20bet Privacy Policy — Your Personal Data Protection

1 Introduction and Scope of This Policy

This Privacy Policy is established by 20bet to transparently explain how our platform collects, uses, stores, and protects your personal information when you use our services at 20bet.bz. This policy applies to all platform users, including website visitors, prospective members, and registered members.

By registering an account or continuing to use the 20bet platform, you give your consent for us to process your personal information in accordance with the terms stated in this policy. If you do not agree, you are requested to discontinue use of our platform.

2 Personal Information We Collect

20bet collects various types of information depending on how you interact with our platform. Below is a summary of the information we collect and the purposes for doing so:

We only collect information that is strictly necessary for the stated purposes. We do not request information unrelated to platform operations or legal compliance.

3 How We Use Your Information

Your personal data is used solely for legitimate and transparent purposes. 20bet uses your information in the following situations:

• Account Management: Processing registration, verifying identity through KYC and managing your account on an ongoing basis.
• Transaction Processing: Handling deposits, withdrawals and any financial transactions you make securely and accurately.
• Security and Fraud Prevention: Detecting suspicious activity, preventing money laundering and protecting the integrity of the platform from abuse.
• Customer Support: Providing effective assistance when you reach our support team via Live Chat or email.
• Platform Communications: Sending important account-related notifications, security updates and relevant promotional information (with your consent).
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need assistance and offering appropriate responsible gaming tools.
• Legal Compliance: Fulfilling legal obligations including reporting to relevant authorities when required by law.
• Platform Improvements: Analysing usage patterns in aggregate (not individually) to improve user experience and platform performance.

4 Sharing Information with Third Parties

20bet does not sell or rent your personal data to any third party for commercial purposes. However, there are limited situations where we need to share your information with trusted parties:

• Payment Processors: Payment service providers such as local banks, e-wallet providers, and cryptocurrency processors that require information to verify and process your transactions. All our payment processors are bound by strict confidentiality agreements.
• Game Software Providers: Third-party game developers offering games on our platform may receive session data necessary to ensure games function properly. This data is limited and does not include your full identity information.
• Legal Authorities: In circumstances where the law requires us to do so — such as fraud investigations, money laundering cases, or court orders — we are obligated to disclose information to the relevant authorities.
• Identity Verification Services: Registered and trusted third-party KYC service providers are used to securely and efficiently verify the identity of new members.

In all of the above cases, we ensure that data sharing is limited to only what is strictly necessary and that all third parties are bound by confidentiality obligations equivalent to our own standards.

5 Data Security and Protective Measures

20bet invests seriously in security infrastructure to protect your personal data. The following are the key security measures we have implemented:

• 256-bit SSL Encryption: All communication between your browser and our servers is encrypted using the latest TLS protocol, ensuring no data can be intercepted in transit.
• Encrypted Password Storage: Your password is never stored in plain text. We use a strong one-way hashing algorithm (bcrypt) to store passwords securely.
• Two-Factor Authentication (2FA): An additional security layer you can enable to ensure only you can access your account, even if your password is compromised.
• Continuous Activity Monitoring: Our threat detection system monitors account activity 24 hours a day, 7 days a week to identify any suspicious access attempts.
• Internal Access Controls: Only 20bet staff with a legitimate operational need are permitted to access member personal data, and all access is logged for audit purposes.
• Regular Security Testing: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts.

6 Cookies and Tracking Technologies

20bet uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for the platform to function properly — such as maintaining your login session, remembering language preferences, and ensuring session security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how visitors use our website through aggregated statistics that do not identify individuals — enabling us to improve the user experience.
• Functional Cookies: Remembering your preferences such as display theme, notification settings and game preferences to personalise your experience.

You can manage cookies through your browser settings. However, disabling essential cookies may affect certain functions on our platform.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy principles, you have the following rights regarding your personal data that we hold:

8 Cross-Border Data Transfer

In operating our platform, some of your personal data may be processed or stored on servers located outside Malaysia. When this occurs, 20bet ensures that equivalent or higher protection is provided for your data through:

• Data transfer agreements that comply with international data protection standards.
• Selection of infrastructure partners holding recognised security certifications such as ISO 27001 and SOC 2.
• Use of standard contractual clauses requiring data recipients to comply with privacy standards equivalent to Malaysia's PDPA.

We do not transfer data to countries or regions that lack adequate data protection standards without appropriate additional safeguards in place.

9 Data Retention Period

20bet retains your personal data only for as long as necessary for the purposes stated in this policy or as required by law:

• Active Accounts: Data is retained for as long as your account remains active and for the additional period required after account closure to fulfil legal obligations.
• Transaction Records: Retained for a minimum of 7 years in accordance with legal requirements related to anti-money laundering.
• Security Logs: Retained for 12 months for the purposes of security incident investigation if required.
• Support Communications: Conversation records with our support team are retained for 2 years for quality control purposes and reference in the event of a dispute.
• Marketing Data: Deleted when you withdraw consent to receive marketing communications.

Once the retention period has ended, data is securely deleted using methods that ensure it cannot be recovered.

10 Contact Our Privacy Officer

If you have any questions, concerns or complaints about how 20bet handles your personal data, please do not hesitate to contact us:

• Privacy Email: [email protected] (subject: Privacy Policy)
• Live Chat: Available 24/7 for immediate privacy inquiries
• Telegram: Contact our agent for more detailed privacy assistance

We are committed to resolving any privacy concerns you may have within 14 working days. If you are not satisfied with our response, you have the right to file a complaint with the Malaysia Personal Data Protection Department or the relevant regulatory authority.