At gizabet, protecting your personal data is a responsibility we take seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold as a user of our platform. We encourage you to read it in full before registering an account.
Our Privacy Commitments
A summary of our core data protection principles. These do not replace the full policy below — please read all sections carefully.
This Privacy Policy ("Policy") is published by gizabet ("Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://gizabet.cam (the "Platform"). This Policy applies to all individuals who access or use the Platform, including registered account holders, visitors, and prospective users ("you", "your", "User").
gizabet is committed to processing personal data responsibly, transparently, and in compliance with applicable data protection legislation. We serve users predominantly in Malaysia and process personal data in connection with account registration and management, payment processing via Malaysian payment channels such as Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and Public Bank, identity verification (KYC), responsible gambling compliance, and the provision of customer support.
This Policy is incorporated into our Terms and Conditions by reference. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not accept this Policy, you must not use the Platform.
Your Privacy Matters: This Policy is written in plain, accessible language. If any clause is unclear, our support team is available 24/7 to explain specific provisions in greater detail. We encourage you to read the full Policy — it takes approximately 10 minutes.
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, or deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. gizabet acts as Data Controller for data processed through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller pursuant to a written agreement and the instructions of the Data Controller. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a specified purpose. |
| "KYC" | Know Your Customer — the identity and document verification process used to confirm user identity and comply with anti-money laundering (AML) obligations. |
| "Cookies" | Small text files stored on your device by a web browser at the direction of a website, used to retain information about your session or preferences. |
gizabet acts as the Data Controller in respect of all Personal Data collected and processed through the Platform. As Data Controller, gizabet determines the purposes for which Personal Data is collected, the means by which it is processed, and is responsible for ensuring that all processing activities comply with applicable data protection laws.
Where gizabet engages third-party service providers to process data on its behalf — such as payment processors, KYC verification services, fraud detection providers, and customer support software vendors — those providers act as Data Processors under written data processing agreements that impose binding obligations regarding data security, confidentiality, and the limitation of processing to specified purposes.
For all data-related enquiries, you may contact us via live chat on the Platform or by email. Our contact details are provided in Section 17 of this Policy.
The categories of Personal Data we collect depend on the nature of your interaction with the Platform. The table below sets out the primary categories and examples of the data within each:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID (MyKad, passport) | Registration & KYC |
| Contact Data | Email address, mobile phone number, residential address (city, state, postcode) | Registration |
| Financial Data | Bank account details, eWallet identifiers (Touch 'n Go, Boost, GrabPay), cryptocurrency wallet addresses, transaction history | Deposits & Withdrawals |
| Gaming Activity Data | Bet history, game sessions, wagering amounts, win/loss records, bonus usage | Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatic — platform access |
| KYC Documentation | Copies of identity documents, proof of address, source of funds documentation | Verification requests |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer support interactions |
| Marketing Preferences | Consent to receive promotional communications, preferred communication channel | Registration or account settings |
gizabet collects Personal Data through the following channels and methods:
The majority of Personal Data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings. This includes all Identity Data, Contact Data, and Financial Data categories described in Section 4.
When you access and use the Platform, we automatically collect Technical Data including your IP address, device identifiers, browser information, and session logs. This data is collected through server logs, cookies, and similar tracking technologies described further in Section 11. Gaming Activity Data is automatically generated and recorded as a consequence of your use of our games and betting services.
We may receive Personal Data from third parties in the course of providing our services, including:
gizabet processes Personal Data only where a lawful basis exists for doing so. The following legal bases apply to our processing activities:
| Legal Basis | Processing Activities Covered |
|---|---|
| Performance of a Contract | Account registration, processing deposits and withdrawals, managing bets and game sessions, providing customer support, operating loyalty programmes. |
| Legal Obligation | KYC and AML identity verification, regulatory reporting, responsible gambling compliance, age verification, record-keeping obligations under applicable law. |
| Legitimate Interests | Fraud prevention and security monitoring, IT system maintenance, improving Platform performance, aggregated analytics, communicating service updates. |
| Consent | Sending promotional and marketing communications by email or push notification; placing non-essential cookies on your device. |
Withdrawing Consent: Where processing is based on your consent, you may withdraw that consent at any time by updating your account marketing preferences or adjusting your cookie settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
gizabet uses Personal Data for the following purposes:
gizabet does not sell your Personal Data to third parties. We may share your data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:
We engage trusted third-party service providers to perform functions on our behalf, including payment processing (Malaysian banks, eWallet operators), KYC verification, fraud detection, cloud hosting, customer support software, and analytics. These providers are bound by contractual obligations and may process your data only as directed by gizabet.
gizabet may disclose Personal Data to competent authorities, regulatory bodies, or law enforcement agencies where required to do so by law, court order, or regulatory direction. We will disclose only the minimum data necessary to comply with any such requirement.
In the event of a merger, acquisition, restructuring, or sale of gizabet's assets, your Personal Data may be transferred to the successor entity as part of that transaction. Where such a transfer occurs, the receiving entity will be required to honour the commitments made in this Policy.
We will share your Personal Data with any other party where you have given your explicit, informed consent to such sharing.
