Privacy Policy

This Privacy Policy (hereinafter "Policy") is published by Mavibet (hereinafter "Mavibet", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at mavibet.asia (hereinafter the "Platform"). This Policy applies to all registered users, visitors, and any other individuals whose personal data is processed in connection with their interaction with the Platform (collectively referred to as "you", "your", or "Player").

Mavibet recognises that personal privacy is a fundamental right. We are committed to handling all personal data entrusted to us with appropriate care, transparency, and respect. This Policy explains, in clear terms, how we collect personal information, the purposes for which we use it, the safeguards we apply to protect it, and the choices available to you regarding your data.

By accessing or using the Platform, registering an account, or providing personal information through any channel associated with Mavibet, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and, if applicable, close your registered account.

The following definitions apply throughout this Privacy Policy:

• 2.1 "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, identification number, email address, phone number, residential address, payment details, device identifiers, and IP address.
• 2.2 "Data Controller" means Mavibet, being the entity that determines the purposes and means of processing Personal Data in connection with the Platform.
• 2.3 "Data Processor" means any third-party service provider that processes Personal Data on behalf of Mavibet under a contractual arrangement, including payment processors, KYC verification providers, and analytics service providers.
• 2.4 "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, and deletion.
• 2.5 "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by you to the processing of your Personal Data for a stated purpose.
• 2.6 "KYC Documents" means identity and address verification documents submitted by you to Mavibet as part of the account verification process, including valid Malaysian identity cards (MyKad), passports, driver's licences, and proof of residential address.

Mavibet collects the following categories of Personal Data in the course of operating the Platform and providing services to registered players:

Mavibet collects Personal Data through the following channels and mechanisms:

• 4.1 Account Registration: When you create an account on the Platform, you directly provide your name, email address, phone number, date of birth, and chosen login credentials. This data is collected and stored from the moment of registration.
• 4.2 KYC Verification Process: When you initiate a withdrawal for the first time, or when Mavibet requires identity verification, you upload KYC documents through the designated secure upload facility within your account dashboard.
• 4.3 Financial Transactions: When you make a deposit or withdrawal using Malaysian payment methods such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX, transaction metadata (including reference numbers, amounts, timestamps, and payment method identifiers) is recorded by our payment processing systems.
• 4.4 Automated Technical Collection: When you access and use the Platform, we automatically collect technical data including your IP address, device type, browser version, operating system, session start and end times, pages visited, and any errors encountered. This data is collected via server logs and, where applicable, analytics tools.
• 4.5 Cookies and Similar Technologies: We use cookies and local storage mechanisms to maintain your session, remember your preferences, and (where consent is given) collect analytics data. Please refer to Section 10 for a detailed explanation of our cookie practices.
• 4.6 Customer Support Interactions: When you contact Mavibet via live chat or email, the content and metadata of those communications are retained in our support systems for the purpose of resolving your query and maintaining a record of interactions.

Mavibet processes Personal Data only where a lawful basis exists for doing so. The primary legal bases on which we rely are as follows:

• 5.1 Contractual Necessity: Processing is necessary to perform our obligations under the agreement between Mavibet and you as a registered user — including account management, transaction processing, and provision of gaming and betting services.
• 5.2 Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, counter-financing of terrorism (CFT) regulations, and identity verification mandates applicable to online gaming operators.
• 5.3 Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and improving the quality and performance of our services — provided these interests are not overridden by your fundamental rights and freedoms.
• 5.4 Consent: Where processing is not otherwise justified by the above bases — in particular for direct marketing communications and non-essential cookie placement — we will rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Mavibet uses Personal Data for the following specific purposes, each of which is grounded in a lawful basis as described in Section 5:

• 6.1 Registering and maintaining your account, including authentication and access control
• 6.2 Processing financial deposits and withdrawals via Malaysian payment channels, including verification of payment ownership
• 6.3 Verifying your identity and age (21+) through the KYC process prior to authorising withdrawal transactions
• 6.4 Detecting, investigating, and preventing fraud, money laundering, suspicious transactions, and other prohibited conduct as defined in our Terms & Conditions
• 6.5 Fulfilling responsible gambling obligations — including monitoring betting patterns for signs of problem gambling behaviour, enforcing self-exclusion orders, and administering deposit and session limits
• 6.6 Providing customer support and resolving disputes, complaints, and queries raised through our live chat or email support channels
• 6.7 Sending transactional and operational communications including account notifications, security alerts, and policy update notices
• 6.8 Sending promotional and marketing communications about Mavibet bonuses, promotions, and platform updates — where you have provided consent or where otherwise permitted
• 6.9 Analysing platform usage to improve performance, identify technical issues, and develop new features and services
• 6.10 Complying with applicable laws, regulatory requirements, court orders, and lawful requests from competent authorities

Mavibet does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share Personal Data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• 7.1 Payment Processors: We share necessary transaction data with licensed Malaysian and international payment service providers — including operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX — solely to process deposits and withdrawals on your behalf.
• 7.2 KYC and Identity Verification Providers: We may engage licensed third-party identity verification services to assist with document authentication, age verification, and fraud detection. These providers process your KYC documents under strict contractual data protection obligations.
• 7.3 Technology and Hosting Providers: Our platform infrastructure, database hosting, and content delivery systems are managed by third-party technology providers operating under data processing agreements that require them to maintain appropriate security standards.
• 7.4 Regulatory and Law Enforcement Authorities: Mavibet will disclose Personal Data to relevant regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or regulatory direction. We will, where lawfully permitted, notify affected users of such disclosures.
• 7.5 Business Transfers: In the event of a merger, acquisition, or sale of all or part of Mavibet's business, Personal Data held by Mavibet may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected users will be notified of any such transfer.

