Cloudbet Privacy
Policy
Your privacy is a fundamental responsibility we take seriously. This Privacy Policy explains what personal data cloudbet collects, why we collect it, how it is used and protected, and what rights you hold over your information. Please read this document carefully alongside our Terms and Conditions.
01 Introduction
This Privacy Policy (hereinafter referred to as the "Policy") is published by cloudbet (hereinafter referred to as "cloudbet", "we", "us", or "our"), the operator of the online betting and gaming platform accessible at cloudbet.cam (the "Platform"). This Policy applies to all individuals who access, register on, or otherwise interact with the Platform (hereinafter referred to as "you", "your", or the "Data Subject").
cloudbet is committed to protecting the personal data of all Platform users, with particular attention to the needs and expectations of our Malaysian player community. We process personal data strictly in accordance with applicable international data protection standards and our licensing obligations. We do not sell personal data to third parties, and we collect only what is necessary for the purposes described in this Policy.
By accessing the Platform, registering an Account, or submitting any personal data to cloudbet, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the Platform and contact us to close your Account.
Note for Malaysian Users: While Malaysia's Personal Data Protection Act 2010 (PDPA) applies to data processors registered in Malaysia, cloudbet operates under international licensing and processes data in accordance with internationally recognised data protection principles that are consistent with the spirit and intent of the PDPA framework.
02 Definitions
For the purposes of this Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction, whether automated or manual. |
| "Data Controller" | cloudbet, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of cloudbet, under contractual obligations that impose data protection standards equivalent to those observed by cloudbet. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose. |
| "Cookie" | A small text file placed on your device by a website, used to store session information, preferences, and analytics data. |
| "KYC Data" | Identity and address verification documents submitted by a Player for Know Your Customer compliance purposes, including MyKad, passport, and proof of address documents. |
03 Data We Collect
cloudbet collects Personal Data across several categories, depending on your interaction with the Platform. The categories of data we may collect are set out below:
3.1 Registration and Account Data
- Full legal name as it appears on your government-issued identity document
- Date of birth
- Residential address, including city, state, and postcode (e.g., addresses in Kuala Lumpur, Petaling Jaya, Penang, Shah Alam, or Johor Bahru)
- Email address and contact telephone number
- Username and encrypted password
- Preferred language and currency settings
3.2 Identity Verification (KYC) Data
- Copies of government-issued identity documents (MyKad front and back, Driver's Licence, or Passport)
- Proof of address documents (utility bills from TNB, Syabas, or Indah Water; bank statements from Maybank, CIMB, Public Bank, Hong Leong, or other Malaysian banks)
- Selfie photographs taken with identity documents
- Source of funds documentation where requested by our compliance team
3.3 Financial Transaction Data
- Deposit and withdrawal records, including amounts, dates, methods, and transaction reference numbers
- Payment method identifiers (e.g., e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay; bank account details for DuitNow, FPX, and direct bank transfers)
- Cryptocurrency wallet addresses used for deposits or withdrawals
- Account balance history and betting activity records
3.4 Technical and Usage Data
- IP address, device type, operating system, and browser type
- Session timestamps, login history, and session duration
- Pages visited, features accessed, and games played on the Platform
- Clickstream data and in-session navigation patterns
- Geolocation data (general location derived from IP address)
3.5 Communications Data
- Records of communications with our customer support team, including live chat transcripts and email correspondence
- Complaint records and dispute resolution documentation
- Survey responses and voluntary feedback submitted through the Platform
04 How We Collect Data
cloudbet collects Personal Data through the following means:
- Directly from you — when you complete the registration form, submit KYC documents, contact support, participate in promotions, or interact with any feature of the Platform that requires data input.
- Automatically — through cookies, server logs, and tracking technologies when you access and navigate the Platform. See Section 11 (Cookies & Tracking) for further details.
- From third-party service providers — including payment processors (for transaction verification), identity verification services (for KYC purposes), fraud prevention services, and analytics providers. All third-party providers are contractually obligated to handle data in compliance with applicable data protection standards.
- From publicly available sources — including sanctions databases, fraud watchlists, and public records, to the extent required by our AML and compliance obligations.
05 Purposes of Processing
cloudbet processes your Personal Data for the following specific and legitimate purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your Account; processing deposits and withdrawals; communicating account-related updates. |
| Identity Verification (KYC) | Verifying your identity and age (21+ requirement) in compliance with international anti-money laundering and licensing obligations. |
| Transaction Processing | Processing financial transactions including deposits via Touch 'n Go eWallet, DuitNow, FPX, and cryptocurrency networks, and withdrawal requests. |
| Regulatory Compliance | Meeting obligations under our international operating licence, including AML screening, fraud detection, and responsible gambling enforcement. |
| Responsible Gambling | Monitoring betting patterns to identify problem gambling indicators; applying deposit limits and self-exclusion measures where appropriate. |
| Customer Support | Responding to enquiries, resolving complaints, and maintaining records of communications for quality assurance. |
| Marketing & Promotions | Sending relevant promotional communications where you have provided consent; personalising your Platform experience based on preferences and activity. |
| Security & Fraud Prevention | Detecting and preventing unauthorised access, cheating, bonus abuse, and other fraudulent activities that may harm other Players or cloudbet. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and product features. |
06 Legal Bases for Processing
cloudbet processes Personal Data on the following recognised legal bases under applicable data protection frameworks:
- Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you have accepted, including Account administration, transaction processing, and game provision.
