gangbet Privacy Policy

1 Data Controller

gangbet (operating at gangbet.club) is the data controller in respect of all personal data collected through the gangbet Platform. gangbet operates under International Gaming Authority licensing, which imposes data protection obligations on licensed operators as part of the licensing framework. References to "gangbet", "we", "us", or "our" in this Policy refer to the gangbet Platform operator in its capacity as data controller.

All enquiries relating to the use of your personal data should be directed to: [email protected] (plain text — not a clickable link).

2 Personal Data We Collect

2.1 Registration Data

When you create a gangbet account, we collect: full legal name, date of birth, email address, Malaysian mobile telephone number, residential address, and preferred language. This information is necessary to create and maintain your account and to fulfil our identity verification obligations.

2.2 Identity Verification Data

To comply with Know Your Customer (KYC) obligations imposed by the IGA, gangbet may collect copies of government-issued identification documents (Malaysian MyKad, passport), proof of address documents, and source-of-funds documentation. These documents are processed by gangbet's KYC compliance team and, where applicable, by third-party identity verification service providers operating under data processing agreements.

2.3 Financial Data

We collect payment method details necessary to process deposits and withdrawals — including Touch n Go eWallet identifiers, Boost account references, bank account numbers (Maybank, CIMB, Public Bank, and others), and card details (last four digits and card type — full card numbers are not stored by gangbet and are processed exclusively through PCI-DSS compliant payment processors).

2.4 Transaction and Gaming Data

gangbet records all financial transactions (deposits, withdrawals, bonus awards) and gaming activity (bets placed, games played, session duration, wager amounts, outcomes) associated with your account. This data is used for account management, regulatory reporting, responsible gaming monitoring, and fraud prevention.

2.5 Technical and Usage Data

When you access the gangbet Platform, we automatically collect: IP address, device type and operating system, browser type and version, referring URL, pages visited, session timestamps, and approximate geolocation derived from IP address. This data is used for security monitoring, platform optimisation, and fraud detection.

2.6 Communications Data

We retain records of communications between you and gangbet support, including live chat transcripts, email correspondence, and support ticket history. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Use Your Personal Data

gangbet uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your gangbet account, including processing login authentication and account recovery requests.
• Service delivery: Processing bets, casino game participation, deposits, withdrawals, and bonus awards.
• Identity verification and KYC: Verifying your identity and age (21+) as required by IGA licensing obligations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, collusion, bonus abuse, money laundering, and unauthorised account access.
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behaviour and applying player-requested responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Regulatory compliance: Fulfilling gangbet's reporting obligations to the IGA and applicable financial intelligence authorities under anti-money laundering legislation.
• Customer support: Responding to enquiries, complaints, and disputes submitted to gangbet support.
• Platform improvement: Analysing usage patterns and technical performance data to improve the gangbet Platform experience for Malaysian players.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have not opted out of marketing communications (see Section 10).

4 Legal Basis for Processing

gangbet processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between gangbet and the Player — including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with gangbet's obligations under IGA licensing conditions, anti-money laundering legislation, and other applicable regulatory requirements — including KYC verification and transaction reporting.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform analytics, where such interests are not overridden by the Player's privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where gangbet has obtained the Player's prior consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Data Sharing and Disclosure

5.1 Service Providers

gangbet shares personal data with third-party service providers who process data on gangbet's behalf under written data processing agreements. These providers include: payment processors (for deposit and withdrawal handling), identity verification providers (for KYC document processing), cloud infrastructure providers (for platform hosting and data storage), and customer support platform providers. All service providers are contractually required to process data only as directed by gangbet and to maintain appropriate security standards.

5.2 Regulatory Authorities

gangbet may disclose personal data to the International Gaming Authority and to applicable financial intelligence units or law enforcement agencies where required by law, where disclosure is necessary to prevent fraud or money laundering, or where gangbet is ordered to do so by a court of competent jurisdiction.

5.3 No Unauthorised Sale of Data

gangbet does not sell, rent, or trade your personal data to third parties for their own independent marketing purposes. Data shared with service providers under Section 5.1 is used exclusively for the purposes set out in this Privacy Policy and the applicable service provider agreements.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of gangbet's assets, personal data may be transferred to the acquiring entity. Players will be notified of any such transfer and its implications for their personal data by email to the registered address prior to the transfer occurring.

