Privacy Policy

This Privacy Policy ("Policy") describes how TambakBet ("TambakBet", "the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player", "User") who access or use the TambakBet website at https://tambakbet.cam and all associated services.

TambakBet operates as an online casino and sports betting platform principally serving players in Malaysia. Our platform accepts MYR-denominated accounts, Malaysian payment methods including Maybank2u, Touch 'n Go eWallet, DuitNow, CIMB Clicks, Boost, GrabPay, Public Bank Online, Hong Leong Connect, and FPX, as well as selected cryptocurrencies.

By registering an account, accessing the TambakBet platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not access or use the TambakBet platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, TambakBet.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Cookies" means small text files placed on your device by the TambakBet website for the purposes described in Section 9 of this Policy.
• "KYC" means Know Your Customer — the identity and age verification procedure applied to all TambakBet accounts prior to processing withdrawals.
• "Retention Period" means the duration for which Personal Data is stored before it is securely deleted or anonymised.

TambakBet acts as the Data Controller in respect of all Personal Data collected through the https://tambakbet.cam website and associated services. All enquiries relating to Personal Data processing, including requests to exercise your data rights under Section 6 of this Policy, should be directed to TambakBet's data protection contact as specified in Section 15 (Contact Us).

Where TambakBet engages third-party service providers (including payment processors, identity verification partners, and technology vendors) who process Personal Data on our behalf, such entities act as Data Processors and are contractually bound to process that data solely in accordance with TambakBet's documented instructions and applicable data protection standards.

TambakBet collects Personal Data in the following categories:

4.1 Identity & Verification Data

Full legal name, date of birth, nationality, Malaysian MyKad number, passport number or equivalent government-issued identification, and in certain cases, selfie or biometric verification data required to complete age and identity checks (21+ enforcement).

4.2 Contact & Account Data

Email address, mobile phone number, residential address including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya), account username, and account password (stored only in irreversibly hashed form).

4.3 Financial & Transaction Data

Payment method details (including bank account information associated with Maybank, CIMB, Public Bank, and Hong Leong Connect; Touch 'n Go eWallet and Boost wallet identifiers; DuitNow proxy numbers; FPX transaction references; cryptocurrency wallet addresses), deposit history, withdrawal requests, bonus claims, and balance records.

4.4 Technical & Device Data

IP address, browser type and version, operating system, device type and identifiers, time zone, login and logout timestamps, session duration, and referring URL.

4.5 Behavioural & Usage Data

Games accessed, bets placed (including Liga Super Malaysia, EPL, UFC, and casino game activity), session frequency and duration, promotional offers claimed, and responsible gambling tool usage.

4.6 Support & Communications Data

Records of live chat sessions, email correspondence, and support ticket content where you have contacted TambakBet for assistance.

TambakBet collects Personal Data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, claim a bonus, contact support, or update your account profile.
• Automated collection: Through cookies, web beacons, and similar tracking technologies as you interact with the TambakBet website (see Section 9).
• Third-party sources: From identity verification service providers, payment processors (including Malaysian banking partners and e-wallet operators), fraud detection services, and where applicable, publicly available registers.
• Inferred data: Derived from your usage patterns, betting behaviour, and interaction with platform features, used primarily for responsible gambling monitoring and personalised service delivery.

TambakBet processes Personal Data only for defined, lawful purposes. The primary purposes are:

1. Account registration and management — to create and maintain your TambakBet account and provide you with access to the platform's services.
2. Identity verification and age enforcement — to verify that you are aged 21 or above and to confirm your identity as required by our KYC obligations.
3. Payment processing — to process deposits (via Maybank2u, Touch 'n Go eWallet, DuitNow, FPX, and other Malaysian payment methods) and to fulfil withdrawal requests to verified accounts.
4. Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, bonus abuse, unauthorised account access, and other security threats.
5. Responsible gambling — to monitor gaming behaviour for indicators of problem gambling, to enforce deposit limits and self-exclusion requests, and to provide proactive responsible gambling communications where appropriate.
6. Legal and regulatory compliance — to comply with anti-money laundering obligations, regulatory reporting requirements under our gaming licence, and any lawful requests from competent authorities.
7. Customer support — to respond to enquiries, resolve disputes, and improve service quality.
8. Marketing communications — where you have expressly consented, to send you promotional offers, bonus notifications, and platform updates relevant to your preferences.
9. Platform improvement — to analyse usage data in aggregated or anonymised form to improve the performance, features, and design of the TambakBet platform.

TambakBet does not sell, rent, or commercially share your Personal Data with any third party for their own marketing purposes. We disclose Personal Data only in the following circumstances:

7.1 Service Providers and Data Processors

We share Personal Data with carefully vetted third-party service providers who assist us in operating the platform. These include identity verification providers, payment gateway operators (including processors for Maybank, CIMB, Touch 'n Go eWallet, DuitNow, and FPX), game software providers, cloud hosting providers, and fraud detection vendors. All such providers are contractually bound to process data only as instructed by TambakBet and to maintain appropriate security standards.

