Superbet Privacy
Policy

This Privacy Policy ("Policy") describes how Superbet ("Superbet", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of users ("User", "Player", "you") who access or use the Superbet online sports betting and live casino platform at superbet.casa (the "Platform").

Superbet is an English-language platform purpose-built for Malaysian players. We recognise that our Users trust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is designed to give you full visibility into our data practices so that you can make informed decisions about your use of the Platform.

By registering an account or using any feature of the Superbet Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Policy, please discontinue use of the Platform.

Throughout this Policy, the following terms carry the meanings defined below:

• Personal Data: Any information that identifies or could reasonably identify a living individual, including name, identification number, contact details, IP address, and financial information.
• Processing: Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• Data Controller: Superbet, as the entity that determines the purposes and means of processing your Personal Data.
• Data Processor: Any third party that processes Personal Data on behalf of Superbet under a contractual arrangement and in accordance with our instructions.
• Consent: A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• Cookies: Small text files placed on your device by the Platform to enable functionality, track sessions, and analyse usage patterns.
• KYC Data: Identity verification documents and related data submitted as part of the Know Your Customer compliance process.

Superbet collects the following categories of personal data from Users of the Platform:

Superbet collects personal data through the following methods:

• Direct submission: Data you provide voluntarily during account registration, KYC verification, deposit and withdrawal requests, and support communications.
• Automated technologies: Technical and usage data collected automatically via cookies, server logs, and analytics tools when you access or interact with the Platform.
• Third-party sources: Identity and fraud screening data received from KYC verification partners, payment processors, and anti-money laundering (AML) screening services. All such third-party processors are contractually bound to handle your data in compliance with applicable data protection standards.
• Platform interactions: Betting and gaming activity data generated naturally through your use of sports betting markets, live casino games, and promotional features on the Platform.

Superbet processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and administering your Superbet account, including authentication and session management.
• Identity verification (KYC): Confirming your identity and age (21+ requirement) in compliance with applicable anti-money laundering and responsible gambling obligations.
• Transaction processing: Processing MYR deposits and withdrawals via your chosen payment channels (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and others).
• Service delivery: Providing access to sports betting markets (Liga Super Malaysia, EPL, UFC, esports), live casino games, and promotional programmes.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorised account access.
• Regulatory compliance: Fulfilling our obligations under applicable law, including record-keeping, audit requirements, and responding to lawful requests from authorities.
• Responsible gambling: Monitoring betting patterns to identify potential problem gambling behaviours and administering deposit limits, cool-off periods, and self-exclusion programmes.
• Customer support: Addressing and resolving account queries, complaints, and technical issues.
• Platform improvement: Analysing aggregated usage data to improve Platform performance, features, and user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and updates where you have provided consent and not subsequently opted out.

Superbet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification, and regulatory record-keeping requirements.
• Legitimate interests: Processing conducted for fraud prevention, platform security, and improving our services, where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Superbet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following circumstances:

• Payment processors: Financial data is shared with our payment partners (including e-wallet providers and Malaysian banking networks) solely for the purpose of processing your transactions.
• KYC and compliance partners: Identity verification data is shared with licensed identity verification and AML screening services to fulfil our regulatory obligations.
• Game providers: Limited technical data (such as session tokens) may be shared with our licensed international game studio partners to facilitate gameplay. These providers do not receive your personal identity data.
• Legal and regulatory authorities: We may disclose your data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where required by law or in response to a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving Superbet, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Superbet retains your personal data for as long as your account remains active and for a period thereafter as required by our legal, regulatory, and contractual obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your active account and for a minimum of 5 years after account closure, in accordance with applicable AML and financial record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or longer where required by applicable law.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter for compliance evidence.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised. You may request early deletion of certain data in accordance with your rights described in Section 11, subject to overriding legal obligations.

Superbet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored on our servers, including KYC documents and financial records.
• Two-factor authentication (2FA) options for account login to add an additional layer of access control.
• Role-based access controls limiting internal access to personal data to authorised personnel on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Secure, access-controlled data centres with physical security measures appropriate to the sensitivity of the data held.

Notwithstanding these measures, no method of electronic transmission or storage is entirely secure. While Superbet takes all reasonable precautions, we cannot guarantee the absolute security of your data. You are responsible for maintaining the security of your login credentials and must notify us immediately if you suspect any unauthorised access to your account.

The Superbet Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. The following categories of cookies may be used:

• Strictly necessary cookies: Required for the Platform to function correctly, including session management, authentication, and security features. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gambling tool configurations, to improve your experience across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform, enabling us to identify and fix issues and improve the overall experience.
• Marketing cookies: Used to personalise promotional content and measure the effectiveness of our communications, where you have provided consent.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the Platform. Your preferences regarding non-essential cookies can also be updated at any time by contacting our support team.

Subject to applicable law and Superbet's legitimate legal obligations, you have the following rights in relation to your personal data:

To exercise any of the above rights, please submit a written request to [email protected]. Superbet will respond within 30 days of receipt of a valid request. We may require identity verification before processing requests to protect against unauthorised data access.

The Superbet Platform is strictly intended for individuals aged 21 years and above. Superbet does not knowingly collect or process personal data from persons under the age of 21. Age verification is a mandatory step in the KYC process for all accounts.

If Superbet becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered an account on our Platform, please contact us immediately at [email protected].

In the course of operating the Superbet Platform and delivering our services to Malaysian players, your personal data may be transferred to and processed in countries outside Malaysia, including countries where our licensed game studio partners, KYC service providers, or cloud infrastructure providers are located.

Where personal data is transferred internationally, Superbet takes appropriate measures to ensure that such transfers are conducted in compliance with applicable data protection requirements. These measures may include the use of contractual data protection clauses, verification of the recipient's data protection standards, and limiting the scope of data transferred to only what is strictly necessary for the relevant purpose.

Superbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where material changes are made, we will update the "Effective Date" at the top of this Policy and may notify you via email or an in-Platform notification.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically. The current version is always accessible at superbet.casa/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Superbet Data Protection team using the details below:

We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline.