Grandbet Privacy Policy

Introduction

This Privacy Policy describes the practices of Grandbet ("Grandbet", "we", "us" or "our") regarding the collection, use, disclosure, storage and protection of personal data provided by or generated by individuals ("you", "user" or "player") who visit the Grandbet website or use any associated service, including sports betting, live casino, slot games, account registration and customer support.

Grandbet operates as a Malaysia-facing platform. Where Malaysian personal data protection principles apply, we endeavour to comply with the obligations relevant to online service operators handling data of Malaysian residents.

By registering a Grandbet account, depositing funds, claiming a bonus or otherwise using the platform, you confirm that you have read this Privacy Policy and accept the practices described. If you do not accept these practices, you should not use Grandbet.

Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• Personal Data — any information that identifies or can reasonably identify a specific individual, such as a name, identity number, email address, phone number or financial account detail.
• Processing — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure or deletion.
• Data Subject — the individual whose personal data is processed; for Grandbet purposes this is primarily the registered player or platform visitor.
• KYC — Know Your Customer identity verification checks, including document collection, age confirmation and payment method verification.
• Cookies — small text files placed on a device by a website to retain state, preferences or analytical data.
• Third-Party Service Provider — an external entity engaged by Grandbet to fulfil a specific function, such as payment processing, fraud screening or hosting.

Data We Collect

Grandbet collects personal data through several channels depending on how you interact with the platform.

3.1 Registration and Account Data

When you create a Grandbet account, we collect your full name, date of birth, email address, mobile number, preferred currency (MYR), username and a hashed form of your password. This data is required to open and maintain a valid account.

3.2 Identity Verification (KYC)

To comply with age verification, payment security and anti-fraud requirements, we may request a copy of your MyKad or passport (front and back), recent address document such as a utility bill or bank statement, and a live selfie photograph. These documents are used only for verification and are stored securely.

3.3 Payment Data

Grandbet records transaction identifiers, deposit amounts in MYR, withdrawal amounts, processing timestamps and the payment channel used (for example DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Maybank or CIMB). Raw card numbers are handled solely by our certified payment processor and are not stored on Grandbet servers.

3.4 Usage and Activity Data

We automatically collect platform interaction data, including betting history, games played, session duration, device type, browser version, operating system, IP address, approximate geolocation (country or city level) and referring page. This data is used to operate the service, detect fraud and improve platform performance.

3.5 Communications Data

If you contact Grandbet customer support through live chat or email, we retain a record of the conversation, including messages, timestamps and agent notes. These records support quality assurance, dispute resolution and account security.

Data Processing — Lawful Basis and Purposes

Grandbet processes personal data only where there is a legitimate, lawful basis to do so. The principal purposes and corresponding bases are described below.

• Contract performance. Processing your registration, deposits, wagers and withdrawals is necessary to provide the services you have requested under the Grandbet Terms & Conditions.
• Legal obligation. Age verification, KYC checks, transaction record-keeping and anti-moneylaundering monitoring are required to meet applicable legal and regulatory obligations.
• Legitimate interests. Fraud detection, platform security, responsible gambling monitoring and internal analytics are carried out on the basis of Grandbet's legitimate interests in operating a safe and compliant service, balanced against player interests.
• Consent. Where we seek to send promotional messages unrelated to account operation, we will request separate consent and will respect any opt-out.

Data Retention Periods

Grandbet does not keep personal data longer than necessary for the stated purpose, subject to legal minimum retention periods. General retention guidelines are as follows:

• Active account data is retained for the full duration of the account relationship.
• Transaction and financial records are retained for a minimum of seven years following the transaction date to satisfy record-keeping obligations.
• KYC and identity documents are retained for the period required by applicable anti-money-laundering standards, typically five to seven years following account closure.
• Customer support communications are typically retained for three years following the last contact, unless a dispute remains open.
• Website usage logs are retained for up to twelve months for security and performance purposes before being anonymised or deleted.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Disclosure to Third Parties

