Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by 2bcbet ("Company", "we", "us", "our"), the operator of the online sports betting and live casino platform accessible at 2bcbet.cam ("Platform"). It applies to all personal data collected from users ("you", "User", "Player") who access or interact with the Platform, regardless of device or location.

2bcbet is committed to processing personal data responsibly, transparently, and in accordance with applicable international data protection standards. This Policy explains what personal information we collect, the purposes for which it is used, with whom it may be shared, how long we retain it, and the rights you have in relation to it.

By registering an account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, please do not use the Platform.

Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" — 2bcbet, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — A third party that processes Personal Data on behalf of 2bcbet pursuant to a written data processing agreement.
• "Cookies" — Small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation functions.
• "KYC Data" — Identity and address verification documents submitted by you as part of the Know Your Customer process.
• "Sensitive Data" — A subset of Personal Data afforded heightened protection, including financial information and identification documents.

Data We Collect

The categories of Personal Data we collect about you are set out in the table below:

We do not intentionally collect special categories of sensitive personal data (such as health, racial, religious, or political data) unless voluntarily disclosed by you in a support communication and strictly necessary to address your specific request.

How We Collect Data

We collect Personal Data through the following means:

• Direct Submission — Information you provide when completing the registration form, submitting KYC documents, using the cashier, contacting support, or updating your account profile.
• Automated Technical Collection — Data collected automatically as you navigate the Platform, including IP address, browser fingerprint, device identifiers, and session logs, via server logs and analytics tools.
• Cookies and Similar Technologies — Session cookies, persistent cookies, and similar tracking technologies deployed on the Platform. See Section 10 for full details.
• Payment Service Providers — Transaction confirmations and payment identifiers received from DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and other payment processors as part of deposit and withdrawal processing.
• Third-Party Verification Services — Identity verification data from KYC and AML compliance service providers used to corroborate the information you submit.
• Fraud Prevention Services — Risk scoring and device intelligence data from fraud detection partners used to protect the integrity of the Platform and all player accounts.

Purposes of Data Processing

We process your Personal Data for the following purposes:

1. Account Management — Creating, maintaining, and administering your 2bcbet account, including processing login authentication and enforcing account security.
2. Transaction Processing — Processing deposits and withdrawals via your chosen payment method (e.g., DuitNow, FPX, Touch 'n Go eWallet) and reconciling financial records.
3. Identity Verification & KYC Compliance — Verifying your identity and age (minimum 21 years) and conducting ongoing AML and counter-fraud due diligence as required by our licensing obligations.
4. Service Delivery — Enabling access to sports betting markets (including Liga Super Malaysia, EPL, and UFC), live casino games, and slot titles; processing bet placement and settlement; crediting winnings.
5. Bonus & Promotions Administration — Crediting, tracking, and enforcing wagering requirements for bonuses, verifying eligibility, and detecting promotional abuse.
6. Customer Support — Responding to enquiries, resolving disputes, and maintaining records of support interactions for quality and training purposes.
7. Legal & Regulatory Compliance — Meeting our obligations under applicable international licensing regulations, AML legislation, and any lawful requests from regulatory or law enforcement bodies.
8. Platform Security & Fraud Prevention — Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, account takeovers, and other prohibited conduct.
9. Analytics & Platform Improvement — Analysing aggregate usage patterns to improve Platform features, betting markets, and the overall user experience.
10. Marketing Communications — Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may opt out at any time via your account settings.
11. Responsible Gambling — Monitoring betting patterns to identify signs of problem gambling and administering deposit limits, self-exclusion requests, and responsible gaming tools.

Legal Bases for Processing

Where applicable international data protection frameworks require us to identify a legal basis for each processing activity, we rely on the following grounds:

• Contractual Necessity — Processing required to perform the contract between you and 2bcbet (i.e., the Terms & Conditions), including account creation, transaction processing, KYC, and service delivery.
• Legal Obligation — Processing required to comply with applicable laws and regulations, including AML obligations, licensing conditions, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests — Processing necessary for 2bcbet's legitimate business interests, including fraud prevention, platform security, analytics, and responsible gambling monitoring, where such interests are not overridden by your fundamental rights.
• Consent — Processing based on your freely given, specific, informed, and unambiguous consent, principally for marketing communications and non-essential cookies. You may withdraw consent at any time without detriment.

