1. Introduction
kartubet88 ("we", "us", "our" or "the Platform") is committed to handling the personal data of its users — individuals who access, register on or interact with the kartubet88 website at kartubet88.buzz — with care, transparency and proportionality.
This Privacy Policy ("Policy") sets out the categories of personal data we collect from users in Malaysia and elsewhere, the purposes for which that data is processed, the conditions under which it may be shared with third parties, the security measures applied to protect it and the rights available to users regarding their own data.
By creating an Account, depositing funds or otherwise using the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside the kartubet88 Terms and Conditions and the Responsible Gambling Policy, which together form the complete user agreement.
Malaysian personal data protection considerations are informed by the Personal Data Protection Act 2010 (PDPA). Where applicable, kartubet88 seeks to handle Malaysian user data in a manner consistent with the principles of the PDPA. Nothing in this Policy constitutes legal advice on your individual rights under Malaysian law.
2. Definitions
The following definitions apply throughout this Policy unless context requires otherwise:
"Personal Data"
Any information relating to an identified or identifiable natural person, including name, contact details, financial information and device identifiers.
"Processing"
Any operation performed on personal data, including collection, storage, use, disclosure, transmission, erasure or destruction.
"Data Subject"
The identified or identifiable natural person to whom personal data relates — in this context, a registered or prospective kartubet88 user.
"Third Party"
A natural or legal person, public authority, agency or other body other than the Data Subject and kartubet88 that processes personal data.
"KYC Documents"
Identity and address verification documents submitted by users, including Malaysian MyKad, passport and supporting financial records.
"Cookies"
Small text files placed on a user's device by a website to store session information, preferences and analytical or tracking data.
3. Categories of Personal Data We Collect
Depending on how you interact with the kartubet88 Platform, we may collect the following categories of personal data:
- Registration data: Full legal name, date of birth, country of residence, city (for example Kuala Lumpur, Penang or Johor Bahru), email address, username and chosen password in hashed form.
- Identity verification (KYC) data: Copies of government-issued identification such as the Malaysian MyKad or passport, proof of address documents and, where required, source-of-funds information.
- Financial data: Payment method details sufficient to process deposits and withdrawals via supported Malaysian channels — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX — together with transaction amounts in MYR, timestamps and reference numbers.
- Account activity data: Betting history, session durations, game preferences, wager amounts, promotional use and communications with support.
- Technical data: IP address, browser type and version, operating system, device identifiers, screen resolution and time zone.
- Communications data: Records of support tickets, live chat transcripts and email correspondence submitted to or received from kartubet88.
- Responsible gambling data: Self-exclusion requests, deposit limit settings, cooling-off elections and related communications.
We do not collect sensitive data categories such as racial or ethnic origin, political opinions, health records or biometric identifiers beyond what is strictly necessary for statutory identity verification where required by the applicable licensing framework.
4. How We Collect Personal Data
kartubet88 collects personal data through the following primary channels:
- Directly from you when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact support or respond to a survey or promotion.
- Automatically through cookies, log files and similar technologies when you access the Platform from a browser or mobile device.
- From payment service providers that process transactions on your behalf, including confirmation of payment status and wallet identifiers, subject to those providers' own privacy notices.
- From identity verification services engaged to assist with KYC checks, which may return match results, risk scores or document authenticity assessments.
- From fraud prevention and analytics partners operating under data processing agreements with kartubet88.
5. Data Processing Purposes
kartubet88 processes personal data only for defined and legitimate purposes. The principal purposes are set out below:
- Account creation and management: To register, authenticate, maintain and close user accounts.
- Identity and age verification: To confirm that users are aged 21 or above and that registration details are accurate and genuine.
- Transaction processing: To facilitate deposits and withdrawals through the user's chosen payment method and to maintain accurate financial records in MYR.
- Fraud and security monitoring: To detect, investigate and prevent unauthorised access, money laundering, bonus abuse and other prohibited activity.
- Regulatory and licensing compliance: To meet obligations imposed by the applicable operating licence, including record-keeping and reporting.
- Customer support: To respond to queries, complaints and technical issues in a timely and effective manner.
- Platform improvement: To analyse aggregated usage patterns, test new features and improve the stability, security and content of the Platform.
- Responsible gambling: To administer deposit limits, session controls, self-exclusion periods and any referrals to support resources.
- Marketing communications: To send promotional information about kartubet88 offers, where the user has consented and not subsequently withdrawn that consent.
6. Legal Basis for Processing
Where a legal basis for processing is required by applicable data protection law, kartubet88 relies on one or more of the following:
- Contract performance: Processing that is necessary to deliver the services agreed when you register an Account and accept the Terms and Conditions.
- Legal obligation: Processing required to comply with applicable laws, licensing conditions or lawful requests from competent authorities.
- Legitimate interests: Processing that is necessary for fraud prevention, security monitoring, Platform improvement and responsible gaming management, where those interests are not overridden by the user's rights.
- Consent: Processing for optional marketing communications, non-essential cookies and certain analytics, where the user has provided a freely given, specific and informed consent that may be withdrawn at any time.
7. Data Sharing and Disclosure
kartubet88 does not sell personal data. We share data only in the circumstances listed below and only to the extent necessary for the stated purpose:
- Payment service providers: Data necessary to authorise, process and reconcile deposits and withdrawals, including e-wallet operators and banks offering DuitNow, FPX and related Malaysian payment services.