7.2 Legal and Regulatory Disclosure

TambakBet may disclose Personal Data to competent authorities, regulators, law enforcement agencies, or courts where required by applicable law, a valid legal order, or our obligations under the terms of our gaming licence. We will endeavour to notify affected players of such disclosures where legally permissible.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of TambakBet's business, Personal Data may be transferred to the acquiring entity as part of the transaction. Players will be notified in advance of any such transfer and of any material changes to this Privacy Policy that result from it.

TambakBet's platform infrastructure and some of its third-party service providers may be located outside Malaysia. Personal Data may therefore be transferred to, stored in, and processed in jurisdictions outside Malaysia. Where such transfers occur, TambakBet takes appropriate steps to ensure that your Personal Data continues to be protected to a standard equivalent to the protections described in this Policy.

These steps include requiring Data Processors to adhere to contractual data protection obligations aligned with internationally recognised standards. If you would like further information about the specific safeguards in place for any international transfer of your Personal Data, please contact us as described in Section 15.

TambakBet uses cookies and similar tracking technologies to operate the platform, maintain session state, detect fraud, and improve user experience. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and display options across sessions.
• Analytical Cookies: Collect anonymised data about how users interact with the platform, including page visit patterns and feature usage, to help us improve the product.
• Security Cookies: Used to detect and prevent fraudulent activity, duplicate account creation, and unauthorised access attempts.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality or security features of the TambakBet platform. TambakBet does not use third-party advertising cookies or cross-site tracking cookies.

TambakBet retains Personal Data for no longer than is necessary for the purpose for which it was collected, subject to applicable legal and regulatory minimum retention requirements. The following general retention guidelines apply:

• Active account data: Retained for the duration of the account relationship and for a period of up to 5 years following account closure, to support post-closure dispute resolution and regulatory reporting.
• Financial transaction records: Retained for a minimum of 7 years to satisfy anti-money laundering record-keeping obligations applicable under our licensing framework.
• KYC documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Support communications: Retained for 3 years from the date of the communication for quality assurance and dispute resolution purposes.
• Marketing preference records: Retained for as long as they remain current, and for 2 years following the last demonstrated interaction with a marketing communication.

Upon expiry of the applicable retention period, Personal Data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised for analytical purposes.

TambakBet implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and TambakBet servers.
• Encryption at rest for all stored Personal Data using industry-standard cryptographic algorithms.
• Passwords stored using irreversible cryptographic hashing with individual salts; TambakBet staff cannot access your plaintext password.
• Two-factor authentication available for all player accounts.
• Role-based access control restricting staff access to Personal Data on a strict need-to-know basis.
• Audit logging of all administrative access to Personal Data stores.
• Regular security assessments and penetration testing of platform infrastructure.
• Incident response procedures with defined notification timelines in the event of a data breach.

While TambakBet takes reasonable and proportionate steps to protect your Personal Data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying TambakBet immediately if you suspect any unauthorised access to your account.

TambakBet strictly prohibits registration and use by persons under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years old. Age verification is a mandatory component of our KYC process, applied to all accounts before withdrawal access is granted.

If TambakBet becomes aware that Personal Data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated balances will be held pending review, and the Personal Data collected will be deleted in accordance with our standard data deletion procedures. If you believe a minor has registered on TambakBet, please contact us immediately using the details in Section 15.

TambakBet may send you promotional communications, including bonus offers, seasonal promotions, and platform updates, where you have expressly opted in to receive such communications during or after registration. We will only use the contact method (email or SMS) through which you have given consent.

You may withdraw your consent to marketing communications at any time by updating your preferences in your account settings or by contacting our support team. Withdrawal of marketing consent does not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, or security alerts) which are necessary to the operation of your account.

TambakBet does not share your contact data with third-party marketers or engage in co-marketing arrangements that would expose your data to external promotional networks.

TambakBet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform operations, or our data processing practices. Where amendments are material, we will notify active account holders through the platform's notification system and update the effective date at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of the TambakBet platform following publication of an updated Policy constitutes your acknowledgement of the changes. If you do not agree to the amended Policy, you should discontinue use of the platform and submit an account closure request as described in TambakBet's Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, including requests to exercise your data rights as described in this Policy, please contact TambakBet through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the support panel on the TambakBet website. This is the fastest channel for all privacy and data enquiries.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line for fastest routing.

TambakBet aims to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response or fulfil a data rights request within 30 calendar days, extendable to 60 days for complex requests with prior notification.

This Privacy Policy was last updated on 1 January 2026. The English language version is the definitive version and shall prevail in the event of any inconsistency with any translation.