Desabet Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which Desabet ("we", "us", "the Company", or "Desabet") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "the User", or "the Player") who access or use the Desabet website at desabet.cam and all associated services (collectively, "the Platform").

Desabet takes its obligations with respect to personal data seriously. We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection legislation. This Policy has been prepared to give you a clear and complete understanding of our data practices so that you can make informed decisions about your engagement with the Platform.

By accessing the Platform, registering an account, or using any Desabet service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the practices described herein, you should discontinue use of the Platform and contact our support team to close your account and request data deletion.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including but not limited to names, identification numbers, contact details, financial information, location data, and online identifiers.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Desabet is the Data Controller in respect of personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, under written instructions and subject to data processing agreements.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the User's wishes by which they signify agreement to the processing of their personal data.
• "KYC Data" — identity and address verification documents provided by the User in compliance with know-your-customer obligations, including government-issued identification documents and proof of address.
• "Cookies" — small text files placed on your device by the Platform for the purpose of storing session information, user preferences, analytics data, and other functional identifiers.

Desabet collects personal data from you through the following means and in the following categories:

3.1 Data You Provide Directly

• Full legal name, date of birth, and gender (collected at registration and KYC);
• Email address and Malaysian mobile phone number;
• Residential address (city, postcode, state — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam);
• Government-issued identification documents (MyKad, passport, or driver's licence number and image) for KYC purposes;
• Financial information including the name and account details of your payment method (e.g., Touch 'n Go eWallet account, Boost account, GrabPay account, Maybank account number, CIMB account number, Public Bank or Hong Leong account details used for FPX/DuitNow transactions);
• Username, password (stored in hashed form — we never store plain-text passwords), and account security settings;
• Communications you submit to our support team via live chat or email.

3.2 Data Collected Automatically

• IP address and approximate geographic location;
• Device type, operating system, browser type and version;
• Session duration, pages visited, features accessed, and interaction patterns on the Platform;
• Referring URL and exit URL;
• Betting activity, transaction history, deposit and withdrawal records, game play logs.

3.3 Data We Receive from Third Parties

• Identity verification results from KYC service providers;
• Transaction confirmation data from payment processors including FPX, DuitNow, and e-wallet operators;
• Fraud and risk screening results from anti-fraud service providers;
• Responsible gambling self-exclusion data from recognised problem gambling registries where applicable.

Desabet processes your personal data for the following purposes:

• Account Creation and Management: To register your account, authenticate your identity, manage your account settings, and provide you with access to Platform services;
• Identity Verification (KYC): To verify your age (confirming you are 21 or above), identity, and address in compliance with our anti-money laundering and responsible gambling obligations;
• Payment Processing: To process deposits and withdrawals via your nominated Malaysian payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong — and to maintain accurate financial records;
• Service Delivery: To provide access to casino games, live dealer tables, sports betting markets (including Liga Super Malaysia, EPL, UFC, and international events), and all other Platform features;
• Responsible Gambling: To monitor your gaming activity for indicators of problem gambling behaviour, administer self-exclusion and deposit limit tools, and comply with responsible gambling obligations;
• Fraud Prevention and Security: To detect, prevent, and investigate fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct;
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Communications: To send you transactional notifications (account alerts, deposit confirmations, withdrawal status updates) and, where you have provided consent, promotional communications about bonuses and offers;
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and maintain records as required by applicable legislation.

Desabet relies on the following legal bases for processing your personal data:

• Contractual Necessity: The majority of data processing is necessary to perform the contract between you and Desabet — i.e., to provide the services you have registered for. This includes account management, payment processing, and KYC;
• Legal Obligation: Certain processing is required to comply with legal obligations including anti-money laundering regulations, age verification requirements, and record-keeping obligations imposed by applicable law;
• Legitimate Interests: Desabet processes certain data on the basis of its legitimate interests, including fraud prevention, platform security, and improving the quality of our services — provided that such interests are not overridden by your fundamental rights and freedoms;
• Consent: Where we seek to send you marketing communications or deploy non-essential cookies, we will do so only on the basis of your explicit, freely given consent, which you may withdraw at any time without penalty.

Desabet does not sell, rent, or trade your personal data to any third party for marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: Malaysian payment processors, e-wallet operators (including Touch 'n Go, Boost, GrabPay), and banking partners (Maybank, CIMB, Public Bank, Hong Leong) through FPX and DuitNow, solely to the extent necessary to process your transactions;
• Identity Verification Providers: Third-party KYC and identity verification services engaged to assist with age verification and document authentication during the onboarding and compliance process;
• Fraud Prevention and Risk Management Providers: Third-party fraud screening services that assist Desabet in identifying and preventing fraudulent account activity, money laundering, and other financial crime;
• Game Content Providers: Where games are provided by third-party software providers integrated into the Platform, limited game activity and session data may be shared with those providers to the extent technically necessary for game operation;
• Regulatory and Law Enforcement Authorities: We may disclose personal data to regulators, law enforcement agencies, courts, or government bodies where we are legally required to do so or where disclosure is necessary to protect the rights or safety of individuals;
• Professional Advisors: Our legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

