Grabet Privacy Policy

Grabet respects the privacy of every person who visits our website, creates an account, contacts customer support, or uses our online casino and sports betting services. This Privacy Policy describes the manner in which Grabet processes personal data and the choices available to users.

By accessing Grabet or providing information to us, you acknowledge that your data will be handled as described in this Privacy Policy. This document should be read together with the Grabet Terms & Conditions and Responsible Gambling information.

This Privacy Policy covers personal data collected through the Grabet website, account services, gaming features, sportsbook functions, payment processes, promotions, responsible gambling tools, and customer support channels. It applies whether a player connects from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or another supported location.

For the purposes of applicable data-protection law, Grabet determines why and how personal data is processed for the operation of the Platform. Certain payment, identity-verification, technology, and game-service providers may process data under their own legal responsibilities or on documented instructions from Grabet.

The information collected depends on how you use Grabet. We seek to collect data that is relevant and reasonably necessary for providing secure gambling services, meeting compliance duties, preventing misuse, and supporting players.

• Identity and account data: full name, date of birth, username, password in protected form, residential address, nationality, and identity-document details.
• Contact data: email address, mobile number, communication preferences, and records of messages exchanged with the Grabet support team.
• Financial data: deposit and withdrawal history, MYR transaction amounts, payment-method details, bank or e-wallet account references, and limited verification information.
• Gaming data: games viewed or played, bets placed, stakes, winnings, losses, bonus activity, sports selections, live football activity, session duration, and account limits.
• Technical data: IP address, browser type, device identifiers, operating system, language settings, access time, approximate location, and security logs.
• Verification and compliance data: KYC documents, age-verification results, source-of-funds information where required, fraud indicators, and account-risk assessments.
• Preference data: selected game categories, marketing choices, consent records, and settings saved within a Grabet account.

Grabet may receive information directly from you, automatically from your device, or from service providers engaged for payments, identity checks, fraud prevention, account security, and regulatory compliance.

Grabet uses personal data only for specified operational, security, legal, and service-related purposes. The principal purposes include:

• Creating, maintaining, authenticating, and securing your Grabet account.
• Confirming that users satisfy the minimum age requirement of 21 and completing identity checks.
• Processing deposits and withdrawals through supported methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong.
• Providing casino games, live dealer content, sports betting, EPL and Liga Super Malaysia markets, bonuses, and account features.
• Calculating balances, settling bets, recording transactions, and resolving questions about MYR payments or game outcomes.
• Preventing fraud, account takeover, collusion, money laundering, bonus abuse, and other conduct prohibited by Grabet rules.
• Responding to enquiries, technical issues, complaints, privacy requests, and responsible gambling concerns.
• Improving site speed, mobile usability, content relevance, service reliability, and the overall Malaysian player experience.
• Sending service notices and, where permitted, promotional communications based on your preferences.

Depending on the activity and applicable law, Grabet may process information because it is necessary to perform a contract with you, comply with a legal obligation, pursue a legitimate business interest, protect vital interests, or act on valid consent.

Legitimate interests may include maintaining platform security, detecting fraud, improving Grabet services, defending legal claims, and understanding aggregate product performance. Before relying on a legitimate interest, Grabet considers the purpose, necessity, and potential effect on users. Where consent is the appropriate basis, you may withdraw that consent subject to applicable legal and operational limitations.

Gambling platforms require reliable identity and payment controls. Grabet may request documents or information to verify your identity, age, address, payment ownership, and source of funds. Verification protects players, helps prevent financial crime, and ensures that withdrawals are returned to an appropriate account.

Payment partners may process information needed to complete MYR deposits and withdrawals. Grabet does not need to retain every element used by a bank or e-wallet provider. Where possible, payment information is tokenised, masked, or otherwise limited. Transaction records may nevertheless be retained to reconcile balances, investigate disputes, comply with financial obligations, and maintain an accurate account history.

