Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which Serubet ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal information provided by users ("User", "you", "your") of the serubet.cam website and associated services. This Policy applies to all personal data collected from Users in connection with their registration, use of Platform services, and any communications with Serubet's support team.

By registering an account on Serubet or by continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not register an account or use the Platform's services.

This Policy should be read in conjunction with Serubet's Terms & Conditions, which govern the contractual relationship between you and Serubet. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or can identify a living individual, directly or indirectly, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Serubet, the entity that determines the purposes and means by which Personal Data is processed.
• "Data Processor" means any third party that processes Personal Data on behalf of Serubet under a data processing agreement.
• "Data Subject" means the natural person to whom the Personal Data relates — in this context, a registered User of the Platform.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC Data" means identity and age verification documents submitted by a User as part of the Know Your Customer process, including but not limited to national identity cards (MyKad), passports, and utility bills.
• "Transaction Data" means records of financial activity conducted through a User's Account, including deposit and withdrawal history, payment method details, and account balance movements.

Serubet collects personal data through several channels and for specific, legitimate purposes. We collect only the data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect include:

3.1 Registration & Account Data

When you create an account on Serubet, we collect information that you provide directly, including your full legal name, date of birth, email address, mobile telephone number, residential address, username, and password (stored in hashed, encrypted form). This information is required to create and maintain your Account.

3.2 Identity Verification (KYC) Data

To comply with applicable anti-money laundering obligations and to verify that Users meet the 21+ age requirement, Serubet collects identity documents including national identity cards (MyKad), passports, and in some cases proof of residential address such as utility bills or bank statements. KYC data is handled with the highest level of care and is not used for any purpose beyond verification and regulatory compliance.

3.3 Financial & Transaction Data

We collect records of all financial transactions conducted through your Account, including deposit methods, amounts, dates, withdrawal requests, and associated payment instrument details (e.g., bank account numbers, e-wallet identifiers). Payment method details are processed through secure payment gateways and are not stored in full on Serubet's own servers.

3.4 Usage & Behavioural Data

We collect data about how you interact with the Platform, including pages visited, games played, bets placed, session duration, device type, browser type, operating system, and clickstream data. This data helps us improve the Platform experience and detect potentially problematic gambling patterns to fulfil our responsible gambling obligations.

3.5 Communications Data

When you contact Serubet's support team via live chat, email, or WhatsApp, we retain records of those communications for quality assurance, training, and dispute resolution purposes.

3.6 Technical & Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, device identifiers, geographic location at the jurisdiction level, time zone settings, and cookie identifiers. This data is used for Platform security, fraud prevention, and regulatory compliance purposes.

Serubet uses the personal data it collects for the following purposes:

• Account Creation and Management: To create, maintain, and administer your Account, including processing login requests, managing preferences, and enabling access to Platform features.
• Service Delivery: To facilitate sports betting, live casino, and slot gaming activity; to process deposits and withdrawals; and to credit bonuses and promotions to eligible Accounts.
• Identity and Age Verification: To verify that Users meet the minimum age requirement of 21 years and to satisfy KYC obligations under applicable anti-money laundering frameworks.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the Platform.
• Responsible Gambling: To monitor betting patterns for indicators of problem gambling behaviour and to administer responsible gambling tools including deposit limits and self-exclusion at the User's request.
• Customer Support: To respond to enquiries, process complaints, and provide assistance through our 24/7 live chat, email, and WhatsApp support channels.
• Legal and Regulatory Compliance: To meet obligations imposed by applicable laws, including record-keeping, reporting, and cooperation with regulatory or law enforcement authorities where lawfully required.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the Platform's functionality, design, and content offering.
• Marketing Communications: To send promotional offers, bonus notifications, and Platform updates to Users who have opted in to receive such communications. Users may opt out at any time by contacting support.

Serubet processes personal data on the following legal bases, as applicable to the purpose of each processing activity:

• Contractual Necessity: Processing required to perform the contract between Serubet and the User — principally the creation and administration of User Accounts and the delivery of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, anti-money laundering record-keeping, and cooperation with regulatory or law enforcement requests.
• Legitimate Interests: Processing necessary for Serubet's legitimate business interests, where such interests are not overridden by the User's fundamental rights — including fraud prevention, Platform security, and aggregate usage analytics.
• Consent: Processing based on the User's freely given, informed consent — principally the sending of direct marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Serubet does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. We may share personal data with third parties only in the following limited circumstances:

• Payment Processors: Personal and financial data is shared with verified payment service providers (including Malaysian payment networks supporting FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processors) solely to facilitate the processing of deposits and withdrawals.
• Identity Verification Providers: KYC documents may be shared with third-party identity verification services engaged by Serubet to authenticate User identities and comply with anti-money laundering obligations.
• Game and Technology Providers: Certain usage and technical data may be shared with certified game studios or platform technology providers to facilitate the operation of specific games or features.
• Regulatory and Law Enforcement Authorities: Serubet may disclose personal data to competent regulatory bodies or law enforcement agencies where required to do so by applicable law, valid legal process, or to protect the safety of Users or third parties.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of all or substantially all of Serubet's assets, personal data held by Serubet may form part of the transferred assets, subject to the acquiring entity honouring the obligations of this Policy.