6 Cookies and Tracking Technologies

6.1 Types of Cookies Used

gangbet uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Required for the Platform to function — including session authentication tokens, login persistence (where "Remember Me" is selected), and security tokens. These cannot be disabled.
• Analytics cookies: Used to collect aggregated usage data to understand how Malaysian players use the gangbet Platform. These are enabled only with your consent.
• Preference cookies: Used to remember your settings such as language preference and display options.

6.2 Managing Cookies

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the gangbet Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.

7 Data Retention

gangbet retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, as required by IGA licensing and AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, as required by applicable anti-money laundering legislation.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Retained for three (3) years from the date of the relevant gaming session, or longer where required for ongoing dispute resolution or regulatory investigation.
• Marketing data: Retained until the Player withdraws consent or opts out of marketing communications, after which marketing preferences are updated within 10 business days.

8 Security Measures

gangbet implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the gangbet Platform;
• Encryption at rest for all sensitive personal data stored on gangbet's infrastructure;
• Role-based access controls ensuring that staff access to personal data is limited to those with a documented operational need;
• Regular third-party penetration testing and security audits as required by IGA licensing standards;
• Multi-factor authentication requirements for all gangbet staff with access to player data systems;
• Incident response procedures with mandatory notification to the IGA and, where required by law, to affected Players in the event of a data breach.

While gangbet takes all reasonable steps to protect your personal data, no system is impenetrable. Players are encouraged to use strong unique passwords for their gangbet account and to enable two-factor authentication to protect their account from unauthorised access.

9 Your Data Rights

Subject to applicable law and gangbet's regulatory obligations, you have the following rights in respect of your personal data held by gangbet:

• Right of access: You may request a copy of the personal data gangbet holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where gangbet is no longer required to retain it — subject to gangbet's legal and regulatory retention obligations under Clause 7.
• Right to restriction: You may request that gangbet restricts processing of your data in certain circumstances, such as where accuracy is disputed.
• Right to data portability: You may request a machine-readable copy of the personal data you provided to gangbet, where technically feasible.
• Right to object: You may object to gangbet's processing of your data for marketing purposes or where processing is based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact gangbet at [email protected]. We will respond to verified requests within 30 days. Identity verification will be required prior to processing any data subject request.

10 Marketing Communications

gangbet may send you promotional communications by email regarding new games, bonuses, sports promotions (including Malaysia Super League and EPL specials), and platform updates. You may opt out of marketing communications at any time by:

• Using the unsubscribe link included in every gangbet marketing email;
• Updating your communication preferences in account settings;
• Contacting gangbet support at [email protected] requesting removal from marketing lists.

Opting out of marketing communications does not affect transactional communications, which are sent in connection with your account activity (e.g., deposit confirmations, withdrawal notifications, KYC requests, and security alerts). These will continue regardless of marketing preferences.

11 Minors

The gangbet Platform is strictly not intended for, and does not knowingly collect data from, persons under the age of 21. If gangbet becomes aware that a person under 21 has provided personal data or registered an account, gangbet will promptly close that account, delete the associated personal data to the extent not required to be retained for regulatory purposes, and report the matter to the IGA as required under licensing obligations. If you believe a minor has accessed the gangbet Platform, please contact [email protected] immediately.

12 Changes to This Privacy Policy

gangbet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or IGA licensing obligations. Material changes will be notified to Players by email to the registered address and by prominent notice on the gangbet Platform no fewer than 7 days before the revised Policy takes effect. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy. Players who do not accept the revised Policy should close their account prior to the effective date.

13 Contact and Complaints

For all data protection enquiries, subject access requests, or privacy complaints, contact gangbet at:

• Email: [email protected] (plain text — not a clickable link)
• Response target: Within 30 days for data subject requests; within 5 business days for general privacy enquiries
• Support hours: 24/7 English-language support

For information about our general platform terms, see the Terms & Conditions. For responsible gaming tools and resources, visit the Responsible Gaming page.