Protecting grmbet Member Data Is Our Priority

1. Introduction and Scope of This Policy

This Privacy Policy is an official document that explains grmbet's practices in managing personal information collected from members and visitors to this website. This policy applies to all services provided by grmbet, including the online gambling platform, customer support, promotional channels and all digital interactions that take place through our website and applications.

By registering an account or continuing to use the grmbet platform, you acknowledge that you have read, understood and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact our support team.

grmbet operates under international licensing and complies with data protection regulations set by the relevant licensing body. We are committed to ensuring that data processing is carried out lawfully, fairly and transparently.

2. Information We Collect

grmbet collects various categories of information for different purposes. The following are the types of data we process:

2.1 Identity Information

• Full name as stated on your MyKad or valid identity document
• Identity card or passport number
• Date of birth for age verification purposes (21 years and above)
• Gender and nationality

2.2 Contact Information

• An active and reachable email address
• Mobile phone number
• Residential address if required for certain verification purposes

2.3 Financial Information

• Bank account or e-wallet details for processing deposits and withdrawals
• Transaction records including deposit amounts, withdrawals and betting history
• Crypto wallet information (address only, not private keys) for USDT, BTC or ETH transactions

2.4 Technical and Usage Data

• IP address, device type and web browser used
• Login records, general geographic location and session duration
• Cookie data and similar tracking technologies
• Game activity and betting preferences

3. Purposes of Data Use

We use the information collected for the following purposes:

• Account registration and verification — ensuring every member meets the age and eligibility requirements set
• Financial transaction processing — verifying deposits, processing withdrawals within 10–45 minutes and detecting any suspicious activity
• Customer support — providing assistance via live chat and email in Malay and English
• Marketing communications — informing you about promotions, bonuses and platform updates with your consent
• Legal compliance — meeting licensing requirements and anti-money laundering (AML) regulations
• Responsible gambling — monitoring betting patterns to detect signs of problem gambling and applying necessary limits
• Platform improvement — analysing usage data to improve performance and user experience

4. Sharing Information with Third Parties

In certain limited circumstances, grmbet may need to share member data with other parties. This sharing is done carefully and only when there is a legitimate need:

• Payment service providers — payment gateway providers for Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay and crypto platforms to process transactions securely
• Game providers — game developers such as PG Soft, Pragmatic Play, JILI and Spribe for limited technical integration purposes
• Statutory authorities — if required by court order or request from a law enforcement agency
• Licensing bodies — for compliance audit purposes under the applicable international licensing terms

All third parties working with grmbet are required to comply with strict data confidentiality policies and may only use the information for agreed purposes.

5. Use of Cookies and Tracking Technologies

grmbet uses cookies and similar technologies to improve your experience on our platform. Cookies allow us to recognise your login session, save your preference settings and analyse overall usage patterns.

Types of cookies we use:

• Session cookies — automatically deleted when you close your web browser, used to maintain your login status
• Persistent cookies — stored for a set period to remember your language preference and personal settings
• Analytical cookies — help us understand how members interact with the platform for continuous improvement

You can change your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

6. Data Retention and Deletion

Data retention periods depend on the type of information and applicable legal requirements. Generally, grmbet retains data based on the following principles:

• Active account information is retained for the duration of the membership plus the minimum period required by the licensing body
• Financial transaction records are retained in accordance with AML compliance and applicable financial audit requirements
• Technical activity logs are stored for a shorter period for security and incident investigation purposes
• Customer support communication data is retained to enable continuity of service

When data is no longer needed for any legitimate purpose, it will be securely deleted or anonymised so that it can no longer be linked back to a specific individual.

7. Cross-Border Data Transfers

As grmbet operates under international licensing, your data may be processed or stored on servers located outside Malaysia. In such situations, we ensure that a level of protection equivalent to the standards applicable in Malaysia is maintained through legally binding data processing agreements with all our infrastructure partners.

8. Technical Data Security

Data security is a core pillar of grmbet's operations. We continuously invest in robust security infrastructure to ensure member data remains protected at all times. The technical measures we implement include:

• Encryption of data in transit using the latest TLS protocols
• Encryption of data stored in databases using industry-recognised encryption standards
• Role-based access control for internal staff
• Regular security audits and penetration testing by independent parties
• Continuous 24/7 monitoring for cyber threats and abnormal activity
• A comprehensive incident response plan in the event of any data breach

While we implement extensive security measures, no system can be guaranteed 100% secure. We therefore encourage members to also take precautions such as using strong passwords and not sharing login details.

9. How to Contact Us

If you have any questions or concerns, or wish to exercise your data protection rights, the grmbet team is ready to assist you through the following channels:

• 24/7 live chat — contact us directly through the platform in Malay or English
• Support email — [email protected] (response within a reasonable timeframe)

When submitting a data-related request, please include sufficient identification information so that we can verify your identity before processing the request. This step is necessary to protect your data from unauthorised access.

10. Children's Privacy Protection and Age Limit

The grmbet platform is intended exclusively for individuals aged 21 and above. We do not knowingly collect or process personal information from any individual under the age of 21.

Our registration process includes strict age verification steps. If we find that information belonging to a member under the specified age limit has been collected without our knowledge, the account in question will be closed immediately and the data will be securely deleted from our systems.

11. Amendments to This Privacy Policy

grmbet reserves the right to change, update or amend this Privacy Policy from time to time in line with changes in legislation, industry practices or platform improvements. Any significant amendments will be communicated to members through:

• In-platform notifications during the next login session
• Email to the address registered in your account
• Updates to the "Last Updated" date shown at the top of this page

Continued use of the platform after an amendment takes effect will be considered acceptance of the amended Privacy Policy. We encourage you to review this page periodically to stay informed of our latest policy.

12. Applicable Law and Jurisdiction

This Privacy Policy is governed and interpreted in accordance with the laws applicable to the operation of the grmbet platform under its international licence. Any dispute relating to this policy will be resolved through the mechanisms established by the relevant licensing authority.

If any provision of this Privacy Policy is found to be invalid or unenforceable, that provision will be reinterpreted to the extent necessary to make it valid, while the remainder of this policy continues in full force and effect.