- Legal Obligation: Processing is required to comply with our licensing conditions and applicable laws, including anti-money laundering regulations, KYC requirements, and age verification obligations.
- Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gambling measures, where these interests are not overridden by your fundamental rights.
- Consent: Processing is based on your freely given and informed consent where required, particularly for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
07 Data Sharing & Disclosure
cloudbet does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We may share Personal Data in the following limited and controlled circumstances:
- Payment Processors: We share transaction-related data with payment service providers operating the supported channels (including e-wallet operators, FPX network participants, and cryptocurrency processing services) strictly for the purpose of completing your financial transactions.
- Identity Verification Services: KYC documentation is processed by third-party verification service providers engaged under contractual data processing agreements. These providers are authorised to process your documents solely for identity verification purposes.
- Fraud and AML Screening Providers: We may share limited data with third-party fraud prevention and AML screening services to perform sanctions checks and detect suspicious activity, as required by our licensing obligations.
- Technology and Infrastructure Providers: Service providers who host, maintain, and support the Platform's technical infrastructure may have access to personal data strictly in the course of providing their contracted services, subject to binding data protection agreements.
- Regulatory and Law Enforcement Authorities: We may disclose Personal Data to competent regulatory, legal, or law enforcement authorities where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of cloudbet, its players, or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of substantially all of cloudbet's assets, Personal Data may be transferred to the acquirer as part of that transaction, subject to the same privacy protections set out in this Policy.
No Data Sales: cloudbet does not and will not sell your Personal Data to data brokers, advertisers, or any third party for commercial purposes. Our data-sharing arrangements are limited to operational necessity and legal compliance.
08 International Data Transfers
cloudbet operates under an international licensing framework, and as a result, your Personal Data may be transferred to, stored in, and processed in countries outside Malaysia. Where such international data transfers occur, cloudbet ensures that appropriate safeguards are in place to protect your data, consistent with applicable data protection principles.
Safeguards applied to international transfers include: contractual data processing agreements incorporating standard data protection clauses; selection of processors operating in jurisdictions with recognised data protection regimes; technical security measures ensuring equivalent protection to locally-held data; and ongoing due diligence assessments of third-party processor compliance.
By registering an Account and using the Platform, you expressly acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia, and you consent to such processing where it is carried out under the safeguards described above.
09 Data Retention
cloudbet retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulation, or licensing obligations. The following general retention principles apply:
- Active Account Data: Retained for the duration of your Account relationship with cloudbet, plus a minimum period of five (5) years following Account closure, to meet licensing and AML record-keeping requirements.
- KYC Documentation: Retained for a minimum of five (5) years from the date of Account closure or last transaction, consistent with standard AML record retention obligations under international frameworks.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
- Customer Support Communications: Retained for a period of three (3) years from the date of the last support interaction, for quality assurance and dispute resolution purposes.
- Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter to demonstrate compliance.
- Technical Log Data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.
Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with cloudbet's internal data disposal procedures.
10 Security Measures
cloudbet implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:
- Encryption in Transit: All data transmitted between your browser or device and the cloudbet Platform is encrypted using industry-standard TLS/SSL protocols (minimum 256-bit encryption).
- Encryption at Rest: Sensitive data held in cloudbet's databases, including KYC documentation and financial records, is stored using encryption at the application and storage layer.
- Access Controls: Access to Personal Data within cloudbet's systems is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication requirements for staff.
- Two-Factor Authentication (2FA): Available to all Players for Account login security and strongly recommended.
- Regular Security Audits: cloudbet engages independent security professionals to conduct periodic vulnerability assessments and penetration testing of the Platform.
- Incident Response: cloudbet maintains a documented data breach response procedure, including notification processes to affected individuals and relevant authorities where required by applicable law.
Your Responsibilities: While cloudbet applies robust security measures, you are also responsible for maintaining the confidentiality of your Account credentials. Never share your password, and ensure you use a strong, unique password for your cloudbet Account. Contact us immediately if you suspect unauthorised access.
11 Cookies & Tracking Technologies
cloudbet uses cookies and similar tracking technologies on the Platform to provide functionality, improve performance, and analyse usage patterns. The categories of cookies we deploy are as follows:
- Strictly Necessary Cookies: Essential for the basic operation of the Platform, including maintaining your logged-in session, remembering your language and currency preferences, and processing financial transactions. These cookies cannot be disabled without affecting core Platform functionality.
