Official Document

Privacy Policy Oxbet — Data Protection Your Personal

Your privacy is our priority. This document explains transparently how Oxbet collects, uses, stores, and protects the personal data of every Malaysian member who uses our platform.

Last updated: 1 January 2026  ·  Applicable to all registered Oxbet members in Malaysia
256-bit SSL
Protected Data
No Data Selling
Transparent Policy
24/7 Support
Full User Rights

Our Commitment: Oxbet does not sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent. Your data is used solely for the purposes stated in this Privacy Policy.

01 Introduction & Scope of This Policy

Oxbet takes the privacy of every member seriously across our sports betting, online casino, poker, lottery, and e-sports platforms. This Privacy Policy transparently explains how we collect, process, store, and protect your personal data when you use our Oxbet — whether through our website, mobile app, or any of our official communication channels.

This policy applies to all users who visit the Oxbet, register an account, make a deposit or withdrawal, contact customer support, or interact with our platform in any way. By using our services, you agree to the collection and use of information as described in this document.

If you have any questions about how we handle your personal data that are not addressed in this document, please contact us directly via email at support@oxbet-win.com and our team will provide a response within 3 working days.

The Bahasa Malaysia version is the official version this privacy policy applies to all members in Malaysia. Any translation into other languages is for reference purposes only.

02 Types of Personal Data We Collect

Oxbet only collects data necessary to provide our members with a safe, transparent, and quality service. The data we collect can be broken down into several categories:

Data Category Example Purpose of Use
Identity Information Full name, IC/passport number, date of birth, gender KYC VerificationAge Verification
Contact Information Email address, Malaysian phone number, residential address Account CommunicationsNotifications
Financial Information Bank account number, DuitNow/TnG account name, transaction records Payment ProcessingFraud Prevention
Usage Data Betting records, games played, session duration, game preferences PersonalisationResponsible Gaming
Technical Data IP address, device type, operating system, web browser, screen resolution SecurityPlatform Improvement
Communication Data Support chat records, inbound emails, submitted feedback Customer SupportComplaint Resolution

We does not collect sensitive information such as biometric data, medical records, religious beliefs, or political views. Any information you voluntarily provide in communications with our team will be handled with the same high level of confidentiality.

Important: Oxbet does not access your mobile device's camera, microphone, or contacts without your explicit consent. Device permissions required for specific functions will be requested and explained separately.

03 How We Use Your Personal Data

The personal data you provide to Oxbet used solely for purposes related to the provision of our platform services. Below are the specific purposes and the legal basis supporting each use:

  • Account Management: Creating, verifying, and maintaining your member account — including the KYC (Know Your Customer) process required for anti-money laundering compliance.
  • Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX, as well as withdrawals of winnings to your account.
  • Service Provision: Enables you to place sports bets, play casino games, access poker tables, and use all platform features Oxbet.
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, system manipulation, identity fraud, and suspicious or unlawful activity.
  • Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and supporting the use of self-control tools such as deposit limits and self-exclusion.
  • Customer Support: Addressing inquiries, resolving complaints, and providing technical support via live chat and email.
  • Service Communications: Sending important account notifications, terms updates, and security alerts. This is not optional marketing — it is necessary service communication.
  • Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience, technical performance, and product offerings.
  • Legal Compliance: Complying with applicable legal requirements, regulations, or directives from relevant authorities.

Oxbet does not use your personal data to make automated decisions that materially affect you without human oversight, except for immediate security protections requiring real-time action, such as temporary login blocks when suspicious activity is detected.

04 Data Sharing With Third Parties

Oxbet reaffirms: we do not sell, rent, or disclose members' personal data to any third party for marketing purposes. However, there are limited situations where sharing data with certain parties is necessary to provide our services:

  • Payment Providers: Required transaction data is shared with payment providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX banks to process your deposits and withdrawals. These providers have their own privacy policies and are subject to strict data protection regulations.
  • Game Providers: For casino and poker games, the minimum data required to ensure game integrity may be shared with licensed game providers such as PG Soft, Pragmatic Play, and Evolution Gaming. This data does not include your full personal identification details.
  • Legal Authorities: Oxbet will disclose personal data when required by a court order, directive from Malaysian authorities, or a valid anti-money laundering (AML) compliance requirement.
  • Technology Service Providers: Cloud infrastructure providers, cybersecurity services, and analytics platforms that help us operate the platform — all bound by strict confidentiality agreements and not permitted to use your data for their own purposes.
  • Fraud Investigation: In cases of suspected fraud requiring investigation, relevant information may be shared with security agencies or other platforms as part of industry-wide fraud prevention cooperation.

Data Processing Agreement: All third parties that receive personal data from Oxbet members are bound by data processing agreements that require them to handle such data in accordance with privacy standards equal to or higher than those set out in this Privacy Policy.

