Privacy Policy webet — Our Commitment to Protecting Your Personal Data

1 Personal Information We Collect

Webet collects your personal information through several means depending on your interactions with our platform. The types of information we collect include:

a) Information You Provide Directly

• Full name as per valid identification document.
• Date of birth for age verification purposes (18+).
• Active email address and mobile phone number.
• Bank details, account numbers and bank names for deposit and withdrawal processing.
• KYC documents such as a copy of your national ID, passport, or driving licence when required.
• E-wallet details such as your Touch 'n Go or GrabPay account number.

b) Information Collected Automatically

• IP address and general location data of your device.
• Browser type, operating system, and app version in use.
• Records of activity within the platform, including games played, login dates and times.
• Cookie data and similar tracking technologies to enhance the user experience.
• Mobile device information including device identifiers when you use the webet app.

2 How We Use Your Information

Webet uses collected personal information solely for legitimate purposes necessary to deliver the best service to you. The purposes for data use are as follows:

• Account Management: Creating, verifying and managing your user account, including the KYC process and age verification.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions on the platform securely and efficiently.
• Customer Support: Responding to your enquiries, complaints and support requests across all available support channels.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and any unauthorised use of the platform.
• Platform Improvements: Analysing usage patterns to improve the platform's performance, features and overall experience.
• Marketing Communications: Sending promotional information, exclusive offers and platform updates — only to users who have consented to receive such communications.
• Regulatory Compliance: Fulfilling applicable legal and regulatory obligations, including reporting requirements to relevant authorities.

3 Sharing Information with Third Parties

Webet does not sell, rent, or disclose your personal information to third parties for marketing purposes. However, there are limited situations where your information may be shared, namely:

• Service Providers: Companies that assist us in operating the platform, such as payment gateway providers, cloud infrastructure providers, and identity verification companies. All third parties are bound by strict confidentiality agreements.
• Regulatory Authority: When required by law or upon official request from a law enforcement agency, court, or qualified regulatory body.
• Fraud Prevention: Share necessary information with industry fraud prevention agencies to protect other users and the integrity of the platform.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets, user information may be transferred to the new entity with appropriate notice to users.

In all data-sharing cases, Webet ensures that the receiving parties comply with data protection standards equivalent to our own policy.

4 Data Security Measures

Webet continually invests in security infrastructure to ensure your personal data is protected against unauthorised access, disclosure, alteration, or destruction.

Security measures we have implemented include:

• Data Encryption in Transit: All communications between the platform and your device are secured by TLS 1.3 protocol with 256-bit encryption.
• Data Encryption at Rest: Sensitive information such as passwords and financial data is stored in encrypted format using industry-standard encryption algorithms.
• Two-Factor Authentication (2FA): An additional security layer that requires identity verification via OTP code each time you log in from a new device.
• 24/7 Monitoring: An automated threat detection system monitors for suspicious activity around the clock and responds automatically to any intrusion attempts.
• Internal Access Controls: The principle of least privilege applies — staff may only access data necessary for their specific roles.
• Regular Security Audits: Penetration testing and independent security audits are conducted at least twice a year.

5 Use of Cookies & Tracking Technologies

Webet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform to help us improve speed and usability.
• Functional Cookies: Saving your preferences such as language, display settings and game preferences for a smoother return experience.
• Analytics Cookies: Helping us understand platform traffic and usage patterns in aggregated, anonymised form for improvement purposes.

You can manage cookie settings through your browser settings at any time. However, disabling certain cookies may affect your user experience on the Webet platform.

6 Your Rights as a User

As a webet platform user, you have the following rights regarding your personal information:

To exercise any of the above rights, please contact our support team. We will process your request within 30 business days of receipt.

7 Data Retention and Deletion

Webet retains your personal information for as long as your account is active or as needed to provide services to you. Upon account closure, we will retain your data for the minimum period required by applicable laws and regulations before permanent deletion.

General data retention guidelines are as follows:

• Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by authorities.
• Communication Logs: Retained for 2 years for customer support and dispute resolution purposes.
• Platform Activity Data: Retained for 12 months for service improvement and security purposes.

Once the designated retention period expires, your data will be permanently deleted or anonymised so that it can no longer be associated with you.

8 Children's Privacy

The webet platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

If we find that a child's personal information has been collected without proper age verification, we will take immediate action to delete that information and close the relevant account.

9 Changes to This Privacy Policy

Webet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features.

When significant changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date displayed at the top of this document.
• Sending notifications to all registered users via email or in-platform notifications.
• In the case of very significant changes, seek renewed consent from users before the changes take effect.

We encourage you to review this Privacy Policy periodically. Continued use of the Webet platform after any changes take effect will be considered acceptance of the updated policy.

10 How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, you may contact our Data Protection Officer through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 on the webet platform
• FAQ Page: Visit our FAQ section for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related enquiries within 3 business days. For formal data rights requests, our response period is within 30 business days in accordance with applicable legal requirements.