Privacy Policy
How ivibet Handles Your Data

This Privacy Policy ("Policy") is published by ivibet ("ivibet", "we", "us", "our"), the operator of the online betting platform at https://ivibet.buzz (the "Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or collected about registered users and visitors ("you", "User", "Player") of the Platform.

ivibet is committed to protecting the privacy of its users. We handle all personal data in accordance with applicable data protection legislation and in a manner consistent with the legitimate expectations of our Malaysian player base.

By registering an Account on ivibet or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein. If you do not agree to this Policy, you should discontinue use of the Platform and contact us to request account closure.

The following definitions apply throughout this Policy:

ivibet collects the following categories of Personal Data:

3.1 Registration Data. When you create an Account, we collect: full name, date of birth, email address, preferred username, and account password (stored in encrypted form). This information is required to establish and maintain your Account.

3.2 Identity Verification (KYC) Data. To comply with anti-money laundering regulations and verify that you meet our minimum age requirement of 21 years, we collect: a copy of your government-issued identity document (Malaysian MyKad or passport), proof of address, and in some cases a recent selfie or liveness verification photograph.

3.3 Financial Data. To process deposits and withdrawals, we collect: payment method details (e-wallet identifiers, bank account numbers, or cryptocurrency wallet addresses), transaction amounts, and transaction history. We do not store full credit or debit card numbers where applicable — such data is tokenised by our payment processor.

3.4 Transaction and Wagering Data. We maintain a record of all deposits, withdrawals, bets placed, game sessions, wins, and losses associated with your Account.

3.5 Technical and Device Data. When you access the Platform, we automatically collect: IP address, browser type and version, operating system, device type, screen resolution, time zone, referring URL, and pages visited.

3.6 Communication Data. If you contact our support team via email or live chat, we retain a record of those communications for quality assurance and dispute resolution purposes.

3.7 Responsible Gambling Data. If you use any of our responsible gambling tools — such as deposit limits, session reminders, or self-exclusion — we record those preferences and restrictions to ensure they are applied consistently across your Account.

ivibet collects Personal Data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit, place a bet, contact support, or update your profile settings.
• Automatically — through cookies, server logs, and similar technologies when you access the Platform. See Section 8 for full details on cookies.
• From third-party payment providers — when you initiate a transaction through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or a cryptocurrency network, the relevant provider may share confirmation and transaction data with us.
• From identity verification providers — we use regulated third-party KYC services that may verify your identity against public records, government databases, or document authentication systems.
• From fraud prevention services — we receive signals from third-party fraud screening services to identify and prevent potentially fraudulent activity.

ivibet processes your Personal Data under one or more of the following legal bases:

ivibet uses your Personal Data for the following purposes:

• Account management: Creating, maintaining, and administering your ivibet Account, including authentication and security.
• Payment processing: Facilitating deposits and withdrawals through approved Malaysian payment channels and cryptocurrency networks.
• Identity verification (KYC): Confirming your identity and age (minimum 21 years) before processing withdrawals and in accordance with applicable AML requirements.
• Fraud prevention and security: Monitoring for suspicious activity, investigating potential fraud, and protecting the integrity of the Platform and other Players' Accounts.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Regulatory compliance: Maintaining transaction records and making disclosures required by applicable law, regulatory authorities, or court orders.
• Responsible gambling: Applying and monitoring the account restrictions and self-exclusion preferences you have set, and identifying signs of problem gambling behaviour.
• Platform improvement: Analysing aggregated and anonymised usage data to improve Platform performance, game selection, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and account updates — only where you have provided consent or we have a legitimate interest to do so. You may opt out at any time.

ivibet does not sell your Personal Data. We may share your data with third parties only in the following circumstances:

7.1 Service Providers (Data Processors). We engage regulated third-party service providers who process data solely on our instructions and under binding data processing agreements. These include: payment gateway operators, KYC and identity verification providers, fraud detection services, cloud infrastructure providers, and customer support platforms.

7.2 Regulatory and Legal Disclosure. We may disclose Personal Data to government authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory instruction. This includes mandatory AML transaction reporting obligations.

7.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of ivibet's business, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy arrangements before the transfer takes effect.

7.4 Consent-Based Sharing. We may share your data with third parties where you have provided explicit consent to such sharing for a specific purpose.

