Privacy Policy

This Privacy Policy ("Policy") is issued by 998bet ("the Company", "we", "us", "our"), the operator of the online sports betting and casino platform accessible at https://998bet.lat ("the Platform"). This Policy describes how 998bet collects, processes, stores, shares, and protects the personal data of individuals who register an account, place bets, or otherwise interact with the Platform ("you", "User", "Player").

By accessing or using the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy is to be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.

For the purposes of this Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier, or one or more factors specific to their identity.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means 998bet, which determines the purposes and means of processing personal data on the Platform.
• "Data Processor" means any third party that processes personal data on behalf of 998bet under a contractual agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by a User to the processing of their personal data.
• "KYC" means Know Your Customer — the identity and document verification process required for regulatory compliance.
• "AML" means Anti-Money Laundering — regulatory obligations aimed at detecting and preventing financial crime.
• "Cookie" means a small data file stored on a User's device by the Platform browser session for functional, analytical, or preference purposes.

998bet collects personal data across several categories, depending on how you interact with the Platform. The following table outlines the categories of data collected and the context in which they arise:

We do not knowingly collect sensitive personal data beyond what is required for KYC and AML compliance purposes. Where such data is unavoidably collected (for example, where an identity document contains health or biometric data), it is processed solely for the purpose of identity verification and is not used for any other purpose.

998bet collects personal data through the following channels:

4.1 Directly From You

• When you create a 998bet account and complete the registration form.
• When you submit KYC verification documents through the Platform portal.
• When you make a deposit or withdrawal request using a payment method such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, or cryptocurrency channels.
• When you contact our customer support team via live chat or email.
• When you respond to surveys, promotions, or opt-in marketing communications.

4.2 Automatically Through Technology

• Through cookies, web beacons, and similar tracking technologies when you browse the Platform.
• Through server logs that automatically record your IP address, device information, and session data each time you access the Platform.
• Through our fraud detection systems that monitor for unusual account activity patterns.

4.3 From Third Parties

• From identity verification service providers engaged to assist with KYC processes.
• From payment processors and Malaysian banking partners when confirming transaction status.
• From publicly available sources and regulatory watchlists used for AML screening.

998bet processes your personal data only for defined, legitimate purposes. The specific purposes for which we use your data are as follows:

• Account Management: To create, maintain, and administer your 998bet Account, including authentication and security management.
• Service Delivery: To enable you to place bets, access casino games, process deposits and withdrawals in MYR, and use all Platform features.
• Identity Verification (KYC): To verify your identity and eligibility in compliance with applicable regulatory requirements, including confirming that you are aged 21 or above.
• Financial Transaction Processing: To process deposits and withdrawals via supported Malaysian payment methods and to maintain accurate transaction records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats.
• Regulatory Compliance: To comply with legal obligations, regulatory requirements, and lawful requests from competent authorities.
• Responsible Gambling: To monitor betting patterns for indicators of problem gambling and to apply player-protection tools where required or requested.
• Customer Support: To respond to enquiries, manage complaints, and resolve disputes arising from your use of the Platform.
• Platform Improvement: To analyse usage data and improve the performance, stability, and user experience of the Platform.
• Marketing (Consent-Based Only): To send promotional communications, including information about bonuses, new games, and special events — only where you have given express consent to receive such communications.

Each instance of personal data processing at 998bet is grounded in one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration — including account management, bet processing, and payment handling.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulatory requirements, tax reporting obligations, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out in 998bet's legitimate business interests — such as fraud prevention, platform security, and service analytics — where those interests are not overridden by your rights.
• Consent: Processing carried out on the basis of your explicit consent — specifically, the sending of direct marketing communications. You may withdraw consent at any time by updating your account notification preferences or contacting our support team.

998bet does not sell, rent, or trade personal data. We may share your data with trusted third parties only in the following circumstances and strictly on a need-to-know basis:

7.1 Service Providers

We engage third-party service providers to support Platform operations, including identity verification providers, payment processors (including Malaysian e-wallet operators and banking partners such as Maybank, CIMB, Public Bank, Hong Leong, and RHB), IT infrastructure providers, data analytics vendors, and customer support platform operators. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to 998bet.

