Privacy Policy
How Navibet Handles Your Data

This Privacy Policy ("Policy") is issued by Navibet ("we", "us", "our"), the operator of the online gaming and sports betting platform accessible at navibet.cam. It sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by us in connection with your use of the Navibet platform.

Navibet is a Malaysia-focused online gaming platform serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian locations. We recognise that the privacy of our players is a matter of significant importance, and we are committed to processing your personal data in a lawful, fair, and transparent manner.

By registering an account on Navibet, using our platform, or submitting any personal information to us, you acknowledge that you have read this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must cease use of the Platform immediately.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, identity documents, IP address, financial information, and gaming activity records.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means Navibet as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of Navibet, under contract and instruction.
• "User" / "You" means any natural person who registers for or uses an Account on the Navibet platform.
• "KYC Data" means identity and address verification documents collected during the Know Your Customer process, including national identity cards (MyKad), passports, driver's licences, and utility bills.
• "Sensitive Data" means special categories of personal data that warrant heightened protection, including biometric data, financial records beyond transaction amounts, and health information.

Navibet collects personal data from you through several channels and at different stages of your relationship with the platform. The categories of data we collect are set out below:

• Registration Data: Full legal name, date of birth, gender, email address, Malaysian mobile number, and chosen username and password when you create an account.
• KYC Documents: Copies of government-issued identity documents (e.g. Malaysian IC / MyKad, passport, driver's licence), proof of address (utility bill, bank statement, or equivalent document no more than three months old), and selfie photographs for identity matching.
• Financial Data: Details of your chosen payment method — which may include your bank account number, name on account, e-wallet identifier (GrabPay, Touch 'n Go eWallet, Boost, DuitNow, or FPX), and transaction history on the platform. We do not store full payment card numbers on our servers.
• Support Communications: Any information you provide when contacting our customer support team via live chat or email, including the content of the communication and any attachments.

• Device & Technical Data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and referring URL.
• Session & Behavioural Data: Login timestamps, session duration, pages visited, games accessed, betting history, stake amounts, and platform navigation patterns.
• Cookies and Similar Technologies: Session cookies, authentication tokens, and analytics identifiers. See Section 7 for full details on our cookie practices.

In certain circumstances, Navibet may receive information about you from third parties, including payment processors confirming transaction outcomes, identity verification service providers used for KYC checks, and fraud prevention databases used to verify the legitimacy of accounts and transactions.

Navibet processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform the contract between you and Navibet — including account registration, payment processing, game delivery, and KYC verification.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and age verification duties.
• Legitimate Interests: Processing necessary for Navibet's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, provided these interests are not overridden by your fundamental rights.
• Consent: Processing activities based on your explicit consent, such as the use of non-essential cookies and the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Navibet uses the personal data we collect for the following specific purposes:

• To create, verify, maintain, and manage your Navibet account, including processing account applications and conducting mandatory age and identity checks.
• To process deposits and withdrawals in Malaysian Ringgit (MYR/RM) through your chosen payment method, including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
• To deliver the gaming and betting services you request, including live casino games, slot titles, sports betting markets, and related features.
• To comply with our anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling obligations, including monitoring gaming activity for signs of problem gambling behaviour.
• To detect and prevent fraudulent activity, account manipulation, and other prohibited conduct as defined in our Terms & Conditions.
• To respond to your enquiries and support requests submitted via live chat or email.
• To send you transactional and account-related communications, including deposit confirmations, withdrawal notifications, KYC status updates, and security alerts.
• To analyse platform usage patterns and improve the performance, security, and user experience of the Navibet platform.
• To send you promotional communications about Navibet bonuses and offers, where you have consented to receive such communications or where permitted by applicable law.

Navibet does not sell, rent, or otherwise transfer your personal data to any third party for commercial gain. We may, however, share your personal data with the following categories of third-party recipients in the course of delivering our services:

We engage carefully selected third-party service providers to assist us in operating the platform, including payment processors (GrabPay, DuitNow, FPX, and bank partners), KYC and identity verification providers, cloud hosting and infrastructure providers, fraud detection and analytics services, and customer support technology vendors. All such providers are bound by contractual data processing agreements that restrict their use of your data to the purposes for which it was disclosed.

We may be required to disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where required to do so by applicable law, regulatory obligation, court order, or as part of an investigation into financial crime or gaming integrity matters. Where legally permitted, we will notify you of any such disclosure request.

In the event of a merger, acquisition, or sale of all or substantially all of Navibet's assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, you will be notified via your registered email address, and the acquiring entity will be bound by the terms of this Policy or a substantially similar privacy policy.

