Privacy Policy

OkieBet ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who use our online betting and gaming services, accessible at https://okiebet.buzz ("the Website"). This Privacy Policy ("Policy") sets out in clear, specific terms how we collect, use, store, share, and protect personal data in connection with the provision of OkieBet's services.

This Policy applies to all users of the OkieBet Website and platform, including registered account holders and visitors who access the Website without registering. It covers personal data collected through the Website, through customer support interactions (including live chat and email), and through payment processing activities.

By registering an OkieBet account, depositing funds, placing bets, or otherwise using our services, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the OkieBet platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably identify a natural person, directly or indirectly, including name, identification number, email address, IP address, financial data, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. OkieBet is the Data Controller in relation to all Personal Data collected through the Website.
• "Data Processor" — any third party that processes Personal Data on behalf of OkieBet under a written agreement, such as payment processors, KYC verification providers, and cloud infrastructure suppliers.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" — Know Your Customer; the mandatory identity verification process used to confirm a player's identity, age, and payment source.
• "Cookie" — a small text file stored on your device by a web browser at the instruction of a website, used to retain session information, user preferences, and analytical data.
• "PDPA" — the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions involving Malaysian individuals.

OkieBet is the Data Controller responsible for the Personal Data collected and processed through the Website and associated services. As Data Controller, we determine the purposes for which your Personal Data is collected and the means by which it is processed.

Where OkieBet engages third-party Data Processors — such as payment gateway operators, identity verification service providers, fraud detection systems, and cloud computing infrastructure providers — we ensure that data processing agreements are in place that require those processors to handle your Personal Data only as directed by OkieBet, in accordance with applicable data protection laws, and with appropriate security measures.

All queries relating to this Privacy Policy, including requests to exercise your data rights, should be directed to OkieBet's support team using the contact details set out in Section 16 of this Policy.

OkieBet collects the following categories of Personal Data:

4.1 Registration & Identity Data Identity

• Full legal name as appearing on your government-issued identification document
• Date of birth (to verify the21+ age requirement)
• Residential address (including city — e.g., Kuala Lumpur, Johor Bahru, Penang, Petaling Jaya, Shah Alam)
• Email address and, where provided, mobile phone number
• NRIC number or passport number (collected during KYC verification)

4.2 Financial & Payment Data Financial

• Bank account details or e-wallet identifiers associated with deposits and withdrawals (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong)
• Transaction histories, including deposit amounts, withdrawal requests, and betting activity records in MYR
• Cryptocurrency wallet addresses used for BTC or USDT transactions, where applicable

4.3 Technical & Device Data Technical

• IP address and approximate geolocation derived from IP data
• Browser type and version, operating system, and device type
• Session duration, page interaction data, and clickstream logs
• Device identifiers and persistent cookies as described in Section 11

4.4 Communications Data Communications

• Records of live chat sessions, email correspondence, and any other communications directed to OkieBet's support team
• Survey responses or feedback submitted through the Platform

4.5 Responsible Gambling Data RG Data

• Self-exclusion status, deposit limits, and session limits applied to your account
• Responsible gambling interaction records, including any referals to external support resources

OkieBet collects your Personal Data through the following channels:

• Account Registration: Data you provide directly when creating an OkieBet account.
• Account Verification (KYC): Documents and information you submit to complete identity verification, including copies of NRIC or passport and proof of address.
• Transaction Processing: Data generated when you make deposits or withdrawal requests via local payment methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, or USDT.
• Platform Usage: Technical data collected automatically when you browse or interact with the Website, including via cookies and server-side access logs.
• Support Interactions: Data shared during live chat sessions, email correspondence, or any other communication with OkieBet's customer support team.
• Third-Party Verification Providers: Identity and fraud-detection data returned to OkieBet by third-party KYC and anti-money laundering service providers during the verification process.

OkieBet processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and OkieBet — i.e., to operate your account, accept deposits in MYR, process bets, and pay out winnings.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification obligations (21+ for casino-style gambling), and any lawful directions from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for OkieBet's legitimate business interests, including fraud detection, platform security monitoring, responsible gambling compliance, and improving the quality of our services — where those interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent for specific processing activities — such as sending marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

OkieBet uses your Personal Data for the following specific purposes:

• Creating and managing your OkieBet account, including authentication and account security.
• Processing deposits and withdrawals in MYR through supported Malaysian payment methods, and maintaining accurate transaction records.
• Verifying your identity and age (21+ requirement) through KYC processes, and complying with applicable AML and fraud prevention obligations.
• Operating and settling bets placed on sports events (including Liga Super Malaysia, EPL, and UFC), casino games, live dealer tables, slots, and other Platform games.
• Administering bonus awards, promotional campaigns, and loyalty programme benefits in accordance with the applicable terms.
• Delivering customer support services, responding to queries, and resolving disputes.
• Enforcing our Terms & Conditions, identifying and investigating prohibited conduct, and managing self-exclusion and responsible gambling obligations.
• Sending transactional communications (account statements, deposit confirmations, withdrawal notifications, KYC requests) — these are necessary for the operation of your account and are not optional.
• Sending optional marketing communications about OkieBet promotions and new features, where you have given consent. You may opt out at any time.
• Analysing Platform usage patterns to improve user experience, identify technical issues, and develop new features — using aggregated or anonymised data wherever possible.

OkieBet does not sell, rent, or exchange your Personal Data with third parties for their own marketing or commercial purposes under any circumstances.