No Third-Party Marketing: Your personal data is never shared with third-party advertisers, marketing networks, or data aggregators for their own commercial purposes. We take this commitment seriously and enforce it contractually with all our service providers.
gizabet's primary infrastructure is operated within jurisdictions selected for their data security standards and regulatory compliance frameworks. However, in providing the Platform to users across Malaysia and other permitted markets, some Personal Data may be transferred to, or processed in, countries outside Malaysia or the country in which you are located.
Where such transfers occur, gizabet ensures that appropriate safeguards are in place to protect your Personal Data to at least the same standard as would apply within Malaysia. Safeguards may include binding contractual clauses, certification frameworks, or transfers to jurisdictions recognised as providing adequate data protection standards.
By using the Platform and providing us with your Personal Data, you acknowledge and consent to the transfer of your data in the circumstances described above, subject always to the protections described in this Policy.
gizabet retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal, regulatory, and contractual obligations. The following general retention principles apply:
| Data Category | Retention Period |
|---|---|
| Account and Identity Data | Duration of account plus minimum 5 years after closure, in compliance with AML record-keeping requirements |
| Financial Transaction Records | Minimum 5 years from the date of transaction, in accordance with financial services regulations |
| KYC Documentation | Minimum 5 years following account closure or completion of the KYC process |
| Gaming Activity Data | Duration of account plus 3 years, for responsible gambling monitoring and dispute resolution purposes |
| Customer Support Records | 3 years from the date of the interaction, or longer if required in connection with an unresolved dispute |
| Marketing Preferences | Until you withdraw consent or request deletion, subject to legal minimum retention requirements |
| Technical / Log Data | Up to 12 months, unless retained longer for fraud investigation or legal proceedings |
Following the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be associated with a specific individual.
| Cookie Type | Purpose | Further Detail |
|---|---|---|
| Essential Cookies | Platform functionality | Required for the Platform to operate correctly. These include session authentication cookies, load-balancing cookies, and security tokens. These cannot be disabled without disrupting Platform functionality. |
| Performance Cookies | Analytics & optimisation | Collect aggregated, anonymised data on how users navigate the Platform — page views, error logs, load times — to help us identify and resolve performance issues. |
| Functional Cookies | User preferences | Remember your language preferences, display settings, and similar customisations to improve your experience across sessions. |
| Marketing Cookies | Targeted content | Where you have consented, used to identify your Platform usage patterns and deliver relevant promotional content. You may withdraw consent at any time. |
Most web browsers allow you to manage cookie preferences through the browser settings menu. You can typically choose to block all cookies, accept only essential cookies, or delete cookies that have already been set. Please note that blocking essential cookies may prevent the Platform from functioning correctly and may affect your ability to log in, place bets, or process payments.
As a data subject, you hold the following rights with respect to your Personal Data processed by gizabet. We will respond to all valid rights requests within 30 days of receipt, free of charge unless a request is manifestly unfounded or excessive.
To exercise any of the above rights, please contact our Data Protection team via live chat on the Platform or by email at the address provided in Section 17. We may require verification of your identity before processing a rights request to protect against unauthorised access to your data.
The gizabet Platform is strictly for persons aged 21 and above. We do not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. If you are under 21 years of age, you must not use the Platform or provide any personal information to us.
If gizabet becomes aware that Personal Data has been collected from an individual under 21 without verified parental consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has accessed the Platform and provided us with Personal Data, please contact us immediately at the details in Section 17.
Parental Advisory: If you are a parent or guardian and believe your child has created an account on gizabet, please contact our support team immediately via live chat. We take underage access seriously and will act promptly to close any such account and return any deposited funds.
gizabet implements technical and organisational security measures appropriate to the sensitivity of the Personal Data we process. These measures include:
While we implement robust security controls, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect any unauthorised access to your account.
The gizabet Platform may contain references to or integrations with third-party services, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank Internet Banking, and CIMB Clicks. Where you interact with these third-party services, you are subject to the privacy policies and data handling practices of those third parties, which are beyond gizabet's control.
gizabet is not responsible for the privacy practices or content of any third-party services, platforms, or websites. We recommend that you review the relevant privacy policies of any third-party service you use in connection with the gizabet Platform, particularly when making deposits or withdrawals through external payment channels.
gizabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made.
Where changes are material — such as the introduction of a new category of data processing, a new category of data sharing, or changes to the rights available to users — we will provide notice to registered users via the Platform or by email to the address on file, at least 7 days before the amended Policy takes effect. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.
We recommend reviewing this Policy periodically to stay informed about how gizabet protects your Personal Data. Archived versions of previous Policy editions are available upon request from our support team.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by gizabet, please contact us through any of the following channels:
Our support team is staffed by agents familiar with the Malaysian market and can assist users located across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia. All Personal Data-related communications are handled with strict confidentiality.
Making a Complaint: If you are not satisfied with how gizabet has handled a privacy concern, you have the right to lodge a complaint with the relevant supervisory authority responsible for data protection in your jurisdiction. We encourage you to contact us first so that we have the opportunity to resolve your concern directly.
Your personal data is protected by bank-grade encryption, processed only for legitimate purposes, and never sold to third parties. Experience Malaysia's most trusted online casino with full confidence in your privacy.
For players aged 21 and above only. Online gaming involves financial risk. Please gamble responsibly.