7.2 Regulatory and Law Enforcement Authorities

We may be required to disclose personal data to competent regulatory bodies, law enforcement agencies, or other governmental authorities where required by law, court order, or binding regulatory instruction. Such disclosures will be made only to the extent strictly required.

7.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of 998bet's assets, personal data may be transferred to the relevant successor entity. Affected Players will be notified of any such transfer and the continued applicability of this Policy.

Given the international nature of 998bet's operations, your personal data may be transferred to, stored in, or processed in countries outside of Malaysia. Such transfers may be necessary for the operation of the Platform, the provision of payment processing services, or the fulfilment of regulatory obligations.

Where personal data is transferred internationally, 998bet takes appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy and applicable data protection standards. These safeguards may include the use of standard contractual clauses, data processing agreements with certified third parties, or transfers to jurisdictions that provide an adequate level of data protection.

The 998bet Platform uses cookies and similar tracking technologies to support Platform functionality, analyse usage patterns, and enhance your experience.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may impair your ability to use certain Platform features. We do not use third-party advertising or behavioural targeting cookies.

998bet retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Accounts: Personal data associated with an active Account is retained for the duration of the account relationship and for a minimum period thereafter as required by applicable AML and regulatory frameworks.
• Closed Accounts: Following Account closure, personal data is retained for a period of at least five (5) years to comply with AML record-keeping requirements, unless a longer period is required by law.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the account relationship, or longer where required by applicable financial regulation.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years for AML compliance and tax reporting purposes.
• Support Communications: Customer support records are retained for a minimum of two (2) years following the resolution of the relevant enquiry or dispute.
• Marketing Data: Where consent-based marketing data is no longer required, it is deleted or anonymised within 90 days of consent withdrawal.

On expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised such that it can no longer be attributed to any identifiable individual.

Subject to applicable law and our regulatory obligations, you hold the following rights in respect of your personal data held by 998bet. Requests may be submitted via live chat or by email to [email protected] and will be addressed within 30 calendar days.

Please note that certain rights are subject to exemptions under applicable data protection and financial regulation law. For example, we may be unable to erase data that we are required to retain under AML or KYC obligations. Where we are unable to fulfil a request in full, we will explain the reason in our response.

998bet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes, but is not limited to:

• Transport Layer Encryption: All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Every page of the Platform is served exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data stored on our servers — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within 998bet is restricted on a strict need-to-know basis. Internal access is governed by role-based permission systems and multi-factor authentication for privileged access.
• Penetration Testing: Our infrastructure undergoes regular security assessments and penetration testing by independent security specialists.
• Fraud Monitoring: Automated systems monitor Platform activity for indicators of fraud, account takeover, and suspicious behavioural patterns in real time.
• Incident Response: We maintain a documented security incident response plan. In the event of a data breach that is likely to result in a risk to your rights, we will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

The 998bet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the KYC process, and accounts found to be operated by individuals below the minimum age will be immediately closed and any associated funds frozen pending investigation.

If you believe that a person under the age of 21 has registered an account with 998bet, please contact us immediately at [email protected]. We will take prompt action to verify the account holder's age and, where required, close the account and take appropriate protective measures.

998bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Where amendments are material, we will notify registered Players through a prominent Platform notice or by email to your registered address prior to the changes taking effect.

The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to remain informed of how 998bet handles your personal data. Continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 998bet, please contact us through the following channels. We are committed to responding to all data-related enquiries promptly and transparently.

• Live Chat: Available 24/7 on the Platform. Typical response time under 5 minutes (GMT+8, Malaysian time). Suitable for general privacy questions and non-sensitive data requests.
• Email: [email protected] — for formal data rights requests, complaints, and sensitive data matters. We aim to respond within 30 calendar days of receipt.

For related policies and further information about your rights and obligations as a 998bet player, please review:

• Terms & Conditions — your rights and obligations on the Platform.
• Responsible Gambling — player-protection tools, self-exclusion, and support resources.
• FAQ — answers to the most frequently asked questions from Malaysian players.