Miminbet Privacy Policy — Your Data, Your Rights

Introduction

Miminbet ("we", "us", "our") operates the online gaming and sports betting platform accessible at miminbet.cam and its associated mobile interfaces. This Privacy Policy ("Policy") describes how Miminbet collects, uses, stores, shares, and protects personal data relating to registered users ("Players", "you") and visitors to our platform.

Miminbet is committed to handling personal data responsibly and in accordance with applicable data protection legislation, including principles consistent with the Malaysian Personal Data Protection Act 2010 (PDPA) and internationally recognised data governance standards. Our approach to data privacy is built on transparency, purpose limitation, data minimisation, and security.

By registering an Account or using any service offered through the Miminbet platform — whether you are accessing from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia — you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

Definitions

The following terms, when used in this Policy, carry the meanings assigned to them below:

• "Personal Data" — Any information that relates to an identified or identifiable living individual, including name, identification number, email address, contact number, financial information, and device identifiers.
• "Data Subject" — The individual to whom the Personal Data relates; in the context of this Policy, this is primarily the registered Player.
• "Data Controller" — Miminbet, as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" — Any third party that processes Personal Data on behalf of and under the instruction of Miminbet.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for a defined purpose.
• "Cookie" — A small data file stored on a user's device by their web browser when visiting a website.
• "Account" — The registered user profile created by a Player on the Miminbet platform.
• "KYC" — Know Your Customer verification procedures conducted to confirm Player identity and comply with anti-money laundering obligations.
• "PDPA" — The Personal Data Protection Act 2010 of Malaysia, governing the processing of personal data in commercial transactions.

Data We Collect

Miminbet collects the minimum Personal Data necessary to provide its services, comply with regulatory obligations, and maintain the security and integrity of the platform. The categories of data we collect are as follows:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile contact number
• Chosen username and encrypted account password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (Malaysian MyKad, Passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or equivalent)
• Proof of payment method ownership where required by compliance procedures
• Facial verification imagery where required for enhanced KYC procedures

3.3 Financial Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., bank account numbers associated with DuitNow or FPX, e-wallet identifiers for Touch 'n Go eWallet, Boost, or GrabPay)
• Transaction history and account balance records

3.4 Gaming & Behavioural Data

• Betting history and game participation records
• Wagering patterns, session durations, and frequency of play
• Bonus and promotion claims and usage
• Responsible gambling tool settings (e.g., deposit limits, self-exclusion records)

3.5 Technical & Device Data

• IP address and geolocation data
• Device type, operating system, and browser version
• Session logs, access timestamps, and platform navigation data
• Cookie and similar tracking technology data as described in Section 9

3.6 Communications Data

• Records of communications with our customer support team
• Email correspondence and live chat transcripts
• Feedback, complaints, and dispute resolution records

How We Collect Data

Miminbet collects Personal Data through the following primary channels:

1. Directly from you — when you complete the Account registration form, submit KYC documentation, make deposits or withdrawals, contact our support team, or interact with any feature of the platform that requires input.
2. Automatically through your use of the platform — our servers and analytics systems collect technical and behavioural data as you navigate the platform, including via cookies and similar tracking technologies.
3. From third-party service providers — payment processors such as DuitNow, FPX, and e-wallet operators may transmit transaction data to Miminbet in order to facilitate deposits and withdrawals. Identity verification service providers may share the results of KYC checks conducted on our behalf.
4. From regulatory and fraud-prevention systems — we may receive information from third-party fraud detection, AML monitoring, and sanctions screening services as part of our regulatory compliance obligations.

Data Processing & Purpose

Miminbet processes Personal Data only for defined, legitimate purposes. The table below sets out the principal processing activities, the data categories involved, and the purpose for which each is carried out.

Legal Basis for Processing

Miminbet processes Personal Data on the following legal bases, each of which applies to specific processing activities:

• Contractual necessity — Processing required to perform the contract we have with you as a registered Player, including account management, payment processing, and service delivery.
• Legal obligation — Processing necessary to comply with applicable law, including AML regulations, KYC requirements, tax reporting, and regulatory reporting obligations.
• Legitimate interests — Processing carried out in furtherance of Miminbet's legitimate business interests, where those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, responsible gambling monitoring, and analytics for service improvement.
• Consent — Processing that relies on your freely given, informed consent, primarily in the context of direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Data Sharing & Disclosure

Miminbet does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Service Providers & Data Processors

We engage third-party service providers who process data on our behalf under contractual data processing agreements. These include payment processors (including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, and Public Bank integrations), identity verification providers, KYC service bureaus, cloud hosting providers, and customer support platform operators.

7.2 Regulatory & Law Enforcement Authorities

Miminbet may disclose Personal Data to regulators, law enforcement bodies, or government agencies where required to do so by applicable law, court order, or regulatory directive. We will notify affected Players of such disclosures where permitted by law.

7.3 AML & Fraud Prevention Networks

To fulfil our anti-money laundering obligations, we may share data with industry-standard fraud prevention and AML screening databases. Information shared for this purpose may be retained by those organisations and used to assist other regulated entities in preventing financial crime.

7.4 Business Transfers

In the event that Miminbet undergoes a merger, acquisition, or sale of all or part of its assets, Personal Data held by the platform may form part of the transferred assets. Affected Players will be notified of any such transfer and the implications for their data prior to the transfer taking effect.