Mavibet retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory retention obligations. The following general retention periods apply:

• 8.1 Account Data: Retained for the duration of your active account relationship with Mavibet, plus a minimum of five (5) years following account closure, to satisfy regulatory record-keeping requirements applicable to online gaming operators.
• 8.2 Financial Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years from the date of the transaction, in compliance with applicable anti-money laundering and financial record-keeping requirements.
• 8.3 KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years following the closure of your account or the completion of the relevant verification process, whichever is later.
• 8.4 Support Communications: Customer support interaction records are retained for a minimum of three (3) years from the date of the most recent communication in a given thread, to facilitate dispute resolution and quality assurance.
• 8.5 Technical and Log Data: Server logs and technical access records are retained for a rolling period of twelve (12) months, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, Personal Data will be securely deleted, anonymised, or otherwise disposed of in accordance with Mavibet's internal data lifecycle management procedures.

Mavibet implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes, but is not limited to, the following measures:

• 9.1 Encryption in Transit: All data transmitted between your device and the Mavibet Platform is encrypted using TLS (Transport Layer Security) with a minimum 256-bit key length. The Platform is accessible exclusively over HTTPS.
• 9.2 Encryption at Rest: Personal Data stored in our databases, including KYC documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• 9.3 Access Controls: Access to Personal Data within Mavibet's systems is restricted on a strict need-to-know basis. All internal access is authenticated, logged, and subject to periodic access review. Administrative access to sensitive systems requires multi-factor authentication.
• 9.4 Security Monitoring: Our infrastructure is continuously monitored for intrusion attempts, anomalous access patterns, and potential data breaches using automated detection and alerting systems.
• 9.5 Data Breach Response: In the event of a confirmed personal data breach that poses a risk to affected individuals, Mavibet will take immediate containment measures and, where required by applicable law, notify affected users and relevant authorities within the applicable statutory timeframe.

Mavibet uses cookies and similar browser-based technologies to enable core Platform functionality, improve user experience, and (where consent is provided) understand how players use the Platform.

You may adjust your cookie preferences at any time through your browser settings. Disabling essential cookies will impair or prevent your access to the Platform. Disabling optional cookies will not affect your ability to use the Platform's core features.

Subject to applicable data protection law and the limitations set out therein, you have the following rights in respect of your Personal Data held by Mavibet:

To exercise any of the above rights, please submit a written request to our support team at [email protected] with the subject line "Data Subject Request — [Your Request Type]". Include your full registered name and Account ID to allow us to locate and process your request promptly. We will verify your identity before processing any request.

We aim to respond to all valid data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

Mavibet may send you promotional communications regarding bonuses, new games, special offers, and platform updates. We will only send marketing communications where you have provided consent at registration or subsequently opted in via your account communication preferences.

• 12.1 You may opt out of marketing communications at any time by adjusting your notification preferences within your Account settings, or by contacting our support team with an unsubscribe request. Opting out of marketing communications will not affect the receipt of essential transactional notifications.
• 12.2 Players who have initiated or are currently subject to a self-exclusion period will not receive any marketing communications from Mavibet during the exclusion period. This suppression is applied automatically upon activation of self-exclusion.
• 12.3 Mavibet does not use Personal Data to conduct profiling for third-party advertising purposes. Any promotional communications you receive from Mavibet relate exclusively to Mavibet's own services and promotions.

The Mavibet Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC processes.

If Mavibet discovers or is notified that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to close the relevant account, delete the associated data, and reverse any financial transactions to the extent practicable.

If you believe that a minor may have accessed or registered on the Platform, please notify us immediately at [email protected] so that we may investigate and take appropriate action.

Mavibet operates in the context of a global technology ecosystem. As a result, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Such transfers may occur in connection with the operation of our hosting infrastructure, engagement of KYC verification providers, and use of technology platform services.

In all cases where Personal Data is transferred outside Malaysia, Mavibet takes appropriate measures to ensure that the receiving party provides an adequate level of data protection through one or more of the following mechanisms:

• Execution of standard contractual clauses or data transfer agreements that impose equivalent data protection obligations on the receiving party
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection comparable to applicable Malaysian standards
• Implementation of additional technical and organisational safeguards to compensate for any identified gaps in the receiving jurisdiction's data protection framework

If you would like further information about the safeguards applied to cross-border transfers of your Personal Data, please contact our support team in writing.

Mavibet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. The date at the top of this Policy reflects the date of the most recent revision.

Where amendments are material — meaning they significantly affect the nature, scope, or purposes of processing — Mavibet will notify registered users by email to their registered address or by posting a prominent notice on the Platform prior to the amendment taking effect.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy. If you do not agree with any amendment, you should cease use of the Platform and may request account closure.

The current version of this Privacy Policy is always accessible at mavibet.asia/privacy-policy.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a potential privacy concern, please contact the Mavibet Data & Privacy team through the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. It should be read in conjunction with Mavibet's Terms & Conditions and Responsible Gambling Policy.