Privacy Policy

1 Introduction

Bimabet ("bimabet", "we", "us", "our") operates the online casino and sports betting platform accessible at https://bimabet.cam. In providing our platform to players across Malaysia and internationally, we collect and process certain personal data about you. This Privacy Policy ("Policy") sets out in clear and transparent terms how we handle that data.

This Policy applies to all personal data we collect through the bimabet website, any mobile-optimised interfaces, our customer support channels, and any other interaction you have with bimabet as a registered player or visitor. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy, which together form the full framework governing your use of our Platform.

By registering an account or using the bimabet Platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we process personal data as described herein, please cease using the Platform and contact us to close your account.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, financial information, and any other data that can directly or indirectly identify you.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means bimabet, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" means you — the individual whose personal data is being processed by bimabet.
• "Third Party" means any natural or legal person other than you, bimabet, and authorised data processors acting on bimabet's behalf.
• "Cookies" means small text files placed on your device by the bimabet Platform for session management, functionality, and analytics purposes.
• "KYC" means Know Your Customer — the identity and age verification process required under our compliance framework before withdrawals are processed.

3 Data We Collect

Bimabet collects personal data in the categories set out below. We adhere strictly to the principle of data minimisation — we do not collect data beyond what is necessary for the stated purposes.

3.1 Account & Identity Data

• Full legal name as it appears on official identification documents
• Date of birth (required for the mandatory 21+ age verification)
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru)
• Email address and mobile phone number used for account registration
• Username and encrypted password credentials

3.2 Identity Verification (KYC) Data

• Scanned copies or photographs of Malaysian MyKad, passport, or driving licence
• Proof of address documents (utility bills from Tenaga Nasional, Syabas, Indah Water; or bank statements from Maybank, CIMB, Public Bank, Hong Leong)
• Payment method verification documents to confirm account ownership

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR and dates
• Payment method identifiers (e.g., masked e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay; bank account last-four digits for Maybank, CIMB, Public Bank)
• Cryptocurrency wallet addresses used for BTC, ETH, or USDT transactions

3.4 Platform Activity Data

• Betting and gaming history, including game types, wager amounts, session durations, and outcomes
• Bonus and promotion usage records
• Customer support interaction logs and communications
• Responsible gambling tool usage (deposit limits set, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Browser type, version, and operating system
• Device identifiers and session tokens
• Pages visited, time spent on page, and click-path data (via cookies and server logs)

4 How We Collect Your Data

Bimabet collects personal data through the following means:

• Account Registration: Data provided directly by you when creating a bimabet account, including your name, email, date of birth, and contact details.
• KYC Submission: Identity and address documents uploaded by you during the verification process.
• Payment Transactions: Data generated automatically when you make deposits or withdrawal requests via FPX, DuitNow, e-wallets, or cryptocurrency.
• Platform Use: Behavioural and activity data generated automatically as you navigate the Platform, place bets, or interact with games.
• Support Interactions: Information you provide when contacting our customer support team via live chat, WhatsApp, or email.
• Cookies and Similar Technologies: Technical data collected automatically via browser cookies, session tokens, and server-side logging when you access the Platform.

5 Purposes of Processing

Bimabet processes your personal data for the following specific purposes:

6 Legal Bases for Processing

Bimabet processes your personal data only where we have a valid legal basis to do so. The primary legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted — including account administration, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud prevention duties.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the Platform, prevent fraudulent activity, improve our services, and administer responsible gambling measures — where such interests are not overridden by your fundamental rights.
• Consent: Where processing is based on consent (such as optional promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

Bimabet does not sell, rent, or trade your personal data. We may share data with carefully selected third parties only in the circumstances described below:

• Payment Service Providers: Malaysian payment processors and financial institutions — including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank — to facilitate deposit and withdrawal transactions. Each provider processes your data under their own privacy policy and applicable financial regulations.
• KYC & Identity Verification Partners: Authorised third-party identity verification service providers who assist in verifying player age and identity documentation as required by our compliance obligations.
• Technology & Infrastructure Providers: Cloud hosting, CDN, and database service providers who process data on bimabet's behalf under strict data processing agreements and are bound to process data only as instructed by us.
• Regulatory Authorities: Where required by law, court order, or regulatory directive, bimabet may disclose personal data to competent authorities. We disclose only the minimum data required and will notify you where legally permitted.
• Fraud Prevention & Security: Specialised fraud detection and anti-money laundering screening services to protect the integrity of the Platform and its player community.