- Performance and Analytics Cookies: Used to collect anonymised information about how visitors interact with the Platform, including pages visited, session duration, and error events. This data is used solely for Platform improvement purposes.
- Functionality Cookies: Allow the Platform to remember your preferences and settings (such as game display options and notification settings) to provide a personalised experience.
- Security Cookies: Support our fraud detection and session integrity systems, including detection of suspicious login attempts and unusual account activity.
You may control cookie preferences through your browser settings. Note that disabling certain categories of cookies may impact the functionality of the Platform. Third-party cookies deployed by analytics or technology partners are governed by those partners' own privacy policies.
12 Your Rights
Subject to applicable data protection law, you hold the following rights in relation to your Personal Data held by cloudbet. To exercise any of these rights, please contact our Data Protection team as described in Section 16. cloudbet will respond to valid rights requests within thirty (30) days of receipt.
Right of Access
Request a copy of the Personal Data we hold about you, together with information about how it is processed.
Right to Rectification
Request correction of any inaccurate or incomplete Personal Data we hold about you.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances, such as while a rectification request is under review.
Right to Data Portability
Request your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
Object to processing based on our legitimate interests, including direct marketing, where you have grounds relating to your particular situation.
Right to Withdraw Consent
Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Rights Re: Automated Decisions
Not be subject to solely automated decisions that produce significant legal effects, and to request human review of such decisions.
13 Children's Privacy
The cloudbet Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, solicit, or process the Personal Data of persons under the age of 21. All Account registrations are subject to mandatory age verification as part of the KYC process.
If cloudbet becomes aware that an Account has been registered by, or that Personal Data has been collected from, a person under the age of 21, we will immediately suspend the Account, delete associated Personal Data, and take appropriate remedial action in accordance with our Terms and Conditions.
Parents and guardians are encouraged to monitor minors' internet activity and to contact cloudbet promptly at [email protected] if they believe a minor has accessed or registered on the Platform.
14 Third-Party Links
The cloudbet Platform may contain references or links to third-party websites, services, or resources. This Policy applies solely to Personal Data collected and processed by cloudbet in connection with the Platform. cloudbet is not responsible for the privacy practices, security standards, or data handling policies of any third-party websites or services, including those of payment providers, game studios, or external platforms.
We encourage you to review the privacy policies of any third-party service you access, particularly in connection with payment processing or identity verification services, to understand how your Personal Data is handled outside the cloudbet Platform environment.
15 Amendments to This Policy
cloudbet reserves the right to amend, update, or replace this Privacy Policy at any time. Any amendments will be reflected by an updated "Last Updated" date at the top of this page and, where the amendment constitutes a material change to how we process your Personal Data, we will endeavour to notify you via email to your registered address or through a prominent notice on the Platform.
Your continued use of the Platform after the publication of an amended Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and request Account closure. We recommend reviewing this Policy periodically to remain informed of any changes.
16 Contact Us
For all enquiries, requests, or complaints relating to this Privacy Policy or the processing of your Personal Data by cloudbet, please contact our Data Protection team through the following channels. We are committed to responding to all privacy-related requests within thirty (30) calendar days.
You may also review related documents including our Terms & Conditions and Responsible Gambling Policy for a complete picture of your rights and obligations as a cloudbet Player.
How Cloudbet Protects Your Data
These six principles summarise our data protection approach in plain English. The full legal details are in the Policy sections above.
256-Bit SSL Encryption
All data transmitted between your device and the cloudbet Platform is protected using industry-standard TLS/SSL encryption — the same technology used by major banks and financial institutions worldwide.
We Never Sell Your Data
cloudbet does not sell, trade, or broker your Personal Data to third parties for commercial purposes. Full stop. Data sharing is limited strictly to operational necessity and legal compliance.
Encrypted Data at Rest
Sensitive records — including KYC documents and financial data — are stored with encryption at the storage layer. Access is restricted to authorised personnel on a strict need-to-know basis.
Your Rights Are Enforceable
You can request access to, correction of, or deletion of your data at any time. cloudbet commits to responding to all valid data rights requests within 30 calendar days.
Clear Retention Limits
We don't hold your data indefinitely. Retention periods are defined by purpose — from 12 months for technical logs to 5 years for KYC records as required by licensing obligations.
Regular Security Audits
Independent security professionals conduct periodic vulnerability assessments and penetration testing on the cloudbet Platform to identify and address security risks proactively.
Questions About Your Privacy? Get in Touch. 🛡️
Our support team handles privacy requests in English, Bahasa Melayu, and Mandarin — 24 hours a day, 7 days a week, including Malaysian public holidays.
For players aged 21 and above only. See our Terms & Conditions and Responsible Gambling pages for further information.