Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how inibet ("we", "us", "our", "Platform") collects, processes, stores, and protects the personal data of individuals ("you", "User", "Player") who access and use the online sports betting and casino services available at inibet.cam.

inibet takes data privacy seriously. We are committed to handling your personal information responsibly and in accordance with applicable data protection legislation. This Policy is intended to be transparent, readable, and genuinely informative — not a document designed to obscure how your data is handled.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, and destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. In the context of this Policy, that entity is inibet.
• "Data Processor" means any third party that processes personal data on behalf of inibet under a data processing agreement.
• "KYC" means Know Your Customer — the identity verification process required before certain account functions, including higher-value withdrawals, can be activated.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which a data subject signifies acceptance of the processing of their personal data for a stated purpose.

3. Data Controller

inibet acts as the Data Controller in respect of all personal data collected through the inibet platform at inibet.cam. As Data Controller, inibet is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with applicable data protection law.

For any data protection enquiries, requests, or concerns, you may contact our designated Data Protection Officer (DPO) at [email protected], using the subject line "Data Protection Enquiry". We will acknowledge all data protection communications within five (5) business days.

4. Personal Data We Collect

4.1 Registration Data

When you create an inibet account, we collect the following information:

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (MYR)

4.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, we collect and verify:

• Government-issued photo identification (Malaysian IC / MyKad, Passport, or Driving Licence)
• Proof of residential address (utility bill or bank statement dated within three months)
• Selfie photograph with identity document (for liveness verification)
• Source of funds documentation, where required for higher-value accounts

4.3 Financial Data

We collect financial data necessary to process deposits and withdrawals. This includes payment method details (e.g., registered DuitNow account, FPX bank account number, Touch 'n Go eWallet identifier, Boost wallet reference), transaction history, and deposit and withdrawal amounts in Malaysian Ringgit (MYR). We do not store full credit or debit card numbers on our servers; card transactions are processed and tokenised by our certified PCI-DSS compliant payment partners.

4.4 Behavioural and Usage Data

We automatically collect certain technical and behavioural data when you access and use the inibet platform:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time on site, and navigation patterns
• Betting and gaming activity, including stake amounts, game selections, and session duration
• Login timestamps and session identifiers

4.5 Communication Data

When you contact inibet support via live chat, email, or any other communication channel, we retain records of those communications for quality assurance, dispute resolution, and compliance purposes.

5. How We Use Your Personal Data

inibet processes your personal data for the following purposes:

Purpose	Data Used	Legal Basis
Account registration and management	Registration data, contact details	Contract performance
Identity verification (KYC)	Government ID, address proof, selfie	Legal obligation
Payment processing (DuitNow, FPX, TNG, Boost, etc.)	Financial data, transaction history	Contract performance
Fraud prevention and AML compliance	All categories, behavioural data	Legal obligation, legitimate interest
Platform operation and improvement	Usage and behavioural data	Legitimate interest
Customer support	Communication data, account data	Contract performance
Responsible gambling monitoring	Betting activity, session data	Legal obligation, legitimate interest
Marketing communications (with consent)	Contact details, preferences	Consent

6. Legal Basis for Processing

inibet processes personal data under the following legal bases, depending on the nature and purpose of the processing activity:

• Performance of a Contract: Processing necessary to fulfil our obligations to you as an inibet account holder, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing conducted to pursue inibet's legitimate business interests, including fraud prevention, platform security, and service improvement, provided that such interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit and freely given consent. You may withdraw consent at any time without detriment to your account status.

7. Data Sharing & Third-Party Disclosure

inibet does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of third parties solely to the extent necessary for the stated purpose:

• Payment Service Providers: DuitNow, FPX network institutions, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, Visa, Mastercard, and cryptocurrency processing partners, for the purpose of executing deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and AML screening services engaged to assist with identity document verification and sanctions screening.
• Game Providers: Licensed game developers and live casino operators (including Evolution Gaming and Pragmatic Play) who provide game content on the inibet platform, to the extent technically required to deliver game services.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, inibet may disclose personal data to competent government authorities. We will notify you of any such disclosure where legally permitted to do so.
• Professional Advisers: Legal, accounting, and auditing firms engaged by inibet, subject to confidentiality obligations consistent with professional standards.