Grabet does not sell personal data. Information may be disclosed only where there is a valid operational, security, legal, or compliance reason. Recipients may include:

• Payment processors, Malaysian banks, e-wallet operators, and transaction-monitoring providers involved in deposits or withdrawals.
• Identity-verification, fraud-prevention, cybersecurity, hosting, analytics, and customer-support service providers.
• Game and sportsbook technology providers where limited account or transaction information is required to deliver and settle services.
• Professional advisers, auditors, insurers, and corporate service providers subject to confidentiality obligations.
• Courts, law-enforcement bodies, regulators, or other competent authorities where disclosure is required or lawfully requested.
• A successor organisation in connection with a lawful merger, restructuring, financing, acquisition, or transfer of business assets.

Grabet expects service providers handling personal data on our behalf to apply appropriate confidentiality, security, and data-protection safeguards.

Some Grabet infrastructure or service providers may operate outside Malaysia. As a result, personal data may be processed in another country whose privacy laws differ from Malaysian requirements. Where applicable, Grabet uses contractual, organisational, or technical safeguards intended to protect information during an international transfer.

These safeguards may include data-processing agreements, confidentiality commitments, access controls, encryption, risk reviews, and restrictions on how a recipient may use or retain personal data.

Grabet may use cookies and similar technologies to keep users signed in, remember preferences, maintain security, measure performance, and understand how visitors move through the Platform. Essential cookies support core functions such as authentication, account protection, payment flow, and session stability.

Performance and preference technologies may help Grabet identify slow pages, optimise the mobile experience, and remember settings. Where consent is required, non-essential technologies will be used in line with the choice presented to you. Browser controls may allow you to block or remove cookies, although disabling essential cookies can prevent account and gaming functions from operating correctly.

Grabet applies technical and organisational measures designed to protect personal data against accidental loss, unlawful use, alteration, disclosure, or unauthorised access. Measures may include encrypted connections, access restrictions, authentication controls, monitoring, protected backups, secure development practices, and staff confidentiality requirements.

No online service can promise absolute security. Players also have an important role in keeping accounts safe. Use a strong and unique password, do not share login details, sign out on shared devices, and notify Grabet promptly if you suspect unauthorised access.

Grabet retains personal data for as long as reasonably necessary to operate an active account and fulfil the purposes described in this Privacy Policy. After an account is closed, selected records may remain necessary for legal compliance, payment reconciliation, anti-fraud controls, dispute resolution, self-exclusion enforcement, or the establishment and defence of legal claims.

Retention periods vary according to the type of record, the reason for processing, applicable limitation periods, and legal requirements. When data is no longer required, Grabet will take reasonable steps to delete it, anonymise it, or place it beyond normal operational use.

Subject to applicable law and relevant exceptions, you may have rights relating to the personal data held by Grabet. We may request proof of identity before acting on a privacy request to prevent information from being disclosed to an unauthorised person.

Some requests may be limited where Grabet must retain information to comply with law, protect another person's rights, enforce self-exclusion, prevent fraud, or resolve a dispute. We will explain the relevant reason where a request cannot be completed in full.

Grabet may process account activity, deposit patterns, session duration, limit settings, and communications to support responsible gambling measures. This information can help identify patterns that may indicate harmful play and enable proportionate interventions, including account messages, affordability checks, limits, cooling-off periods, or account restrictions.

Information linked to self-exclusion may be retained after account closure so that Grabet can honour and enforce the exclusion. Responsible gambling records are handled with care and are accessed only where needed for player welfare, compliance, security, or support. More information is available on the Responsible Gambling page.

Grabet services are intended only for persons aged 21 and above. We do not knowingly permit minors to create accounts or gamble. Age and identity checks may be required before account functions or withdrawals are made available.

If Grabet learns that information has been submitted by a person under 21, the relevant account may be suspended and the information reviewed for deletion or restricted retention, subject to fraud prevention, legal, and financial-record obligations. A parent or guardian who believes a minor has provided data should contact Grabet customer support.

Grabet may update this Privacy Policy to reflect changes in services, technology, security practices, operational requirements, or applicable law. The revised version will be published on this page with an updated effective date.

Where a change materially affects how personal data is used, Grabet may provide an additional notice through the Platform or an appropriate account communication. Users should review this page periodically to remain informed about current privacy practices.

Questions about this Privacy Policy, account information, or an available privacy right may be directed to the Grabet customer support team. Please provide enough information for us to identify the issue without sending unnecessary sensitive documents in your first message.

Grabet may need to verify your identity before providing account data or making changes. This security step protects your information from fraudulent requests and unauthorised disclosure.