05 Oxbet Data Security Measures

Protecting your personal data is a technical and organisational responsibility we take seriously at every level of our operations Oxbet. We implement multiple layers of protection to keep your data secure:

1
Industry-Standard 256-bit SSL Encryption
All data transmitted between your device and Oxbet's servers is protected with TLS 1.3 encryption and 256-bit SSL certificates — the same standard used by leading Malaysian banking and financial institutions.
2
Hashed Password Storage
Your account password is never stored in plain text. We use the bcrypt hashing algorithm with a unique salt for each account — meaning that even in the event of a data breach, your password cannot be recovered.
3
Two-Factor Authentication (2FA)
2FA is available for all Oxbet accounts via an authenticator app or SMS to your registered Malaysian phone number. We strongly encourage all members to enable 2FA for an added layer of protection.
4
Real-Time Threat Detection System
Our infrastructure is equipped with Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) that monitor all inbound and outbound traffic 24/7 to identify and respond to cyber attack patterns.
5
Tiered Internal Access Controls
Access to members' personal data within the Oxbet organisation is restricted on a need-to-know basis. Employees who do not require access to specific data are not granted permission, and all internal data access is logged and audited on a regular basis.
6
Data Backup & Recovery
Member data is automatically backed up to geographically separate locations on a daily basis. Our disaster recovery system ensures service continuity and guarantees your data is not lost in any critical technical situation.

Shared Responsibility: While Oxbet implements comprehensive security measures, the security of your account also depends on you. Do not share your password, use a strong and unique password, and enable 2FA for maximum protection. If you suspect your account has been accessed without authorisation, contact our support team immediately.

06 Cookie Policy

Platform Oxbet uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform usage. The following are the types of cookies we use:

Required for core platform functions such as login authentication, session security, and transaction processing. These cookies cannot be disabled — they are necessary for the platform to function properly. No personally identifiable information is stored.

Helps us understand how members use the Oxbet platform — which pages are visited most, how long sessions last, and where users encounter navigation difficulties. This data is collected in aggregate and does not directly identify individuals. You can opt out of analytics cookies through your browser settings.

Stores your preferences such as display language, preferred odds format (decimal, Malay, or fractional), and other display settings so you do not have to reconfigure them each time you log in. These cookies do not require sensitive personal information.

Used to detect and prevent fraudulent activity, CSRF attacks, and suspicious login attempts. These cookies store cryptographically protected session tokens and expire automatically.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the platform Oxbet and you may be unable to log in or complete transactions properly.

07 Your Rights as a Data Owner

As a member Oxbet, you have full rights over the personal data we hold about you. The following rights may be exercised at any time:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days and the data will be provided in a readable format.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic information can be updated directly from your account settings.

Right to Erasure

You may request the deletion of your personal data in certain circumstances. Please note that some data must be retained for a specified period to meet legal and anti-money laundering compliance requirements.

Right to Restrict Processing

You may request that the processing of your data be restricted in certain situations — for example, while you are disputing the accuracy of data we hold or while awaiting the resolution of a complaint.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (such as JSON or CSV) so that you can transfer it to another platform should you wish to do so.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances.

How to Exercise Your Rights: To submit any of the data rights requests above, contact us via email at support@oxbet-win.com with the subject line "Data Rights Request", stating the type of request, your account number, and identity verification details. Oxbet will respond within 14 working days.

08 Data Retention Period

Oxbet only retains your personal data for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulations. Our data retention guidelines are as follows:

  • Active account data: Retained for the duration of your active account plus 5 years after account closure, in accordance with anti-money laundering and tax compliance requirements.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial regulations, covering deposit and withdrawal records processed via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, and other payment methods.
  • Betting records: Retained for 3 years from the date of the bet for dispute resolution purposes and responsible gambling analysis.
  • Customer support records: Retained for 2 years after case resolution for quality control purposes and as a historical record in the event that the issue recurs.
  • Security logs: Retained for 12 months to support security incident investigations that may be identified at a later stage.
  • Optional marketing data: Retained until you withdraw consent or close your account, whichever comes first.

When data is no longer needed and the minimum retention period has elapsed, Oxbet will securely delete or anonymise the relevant data in accordance with standard data deletion procedures.

09 Child Protection

All services Oxbet is exclusively for individuals aged 21 years of age and above. We do not knowingly collect personal data from individuals under the age of 21.

During registration, we carry out strict age verification based on the information provided. If an account is suspected to belong to an underage individual, we will freeze it immediately and request identity verification documents. Should it be confirmed that the account belongs to an underage individual, the account will be closed immediately, all collected data will be deleted as promptly as possible, and any deposits made will be refunded.

Parents & Guardians: If you believe your child or ward who is under age has registered an Oxbet account, please contact us immediately via email at support@oxbet-win.com with the relevant supporting evidence. We will take prompt action to close the account and safeguard the data involved.

10 Links to Third-Party Services

Platform Oxbet may contain links to third-party services such as payment providers (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks) or game providers. When you follow these links or interact with third-party services, the applicable privacy policy is that of the respective third party — not Oxbet's Privacy Policy.

Oxbet is not responsible for the privacy practices or content of third-party websites or services that are outside our control. We encourage you to read the privacy policy of any third-party service you use alongside the Oxbet platform.