The Navibet platform uses cookies and similar tracking technologies to deliver a functional and secure user experience. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the Navibet platform:

• Strictly Necessary Cookies: Essential for the platform to operate. These include session management cookies, authentication tokens, and security cookies. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — including page load times, error rates, and navigation paths — to help us improve the platform's reliability and performance.
• Functional Cookies: Store your preferences such as language settings, preferred currency display, and game interface configurations, so that you do not need to re-enter them on each visit.

Navibet does not deploy advertising cookies, cross-site tracking pixels, or third-party social media tracking technologies on the platform. Most browsers allow you to manage your cookie preferences through their settings. Please note that disabling strictly necessary cookies may prevent certain features of the platform from functioning correctly.

Navibet employs a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Navibet platform.
• Encryption of sensitive data fields at rest, including payment data and identity document metadata.
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrable operational need.
• Regular penetration testing and security vulnerability assessments conducted by qualified third-party security professionals.
• Secure data centre facilities with physical access controls, redundant infrastructure, and continuous availability monitoring.
• Two-factor authentication (2FA) available to all Navibet account holders as an additional layer of access security.

While Navibet takes all reasonable precautions to protect your personal data, no system is entirely immune from security incidents. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, Navibet will notify you without undue delay via your registered email address and, where required by law, report the breach to the relevant regulatory authority.

Navibet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, Navibet will securely delete or anonymise your personal data in a manner that prevents its recovery or reconstruction.

As a user of the Navibet platform, you hold the following rights in relation to the personal data we hold about you:

• Right of Access: You may request a copy of the personal data Navibet holds about you, along with information about how it is used and with whom it has been shared.
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Some corrections will require re-verification through the KYC process.
• Right of Erasure: In certain circumstances, you may request deletion of your personal data. Please note that we are required by law to retain certain categories of data (particularly KYC and financial records) for the periods specified in Section 9, irrespective of an erasure request.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain defined circumstances, such as where the accuracy of the data is contested.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us using the details provided in Section 15. We will respond to all verified data subject requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

We may require you to verify your identity before processing a data rights request, to ensure that we do not disclose or modify personal data in response to requests made by unauthorised parties.

The Navibet platform is strictly intended for adults aged twenty-one (21) years and above. We do not knowingly collect, solicit, or process the personal data of any person under the age of 21. Our KYC verification process is specifically designed to prevent minors from accessing the platform.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data, suspend the associated account, and prevent further access to the platform from that account. If you are a parent or guardian and believe that a minor in your care has accessed Navibet, please contact us immediately via the details in Section 15.

In the course of providing our services, your personal data may be transferred to and processed in countries other than Malaysia, including countries where our data processors and infrastructure providers operate their servers and facilities. Such transfers may be to countries that have different data protection laws than those in Malaysia.

Where personal data is transferred internationally, Navibet ensures that appropriate safeguards are in place to protect your data in accordance with applicable privacy standards. These safeguards include contractual data processing agreements incorporating standard data protection clauses, and selecting processors that maintain independently certified security programmes.

By using the Navibet platform, you consent to the transfer of your personal data to other countries for the purposes described in this Policy, subject to the safeguards described above.

The Navibet platform may contain references to third-party services — such as payment gateway interfaces provided by GrabPay, Touch 'n Go eWallet, Boost, DuitNow, or FPX — that are operated independently of Navibet. When you interact with these third-party services, their own privacy policies govern the collection and use of your data, not this Policy.

Navibet is not responsible for the privacy practices, security measures, or data handling procedures of any third-party service provider with whose interface you interact through the platform. We encourage you to review the privacy policies of any third-party payment or service provider before submitting your data through their interface.

Navibet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform functionality. The effective date of the current version is displayed at the top of this page.

Where amendments are material — meaning they significantly change how we collect, use, or share your personal data — we will notify you via your registered email address at least fourteen (14) calendar days before the revised Policy takes effect. Minor clarifications or updates that do not affect your rights or our processing activities may take effect without prior notice.

Your continued use of the Navibet platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you must discontinue your use of the platform and may request account closure by contacting our support team.

If you have questions, concerns, or requests relating to this Privacy Policy or the personal data Navibet holds about you, please contact our Data Support team through the following channels:

• Live Chat: Available 24/7 on the Navibet platform — the fastest channel for data enquiries.
• Email: [email protected] — use subject line "Privacy Request" for data rights matters.
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 calendar days.
• Available Languages: English, Bahasa Melayu, Mandarin Chinese.

If you are not satisfied with our response to your privacy concern or data rights request, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first so that we have the opportunity to address your concern before you escalate to a regulatory body.