SportPesa Malaysia Privacy Policy – Player Personal Data Protection

1Introduction & Scope of Privacy Policy

SportPesa Malaysia ("SportPesa", "we") respects the privacy of every user and player on our platform. This Privacy Policy explains in detail how we collect, use, disclose, transfer and store your personal information when you use the SportPesa platform at sportpesa.best.

This policy applies to all data collected through our web platform, mobile applications, customer support, email, live chat, and any other communication channels involving SportPesa. It also covers data collected in the context of account registration, identity verification (KYC), betting activity, financial transactions, and customer support interactions.

SportPesa operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and all applicable privacy laws in force in Malaysia. We take this responsibility seriously, as player trust is the foundation of everything we do.

2Categories of Personal Data Collected

SportPesa collects personal data from various sources when you interact with our platform. The following are the categories of data we may collect:

We do not collect sensitive data such as medical information, religious beliefs, or political views unless voluntarily provided and relevant to a stated purpose. Individuals under the age of 18 are not permitted to use the SportPesa platform, and we do not knowingly collect data from them.

3How We Use Your Personal Data

Personal data collected by SportPesa is used solely for legitimate and stated purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your player account, including mandatory KYC processes.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and processing withdrawals to your account.
• Platform Services: Providing access to Sports Betting, Live Casino, baccarat, e-sports, and all SportPesa game categories.
• Customer Support: Assisting you with enquiries, complaints and technical issues across all support channels.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Legal Compliance: Fulfilling legal and regulatory obligations applicable to SportPesa in Malaysia.
• Service Communications: Sending important notifications regarding your account, promotions, policy updates and security information.
• Platform Improvements: Analysing usage patterns to improve user experience, platform reliability and product offerings.

4Legal Basis for Data Processing

SportPesa processes your personal data based on one or more of the following valid legal grounds in accordance with Malaysia's PDPA 2010:

• Contract Performance: Data processing required to deliver platform services to you as a registered player.
• Legal Obligations: Processing required under Malaysian law, including Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) obligations.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, and service improvement.
• Consent: For marketing activities and optional communications, we rely on consent that is freely and voluntarily given.

5Data Sharing & Disclosure

SportPesa may share your personal data with the following parties under limited and controlled circumstances:

• Payment Service Providers: Malaysian payment providers such as Touch 'n Go, GrabPay, DuitNow, and banks operating FPX receive the data necessary to process your transactions.
• Technology Providers: Selected technology companies that help us operate the platform, including cloud and security service providers, are bound by strict confidentiality agreements.
• Regulatory Authority: SportPesa will disclose data to the relevant Malaysian authorities where required by law, court order or in the course of financial crime investigations.
• Fraud Prevention Organisations: We may share information with relevant industry bodies for the purposes of fraud prevention, anti-money laundering and counter-terrorism financing.

6Data Security Measures

SportPesa continually invests in security infrastructure to ensure your personal data is always protected against unauthorised access, alteration, disclosure or destruction.

• Data Encryption in Transit: All communications between your browser and SportPesa's servers are secured with TLS 1.3 protocol and 256-bit SSL certificates.
• Stored Data Encryption: Sensitive data, including financial and identity information, is encrypted in our databases using the AES-256 standard.
• Internal Access Controls: Only SportPesa staff with a legitimate operational need who have undergone background checks are permitted to access player data.
• 24/7 Monitoring: Our security systems are monitored around the clock by our cybersecurity team to detect any suspicious activity.
• Regular Audits: We conduct regular penetration testing and security audits performed by independent third parties.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an additional layer of protection on their accounts.

While we take all reasonable precautions, no security system is entirely foolproof. You are also responsible for keeping your account password confidential and not sharing it with anyone.

7Data Retention Period

SportPesa retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

Once the retention period has ended, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

8Cookies & Tracking Technologies

SportPesa uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how players use the platform in order to drive improvements.
• Functional Cookies: Remembers your preferences such as language and display settings for a more personalised experience.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the SportPesa platform. Continued use of the platform is considered consent to the use of cookies as described here.

9Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by SportPesa:

10Payments, KYC & Anti-Money Laundering

As an online financial platform, SportPesa is legally required under Malaysian law to comply with Anti-Money Laundering and Counter Financing of Terrorism (AML/CFT) obligations. This means we are required to:

• Verifying player identity through the KYC process before processing significant withdrawals.
• Monitoring transaction patterns to detect suspicious activity.
• Reporting suspicious transactions to the relevant authorities as required under AMLA 2001.
• Retaining financial transaction records for the periods prescribed by law.

Data collected through the KYC process — including IC numbers, addresses and proof of payment via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks) and others — is used solely for verification and legal compliance purposes. This information is not used for marketing nor shared with third parties beyond what is required under AML/CFT obligations.

11Cross-Border Data Transfers

In the course of its operations, SportPesa may need to transfer personal data to other countries where our service providers operate. Any such transfer is carried out with appropriate safeguards to ensure your data remains protected at a level equivalent to that provided in Malaysia.

These protective measures include binding data processing agreements with service providers, approved standard contractual clauses, and data protection assessments prior to any transfer being approved. SportPesa will not transfer data to countries without an adequate level of data protection unless we have your consent or a valid legal basis to do so.

12Policy Updates & How to Contact Us

SportPesa reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new technologies, legal requirements, or other operational reasons. You will be notified of any material amendments through:

• An email sent to your registered address at least 14 days before the effective date.
• A clear in-platform notification on SportPesa upon login.
• Update the "Effective Date" at the top of this page.

Continued use of the SportPesa platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree, you may close your account and request deletion of data as permitted by law.

If you have a complaint that SportPesa is unable to resolve, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory body.