- KYC and identity verification partners: Name, date of birth and document images for the purpose of identity and age verification checks.
- Fraud prevention and analytics providers: Device, session and behavioural data to identify and mitigate fraud patterns, subject to contractual data protection obligations.
- IT infrastructure and hosting providers: Service providers that store or transmit data on behalf of kartubet88 under data processing agreements.
- Regulatory and law enforcement authorities: Where required by a valid legal obligation, court order or licensing requirement, kartubet88 may disclose personal data to competent public bodies.
- Successor entities: In the event of a merger, acquisition or transfer of all or part of the Platform business, user data may be transferred as part of that transaction, subject to equivalent privacy protections.
All third-party data processors engaged by kartubet88 are required to process data solely on documented instructions, maintain appropriate security measures and comply with applicable data protection laws.
8. Cookies and Tracking Technologies
kartubet88 uses cookies and similar technologies to operate and improve the Platform. The principal cookie categories in use are:
Strictly Necessary
Required for login session management, security token handling and basic Platform functionality. These cannot be disabled without affecting Platform operation.
Performance & Analytics
Collect aggregated data on page visits, session duration and errors to help kartubet88 identify and resolve technical issues and improve content quality.
Functional
Remember user preferences such as language settings, currency display and notification choices to provide a more consistent session experience.
Marketing & Attribution
Track which campaigns or referral sources led a user to the Platform, where consent has been given. These may be placed by approved advertising partners.
Most browsers allow users to view, block or delete cookies through the browser settings. Disabling strictly necessary cookies may prevent login or certain Platform features from operating correctly. Consent for non-essential cookies may be withdrawn by adjusting browser settings or, where provided, through the Platform cookie preference centre.
9. Data Retention
kartubet88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable law. The following general retention principles apply:
- Active Account data is retained for the duration of the user's account lifecycle plus a reasonable post-closure period to meet audit, legal and licensing obligations.
- Financial transaction records may be retained for a period required by applicable anti-money laundering or licensing rules, which is typically several years following the date of the transaction.
- KYC documents are retained for the period required to satisfy identity verification and regulatory record-keeping requirements.
- Support and communication records are retained to provide continuity of service and to resolve potential disputes.
- Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter as evidence of the original permission.
Where data is no longer required for any active purpose or legal obligation, kartubet88 will take steps to delete or anonymise it in a secure manner.
10. Data Security
kartubet88 applies technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. Measures in place include encryption of data in transit and at rest, access controls that restrict data access to authorised personnel, regular security assessments and documented incident response procedures.
Notwithstanding these measures, no system connected to the internet is entirely free from risk. Users are encouraged to use a strong, unique password for their kartubet88 Account, not to share login credentials and to contact support immediately if they suspect unauthorised Account access.
kartubet88 will never ask you to provide your password or one-time verification code by email, live chat or telephone. If you receive such a request, treat it as fraudulent and report it to the support team immediately at [email protected].
11. User Rights
Subject to applicable law and any limitations arising from legal or licensing obligations, users may hold the following rights in relation to their personal data held by kartubet88:
- Right of access: To request confirmation that kartubet88 holds your personal data and, where it does, to receive a copy of that data together with information about how it is processed.
- Right to rectification: To request correction of inaccurate personal data or completion of incomplete data held about you.
- Right to erasure: To request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal, regulatory or contractual obligations.
- Right to restrict processing: To request that kartubet88 limits the processing of your personal data in certain circumstances, such as while a dispute about accuracy is resolved.
- Right to object: To object to processing based on legitimate interests, including for direct marketing purposes, which kartubet88 will honour without requiring justification.
- Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Right to data portability: Where technically feasible and legally applicable, to receive a copy of data provided by you in a commonly used, machine-readable format.
To exercise any of the above rights, please submit a request to the kartubet88 support email with sufficient information to identify your Account and specify the right you wish to exercise. kartubet88 will respond within a reasonable period and may need to verify your identity before acting on the request.
12. Minors and Age Restrictions
The kartubet88 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data belonging to persons under the age of 21. Registration by or on behalf of a minor is prohibited and constitutes a material breach of the Terms and Conditions.
Where kartubet88 becomes aware or has reasonable grounds to believe that an Account belongs to a person under 21, the Account will be suspended pending investigation, any deposits may be returned and the data associated with that Account will be handled in accordance with applicable law and this Policy.
Parents and guardians in Malaysian households are encouraged to use parental control software and to keep Account credentials secure to prevent minors from accessing gambling services. Responsible gambling guidance is available on the dedicated Responsible Gambling page.
13. Amendments to This Policy
kartubet88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, licensing conditions or Platform features. The date shown at the top of this page will be updated whenever a material revision is made.
Where a change significantly affects how personal data is processed or the rights available to users, kartubet88 may provide notice through the Platform interface or Account communications prior to the change taking effect. Continued use of the Platform after the stated effective date constitutes acceptance of the revised Policy. If you do not agree with a material change, you should stop using the Platform and request Account closure.
14. Contact Us
If you have questions about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern, please contact the kartubet88 support team using the details below. Include your Account identifier and a clear description of your query. Do not include your password, one-time code or full payment credentials in any correspondence.
Support email: [email protected]
Live chat: available 24 hours a day, 7 days a week via the Platform interface.
Data subject requests will be acknowledged promptly. Complex requests involving account history, financial records or KYC data may require identity verification and additional processing time before a full response is issued.