8. Data Retention

inibet retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, to comply with AML/CTF record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with financial record-keeping requirements.
• KYC Documents: Retained for five (5) years following the end of the business relationship, as required under applicable anti-money laundering legislation.
• Communication Records: Retained for two (2) years from the date of communication, unless longer retention is required for dispute resolution or regulatory compliance purposes.
• Marketing Consent Records: Retained for three (3) years from the date of consent, or until withdrawal of consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with inibet's data disposal procedures. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for analytical and statistical purposes.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the inibet platform. They enable us to recognise your device, maintain your session, and remember your preferences across visits.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled without affecting core platform functionality.
• Performance Cookies: Used to collect anonymised data on how users navigate the platform, enabling us to identify and resolve performance issues. Deployed only with your consent.
• Functional Cookies: Remember your preferences (e.g., preferred language, odds format, last-visited game category) to improve your experience on return visits.
• Analytical Cookies: Used to understand aggregate user behaviour on the platform for product development purposes. No individual-level profiling is conducted for marketing purposes without explicit consent.

9.3 Managing Cookies

You may control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will affect the functionality of the inibet platform, including your ability to log in and place bets. For instructions on managing cookies in your specific browser, please consult your browser's help documentation.

10. Your Privacy Rights

As a user of the inibet platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You may request a copy of all personal data inibet holds about you (Subject Access Request). We will respond within thirty (30) days.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request correction. Minor corrections (e.g., contact number updates) can be made directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data while a dispute regarding accuracy or lawfulness is resolved.
• Right to Data Portability: Where processing is based on contract or consent, you have the right to receive your personal data in a commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time. We will cease such processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

11. Data Security

inibet implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• TLS 1.3 encryption for all data in transit between your device and inibet servers.
• AES-256 encryption for sensitive personal data stored at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their function.
• Regular independent penetration testing and vulnerability assessments.
• Multi-factor authentication (MFA) requirements for administrative access to data systems.
• Incident response procedures with defined timelines for breach notification to affected users and relevant regulatory authorities.

Notwithstanding these measures, no data transmission over the internet can be guaranteed as completely secure. You are responsible for maintaining the security of your account credentials and must notify inibet immediately at [email protected] if you suspect your account has been compromised.

12. Protection of Minors

The inibet platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account and delete the relevant personal data.

Parents and guardians who believe a minor may have accessed the inibet platform and provided personal data should contact us immediately at [email protected] so that appropriate action can be taken without delay.

13. International Data Transfers

In the course of providing the inibet service, personal data may be processed by servers or third-party service providers located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, inibet ensures that appropriate safeguards are in place — including contractual clauses, adequacy decisions, or binding corporate rules — to maintain the protection of your data throughout the transfer.

14. Amendments to This Policy

inibet reserves the right to update this Privacy Policy at any time. Material changes — particularly those that affect how we use your personal data or your privacy rights — will be communicated via a prominent notice on the platform and, where required by applicable law, by email to your registered address.

Continued use of the inibet platform following the effective date of any revised Policy constitutes acceptance of the updated terms. We encourage you to review this Policy periodically. The "Last Updated" date at the top of this page indicates the most recent revision.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the inibet Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Policy Enquiry" or "Data Rights Request" for faster routing.
• Response Time: We aim to acknowledge all data protection communications within five (5) business days.
• Live Chat: Available 24/7 via the inibet platform for general privacy queries.

For queries relating to the general Terms of Service governing your use of the platform, please refer to our Terms & Conditions. For account-specific questions and support, please visit our Help Centre / FAQ.