Privacy Policy

This Privacy Policy ("Policy") describes how Cagurbet ("the Company", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Users", "you", "your") who access, register on, or otherwise interact with the Cagurbet online casino and sports betting platform at https://cagurbet.cam ("the Platform").

Cagurbet serves players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and Bangsar. We are committed to handling your personal information with the highest standards of care, in accordance with applicable data protection legislation and international best practices for online gaming operators.

By creating a Cagurbet account, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy is incorporated by reference into our Terms & Conditions and should be read alongside them.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, directly or indirectly. This includes name, email address, phone number, payment details, IP address, and device identifiers.
• "Data Controller" — Cagurbet, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of Cagurbet under a data processing agreement, such as a payment gateway or KYC verification provider.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any combination of the foregoing.
• "KYC" — Know Your Customer procedures used to verify a user's identity, age, and, where applicable, source of funds.
• "Cookies" — small text files placed on your device by a website to store session information, preferences, and tracking data.
• "Sensitive Data" — a sub-category of personal data warranting higher protection, including financial account details and government-issued identification numbers.

Cagurbet collects personal data that is necessary to provide, operate, secure, and continuously improve the Platform. The categories of data we collect are set out below.

Cagurbet collects personal data through the following mechanisms:

• Directly from you — when you register an account, submit KYC documents, make deposits or withdrawals, contact support, or participate in promotions;
• Automatically via the Platform — through cookies, web beacons, and server log files when you browse or use the Platform;
• From third-party service providers — including payment processors (DuitNow, FPX, e-wallet operators, cryptocurrency processors), KYC and identity verification providers, and fraud detection services;
• From publicly available sources — where permitted by law, for purposes of identity verification or fraud prevention.

We do not purchase or acquire personal data lists from third-party data brokers. All data collected is tied to a specific operational or legal purpose as described in this Policy.

Cagurbet processes your personal data on the following legal bases:

• Contractual Necessity — processing required to create and manage your account, process deposits and withdrawals, settle wagers, and deliver the core gaming service you have contracted for;
• Legal Obligation — processing necessary to comply with applicable anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, age verification obligations, and regulatory reporting duties;
• Legitimate Interests — processing that serves Cagurbet's legitimate business interests, such as fraud prevention, platform security, abuse detection, and product improvement, provided that such interests are not overridden by your data protection rights;
• Consent — where we rely on your consent, such as for the sending of marketing communications or the placing of non-essential cookies, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Cagurbet uses your personal data for the following purposes:

1. Account Management — creating, maintaining, and securing your account, processing login authentication, and communicating account-related updates;
2. Payment Processing — facilitating deposits and withdrawals via your chosen payment method, whether DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency;
3. KYC & Regulatory Compliance — verifying your identity, age, and payment method ownership as required by applicable law and our operational policies;
4. Fraud Prevention & Security — detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and other dishonest conduct on the Platform;
5. Customer Support — responding to your enquiries, resolving disputes, and processing self-exclusion or responsible gambling requests;
6. Personalisation — tailoring the gaming experience, promotional offers, and platform content to your preferences and playing history, where you have not opted out;
7. Marketing Communications — sending promotional emails, bonus notifications, and platform updates where you have consented to receive such communications;
8. Analytics & Product Improvement — analysing aggregated and anonymised usage data to improve Platform performance, fix bugs, and develop new features;
9. Legal Claims & Dispute Resolution — retaining and using data where necessary to establish, exercise, or defend legal claims.

Cagurbet does not sell your personal data. We share your data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Service Providers — DuitNow operators, FPX banking partners, Touch 'n Go eWallet, Boost, GrabPay, cryptocurrency processors, and other payment intermediaries required to execute your financial transactions;
• KYC & Identity Verification Partners — third-party providers engaged to verify identity documents and perform AML screening;
• Fraud Prevention & Security Providers — technology partners assisting in detecting suspicious login activity, account anomalies, and transaction fraud;
• IT Infrastructure & Hosting Providers — cloud hosting and data centre operators bound by contractual data processing obligations consistent with this Policy;
• Legal & Regulatory Authorities — regulators, law enforcement agencies, or courts where disclosure is required by applicable law, court order, or legitimate regulatory demand;
• Professional Advisors — lawyers, auditors, and compliance consultants under strict confidentiality obligations.