All third-party data processors engaged by bimabet are bound by contractual obligations to handle personal data with confidentiality and security commensurate with the standards described in this Policy.

8 International Data Transfers

As an online platform serving Malaysian players, some of bimabet's infrastructure and service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, bimabet ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to that provided under applicable Malaysian data protection principles.

Such safeguards may include contractual data processing agreements that impose equivalent data protection obligations on recipient parties. Where transfers involve cloud hosting or CDN infrastructure, these are conducted with providers operating under internationally recognised security certifications.

9 Data Retention

Bimabet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following general retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Cookies & Tracking Technologies

Bimabet uses cookies and similar tracking technologies on the Platform to ensure correct functionality, maintain your logged-in session, and collect aggregate usage analytics. We do not use cookies for third-party advertising or cross-site tracking.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session authentication, security tokens, and game state management. These cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences such as language setting, preferred payment method display, and responsible gambling tool configurations.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players navigate the Platform — helping us identify pages with poor performance or high drop-off rates. No individual user is identifiable from analytics data.

10.2 Managing Your Cookie Preferences

You may adjust your browser settings to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your bimabet account and using the Platform. For functional and analytics cookies, disabling them will not prevent access but may reduce the quality of your experience.

11 Your Data Rights

As a data subject, you hold a range of rights in relation to the personal data bimabet holds about you. We are committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights below, contact our support team via email at support@bimabet.cam with the subject line "Data Rights Request".

12 Children's Privacy and Age Restriction

The bimabet Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in our account registration and KYC process.

If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to close the associated account, void all activity on that account, and securely delete the personal data collected, subject only to any minimum retention obligations imposed by applicable law.

If you believe that a minor may have accessed or registered on the bimabet Platform, please contact our support team immediately at support@bimabet.cam.

13 Security Measures

Bimabet implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• Encryption at Rest: All personal and financial data stored on bimabet infrastructure is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your device and our Platform is protected by TLS (Transport Layer Security) protocols. The Platform enforces HTTPS exclusively.
• Access Controls: Access to personal data held by bimabet is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems.
• Intrusion Detection: Continuous monitoring systems are in place to detect and respond to suspicious activity, unauthorised access attempts, and anomalous transaction patterns.
• Regular Security Audits: Our Platform and data handling practices are subject to periodic security reviews to identify and remediate potential vulnerabilities.
• Staff Training: All bimabet staff with access to personal data undergo data protection and security awareness training as part of their onboarding and on an ongoing basis.

In the event of a personal data breach that is likely to result in risk to your rights, bimabet will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

14 Updates to This Privacy Policy

Bimabet reserves the right to update or amend this Privacy Policy at any time in response to changes in our data practices, applicable laws, or platform features. Material changes will be communicated to registered players via email to the address on file, or through a prominent notice on the Platform.

The "Last Updated" date displayed at the top of this Policy reflects the most recent revision. We encourage all players to review this Policy periodically. Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms.

Previous versions of this Privacy Policy are available upon written request to support@bimabet.cam.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how bimabet has handled your personal data, please contact our Data Protection team using the details below. All contact information is provided as plain text only — these are not clickable links.

• Email: support@bimabet.cam — Please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 in English, Bahasa Melayu, and Mandarin. Average response: 3–5 minutes. Available to registered players via the Platform.
• Response Commitment: We will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will notify you.

For questions about our responsible gambling tools, self-exclusion options, or deposit limits, please visit our Responsible Gambling page. For general platform questions, see our FAQ.