Betzula Privacy Policy

This Privacy Policy ("Policy") describes how Betzula ("Betzula", "the Company", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals ("you", "the User", or "the Player") who access or use the Betzula online betting and live casino platform at https://betzula.click ("the Platform").

Betzula is committed to safeguarding the privacy and personal data of all users, including Malaysian players who access the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. We operate in accordance with applicable data protection principles and take our obligations seriously.

By registering an account, accessing the Platform, or submitting any personal information to Betzula, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and Betzula. In the event of any conflict between this Policy and the Terms, the Terms shall prevail.

For clarity and consistency throughout this Policy, the following terms are defined as follows:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes name, email address, phone number, date of birth, payment details, device identifiers, and IP addresses.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, alteration, transmission, erasure, or destruction.
• "Data Controller" means Betzula, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party entity that processes personal data on behalf of Betzula under a formal data processing agreement.
• "KYC Data" means identity verification documentation, including copies of your Malaysian MyKad, passport, proof of address, and payment method screenshots.
• "Cookies" means small text files stored on your device by the Platform that enable functionality, session management, and analytical tracking.
• "Third Party" means any entity other than Betzula and the User, including payment processors, game providers, and analytics platforms.
• "PDPA" means the Malaysian Personal Data Protection Act 2010, which governs the processing of personal data in commercial transactions in Malaysia.

Betzula collects personal data in several categories depending on your interactions with the Platform. The following table summarises the categories of data collected, with examples:

Betzula collects personal data through the following means:

The majority of personal data we hold is provided directly by you when you create an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings. This includes the personal, contact, and financial data categories listed in Section 3.

When you access the Betzula Platform — whether via desktop browser, mobile browser, or any other means — we automatically collect certain technical data including your IP address, device identifiers, browser information, session timestamps, and navigation patterns. This data is collected using cookies, log files, and similar tracking technologies, as further described in Section 8.

We may receive data about you from third-party identity verification providers used to conduct KYC checks, from payment processors including Maybank, CIMB, Public Bank, DuitNow FPX, Touch 'n Go eWallet, Boost, and GrabPay in connection with transaction processing, and from fraud detection and analytics vendors. Data received from third parties is subject to the same protections described in this Policy.

In limited circumstances and strictly for fraud prevention and AML compliance purposes, Betzula may cross-reference publicly available data sources to verify the accuracy of information you have provided. This does not constitute profiling for commercial purposes.

Betzula processes your personal data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and administering your player account on the Platform, including login authentication and account security.
• Identity and Age Verification (KYC): Confirming your identity, verifying that you are at least 21 years of age, and satisfying our regulatory Know Your Customer obligations.
• Payment Processing: Facilitating deposits and withdrawals in MYR via your chosen Malaysian payment method, including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and direct bank transfer with Maybank, CIMB, Public Bank, and Hong Leong.
• Regulatory Compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling obligations imposed by our licensing authority.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account abuse, bonus manipulation, and other prohibited conduct on the Platform.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance through our multilingual support channels.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the features, performance, and user experience of the Betzula Platform.
• Responsible Gambling: Monitoring betting behaviour for indicators of problem gambling, administering deposit limits, cool-off periods, and self-exclusion requests.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time through your account settings.
• Legal Claims: Establishing, exercising, or defending legal claims, including compliance with court orders and regulatory investigations.

Betzula processes your personal data on one or more of the following lawful bases, consistent with applicable data protection principles:

• Contractual Necessity: Processing is necessary to perform the contract between you and Betzula (i.e., to operate your account, process transactions, and provide betting services).
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including AML laws, KYC requirements, and licensing conditions.
• Legitimate Interests: Processing is necessary for Betzula's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests do not override your privacy rights.
• Consent: In cases where processing is not justified by the above bases — primarily direct marketing communications — Betzula relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Betzula does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for each specified purpose:

To facilitate deposits and withdrawals, Betzula shares necessary financial data with our payment processing partners including e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow/FPX infrastructure operators, and banking partners (Maybank, CIMB, Public Bank, RHB, Hong Leong). These processors act as data processors under contractual data processing agreements and may only use your data for the specific processing purpose authorised by Betzula.

Betzula uses third-party identity verification and fraud detection services to conduct KYC checks. These providers may receive copies of your identity documents and biometric data (where applicable) solely for the purpose of verifying your identity on our behalf. All such providers are required to maintain data security standards equivalent to or greater than those described in this Policy.