Data Retention

Miminbet retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, or contractual obligations.

As a general guide, the following retention periods apply:

• Account and identity data — Retained for the duration of the active Account relationship, plus a minimum of five (5) years following Account closure, in accordance with AML record-keeping requirements.
• Transaction and financial records — Retained for a minimum of seven (7) years from the date of each transaction in accordance with financial record-keeping obligations.
• KYC documentation — Retained for five (5) years following the conclusion of the business relationship or the completion of the relevant transaction, whichever is later.
• Customer support communications — Retained for three (3) years from the date of the communication unless longer retention is required for active dispute resolution.
• Marketing consent records — Retained for the duration of the marketing relationship and for a reasonable period thereafter to evidence the consent given.
• Technical and log data — Typically retained for twelve (12) months for security and fraud analysis purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

Cookies & Tracking Technologies

Miminbet uses cookies and similar tracking technologies to operate the platform effectively, analyse usage patterns, and improve the user experience. By continuing to use the Miminbet platform after being informed of our cookie use, you consent to the use of cookies in accordance with this Policy.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies — Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without significantly impairing platform functionality.
• Functional Cookies — Remember your preferences such as language settings, game lobby view preferences, and responsible gambling tool settings to provide a more personalised experience.
• Analytics Cookies — Used to collect anonymised data about how visitors interact with the platform, including pages visited, session duration, and feature usage. This data helps us identify areas for improvement.
• Security & Fraud-Prevention Cookies — Used to detect and prevent fraudulent activity, including duplicate account detection and unusual login pattern identification.

9.2 Managing Cookies

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive a notification when a new cookie is set. Please note that restricting cookies may affect the functionality of certain platform features.

Data Security

Miminbet implements comprehensive technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Miminbet platform
• Encrypted storage of all sensitive Personal Data and financial records at rest
• Access controls limiting the visibility of Personal Data to authorised personnel with a legitimate need to access it
• Two-factor authentication options for Player Accounts
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Fraud monitoring systems that analyse transaction patterns and flag anomalous activity in real time
• Staff training on data handling obligations and information security practices

Your Rights as a Data Subject

As a Data Subject, you have a number of rights with respect to your Personal Data. Miminbet is committed to facilitating the exercise of these rights promptly and without undue obstacles.

• Right of Access — You have the right to request a copy of the Personal Data that Miminbet holds about you, along with information about how it is being processed.
• Right of Rectification — You have the right to request the correction of any inaccurate or incomplete Personal Data held about you. You may update certain Account details directly through your Account settings.
• Right of Erasure — You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis exists), or where processing is unlawful. This right is subject to overriding legal obligations requiring continued retention.
• Right to Restrict Processing — You may request that Miminbet restrict the processing of your Personal Data in certain circumstances, for example while the accuracy of data is being verified or while a complaint is being assessed.
• Right to Data Portability — Where processing is based on your consent or on the performance of a contract, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object — You have the right to object to processing of your Personal Data carried out on the basis of legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent — Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact our Data Protection team at the email address provided in Section 15. We will respond to all valid requests within thirty (30) days of receipt. In cases of complexity or volume, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

Protection of Minors

The Miminbet platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process Personal Data relating to individuals below the age of 21, and we do not permit persons under 21 to register an Account or engage in any wagering activity on the platform.

Our registration process includes age verification steps, and our KYC procedures require documentary proof of age. If Miminbet becomes aware that an Account has been registered by or used by a person under the age of 21, that Account will be immediately suspended, any funds within it reviewed, and the matter may be referred to the relevant authorities.

If you believe that a minor has registered or used a Miminbet Account, please contact our support team immediately at [email protected].

International Data Transfers

In the course of operating the Miminbet platform and engaging third-party service providers, your Personal Data may be transferred to, stored in, or processed in countries outside of Malaysia. This may include jurisdictions where data protection laws differ from those applicable in Malaysia.

Where such transfers occur, Miminbet ensures that appropriate safeguards are in place to protect the security and integrity of your Personal Data. These safeguards may include contractual obligations binding the recipient to equivalent data protection standards, or the use of service providers operating under recognised international security frameworks.

For more information about the safeguards applicable to any specific international transfer of your Personal Data, please contact our Data Protection team using the contact details in Section 15.

Policy Amendments

Miminbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Material changes to this Policy will be communicated to registered Players via email notification and/or a prominent notice on the platform no fewer than seven (7) days before the revised Policy takes effect.

The date of the most recent update to this Policy is displayed at the top of this page. We encourage Players to review this Policy periodically to remain informed of how their Personal Data is being handled. Your continued use of the platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Miminbet, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries promptly.

• Data Protection Contact: [email protected]
• Subject Line for Data Requests: Please include "Privacy Request" or "Data Subject Rights Request" in the subject line of your email
• Response Time: Initial acknowledgement within 3 business days; substantive response within 30 days
• Support Hours: 24/7 — Malaysian Standard Time (MYT, UTC+8)

For responsible gambling-related concerns or to activate account protection tools, please visit our Responsible Gambling page. For questions about your account terms and obligations, please refer to our Terms & Conditions.