VisitorBet Privacy Policy

"Personal data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, email address, phone number, national identity number, payment details, IP address, and device identifiers.

"Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion. "Controller" means VisitorBet, as the entity that determines the purposes and means of processing player data. "Processor" means a third party that processes data on behalf of VisitorBet, such as a payment processor or verification provider.

This policy applies to all personal data collected from individuals who register for a VisitorBet account, deposit funds, place wagers, claim promotions, contact support, or otherwise use the platform. It does not apply to third-party websites or services that may be referenced elsewhere.

VisitorBet collects personal data through account registration, verification processes, payment transactions, platform use, and communications with customer support. The categories collected include:

VisitorBet does not collect special-category data (such as health, religious, or political data) except where a player voluntarily discloses it in a responsible gambling or support context, in which case it is handled with enhanced care and used only to protect the player.

VisitorBet processes personal data only where a lawful basis exists. The primary bases applicable to player data are:

• Contractual necessity: Processing required to open and operate a VisitorBet account, execute wagers, process MYR deposits and withdrawals, and provide the services requested by the player.
• Legal obligation: Processing required to comply with anti-money laundering obligations, age verification requirements, tax reporting, and lawful requests from regulatory authorities.
• Legitimate interests: Fraud prevention, security monitoring, platform improvement, responsible gambling detection, and internal analytics — where those interests are not overridden by the player's rights.
• Consent: Optional marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting data processed before withdrawal.

Where VisitorBet relies on legitimate interests, a proportionality assessment is conducted to confirm that the impact on the player's privacy does not outweigh the interest pursued.

Personal data is used solely for the purposes described in this policy. VisitorBet does not repurpose data for activities incompatible with the original reason for collection without first providing notice and, where required, obtaining consent.

Account and Service Operations

Identity, contact, and financial data are used to create and manage the player account, process deposits and withdrawals through Malaysian payment channels (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong), settle wagers, credit promotions, and maintain account records.

Verification and Compliance

Identity and verification documents are used to confirm that the player meets the minimum age requirement of 21 years, to conduct anti-money laundering checks, to verify payment ownership, and to fulfil regulatory reporting obligations. VisitorBet may share data with authorised verification service providers for this purpose.

Security and Fraud Prevention

Technical and behavioural data are monitored to detect account takeovers, payment fraud, collusion, multi-accounting, and other prohibited conduct. Automated screening and manual review may both be applied. A player whose account is suspended during a security review will be informed of the reason as soon as disclosure does not compromise the investigation.

Responsible Gambling Monitoring

Behavioural and responsible gambling data are used to identify patterns that may indicate problematic play, to implement and honour deposit limits or self-exclusion requests, and to fulfil the duty of care owed to players. This processing is carried out in the player's interest and forms a core part of the VisitorBet responsible gambling framework.

Customer Support

Communications data is used to resolve account, payment, betting, and promotional queries submitted through live chat, email, or other support channels. VisitorBet support operates in English, Bahasa Melayu, and Chinese, and support records are retained for quality assurance and dispute resolution.

Marketing Communications

Where a player has given consent, VisitorBet may send promotional messages about bonuses, new games, sporting events, Liga Super Malaysia odds, EPL specials, and other relevant offers. These communications may be delivered by email or platform notification. Consent may be withdrawn at any time by contacting support.

VisitorBet does not sell, rent, or trade personal data to any third party for their independent commercial use. Disclosure is limited to the following categories of recipient, each engaged under appropriate contractual data-protection obligations:

• Payment processors and e-wallet operators: Regulated financial service providers handling MYR transactions through FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong, as required to process the specific transaction.
• Identity and age-verification providers: Third-party KYC services used to confirm that a player meets the 21+ requirement and to validate document authenticity.
• Fraud and security providers: Technology partners providing IP screening, device fingerprinting, and transaction risk scoring to protect accounts and prevent financial crime.
• Game content providers: Licensed studios that supply casino and sports-betting products may receive a pseudonymous player identifier and session data necessary to operate their games within the VisitorBet platform. They do not receive full identity data.
• Legal and regulatory authorities: Government bodies, law enforcement agencies, financial intelligence units, or courts where VisitorBet is legally required to disclose data. VisitorBet will notify the player where permitted to do so.
• Professional advisers: Lawyers, accountants, and auditors who process data under confidentiality obligations for the purposes of legal advice or compliance review.