Grandbet does not sell your personal data. We may share personal data with the following categories of recipient, strictly for the purposes described:

• Payment service providers. Entities processing DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, GrabPay, Boost and cryptocurrency transactions receive the minimum data necessary to complete payment instruction and fraud screening.
• Identity verification partners. KYC document review may involve a specialist verification service that is contractually bound to process data only as instructed by Grandbet.
• Hosting and infrastructure providers. Cloud hosting and content delivery providers store platform data in secure, access-controlled environments.
• Fraud and security vendors. Grandbet may use specialist tools to detect account abuse, bot activity and payment fraud. These tools receive session metadata, not full personal profiles.
• Legal and regulatory authorities. Grandbet may disclose personal data to law enforcement, regulatory bodies or courts when required by applicable law, a lawful court order or in connection with a regulatory investigation.

Any third party that processes personal data on Grandbet's behalf is subject to appropriate data processing obligations and is not permitted to use that data for their own purposes.

Cookies and Similar Tracking Technologies

Grandbet uses the following categories of cookie on the platform:

• Strictly necessary cookies. These maintain your login session, language preference and security tokens. Without them the platform cannot function correctly. They cannot be disabled.
• Functional cookies. These remember display preferences, game settings and communication opt-outs so that you do not need to reconfigure them on each visit.
• Analytics cookies. Aggregated, anonymised data about page visits, session length and navigation patterns helps Grandbet improve the platform layout, speed and content. Individual-level marketing profiles are not built from this data.

Grandbet does not use third-party advertising cookies to track you across other websites. If your browser settings prevent non-essential cookies, some preferences may not be retained between sessions, but core betting and account functions will remain available.

Data Security

Grandbet maintains technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your browser and Grandbet servers.
• AES-256 encryption for personal data and KYC documents stored at rest.
• Role-based access controls ensuring that staff may only access personal data required for their specific function.
• Automated monitoring for unusual login patterns, payment anomalies and data access events.
• Regular internal security reviews and vulnerability assessments of platform infrastructure.

Players also have a role in maintaining account security. You should use a strong, unique password for Grandbet, enable two-factor authentication where available, and contact support immediately if you suspect unauthorised access.

User Rights

Subject to applicable law and regulatory exceptions, players whose personal data is held by Grandbet may exercise the following rights by contacting customer support:

To exercise any of the rights above, contact Grandbet customer support through the live chat on the platform. Requests are subject to identity verification to prevent unauthorised access to account data. The email for written enquiries is displayed in plain text: [email protected]

Minors and Age Verification

Grandbet is strictly for players aged21 years and above. We do not knowingly collect personal data from minors. Age verification is a mandatory step of the KYC process and is required before a withdrawal can be processed.

If Grandbet discovers that an account was opened by an individual under 21, the account will be suspended immediately, any winnings will be forfeited, and deposits will be returned after the verification process confirms the deposit payment method. Personal data collected in connection with such an account will be retained only as long as required to manage the closure and comply with applicable law.

If you are a parent or guardian and believe a minor has accessed Grandbet services, please contact support at once so that we can take prompt action.

Changes to This Privacy Policy

Grandbet may update this Privacy Policy from time to time to reflect changes in platform features, applicable law, payment methods or our data practices. Material changes — those that significantly affect your rights or our data processing activities — will be communicated through a platform notice or account notification before they take effect.

The version reference and effective date displayed at the top of this page indicate the currently applicable edition. Continuing to use Grandbet after an updated Privacy Policy takes effect constitutes your acknowledgement of the revised terms.

Contact Us

For questions, access requests, correction requests or privacy concerns relating to this Privacy Policy or the personal data Grandbet holds about you, please contact us through the platform's 24/7 live chat. Our support team operates in English, Bahasa Melayu and Mandarin to accommodate the full range of Malaysian players.

Written enquiries may be directed to the following address displayed as plain text: [email protected]

For general platform questions, fee structures, game rules and account guidance, the FAQ page covers the most common topics. For the full platform rules governing betting, bonuses and account conduct, refer to the Terms & Conditions.