Cagurbet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and identity data — retained for the lifetime of the account and for a minimum of five (5) years following account closure, in accordance with AML and KYC record-keeping obligations;
• Transaction and wagering records — retained for a minimum of five (5) years following the date of the transaction, as required for financial and regulatory compliance;
• KYC documents — retained for the duration of the account plus five (5) years post-closure or as otherwise directed by applicable regulatory requirements;
• Customer support correspondence — retained for two (2) years from the date of the last interaction;
• Technical and usage logs — retained for a maximum of twelve (12) months unless extended retention is required for security or legal purposes;
• Marketing consent records — retained for three (3) years from the date of consent, or until consent is withdrawn, whichever is earlier.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to any individual.

Cagurbet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Hashed and salted storage of all account passwords — no Cagurbet employee can read your password in plaintext;
• Segregated storage of KYC documents with access restricted to authorised compliance personnel only;
• Multi-factor authentication for internal administrative system access;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Automated monitoring and alerting for unusual access patterns, login anomalies, and suspicious transaction activity.

Notwithstanding the above, no online system can be guaranteed to be 100% secure. In the unlikely event of a data breach that is likely to result in significant risk to your rights and freedoms, Cagurbet will notify you and, where applicable, the relevant regulatory authority in accordance with the timeframes required by applicable data protection law.

The Cagurbet Platform uses cookies and similar tracking technologies to enhance your experience, maintain session state, and support analytical and security functions. The categories of cookies we use are as follows:

You can manage or withdraw your cookie consent at any time through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the Platform normally. For instructions on managing cookies in your specific browser (Chrome, Safari, Firefox, Edge), refer to your browser's help documentation.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by Cagurbet:

• Right of Access — you may request a copy of the personal data we hold about you, along with information on how it is being processed;
• Right to Rectification — you may request correction of any inaccurate or incomplete personal data. For simple updates such as email address or phone number, you can make changes directly in your account settings;
• Right to Erasure ("Right to be Forgotten") — in certain circumstances, you may request deletion of your personal data. Note that some data must be retained to comply with our legal and regulatory obligations even after account closure;
• Right to Restriction of Processing — you may request that we restrict the processing of your data under certain conditions, for example while a dispute is being investigated;
• Right to Data Portability — you may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible;
• Right to Object — you may object to processing carried out on the basis of legitimate interests or for direct marketing purposes at any time;
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing. Withdrawal can be actioned via the unsubscribe link in marketing emails or by contacting our support team.

The Cagurbet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. All account registrations require date-of-birth confirmation and are subject to KYC age verification.

If Cagurbet discovers that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the original payment source, with no bonuses or winnings retained.

As an internationally operated platform, Cagurbet may transfer your personal data to data processors located outside of Malaysia. Such transfers are only made where appropriate safeguards are in place, including:

• Data processing agreements incorporating internationally recognised standard contractual clauses;
• Transfer to countries or organisations recognised as providing adequate levels of data protection under applicable international frameworks;
• Processing on the basis of your explicit consent, where required.

In all cases, we apply the same security standards and data handling obligations regardless of where processing takes place. We do not transfer your data to jurisdictions that lack adequate protective frameworks without implementing compensating measures.

Cagurbet reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via the email address on file no less than 7 days before the revised Policy takes effect, except where immediate implementation is required by law or regulation.

The "Last Updated" date at the top of this page will be revised each time the Policy is amended. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact Cagurbet's data team through the following channel:

If you are unsatisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction or seek independent legal advice.