We may share your Personal Data with the following categories of third parties, solely to the extent necessary for the described purpose:

• Payment Service Providers: Operators of payment infrastructure used to process your deposits and withdrawals, including local Malaysian payment gateways (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay) and bank partners (Maybank, CIMB, Public Bank, Hong Leong). These providers receive only the data necessary to process the specific transaction.
• KYC and Identity Verification Providers: Third-party services engaged to verify your identity, age, and address documents as part of OkieBet's mandatory compliance processes. Data shared is limited to the specific documentation required for verification.
• Fraud Detection and AML Screening Services: Service providers that assist OkieBet in detecting fraudulent activity, money laundering attempts, and other prohibited conduct.
• Cloud Infrastructure and Hosting Providers: Data centre and cloud computing providers that host OkieBet's servers and databases. These providers operate as Data Processors and handle Personal Data solely in accordance with OkieBet's instructions.
• Game and Software Providers: Third-party casino game and sports data providers may receive limited technical data (session tokens, bet amounts) required to operate specific games. These providers are contractually bound to process such data only for game operation purposes.
• Regulatory and Law Enforcement Authorities: OkieBet will disclose Personal Data to regulators, law enforcement agencies, or courts where required to do so by law, a valid court order, or in connection with an investigation of suspected criminal activity.

OkieBet's primary data processing infrastructure is designed to minimise unnecessary cross-border data transfers. However, given the global nature of cloud computing and technology service delivery, some of your Personal Data may be transferred to and processed in countries outside Malaysia.

Where Personal Data is transferred internationally, OkieBet ensures that appropriate safeguards are in place to protect your data, which may include: contractual clauses that impose data protection obligations equivalent to those applicable in Malaysia; processing only in countries that have been assessed to provide an adequate level of data protection; or obtaining your explicit consent where required for a specific transfer.

If you would like further information about the specific safeguards applied to any particular international data transfer, please contact OkieBet's support team using the details in Section 16.

OkieBet retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Accounts: Personal Data associated with an active OkieBet account is retained for the duration of the account relationship plus a minimum period of five (5) years following account closure, to satisfy AML record-keeping requirements and potential dispute resolution needs.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification, or longer where required by applicable anti-money laundering or financial services regulations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history in MYR, are retained for a minimum of seven (7) years to comply with financial record-keeping obligations.
• Support Communications: Customer support records (live chat transcripts, email correspondence) are retained for a minimum of two (2) years from the date of the interaction.
• Marketing Data: Where you have provided consent for marketing communications, associated data is retained until you withdraw consent, at which point it is removed from active marketing systems within 30 days.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in manner that prevents re-identification. Backup copies of data are managed in accordance with secure deletion schedules aligned with the above retention periods.

OkieBet uses cookies and similar tracking technologies to operate and improve the Website, remember your preferences, maintain session security, and analyse how users interact with our platform. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary or security cookies may impair Platform functionality and account security. For functional and analytical cookies, you can opt out without affecting your ability to place bets or manage your account.

OkieBet's services are strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from any person under the age of 21.

Our registration process includes mandatory age verification steps, and KYC procedures require submission of a government-issued identification document confirming date of birth. Where OkieBet becomes aware that an Account has been registered by or on behalf of a person under 21, the Account will be immediately suspended, all associated funds frozen pending investigation, and the Personal Data processed in connection with that Account will be deleted except where retention is required by law.

Subject to applicable law, you have the following rights in relation to the Personal Data OkieBet holds about you. To exercise any of these rights, contact our support team using the details in Section 16. We will respond to all verified requests within 30 calendar days.

Please note that certain rights are subject to exceptions. For example, we may be unable to delete data that we are legally required to retain (such as KYC records and financial transaction logs). Where we are unable to fulfil a request in full, we will explain the reasons for the limitation in our response.

OkieBet implements a layered, defence-in-depth approach to information security. The following technical and organisational measures are applied to protect your Personal Data:

• Transport Encryption: All data transmitted between your browser or device and OkieBet's servers is encrypted using TLS 1.2 or higher (256-bit SSL encryption).
• Data at Rest Encryption: Personal Data stored in OkieBet's databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data is restricted to authorised personnel who require it to perform specific, defined job functions. Access is managed on a least-privilege basis and reviewed periodically.
• Two-Factor Authentication (2FA): Internal systems containing Personal Data require multi-factor authentication for all administrative access. Players are strongly encouraged to enable 2FA on their accounts.
• Penetration Testing and Security Audits: OkieBet conducts periodic security assessments, including vulnerability scanning and third-party penetration testing, to identify and remediate potential weaknesses.
• Incident Response: OkieBet maintains a documented incident response procedure to detect, contain, and report data breaches in accordance with applicable legal obligations.

While OkieBet takes all reasonable and appropriate steps to protect your Personal Data, no Internet-based system can guarantee absolute security. You play an important role in protecting your own data by keeping your account credentials confidential and enabling two-factor authentication on your OkieBet account.

OkieBet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. Material changes — including changes to the categories of data we collect, the purposes for which we use it, or your data rights — will be communicated to registered users via email to the address associated with their Account and/or via a prominent notification on the Website prior to the changes taking effect.

Minor or non-material amendments (such as clarifications, formatting corrections, or updates to contact details) may be made without prior notice. The "Effective Date" at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of OkieBet following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the Platform and request Account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact OkieBet's support team: