kulisbet Privacy Policy

Introduction

This Privacy Policy ("Policy") applies to all personal data collected by kulisbet ("kulisbet", "we", "us", "our") in connection with your use of the kulisbet platform accessible atkulisbet.click and any associated mobile applications (collectively, the "Platform"). It sets out our practices regarding the collection, use, storage, disclosure and protection of personal information.

By registering an Account, accessing the Platform or using any of its services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read alongside the kulisbet Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

kulisbet operates its English-language platform for Malaysian adults aged 21 and above. The handling of personal data in connection with Malaysian users is conducted with reference to applicable data protection principles, including purpose limitation, data minimisation, storage limitation and the maintenance of appropriate security safeguards.

Definitions

The following terms have specific meanings wherever they appear in this Policy:

Data We Collect

kulisbet collects Personal Data in the following categories, depending on how you interact with the Platform:

3.1 Registration and Identity Data

When you create an Account, we collect your full legal name, date of birth, residential address (including city — for example, Kuala Lumpur, Petaling Jaya, Penang or Johor Bahru), nationality, email address, telephone number and the username and password you create.

3.2 Verification Documents

To complete KYC verification, we may request copies of government-issued identification such as a Malaysian National Registration Identity Card (MyKad) or passport, proof of residential address, and documentation confirming ownership of the payment method used.

3.3 Financial and Transaction Data

We record details of deposits, withdrawals and wagers, including payment method type (for example, Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX or USDT TRC20), transaction amounts in MYR, timestamps and reference numbers. Full payment credentials, such as bank account passwords or wallet PINs, are not stored by kulisbet.

3.4 Usage and Behavioural Data

We collect information about how you interact with the Platform, including pages visited, games played, bet types placed (for example, Liga Super Malaysia or EPL markets), session duration, device type, browser type and operating system.

3.5 Communications Data

Records of correspondence between you and kulisbet — including live chat transcripts, support email exchanges and feedback submissions — are retained for quality assurance and dispute resolution purposes.

3.6 Technical Data

IP address, device identifiers, cookie data and log files are collected automatically through your use of the Platform.

How We Collect Data

Personal Data is collected through the following means:

• Automatically — through cookies, session tracking, server logs and analytical tools as you browse and use the Platform;
• Automatically — through cookies, session tracking, server logs and analytical tools as you browse and use the Platform;
• From payment providers — confirmation data from payment processors including e-wallet platforms and bank transfer services to verify and reconcile transactions;
• From identity verification services — where third-party KYC or fraud screening tools are used to verify identity documents;
• From publicly available sources — where necessary for compliance checks, fraud prevention or responsible gambling monitoring.

Data Processing & Use

kulisbet processes your Personal Data only for purposes that are defined, legitimate and documented. The primary purposes for which your data is used are set out in the table below:

Legal Basis for Processing

kulisbet relies on the following legal bases for processing your Personal Data:

• Contractual necessity — Processing that is required to perform the contract with you (operating your Account, processing deposits and withdrawals, resolving disputes);
• Legal obligation — Processing required to meet applicable compliance requirements, including identity verification, anti-money laundering obligations and age verification (21+);
• Legitimate interests — Processing for fraud prevention, Platform security, responsible gambling monitoring and internal analytics that does not override your fundamental privacy rights;
• Consent — Processing for direct marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

Data Sharing

kulisbet does not sell your Personal Data to third parties. We may share your data in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers — including payment processors, identity verification services, fraud screening tools, cloud hosting providers and customer support platforms — who process data on our behalf under strict contractual data protection obligations. These processors may not use your data for any purpose beyond the specific service they provide to kulisbet.

7.2 Payment Processors

To process MYR transactions via channels such as Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow and supported bank transfer services, transaction data is shared with the relevant payment provider. Each payment provider operates under its own privacy terms.

7.3 Regulatory and Law Enforcement Bodies

Where required by applicable law, court order or lawful authority, kulisbet may disclose Personal Data to regulatory bodies or law enforcement agencies. Where permissible, we will notify you before such disclosure.

7.4 Business Transfers

In the event of a merger, acquisition or sale of all or part of kulisbet's assets, Personal Data held by the Platform may be transferred to a successor entity. Users will be notified of any such transfer and the Privacy Policy applicable thereafter.

Cookies & Tracking Technologies

kulisbet uses cookies and similar tracking technologies to operate the Platform, maintain session continuity, personalise your experience and conduct analytics. The categories of cookies used are:

• Essential cookies — Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled without impairing Platform functionality;
• Analytical cookies — Used to understand how users interact with the Platform, which pages are visited most frequently and where navigation issues occur;
• Preference cookies — Store your settings such as language preference and display options between sessions;
• Marketing cookies — Used to personalise promotional communications where you have given consent. You may opt out of marketing cookies at any time through your browser settings or by contacting support.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent certain Platform features from operating correctly.

Data Retention

kulisbet retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. General retention periods are:

• Active Account data — Retained for the duration of your Account plus a reasonable period after closure to support dispute resolution and legal compliance;
• KYC and identity documents — Retained for the minimum period required under applicable anti-money laundering obligations (typically five to seven years from the date of the last transaction);
• Financial transaction records — Retained in accordance with applicable record-keeping requirements;
• Support communications — Retained for up to three years from the date of the final communication, unless a longer period is required for dispute resolution;
• Marketing consent records — Retained for as long as consent remains active, and for a reasonable period thereafter as evidence of the consent provided.

When Personal Data is no longer required, it is deleted or anonymised using appropriate secure disposal procedures.

Security Measures

kulisbet implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration or disclosure. Measures include:

• Encryption of data in transit using industry-standard TLS protocols;
• Encrypted storage of sensitive Account and identity data at rest;
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis;
• Regular security reviews and penetration testing of Platform infrastructure;
• Contractual security obligations imposed on all third-party Data Processors.

User Rights

Subject to applicable law and certain conditions, you hold the following rights in relation to your Personal Data held by kulisbet:

Children & Minors

The kulisbet Platform is strictly for adults aged21 years and above. We do not knowingly collect Personal Data from individuals under 21. If kulisbet identifies that an Account has been registered by a person under the minimum age, the Account will be closed, all associated Personal Data will be deleted promptly and any funds will be handled in accordance with applicable policy.

If you believe a minor has registered on the Platform, please contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

Third-party Services

The Platform may incorporate or link to functionality provided by third parties — including payment gateways, identity verification services, analytics providers and customer support tools. These third parties operate under their own privacy policies and kulisbet is not responsible for their data practices. We recommend reviewing the privacy terms of any third-party service you interact with in connection with your Platform usage.

kulisbet selects third-party service providers that can demonstrate appropriate data protection standards, and we require all processors to comply with applicable data protection obligations through contractual arrangements.

Policy Amendments

kulisbet reserves the right to amend this Privacy Policy at any time. Where changes are material, we will provide reasonable notice via the Platform or by email to your registered address prior to the revised Policy taking effect. The updated Policy will carry a revised Effective Date at the top of the document. Continued use of the Platform following the effective date constitutes acceptance of the revised Policy. If you do not accept the revised terms, you may request Account closure and erasure of your Personal Data subject to applicable legal retention obligations.

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the kulisbet support team. We aim to acknowledge all privacy-related enquiries promptly and respond fully within a reasonable period.

When submitting a privacy request, please include your registered username and a clear description of your request. Do not include your Account password or full payment credentials in any communication to support.