Betflix Privacy Policy — How We Collect, Use & Protect Your Personal Data

This Privacy Policy ("Policy") is published by Betflix ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at betflix.casa. It describes how Betflix collects, processes, stores, and protects the personal data of all registered users ("Player", "you") and website visitors, with particular regard to players based in Malaysia and throughout Southeast Asia.

By creating a Betflix account, accessing the platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree with any part of this Policy, you should not use the Betflix platform and should contact us to request account closure.

Betflix is committed to handling all personal data with the highest standards of care, confidentiality, and integrity. This Policy is reviewed periodically and updated as required to reflect changes in our practices, applicable laws, or regulatory requirements.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, identity document details, payment information, and IP address.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, transmission, deletion, or any other handling of data.
• "Data Controller" — Betflix, as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" — Any third-party entity that processes personal data on behalf of Betflix in accordance with Betflix's instructions and this Policy.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their personal data for one or more specific purposes.
• "KYC Data" — Identity verification documentation submitted as part of the Know Your Customer process, including government-issued identification and payment method ownership proof.
• "Platform" — The Betflix website, mobile-optimised interface, and all associated gaming, betting, and account management services available at betflix.casa.

Betflix collects personal data through several channels, including direct submission by you during registration and account use, automatic collection through technical systems, and verification of information via third-party identity confirmation services.

Betflix processes your personal data for the following specific purposes. Each processing purpose is linked to a defined legal basis, which is set out in Section 5:

4.1 Account Creation and Management. We use your identity, contact, and verification data to create and maintain your Betflix account, authenticate your identity at each login, communicate account-related information such as deposit confirmations and withdrawal processing updates, and enforce our one-account-per-player policy.

4.2 Payment Processing. We process your financial data and transaction records to execute deposits and withdrawals in MYR via supported Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong. Transaction records are maintained for regulatory compliance and dispute resolution.

4.3 KYC and Identity Verification. We process identity and verification data to comply with our Know Your Customer obligations, confirm your eligibility to use the platform (including the 21+ age requirement), and prevent the use of stolen or fraudulent identities.

4.4 Fraud Prevention and Security. We analyse account activity data, technical data, and financial data to detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, bonus abuse, and other prohibited conduct.

4.5 Platform Personalisation. We use account activity data and technical data to personalise your platform experience, including recommending relevant game categories, displaying appropriate bonus offers, and optimising interface performance for your device and connection.

4.6 Marketing Communications. Where you have provided explicit consent, we may use your email address and communication preferences to send you information about new games, promotions, and events on the Betflix platform. You may withdraw marketing consent at any time via your account settings.

4.7 Responsible Gambling Monitoring. We use account activity data to monitor play patterns, identify indicators of problem gambling behaviour, and apply responsible gambling interventions such as deposit limits and self-exclusion tools in accordance with our Responsible Gambling policy.

4.8 Legal and Regulatory Compliance. We process and retain personal data as required by applicable gaming regulations, anti-money laundering legislation, and other legal obligations. This includes providing data to competent authorities upon receipt of a lawful order or regulatory request.

Betflix processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered Betflix player — including account management, payment processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money laundering reporting obligations, and age verification requirements.
• Legitimate Interests: Processing conducted for Betflix's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gambling monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing activities based on your specific, informed, and freely given consent — primarily marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Betflix does not sell or rent your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

6.1 Payment Service Providers. We share necessary financial data with payment processors and financial institutions (including DuitNow operators, FPX network participants, and e-wallet providers such as Touch 'n Go, Boost, and GrabPay) solely for the purpose of processing your MYR deposits and withdrawals.

6.2 Identity Verification Services. We may share identity data with third-party KYC verification service providers to authenticate your identity and confirm eligibility. These providers act as data processors under binding data processing agreements.

6.3 Fraud Prevention and Security Partners. We may share technical and account activity data with fraud detection and cybersecurity service providers to protect the platform and its players from unauthorised access and fraudulent conduct.

6.4 Legal and Regulatory Authorities. We will disclose personal data to competent governmental, regulatory, or law enforcement authorities where we are legally obliged to do so, or where disclosure is necessary to protect the legal rights of Betflix or its players.

6.5 Corporate Transactions. In the event of a merger, acquisition, or restructuring of Betflix's business, personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

Betflix retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to backup system constraints, it will be isolated from active processing until deletion is completed.