The ivibet Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, maintain your session, and improve user experience. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Disabling essential cookies will impair Platform functionality. Disabling analytics cookies will not affect your ability to use ivibet.

ivibet retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, subject to applicable legal minimum retention periods:

• Account Data: Retained for the duration of the Account's active status and for a minimum of five (5) years following permanent Account closure, as required for AML and regulatory audit purposes.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of Account closure, whichever is later, in compliance with applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction to meet financial record-keeping obligations.
• Support Communications: Retained for three (3) years from the date of the communication for quality assurance and dispute resolution purposes.
• Technical/Device Logs: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.
• Marketing Consent Records: Retained until consent is withdrawn and for a short period thereafter as evidence of consent status.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

ivibet implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or destruction:

• Transport Encryption: All data transmitted between your device and ivibet servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive Personal Data stored in our databases is encrypted using AES-256 encryption.
• Password Security: Account passwords are stored using industry-standard one-way hashing algorithms with cryptographic salting. ivibet cannot retrieve your plaintext password under any circumstances.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. ivibet staff undergo background checks and data protection training before being granted access to systems containing Personal Data.
• Fraud Monitoring: Real-time automated systems monitor transactions and login activity for signs of fraud, account takeover, and money laundering.
• Security Audits: ivibet conducts periodic internal and third-party security audits of its data processing infrastructure.

No data transmission system is entirely free from risk. While ivibet takes every reasonable precaution, we cannot guarantee absolute security. We encourage you to use a strong, unique password and to contact support immediately if you suspect any unauthorised access to your Account.

As a user of the ivibet Platform, you hold the following rights in respect of your Personal Data. To exercise any right, contact us at [email protected]. We will respond to all valid requests within 30 calendar days.

The ivibet Platform is strictly intended for adults aged 21 years and above. ivibet does not knowingly collect Personal Data from any person under the age of 21.

If ivibet discovers or has reasonable grounds to believe that an Account has been registered by a person under the age of 21, that Account will be immediately suspended. All funds held in the Account will be reviewed and handled in accordance with our Terms & Conditions. Verification documents will be requested, and any deposits made by underage users may be returned in accordance with applicable law.

Parents and guardians are encouraged to use parental control software to restrict access to gambling websites. If you believe a minor in your care has registered on ivibet, contact our support team immediately at [email protected] and we will investigate as a priority.

ivibet operates as an international platform. In delivering the Platform services, your Personal Data may be transferred to and processed in jurisdictions outside Malaysia. These transfers may involve ivibet's cloud infrastructure providers, KYC vendors, payment processors, or fraud detection services operating in other countries.

Where Personal Data is transferred outside Malaysia to jurisdictions that may not provide an equivalent level of data protection, ivibet ensures appropriate safeguards are in place. These safeguards include:

• Binding data processing agreements with all third-party processors that impose obligations consistent with applicable data protection standards.
• Contractual clauses that require receiving parties to protect transferred data at a standard equivalent to our obligations under applicable Malaysian and international data protection law.
• Restriction of cross-border data sharing to the minimum necessary for the relevant processing purpose.

By using the Platform, you acknowledge and consent to such cross-border transfers where necessary for the delivery of ivibet's services.

ivibet reserves the right to update or amend this Privacy Policy at any time. Material changes — meaning changes that substantially affect your rights or how we use your data — will be communicated to registered Players via the email address associated with their Account at least seven (7) days before the changes take effect.

Non-material updates (such as typographical corrections or clarifications that do not change the substance of our data practices) may be made without advance notice, and the revised Policy will be immediately effective on publication.

The effective date displayed at the top of this Policy reflects the date of the current version. We encourage you to review this Policy periodically. The most current version will always be accessible at https://ivibet.buzz/privacy-policy.

Your continued use of the Platform following the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not accept a material change to this Policy, you must discontinue use of the Platform and may request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or ivibet's handling of your Personal Data, please contact our Data Protection team through one of the following channels. All data rights requests and privacy-related enquiries will be acknowledged within 48 hours and resolved within 30 calendar days.

For formal data rights requests, please provide your full registered name, the email address associated with your Account, and a clear description of the right you wish to exercise. We may request verification of your identity before processing any data rights request to ensure we do not disclose or modify data in response to an unauthorised request.