Unibet Malaysia Privacy Policy — Platform User Data Protection

Welcome to the unibet Malaysia Privacy Policy. This document outlines the privacy practices of the unibet-vip.com platform ("unibet", "we", "us") regarding the collection, use, storage, and protection of personal data belonging to users of our Sports Betting and casino platform.

This policy applies to all users of the unibet platform, including visitors browsing the site without an account, registered active users, and former members whose accounts have been closed. By using the unibet platform, you agree to the practices described in this privacy policy.

Unibet is committed to protecting your privacy at every stage of your interaction with our platform — from the moment you first visit our website through every financial transaction, every bet placed, and every casino session you enjoy.

Unibet collects various types of personal data depending on how you interact with the platform. The following are the categories of data we collect:

Unibet does not collect sensitive data such as health information, political views, religious beliefs, or biometric data, except in exceptional cases required for identity verification purposes and expressly consented to by the user.

Unibet collects your personal data through several different channels:

• Live Registration Form: Information you provide directly when registering an account, updating your profile, or contacting customer support.
• KYC (Know Your Customer) Process: Identity verification documents you upload — such as your MyKad, passport, or other supporting documents — during the account verification process.
• Financial Transactions: Information shared automatically when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, or FPX (Maybank2u, CIMB Clicks).
• Platform Activity: Usage data automatically generated when you use the platform — including activity logs for sports betting (football, cricket, badminton, e-sports) and casino games (blackjack, slots, baccarat).
• Cookies and Tracking Technologies: Cookies, web pixels, and similar technologies that automatically collect technical and browsing behaviour data when you visit the platform.
• Approved Third Parties: Information from payment providers, identity verification services, or public sources required to meet our compliance obligations.

Unibet uses your personal data only for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your unibet account, processing logins, maintaining account security, and verifying user identity through the KYC process.
• Transaction Processing: Processing deposits and withdrawals via your chosen Malaysian payment method — Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, or CIMB Clicks.
• Service Provision: Operating the sports betting and casino platform, ensuring fair play, and delivering a personalised experience based on your preferences.
• Service Communications: Sending important account-related notifications, security updates, transaction confirmations, and customer support responses.
• Fraud Detection: Monitor account activity to detect and prevent fraud, money laundering, and platform abuse.
• Legal Compliance: Fulfilling legal and regulatory obligations, including anti-money laundering (AML) and KYC requirements.
• Service Improvement: Analysing usage patterns (on an anonymised basis) to improve platform features, optimise performance, and develop new services.
• Responsible Gaming: Monitoring betting patterns to identify users who may need responsible gambling support and directing them to appropriate resources.

Unibet does not sell, rent, or disclose your personal data to third parties for their marketing purposes. However, we may need to share your data with a limited number of third-party categories under certain circumstances:

All third parties who receive unibet user data are required to comply with strict data security standards and may only use that data for agreed purposes. unibet conducts regular reviews of third-party providers to ensure ongoing compliance with our privacy standards.

Unibet continually invests in best-in-class security technologies and procedures to protect your personal data from unauthorised access, breaches, alteration, or destruction. The key security measures we implement are:

• 256-bit SSL Encryption: All communications between your device and unibet's servers are encrypted using the latest TLS protocol, preventing any third party from intercepting your data in transit.
• Database Encryption: All sensitive data stored in unibet's databases is encrypted using AES-256 standards — including passwords (stored as hashed values), financial information, and KYC documents.
• Two-Factor Authentication (2FA): 2FA is available to all users and strongly recommended. Any new login from an unrecognised device will require additional verification.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect unauthorised access attempts, traffic anomalies, and suspicious activity.
• Internal Access Controls: Only unibet staff with a legitimate business need may access user data — and all such access is logged and regularly audited.
• Incident Response Plan: Unibet has tested incident response procedures in place for data breach situations — including user notification procedures within the required timeframe.

The unibet platform uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how users interact with our website. The following are the categories of cookies we use:

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality — for example, turning off essential cookies will require you to log in again on every visit.

Unibet retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Our data retention policy is as follows:

• Active Account Data: Retained for as long as your account remains active and in use.
• Financial Records Data: Retained for 7 years after the transaction date — in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Data: Retained for 5 years after the account closure date to meet regulatory requirements.
• Security Logs: Retained for 12 months for fraud detection and incident investigation purposes.
• Support Communications: Live chat records and support emails are retained for 2 years.
• Inactive Accounts: If an account has been inactive for 24 consecutive months, we will contact you before making any decision regarding data retention.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. Data deletion is carried out using secure data-overwriting methods to ensure the data cannot be recovered.

As a unibet Malaysia user, you have the following rights regarding your personal data. All rights requests can be submitted by email to privacy@unibet-vip.com and will be processed within 30 days:

The unibet platform is exclusively for individuals aged 18 and above. We do not accept registrations from minors and do not knowingly collect personal data from them.

Should unibet discover that personal data belonging to a child under the age of 18 has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. If you believe your child has registered on the unibet platform, please contact us immediately at support@unibet-vip.com.

The unibet platform may contain links to third-party websites such as official sports sites, news portals, or support services. Once you click these links and leave the unibet platform, the privacy policy of that respective website applies — not unibet's.

Unibet has no control over the privacy practices of third-party websites and is not responsible for how they handle your data. We recommend reading the privacy policy of every website you visit before providing any personal information.

Unibet reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes to this policy, we will:

• Updates the "Last Updated" date at the top of this page.
• Sending email notifications to all registered members at least 14 days before changes take effect for any updates that materially affect your privacy rights.
• Displaying a prominent notice on the platform's homepage for at least 30 days after the changes take effect.
• Maintaining previous versions of this policy, which users may request through the support team.

Your continued use of the unibet platform following any changes to this privacy policy constitutes your acceptance of those changes. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 9.

If you have any questions, concerns, or complaints about how unibet handles your personal data, you can reach our privacy team through the following channels:

The unibet privacy team is fluent in Bahasa Malaysia and is ready to provide clear explanations of how we handle your data. All privacy complaints received will be thoroughly investigated, and you will receive a written response with the outcome within 30 days.