Privacy Policy Serubet – Protection of Your Personal Data

Serubet collects several categories of personal information when you use our platform. This data is gathered for clear and legitimate purposes — to provide you with the best possible service.

1.1 Information You Provide Directly

When you register a Serubet account or use our services, you provide us with the following information directly:

• Full name — as it appears on your Malaysian MyKad or passport
• Date of birth — for age verification (18 years and above)
• MyKad or passport number — for identity verification (KYC) purposes
• Email address — for account communications and promotions
• Malaysian phone number — for two-factor authentication and communications
• Residential address — for legal compliance requirements
• Bank account or eWallet information — for processing deposits and withdrawals
• Password — stored in encrypted form, unreadable by any of our staff

1.2 Automatically Collected Information

When you use the Serubet platform, our systems automatically record certain technical information for security, service improvement and usage analysis purposes:

• Your device's IP address and general location
• Web browser type and version
• Your device's operating system
• Pages visited and time spent on each page
• Betting history and gaming activity
• Login and logout session data
• Deposit and withdrawal transaction information

1.3 Payment Information

When you make a deposit or withdrawal on Serubet using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), we record the transaction details necessary to process your payment and maintain accurate financial records. However, we do not store full credit card numbers or sensitive payment details — payment processing is handled by certified payment providers.

Serubet uses your personal data for legitimate and transparent purposes only. We do not use your data for anything unrelated to the services you have requested from us.

2.1 Marketing Communications

Serubet will only send you marketing communications if you have consented to receive them during registration or subsequently through your account settings. You may unsubscribe from marketing communications at any time via the "unsubscribe" link in our emails or by contacting our CS team.

Serubet does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations where we may need to share your data:

3.1 Third-Party Service Providers

We share the necessary data with service providers we use to operate the Serubet platform, including:

• Payment providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, and relevant payment processing parties
• Game providers — a licensed casino gaming company offering slots, live casino and more
• Identity verification services — for KYC and age verification purposes
• Cloud service providers — for secure data storage and processing
• Analytics services — to understand platform usage and drive improvements

All third-party providers are bound by strict confidentiality agreements and may only use your data for the specific purposes agreed upon with Serubet.

3.2 Legal Requirements

Serubet may be required to disclose your data to government authorities or law enforcement when mandated by law, court order, or for the purpose of preventing financial crime and money laundering.

Serubet implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, or destruction. The security of your data is our highest priority.

4.1 Technical Measures

• 256-bit SSL Encryption — all communications between your device and Serubet's servers are encrypted to the same standard used by financial institutions
• Secure password storage — passwords are stored using modern cryptographic hashing algorithms, never in plain text
• Two-factor authentication (2FA) — available on all accounts as an added layer of protection
• Monitoring of suspicious activity — our AI system automatically detects and blocks unauthorised access attempts
• Data Segregation — sensitive data is stored separately and accessible only by authorised personnel
• Regular security audits — our platform undergoes periodic penetration testing

4.2 Steps in the Event of a Data Breach

In the unlikely event of a data breach affecting your personal information, Serubet is committed to notifying affected users within the timeframe required by applicable law and will take immediate action to contain and resolve the incident.

Serubet uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

• Essential Cookies — required for core platform functions such as login and user sessions. Cannot be disabled.
• Performance Cookies — helps us understand how users interact with the platform in order to improve our services.
• Functional Cookies — stores your preferences such as interface language for a better user experience.
• Analytics Cookies — collects non-personally identifiable usage data for platform analytics and improvement.

5.2 Cookie Controls

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Serubet platform. For guidance on managing cookies in major browsers, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the international data protection standards we adhere to, you have the following rights regarding your personal data held by Serubet:

Serubet retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy or as required by applicable law.

7.1 Standard Retention Period

• Active account data — for as long as your Serubet account remains active
• Financial transaction data — minimum 7 years in accordance with Malaysian financial legal requirements
• Security activity logs — 2 years for investigation purposes if required
• Customer support communication records — 3 years from the date of interaction
• KYC (identity verification) data — minimum 5 years from the date of account closure

7.2 After Account Closure

When you close your Serubet account, we will delete or anonymise your personal data that is no longer required within a reasonable timeframe. However, certain data may need to be retained longer to fulfil legal obligations, resolve disputes, or enforce our agreements.

Serubet reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. You will be notified of any material changes via your registered email or in-platform notification at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy page periodically. The "Updated" date at the top of this page indicates when the last changes were made. Your continued use of the Serubet platform after any changes take effect will be considered your acceptance of the updated terms.

If you have any questions, requests, or concerns regarding this Privacy Policy or how Serubet handles your personal data, please contact us through the following channels:

• Email: privacy@serubet.ws
• General Support: support@serubet.ws
• Live Chat: 24/7 directly via the Serubet platform
• Response Time: Under 72 hours for privacy-related enquiries

Our Malay-speaking team will endeavour to respond to and resolve every privacy-related enquiry in a transparent, fair and timely manner.