, Sayangbet applies data minimisation principles — sharing only the minimum personal data necessary to fulfil the specific purpose, and only with parties bound by appropriate data protection obligations.

Sayangbet operates as an internationally licensed platform. Your personal data may be processed and stored on servers located outside Malaysia. Where personal data is transferred internationally, Sayangbet implements appropriate safeguards to ensure that your data receives a level of protection consistent with recognised international data protection standards.

Such safeguards may include contractual data protection clauses incorporated into agreements with Data Processors and sub-processors, data processing addenda aligned with international adequacy standards, and technical security controls including encryption during transfer and at rest.

Sayangbet retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (which can no longer be used to identify you) may be retained indefinitely for statistical and platform improvement purposes.

Sayangbet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption at rest: All personal data stored on Sayangbet servers is encrypted using AES-256, an industry-standard symmetric encryption algorithm.
• Encryption in transit: All data transmitted between your device and the Platform is protected by TLS 1.3 protocol, ensuring that information cannot be intercepted in transit.
• Access control: Personal data is accessible only to authorised Sayangbet personnel on a strict need-to-know basis. All internal data access is logged and reviewed.
• Two-factor authentication (2FA): Strongly recommended for all user accounts; mandatory for all internal Sayangbet staff accessing production systems.
• Penetration testing: The Platform undergoes regular independent security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: Sayangbet maintains a documented data breach incident response plan. In the event of a breach affecting your personal data, we will notify affected users within 72 hours of becoming aware of the incident.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

Sayangbet uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver a better, more personalised experience and allow us to analyse how the Platform is used.

The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function correctly — including session management, login authentication, and payment security tokens. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Store your preferences such as language settings, display options, and game view preferences to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how users interact with the Platform — pages visited, session duration, click patterns — to help us improve usability and performance. We do not use analytics cookies to identify individual users.
• Security cookies: Used to detect fraudulent login attempts, bot activity, and other security threats in real time.

Sayangbet does not use third-party advertising cookies or cross-site behavioural tracking technologies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to log in or use certain Platform features.

Subject to applicable law and any overriding legal obligations Sayangbet may be subject to, you hold the following rights with respect to your personal data:

To exercise any of the above rights, please contact our Data Protection team using the details in Section 16. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Complex or multiple requests may require up to 60 days — we will notify you if an extension is needed.

Sayangbet strictly prohibits the use of its Platform by anyone under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step during account registration, and KYC processes are in place to detect and prevent underage access.

If Sayangbet becomes aware that personal data has been collected from a person under the age of 21 without appropriate age verification, the account will be immediately suspended, all balances will be withheld pending investigation, and the data will be deleted in accordance with our data retention procedures.

Sayangbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered users by email or through an in-platform notification at least 14 days before the changes take effect.

The "Effective Date" at the top of this Policy indicates when the current version was last updated. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

For any questions, requests, or concerns regarding this Privacy Policy or Sayangbet's data processing practices, please contact our Data Protection team through the following channels:

We are committed to resolving data privacy concerns promptly and transparently. If you are not satisfied with our response to your complaint or data request, you have the right to escalate your complaint to the applicable data protection supervisory authority in your jurisdiction.

For responsible gambling support resources, including self-exclusion requests and deposit limit changes, please visit our Responsible Gambling page. These requests are handled separately from data protection enquiries.