Betflix implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our key security controls include:

• TLS/SSL Encryption: All data transmitted between your device and the Betflix platform is encrypted in transit using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is stored in encrypted form using AES-256 encryption.
• Two-Factor Authentication (2FA): Account logins are protected by optional two-factor authentication, and administrative access to player data systems requires mandatory 2FA for all Betflix staff.
• Access Control: Strict role-based access controls limit access to personal data to only those Betflix staff members who require it to perform their designated functions.
• Intrusion Detection and Monitoring: Automated systems continuously monitor platform infrastructure for anomalous activity, potential breaches, and security incidents.
• Penetration Testing: Regular third-party penetration testing and vulnerability assessments are conducted to identify and remediate security weaknesses.
• Staff Training: All Betflix staff with access to personal data undergo mandatory data protection and security training.

In the event of a personal data breach that poses a risk to your rights and freedoms, Betflix will notify you and relevant authorities within the timeframes required by applicable data protection law.

Subject to applicable legal limitations, you have the following rights in relation to the personal data Betflix holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request".

We will respond to all valid data rights requests within 30 calendar days. Where a request is particularly complex or numerous, we may extend this period by a further 30 days, notifying you of the extension within the initial period.

Betflix uses cookies and similar tracking technologies on the platform to support its operation, improve the player experience, and gather aggregated usage analytics. The following categories of cookies may be used:

10.1 Strictly Necessary Cookies. These cookies are essential to the functioning of the platform and cannot be disabled. They enable core functions such as account authentication, session management, and security. No personal data is collected beyond what is operationally required.

10.2 Functional Cookies. These cookies remember your preferences — such as preferred language, display settings, and deposit method — to provide a more personalised experience on return visits.

10.3 Analytical Cookies. These cookies collect aggregated, anonymised data about how players use the platform — such as which game categories are most visited and how long sessions last. This information is used to improve platform design and performance.

10.4 Cookie Management. You may configure your browser to decline non-essential cookies at any time. Please note that disabling cookies may affect the functionality of certain platform features. Betflix does not use third-party advertising cookies or cross-site tracking technologies for external advertising networks.

The Betflix platform is strictly intended for players aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21 and we do not permit minors to register or access the platform.

As part of our KYC process, all accounts are required to undergo age verification before deposit and withdrawal functionality is activated. Where we identify or have reasonable grounds to believe that a registered account holder is under 21 years of age, we will:

• Immediately suspend the account and suspend all gambling activity.
• Refund any real-money deposits made to the account via the original deposit method.
• Permanently close the account and delete all associated personal data, subject to any statutory retention obligations.
• Report the incident to relevant authorities where legally required.

If you believe that a minor may have accessed the Betflix platform using your account or another person's credentials, please contact our support team immediately. We also recommend that all players use device-level parental control software to prevent unauthorised access by minors in their household.

Betflix may, in the course of operating its platform and engaging third-party service providers, transfer your personal data to servers or processors located outside Malaysia. Where such transfers occur, Betflix ensures that equivalent protections are in place by:

• Using data processors located in jurisdictions that have been assessed to provide an adequate level of data protection.
• Entering into binding contractual clauses with international processors that impose equivalent data protection obligations to those described in this Policy.
• Conducting regular assessments of the data protection standards maintained by international processors.

Your personal data will not be transferred to any country or territory where doing so would place Betflix in breach of applicable data protection regulations.

Betflix reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The date of the most recent revision is displayed prominently at the top of this page.

Where amendments are material — for example, a change to the categories of data we collect, the purposes for which we process data, or the third parties with whom we share data — Betflix will notify registered players by email or via a platform notification prior to the changes taking effect.

Your continued use of the Betflix platform following the effective date of any amended Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the amended Policy, you should cease using the platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which Betflix processes your personal data, please contact us using the details below. Our data protection team reviews all privacy-related queries and aims to respond within 10 business days.

Email: [email protected] (please use the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate — plain text email address, not a clickable link)

Live Chat: Available 24 hours a day, 7 days a week directly on the Betflix platform.

For formal data rights requests (access, rectification, erasure, portability, or objection), please include your registered account email address and a description of your request so that we can verify your identity and process your request efficiently.

If you believe that your data rights have been violated and you are not satisfied with our response, you may be entitled to lodge a complaint with the relevant data protection authority in your jurisdiction of residence.