All third parties with whom Serubet shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the scope authorised by Serubet.

Serubet uses cookies and similar tracking technologies to enhance the User experience, maintain session continuity, analyse Platform usage, and support fraud prevention efforts. A cookie is a small text file placed on your device by your browser at the request of the Platform.

The cookies deployed on serubet.cam fall into the following categories:

• Strictly Necessary Cookies: These are essential for the Platform to function correctly and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies as they are operationally necessary.
• Performance Cookies: These cookies collect anonymised information about how Users interact with the Platform — such as pages visited, time spent on each page, and error messages — to help us improve performance. These cookies do not collect personally identifiable information.
• Functionality Cookies: These cookies remember User preferences such as language settings, display preferences, and login details to provide a personalised experience.
• Analytics Cookies: We use analytics tools to aggregate data on Platform usage. This data is processed in aggregate form and does not identify individual Users. Users may opt out of analytics cookies through their browser settings.

You may configure your browser to refuse all or some cookies, or to alert you when websites attempt to set or access cookies. If you disable or reject cookies, some functionality of the Platform may become unavailable or operate in a degraded manner.

Serubet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Retention periods vary depending on the category of data and the purpose of retention:

• Account Data: Retained for the duration of the Account relationship and for a period of up to five (5) years following Account closure to meet post-closure regulatory and anti-money laundering record-keeping requirements.
• KYC and Identity Verification Data: Retained for a minimum of five (5) years following Account closure, as required by applicable anti-money laundering legislation.
• Transaction and Financial Data: Retained for a minimum of five (5) years following the date of the relevant transaction, in accordance with financial record-keeping obligations.
• Communications Data: Support correspondence and chat logs are retained for a period of two (2) years for quality assurance and dispute resolution purposes.
• Usage and Technical Data: Retained for up to twenty-four (24) months in aggregate analytical form; raw session logs are retained for shorter periods consistent with operational needs.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to any individual User.

Serubet implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption applied to all data transmissions between Users and the Platform.
• Encrypted storage of passwords using industry-standard hashing algorithms. Serubet does not store passwords in plaintext under any circumstances.
• Two-factor authentication (2FA) availability for all User Accounts as an additional access security layer.
• Segregated data storage environments with access controls restricting data access to authorised personnel on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Documented incident response procedures for the identification, containment, and notification of data breaches where required.

While Serubet employs robust security measures, no transmission of data over the internet or electronic storage system is entirely without risk. Users are encouraged to maintain strong, unique passwords for their Serubet Accounts and to enable two-factor authentication to minimise exposure to unauthorised account access.

As a data subject, you hold certain rights with respect to your personal data held by Serubet. These rights are subject to applicable legal limitations and may be exercised by contacting our support team using the contact details provided in Section 14 of this Policy.

• Right of Access: You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data held about you. Minor corrections such as updating a contact number can be made directly via Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the legal basis), or where processing is unlawful. This right is subject to Serubet's legal obligations to retain certain data categories.
• Right to Restriction of Processing: You may request that Serubet restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. You also have the right to object to direct marketing communications at any time, with immediate effect.
• Right to Withdraw Consent: Where Serubet processes personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Requests to exercise any of the above rights will be acknowledged within 2 business days and substantively addressed within 30 days of receipt. Serubet may request proof of identity before processing a data subject rights request to ensure that data is not disclosed to unauthorised persons.

Serubet's Platform and services are strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals below the age of 21. Underage gambling is illegal and is strictly prohibited on this Platform.

During the registration process, Users are required to confirm that they are 21 years of age or older. Serubet enforces KYC identity verification to substantiate age declarations. Any Account identified as belonging to an individual below the age of 21 will be immediately closed, all balances will be returned to the registered payment method, and the matter may be referred to appropriate authorities.

If you are a parent or guardian and have reason to believe that a minor has registered an Account on Serubet using false information, please contact our support team immediately via live chat or at the email address provided in Section 14. We will investigate and take appropriate action without delay.

Serubet's primary operations are focused on serving the Malaysian market. However, in the course of operating the Platform, certain personal data may be processed or stored in servers located outside of Malaysia — for example, where Serubet engages cloud infrastructure providers or third-party game studios whose technical operations are based in other jurisdictions.

Where personal data is transferred to a country or territory outside of Malaysia, Serubet implements appropriate safeguards to ensure that the transferred data receives a level of protection consistent with this Policy and applicable data protection standards. Such safeguards may include contractual data processing agreements with receiving parties incorporating standard data protection clauses.

By using Serubet and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data as described above.

Serubet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our operational practices, or the services we offer. The most current version of this Policy will always be published on this page, together with the date on which it was most recently updated.

Where a material change is made to this Policy — for example, a change to the categories of data we collect, our data sharing practices, or the legal basis on which we process data — Serubet will notify registered Users via email or in-platform notification prior to the change taking effect. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

Serubet recommends that Users review this Privacy Policy periodically to remain informed of how their personal data is being handled. If you have any questions about a specific change, please contact our support team.

If you wish to exercise any of your data subject rights, have a question about how Serubet processes your personal data, or wish to raise a data privacy concern or complaint, please contact us through any of the channels listed below. Note that contact details are provided as plain text — they are not clickable links.

We aim to respond to all data subject rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.