Data Sharing & Disclosure

2bcbet does not sell or rent your Personal Data. We may share your data with carefully selected third parties only in the following circumstances and under appropriate contractual safeguards:

• Payment Processors — DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency processors require transactional data to execute deposits and withdrawals.
• KYC & AML Service Providers — Third-party identity verification and compliance platforms that assist in verifying your identity and conducting anti-money laundering screening.
• Fraud Detection Partners — Risk intelligence providers that receive Technical Data and Usage Data for the purpose of detecting and preventing fraudulent activity.
• Game Content Providers — Where required to operate licensed third-party casino games, limited technical identifiers may be shared with game studios or remote gaming server (RGS) providers.
• Analytics Providers — Aggregated and pseudonymised usage data shared with analytics platforms to support platform performance monitoring.
• Regulatory & Law Enforcement Authorities — Where we are required to disclose data in response to a lawful order, subpoena, court order, or binding request from a competent regulatory or law enforcement authority.
• Corporate Transactions — In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, Personal Data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party processors are bound by written data processing agreements that prohibit them from using your data for any purpose other than those specified by 2bcbet.

International Data Transfers

As an internationally operated platform, your Personal Data may be processed on servers and by service providers located outside of Malaysia. Where data is transferred to jurisdictions that may not provide an equivalent level of data protection to Malaysia, 2bcbet implements appropriate safeguards, which may include:

• Standard contractual clauses approved by recognised data protection authorities;
• Binding corporate rules where the recipient is part of the same corporate group;
• Transfers to jurisdictions recognised as providing an adequate level of data protection by relevant regulatory bodies.

By using the Platform, you acknowledge and consent to the international transfer of your Personal Data on the terms described above.

Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Our general retention principles are as follows:

• Account Data & KYC Records — Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML and licensing record-keeping requirements.
• Financial Transaction Records — Retained for a minimum of five (5) years from the date of each transaction.
• Communications Data (Support Logs) — Retained for two (2) years from the date of the interaction, unless a longer period is required for ongoing dispute resolution or legal proceedings.
• Technical & Usage Data — Typically retained for thirteen (13) months from the date of collection for analytics purposes, after which data is aggregated or anonymised.
• Marketing Preferences — Retained until you opt out of communications, at which point your opt-out record is retained to prevent re-contact.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

Cookies & Tracking Technologies

2bcbet uses cookies and similar technologies on the Platform for the following purposes:

• Strictly Necessary Cookies — Essential for the Platform to function correctly. These include session management cookies that maintain your logged-in state and security tokens. These cannot be disabled without significantly affecting Platform functionality.
• Functional Cookies — Remember your preferences such as language settings, display options, and odds format. These improve your experience but are not essential.
• Analytics Cookies — Collect anonymised information about how you use the Platform (pages visited, time spent, navigation paths) to help us understand usage patterns and improve the service.
• Marketing Cookies — Used to present relevant promotional information within the Platform to users who have opted in to receive such content. 2bcbet does not deploy third-party advertising cookies that track you across external websites.

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, your consent is not required as they are essential to the service you have requested.

Your Data Rights

Subject to applicable law and certain legal exceptions, you have the following rights in respect of the Personal Data that 2bcbet holds about you:

To exercise any of the above rights, please contact us at [email protected]. We will respond to all valid requests within thirty (30) calendar days. We may require you to verify your identity before processing a rights request.

Children's Privacy

The 2bcbet Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under 21. Age verification is a mandatory step in the registration and KYC process.

If we become aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us at [email protected] immediately.

Security Measures

2bcbet implements a layered set of technical and organisational security measures to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit — All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL). The HTTPS padlock in your browser address bar confirms this protection is active.
• Encryption at Rest — Sensitive data including payment information and KYC documents is encrypted using AES-256 encryption in storage.
• Access Controls — Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls enforced across all internal systems.
• Two-Factor Authentication — Available to all users for account login and recommended as a best practice for account security.
• Security Audits — Regular independent penetration testing and security audits are conducted to identify and remediate vulnerabilities.
• Incident Response — A formal data breach response procedure is in place. In the event of a breach that materially affects your rights, we will notify you without undue delay and in accordance with applicable law.

While we employ industry-standard security measures, no online system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for ensuring your device is free from malware.

Amendments to This Policy

2bcbet reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will provide advance notice via a prominent notice on the Platform or by email to your registered address.

The effective date of the current version of this Policy is shown at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree with any amendment, you should cease using the Platform and may request account closure as described in our Terms & Conditions.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to make a complaint about our data processing practices, please contact our Data Protection team using the details below:

If you are not satisfied with our response to a complaint, you have the right to refer the matter to the relevant data protection authority in your jurisdiction. Malaysian users may seek guidance from the Department of Personal Data Protection Malaysia (JPDP) in respect of matters falling within the scope of Malaysia's Personal Data Protection Act 2010.