efesbet Privacy Policy

efesbet ("we", "us", "our" or "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the efesbet website and associated services at efesbet.lat. This Privacy Policy ("Policy") sets out in clear, formal terms what personal data we collect, why we collect it, how it is processed, how long it is retained and what rights you hold as an efesbet account holder or site visitor.

This Policy applies to all players registered with efesbet, including Malaysian residents accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and all other locations. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the efesbet Terms & Conditions and Responsible Gambling Policy, both of which form part of the complete agreement governing your use of the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3.1 Account Registration Data

When you register an efesbet account, we collect the information you submit through the registration form, which typically includes:

• Full legal name
• Date of birth (to verify that you are aged 21or above)
• Residential address (including city — for example, Kuala Lumpur, Petaling Jaya, Penang)
• Email address
• Contact phone number
• Preferred currency (MYR)
• Username and password (password stored in hashed form only)

3.2 KYC and Identity Verification Data

To comply with applicable regulations and to process withdrawals, efesbet may request copies of government-issued identity documents such as your MyKad, passport or driver's licence, as well as proof of address documents such as a recent utility bill or bank statement.

3.3 Financial and Payment Data

When you make a deposit or withdrawal using Malaysian payment channels — including Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost or GrabPay — we collect transaction reference identifiers, account or wallet identifiers and transaction timestamps. Full banking credentials are not stored by efesbet; these are handled directly by the relevant payment processor.

3.4 Technical and Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, referring URL, pages visited and session duration. This data is used for security monitoring, fraud detection and Platform performance analytics.

3.5 Gameplay and Betting Activity

efesbet logs betting and gaming activity associated with your account, including bet history, stake amounts, game selections, session times and bonus usage. This data is required for account administration, dispute resolution and responsible gambling monitoring.

efesbet processes Personal Data for the following clearly defined purposes. Data collected for one purpose is not used for an unrelated purpose without your knowledge or additional consent where required.

efesbet processes Personal Data only where a valid legal basis exists. The applicable bases are as follows:

• Contractual necessity: Processing required to perform our contractual obligations to you as an account holder — including account management, payment processing and bet settlement.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering obligations, KYC requirements and tax reporting.
• Legitimate interests: Processing carried out for fraud prevention, Platform security, responsible gambling monitoring and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Where we rely on consent — such as for certain marketing communications — you may withdraw that consent at any time by contacting efesbet at the address in Section 14.

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit the efesbet Platform. They allow the Platform to recognise your device on return visits, remember session preferences and monitor usage patterns.

6.2 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without affecting core functionality such as session management and login persistence.
• Performance and analytics cookies: Used to collect anonymised data about how players use the efesbet Platform, including pages visited and time on site. This data helps us improve the user experience.
• Functionality cookies: Allow the Platform to remember your preferences, such as language settings and preferred payment methods.
• Security cookies: Used to identify suspicious access patterns, detect bot activity and protect account security.

6.3 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the availability or performance of some Platform features. Strictly necessary cookies cannot be disabled without impacting core service delivery.

efesbet does not sell, rent or trade your Personal Data to third parties for marketing purposes. We share Personal Data only in the following circumstances:

• Payment processors: Trusted Malaysian payment service providers — including those facilitating FPX, DuitNow, Touch 'n Go eWallet and bank transfer transactions — receive the transaction data required to process your payments. These processors operate under data processing agreements with efesbet.
• KYC and identity verification services: We may share identity documents with regulated identity verification partners to fulfil our KYC obligations.
• Fraud prevention and security services: Anonymised or pseudonymised technical data may be shared with security service providers to detect and prevent fraudulent activity.
• Regulatory and law enforcement authorities: Where required by applicable Malaysian law, court order or regulatory direction, efesbet may disclose Personal Data to the relevant authorities.
• Platform infrastructure providers: Hosting, database and infrastructure service providers may process Personal Data on efesbet's behalf under strict contractual data processing obligations.

Any third party receiving Personal Data from efesbet is contractually required to process that data only as instructed by efesbet and to maintain appropriate security standards.

efesbet retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations and to resolve any outstanding disputes or investigations.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised.

efesbet implements a range of technical and organisational security measures proportionate to the nature and sensitivity of the Personal Data we process. These measures include:

• Encrypted transmission of data between your device and the Platform (TLS)
• Encrypted storage of sensitive data at rest, including passwords stored as hashed values only
• Role-based access controls limiting staff access to Personal Data on need-to-know basis
• Regular security assessments and vulnerability reviews of Platform infrastructure
• Fraud detection monitoring to identify and respond to unusual account activity
• Documented incident response procedures for potential data breaches

As a data subject, you hold the following rights in relation to Personal Data processed by efesbet. To exercise any of these rights, please contact us using the details in Section 14.

efesbet will respond to all rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days and will notify you accordingly.

The efesbet Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect Personal Data from individuals below this age. During the registration process, date of birth is collected for the express purpose of verifying age eligibility.

Parents and guardians who believe that a minor has accessed the efesbet Platform are encouraged to contact us immediately at the address provided in Section 14.

In some cases, Personal Data processed by efesbet may be transferred to, or accessed by, infrastructure or service providers located outside Malaysia. Where such transfers occur, efesbet ensures that appropriate safeguards are in place to protect Personal Data to a standard consistent with this Policy and applicable Malaysian privacy law.

Such safeguards may include contractual data processing agreements incorporating recognised data protection clauses, or the engagement of processors in jurisdictions with comparable legal data protection frameworks.

efesbet does not transfer Personal Data to third parties in jurisdictions with inadequate data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

efesbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, Platform functionality or our internal data processing practices. The revised Policy will be published on the Platform with an updated effective date.

Where changes are material — for instance where we introduce a new category of data collection or a new processing purpose — we will notify registered account holders by email where practicable. Continued use of the efesbet Platform following publication of the updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to remain informed of how efesbet handles your data.

If you wish to exercise any of your data rights, have a question about how efesbet processes your Personal Data, or wish to raise a privacy concern, please contact our support team. All contact details below are provided as plain text and are not clickable links.

For urgent account security matters, please include your registered email address and account identifier in your message to expedite our review. efesbet will acknowledge receipt of all formal privacy requests within two business days.