Privacy Policy grabet

This Privacy Policy is issued by grabet ("we", "grabet", "platform") and applies to all users who register an account, use the services, or interact with the grabet website at grabet.org. This Policy describes our privacy practices regarding the collection, use, storage, transfer and disclosure of your personal information.

By registering an account or continuing to use grabet services, you acknowledge that you have read, understood and agreed to this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform.

grabet collects various categories of personal information to enable us to provide online gambling services that are safe, responsible and compliant with international licensing requirements. The information collected includes:

Account Registration Information

• Full name as shown on your identity card or MyKad
• Date of birth to verify age eligibility (21 years and above)
• An active email address
• A valid mobile phone number
• Username and password chosen by you
• Current residential address

Identity Verification Information (KYC)

• Copy of a valid identity card (MyKad) or passport
• Proof of current address document (utility bill or bank statement)
• Additional information required by the licensing regulatory body

Financial Information

• E-wallet account numbers (Touch 'n Go eWallet, DuitNow)
• Bank account information used for FPX transactions
• Cryptocurrency wallet addresses (USDT, BTC, ETH) where applicable
• Deposit and withdrawal transaction history

Usage and Technical Information

• IP address and information about the device used
• Login data including time, location and frequency of access
• Game history and betting records
• Cookie data and relevant website tracking technologies

The personal information we collect is used solely for legitimate purposes related to providing grabet services. The main purposes for which data is used are as follows:

• Account Management: Creating, verifying and maintaining your user account securely.
• Transaction Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX and cryptocurrency accurately and securely.
• KYC and AML Compliance: Meeting legal obligations related to identity verification and Anti-Money Laundering (AML).
• Customer Support: Providing 24/7 support assistance via live chat and email in Malay and English.
• Platform Security: Detecting and preventing fraud, account misuse and cybersecurity threats.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.
• Service Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience.
• Service Communications: Sending important notices about your account, policy updates and relevant bonus information.

grabet follows a data minimisation principle in all data sharing. We do not disclose your personal information to third parties except in the following circumstances:

• Payment Service Providers: Data required to process your financial transactions through the relevant e-wallet providers, banks or cryptocurrency exchanges.
• Game Providers: Minimum technical information required by game software providers to deliver a smooth gaming experience.
• Licensing and Regulatory Bodies: When required by licensing authorities or valid legal orders.
• Identity Verification Services: Certified KYC partners for the purpose of verifying your identity documents.
• Legal Authorities: When ordered by a court or law enforcement body with valid jurisdiction.

All third-party partners who receive grabet user data are required to comply with strict confidentiality agreements and may only use that data for the specified purposes.

grabet continuously invests in cybersecurity infrastructure to ensure member personal data remains secure at all times. The key security measures we implement are:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols
• Data encryption at rest using industry-tested algorithms
• Role-based access control (RBAC) that limits data access to authorised personnel only
• 24/7 system monitoring to detect unusual activity or intrusions
• Regular security audits by independent third parties
• Planned incident response procedures to handle any data breaches
• Ongoing security awareness training for all grabet staff

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also have a responsibility to protect your account by using a strong password and not sharing your login credentials with anyone.

grabet retains your personal information for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we will retain certain records for the period required by legal and licensing obligations, which typically includes:

• Financial transaction records to meet financial compliance requirements
• Identity verification (KYC) information for anti-money laundering purposes
• Account activity logs required by international licensing bodies
• Information relating to any unresolved disputes or claims

Once the required retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.

grabet uses cookies and similar tracking technologies to improve the user experience on our website. The types of cookies we use are:

• Essential Cookies: Required for basic website functions such as login, sessions and security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use our website to help us improve our services.
• Functional Cookies: Remember your preferences and settings to provide a more personalised experience.
• Analytics Cookies: Used to understand aggregate usage patterns for the purpose of platform improvement.

You can manage cookie settings through your internet browser. However, disabling certain cookies may affect your ability to use all features of the grabet platform.

As an online gambling platform operating under international licensing, grabet may process or store your data on servers located outside Malaysia. In such cases, we ensure that those data transfers are carried out with protection measures that are equivalent to or stricter than the standards practised in Malaysia.

All cross-border data transfers are subject to data processing agreements that comply with international standards for personal data protection. grabet is responsible for ensuring that data recipients outside Malaysia provide an adequate level of protection.

grabet services are restricted to individuals aged 21 and above only. grabet does not knowingly collect personal information from individuals under the age of 21. If we find that personal data of an individual below the age limit has been collected, the account in question will be terminated immediately and the data will be deleted.

If you believe that someone under the age of 21 has registered an account with grabet, please contact our support team immediately so that appropriate action can be taken.

grabet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements or technological developments. Any material changes will be communicated to you through:

• A prominent notice on the grabet website before the changes take effect
• A notification sent by email to the address registered in your account
• An update to the "Last Updated" date at the top of this policy

Continued use of grabet services after the effective date of such changes is considered your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.