Where a third party acts as a processor on behalf of VisitorBet, a formal data-processing agreement is in place setting out the permitted scope of processing, security requirements, sub-processing restrictions, and cooperation obligations.

Some of the third-party service providers engaged by VisitorBet, including payment infrastructure, cloud hosting, and game delivery networks, may operate or store data in countries outside Malaysia. Where such transfers occur, VisitorBet takes reasonable steps to ensure that the receiving party provides an adequate level of data protection through contractual arrangements, technical safeguards, or the application of equivalent protective standards.

Players who have concerns about international transfers may contact VisitorBet for further information about the specific safeguards applied.

VisitorBet uses cookies and similar technologies to operate the platform, maintain session security, remember player preferences, analyse aggregate usage patterns, and — where consent is given — deliver relevant promotional content. The types of cookies used include:

• Strictly necessary cookies: Required for authentication, session management, fraud prevention, and load balancing. These cannot be disabled without impairing the platform.
• Functional cookies: Store preferences such as language and deposit-method selection to personalise the experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how pages are used so that VisitorBet can improve navigation, speed, and content. Individual browsing is not tracked commercially.
• Marketing cookies: Placed only with consent, used to show relevant VisitorBet promotions. Players may withdraw consent at any time through browser settings or by contacting support.

Players may manage cookie preferences through their browser settings. Disabling certain cookies may affect platform functionality. VisitorBet does not use fingerprinting or tracking outside the VisitorBet platform for retargeting purposes.

VisitorBet retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. The principal retention periods applied are:

• Account and identity records: retained for a defined period after permanent account closure, as required for anti-money laundering compliance and dispute resolution.
• Transaction and wager history: retained in accordance with financial record-keeping requirements and applicable gaming regulations.
• KYC and verification documents: retained for the period prescribed by applicable anti-money laundering and counter-terrorist financing obligations.
• Customer support records: retained for quality assurance and dispute resolution, and deleted when no longer required for those purposes.
• Marketing consent records: retained for the duration of the consent and for a reasonable period thereafter to evidence the lawful basis of any communications sent.

When data is no longer required, it is securely deleted or irreversibly anonymised. Where deletion is not technically possible in an immediate timeframe, the data is isolated and protected from further active processing until it can be deleted.

Subject to applicable law, you have the following rights in relation to your personal data held by VisitorBet. Requests should be submitted to [email protected] with "Privacy Request" clearly stated. VisitorBet will respond within a reasonable period and may request identity verification before fulfilling a request.

The exercise of these rights is free of charge in most circumstances. VisitorBet may charge a reasonable fee or decline where requests are manifestly unfounded or excessive.

VisitorBet applies technical and organisational measures proportionate to the risk associated with the personal data processed. These include 256-bit SSL encryption for all data in transit, access controls limiting data access to personnel with a legitimate operational need, segregated payment-processing channels, regular security assessments, and staff training on data-handling obligations.

No transmission over the internet or electronic storage system is entirely risk-free. Players should protect their own credentials, enable available account security features, and notify VisitorBet immediately if they suspect unauthorised account access. Account security obligations are detailed further in the Terms and Conditions.

In the event of a personal data breach that poses a risk to player rights, VisitorBet will take prompt remedial action, notify relevant authorities as required by applicable law, and communicate to affected players where the breach is likely to result in a high risk to their rights or interests.

VisitorBet is strictly intended for individuals aged 21 and above. The platform does not knowingly collect personal data from anyone under this age. Age verification is conducted as part of the account registration and KYC process.

Where VisitorBet discovers or is notified that a player is under 21, the account will be suspended, all wagers and transactions will be reviewed, and the matter will be handled in accordance with the Terms and Conditions and applicable law. Any personal data collected in connection with an underage account will be deleted as soon as the review is complete, subject only to any mandatory retention obligations.

VisitorBet may update this Privacy Policy to reflect changes in data practices, applicable law, regulatory guidance, new payment methods, or platform features. The updated policy will be published on this page with a revised effective date.

Where a change materially affects how player data is used, VisitorBet will provide advance notice through the platform or the registered email address. Continued use of VisitorBet after a change takes effect constitutes acceptance of the updated policy. Players who do not accept the revised terms should close their account and contact support regarding any withdrawal of remaining funds.