Desabet retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Accounts: Personal data is retained throughout the active lifetime of your Desabet account;
• Closed Accounts: Following account closure, transaction records, KYC documentation, and account activity logs are retained for a minimum of five (5) years in compliance with applicable anti-money laundering and financial record-keeping requirements;
• Support Communications: Live chat transcripts and email correspondence are retained for a period of two (2) years from the date of the interaction for quality assurance and dispute resolution purposes;
• Technical Logs: Server logs and technical access records are retained for a period of twelve (12) months for security and fraud investigation purposes;
• Marketing Consent Records: Records of your marketing communication preferences are retained for the duration of your account and for a period of two (2) years following account closure.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents re-identification. Anonymised or aggregated data that cannot be attributed to any individual may be retained indefinitely for statistical and analytical purposes.

Desabet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS encryption;
• Encryption at Rest: Sensitive personal data and financial information stored in our databases is encrypted using industry-standard encryption protocols;
• Access Controls: Access to personal data is restricted to authorised personnel who require it to perform their job functions, enforced through role-based access control and multi-factor authentication;
• Password Security: Passwords are never stored in plain text — all passwords are hashed using a one-way cryptographic function before storage;
• Penetration Testing and Security Audits: Our platform infrastructure undergoes regular security assessments, vulnerability scans, and penetration tests by qualified information security professionals;
• Incident Response: Desabet maintains a documented data breach incident response plan. In the event of a breach that poses a material risk to your rights, you will be notified promptly.

The Desabet Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. This section explains what cookies we use and why.

What Are Cookies? Cookies are small text files placed on your device by the Platform when you visit. They allow the Platform to remember your preferences, maintain your session, and collect analytical data about how the Platform is used.

You may manage your cookie preferences through your browser settings at any time. Note that disabling essential or security cookies will impair the functionality of the Platform and may prevent you from logging in or processing transactions. For mobile users accessing the Platform on Android or iOS devices common in Malaysia, cookie management settings are available within the browser application settings.

As a data subject, you hold a number of rights with respect to the personal data Desabet holds about you. These rights may be exercised by submitting a written request to our support team. We will respond to all valid data rights requests within thirty (30) calendar days of receipt.

The Desabet Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will immediately close the associated account and securely delete all data collected in connection with that account.

Parents or guardians who believe their child may have accessed or registered on the Platform without authorisation are urged to contact our support team immediately so that the matter can be investigated and resolved promptly.

In certain circumstances, your personal data may be transferred to, stored in, or processed by recipients located outside of Malaysia. This may occur where, for example, our KYC verification provider, fraud prevention service, or cloud infrastructure provider operates servers in another jurisdiction.

Where such transfers occur, Desabet takes appropriate measures to ensure that your personal data continues to receive an adequate level of protection consistent with this Privacy Policy. Such measures include contractual data processing agreements incorporating standard data protection clauses, and ensuring that any recipient jurisdiction provides an adequate level of data protection.

By using the Desabet Platform, you acknowledge that your personal data may be transferred internationally as described in this clause.

The Desabet Platform may contain links to or integrations with third-party services, including payment providers, game software platforms, and identity verification services. This Privacy Policy applies solely to data collected and processed by Desabet directly. It does not apply to the data practices of any third-party service provider, operator, or website.

When you interact with a third-party service accessed through the Platform — for example, when you authorise a DuitNow or Touch 'n Go transaction — that service is governed by its own privacy policy and terms of use. Desabet is not responsible for the privacy practices of third-party services and encourages you to review their respective privacy policies before engaging with them.

Desabet reserves the right to update or modify this Privacy Policy at any time. Changes will be effective from the date they are published on the Platform, and the "Last Updated" date at the top of this document will be revised accordingly.

Where a proposed amendment materially affects your rights or our data processing practices, Desabet will endeavour to provide you with advance notice via email to your registered address, or via a prominent notice on the Platform, prior to the change taking effect.

Your continued use of the Platform following the publication of any amendment to this Policy constitutes your acknowledgement of the updated terms. If you have concerns about any proposed amendment, please contact our support team before the effective date.

If you have any questions, concerns, or complaints about this Privacy Policy or the manner in which Desabet processes your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, including Malaysian public holidays. Average response time: under 90 seconds.
• Email: Contact us at the following address (plain text — not a link): [email protected] — Email response time: within 4–6 hours.

For formal privacy-related requests — including data access requests, rectification requests, or complaints regarding our data processing practices — please submit your request in writing by email with the subject heading "Privacy Request — Desabet" and include your full name and registered email address. We will acknowledge receipt within 3 business days and respond substantively within 30 calendar days.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.