Every third-party service provider that integrates with Oxbet has undergone our security and privacy review process before integration is approved. We only work with providers whose privacy and security standards are on par with or exceed our own.

11 Privacy Policy Amendments

Oxbet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to how we protect your information. All amendments will be published on this page with a clear updated date.

For material amendments that significantly affect how we process your personal data, we will provide at least 14 days before changes take effect via your registered email and/or in-platform notifications. This gives you sufficient time to review the changes and make an informed decision.

How to Stay Updated: You can revisit this Privacy Policy page at any time to review the latest version. The "Updated" date at the top of the page will reflect when changes were last made. We recommend checking this page periodically.

12 Contact Us — Data Privacy Matters

For any enquiries, requests, or complaints relating to this Privacy Policy and how Oxbet handling your personal data, you may contact us through the following channels:

Privacy Enquiries Email

Support@oxbet-win.com — for data access requests, corrections, erasure, and privacy complaints. Please include "Privacy Matter" in your email subject line. Response within 3 business days.

In-Platform Live Chat

Available 24/7 within the Oxbet platform. For urgent privacy issues — such as suspected unauthorised account access or compromised personal data — live chat is the fastest way to get immediate assistance.

Response Time

Data rights requests (access, correction, deletion): within 14 working days. Privacy complaints: initial response within 3 working days, full resolution within 14 working days. Urgent security issues: within 1 working hour via live chat.

Why Your Data Is Safe With Oxbet

Privacy protection is not merely a policy on paper — it is a daily practice embedded at every layer of the Oxbet platform.

Bank-Grade Encryption

The same 256-bit SSL used by Maybank2u and CIMB Clicks protects every bit of data you send to and from the platform Oxbet — whether during login, DuitNow deposit, or a support chat.

No Data Sales to Advertisers

Your personal data is never sold or rented to advertising companies, social media platforms, or any third party for marketing purposes. This is not merely a promise — it is a core operating policy of Oxbet.

Full Control in Your Hands

Access your data, update your information, withdraw consent, or request account deletion — all from your account settings or via our support email. No complicated processes or unnecessary delays.

24/7 Security Monitoring

Our automated threat detection system monitors the infrastructure Oxbet at all times. Any unusual activity — whether login attempts from a new location or abnormal transaction patterns — will trigger an immediate security review.

Policy Written in Bahasa Malaysia

Unlike many other platforms that bury their privacy policies in hard-to-understand legal jargon, Oxbet drafted this Privacy Policy in plain Bahasa Malaysia so that every Malaysian member can fully understand their rights and protections.

Industry Standard Compliance

Data protection practices Oxbet in line with international iGaming industry standards and applicable data compliance requirements in Malaysia, ensuring your data is handled to the highest applicable standards.

FAQ — Oxbet Privacy Policy

No, Oxbet does not share your personal account information with other betting platforms, advertising companies, or any third party for marketing purposes. Data sharing is limited to the situations outlined in our Privacy Policy — namely with payment providers to process your transactions (such as DuitNow, Touch 'n Go eWallet, GrabPay, and FPX), game providers to ensure game integrity, and law enforcement authorities when required by an official order. All such third parties are bound by strict confidentiality agreements.

Yes, you have the right to request deletion of your personal data. However, please note that certain data must be retained for a specified period due to legal obligations — specifically, financial transaction records, which must be kept for 7 years under Malaysia's anti-money laundering regulations. Data not subject to any legal retention requirement will be deleted within 30 days of your request being approved. To submit a deletion request, contact us at support@oxbet-win.com with the subject line "Data Deletion Request", along with your account verification details.

Oxbet does not store your full bank card details or digital wallet login credentials (such as those for Touch 'n Go eWallet, GrabPay, or Boost) in our database. All payment transactions are processed through certified, secure payment gateways, where sensitive payment data is handled directly by the respective payment providers using their own high-grade encryption. What we retain are transaction records only — such as amount, date, payment method, and status — not your full account number or login credentials.

When your account is closed, your personal data is not deleted immediately — this is because legal requirements oblige us to retain certain records for a prescribed period. Identity data and financial transaction records are kept for 5–7 years in accordance with compliance requirements. Your account will, however, be deactivated and your data will no longer be used for any operational or marketing purpose. Once the mandatory retention period has lapsed, your data will be securely deleted or anonymised. You may request a full report of the data we hold about you at any time by emailing support@oxbet-win.com.

Oxbet may send promotional communications and bonus offers via email or platform notifications if you provided consent during registration or through your account settings. This is separate from third-party advertising — we do not sell your data to external advertisers or use it to target ads on other platforms such as social media. If you wish to stop receiving promotional communications from Oxbet, you may unsubscribe at any time via the "Unsubscribe" link in our emails or through your account notification settings.

A Platform That Respects Your Privacy

At Oxbet, privacy and security are not just compliance checkboxes — they are core values we live by. Join over 150,000 Malaysian members who enjoy EPL, Liga Super Malaysia, BWF badminton, MPL esports, slots, and Live Casino betting safely and with confidence.

256-bit SSL protected data  ·  Age 21+ only  ·  Play responsibly

Bahasa Melayu