The Betzula Platform includes casino games and live casino tables provided by third-party game studios and platform providers. These providers may receive anonymised player session data for game integrity, RTP audit, and technical support purposes. Game providers do not receive personally identifiable information unless required for regulatory compliance.

Betzula may be legally required to disclose personal data to regulators, law enforcement agencies, tax authorities, or courts in response to lawful requests, subpoenas, court orders, or regulatory investigations. We will always endeavour to notify you of such disclosures unless legally prohibited from doing so.

In the event of a merger, acquisition, or sale of all or a material portion of Betzula's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users in advance of any such transfer and provide an opportunity to close their account before data is transferred to a new controller.

Betzula uses cookies and similar technologies to operate and improve the Platform. Below is a summary of the cookie types used:

These cookies are strictly necessary for the Platform to function. They enable login session management, security token validation, and navigation. The Platform cannot operate without these cookies and they cannot be disabled.

Betzula uses analytics cookies to collect aggregated, anonymised information about how users navigate the Platform — including page views, session duration, and feature usage. This data is used solely to improve Platform performance and user experience. No personally identifiable information is included in analytics reports.

These cookies remember your preferences — such as language settings and display preferences — to provide a more personalised experience on return visits.

You may manage or restrict non-essential cookies through your browser settings. Note that disabling certain cookie categories may impair Platform functionality. Your browser documentation will explain how to manage cookie preferences on your specific device and browser version.

Betzula retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. The following indicative retention periods apply:

• Account Data: Retained for the duration of your account relationship with Betzula, and for a period of five (5) years following account closure, to satisfy AML and regulatory record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, in accordance with anti-money laundering regulatory requirements.
• Transaction Records: Retained for seven (7) years from the date of each transaction, in line with standard financial record-keeping standards.
• Customer Support Communications: Retained for two (2) years following the resolution of each support interaction, unless ongoing legal proceedings require a longer retention period.
• Technical and Behavioural Data: Retained in anonymised or aggregated form for analytical purposes for up to two (2) years. Identifiable technical data is deleted within twelve (12) months of collection.
• Marketing Preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that renders re-identification impossible.

Betzula implements a comprehensive set of technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the Betzula Platform is encrypted using SSL/TLS protocols.
• At-Rest Encryption: Sensitive personal data stored in our databases, including KYC documents and payment details, is encrypted at rest using industry-standard algorithms.
• Two-Factor Authentication (2FA): 2FA is available to all registered players and is strongly recommended to protect account access.
• Access Controls: Access to personal data within Betzula's internal systems is restricted to personnel with a legitimate need to access that data, subject to role-based permissions and audit logging.
• Penetration Testing: Betzula's Platform undergoes regular security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: Betzula maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players and relevant authorities without undue delay.

Subject to applicable law and our regulatory obligations, you hold the following rights with respect to your personal data held by Betzula. To exercise any of these rights, please contact our support team as described in Section 14.

The Betzula Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. Our registration process includes age verification steps, and KYC procedures are in place to confirm that all players meet the minimum age requirement.

If Betzula discovers or is notified that a user under the age of 21 has registered an account, the account will be immediately suspended, all personal data collected will be securely deleted, any deposits made will be returned to the source, and no winnings will be paid out.

If you are a parent or guardian and you believe that a minor may have registered an account on Betzula without your knowledge, please contact our support team immediately at [email protected] and we will take prompt action.

Betzula reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. The most current version of this Policy will always be published at https://betzula.click/privacy-policy, with the effective date clearly indicated at the top.

Where amendments are material — meaning they significantly affect your rights or the way your data is processed — Betzula will endeavour to provide you with prior notice via your registered email address or via a prominent in-platform notification. Your continued use of the Platform following any such update constitutes acceptance of the revised Policy.

We recommend reviewing this Policy periodically, particularly before providing any new categories of personal information to the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Betzula processes your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Betzula Platform. Average response time is 3–5 minutes. Support is available in English, Bahasa Melayu, and Mandarin.
• Email: [email protected] — Data rights requests sent by email will receive a written response within 30 days.

All data rights requests will be handled by Betzula's designated data privacy team. We may require you to verify your identity before processing your request to ensure we do not disclose or act upon data instructions from an unauthorised party.

Betzula's customer support team is based in Kuala Lumpur and operates on a 24/7 basis. We are committed to resolving all privacy-related queries promptly and transparently.