grabet Privacy Policy

1. Information We Collect

grabet collects various categories of information from users to allow the platform to operate properly, meet licensing requirements and deliver a quality gaming experience. The information collected can be divided into two main categories:

Information you provide directly:

• Full name as shown on your identity card or MyKad
• Date of birth for age verification purposes (21 years and above)
• Active email address for account communications
• Mobile phone number for two-factor authentication and important communications
• E-wallet or online banking account details for financial transactions
• Identity verification documents if requested during the KYC (Know Your Customer) process

Information collected automatically:

• IP address and estimated geographic location based on IP
• Device information including web browser type, operating system and screen resolution
• Activity log data such as login time, pages visited and session duration
• Gaming history, deposits, withdrawals and bonus activity in your account
• Cookie data and tracking technologies as described in the relevant section

2. Purpose of Data Collection and Processing

Every piece of information we collect is used for a clear and legitimate purpose. grabet only processes your data on the following bases:

• Service delivery: To manage account registration, process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay or cryptocurrency, and to enable access to all games on the platform.
• Legal compliance: To meet international licensing requirements, including identity verification procedures and anti-money laundering measures.
• Platform security: To detect and prevent fraud, unauthorised access or any suspicious activity in your account.
• Service improvement: To analyse usage patterns in order to improve the interface, technical performance and overall player experience.
• Account communications: To send important notifications about your account, policy updates, security information and 24/7 customer support in Malay and English.
• Responsible gambling: To monitor gaming patterns in order to identify signs of problem gambling and take appropriate action in line with our commitment to responsible gambling.

3. Sharing Information with Third Parties

grabet does not sell or disclose your personal information to third parties except in limited circumstances and for legitimate operational purposes. Data sharing only takes place in the following contexts:

• Payment providers: Transaction information that must be shared with service providers such as Touch 'n Go, DuitNow, Boost, ShopeePay and the FPX network to process your deposits and withdrawals securely.
• Game software providers: Minimum technical data required by game providers to allow gaming sessions to run smoothly.
• Licensing authorities: Information required by grabet's international licensing body in the context of oversight and regulatory compliance.
• Legal requirements: When required by a court order, law enforcement agency or valid legal process, grabet will disclose the necessary information.

4. Cookies and Tracking Technologies

grabet uses cookies and similar tracking technologies to improve website functionality and personalise the user experience. There are several types of cookies we use:

• Essential Cookies: Cookies required for the website to function correctly, including login session management and account security. These cookies cannot be disabled.
• Functional Cookies: Store your preferences such as language, display format and game settings to make your experience easier on future visits.
• Analytics Cookies: Collect statistical data about website usage to help us understand how players interact with the platform for improvement purposes.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect your account functionality and gaming experience. More information on managing cookies can be found in the documentation for your web browser.

5. Data Security Measures

grabet implements a range of technical and organisational security measures to protect your personal information from unauthorised access, loss, destruction or accidental disclosure:

• SSL (Secure Socket Layer) encryption on all data communication channels between your browser and grabet's servers
• Password storage using secure hashing methods — original passwords are never stored in plain text
• Two-factor authentication (2FA) available as an additional security layer for account login
• Continuous system monitoring to detect any anomalies or suspicious access attempts
• Strict access controls within the organisation — only authorised staff with a clear operational need may access user data
• Regular security audits by internal teams and qualified external parties

6. Data Retention Period and Deletion

grabet retains your personal information for as long as your account is active or as long as it is needed to deliver our services. Data retention periods are also determined by the legal and licensing requirements that bind us.

Financial transaction records and gaming history are kept for the period set by grabet's international licensing requirements, which typically covers several years after account closure for audit and compliance purposes. Once the set retention period ends, data will be securely deleted or anonymised.

If you close your grabet account, we will process your data deletion request in accordance with this policy. Please note that some information may need to be retained for a certain period based on legal obligations even after account closure.

7. Your Rights as a User

As a grabet platform user, you have certain rights regarding your personal information. We respect and facilitate the exercise of the following rights:

• Right of Access: You may request a copy of the personal information we hold about your account at any time.
• Right of Rectification: If any of your information is inaccurate or out of date, you have the right to request prompt correction.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal information, subject to legal and licensing obligations binding on us.
• Right to Object to Processing: You may object to the processing of your data for certain purposes such as direct marketing, and we will honour that request.
• Right to Data Portability: You may request your data in a machine-readable format for the purpose of transferring it to another service.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the grabet support team via 24/7 live chat or our support email. We aim to process every request within a reasonable time.

8. Cross-Border Data Transfers

As a platform operating under an international licence, your data may be processed or stored on servers located outside Malaysia. grabet ensures that any international data transfer is carried out with protections equal to or greater than those you enjoy in Malaysia.

All cross-border data transfers are subject to appropriate data transfer agreements and corresponding technical safeguards. grabet does not transfer data to countries or territories that lack adequate privacy protections without suitable additional protective mechanisms in place.

9. Amendments to the Privacy Policy

grabet reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, licensing, or technological developments. Any material amendments will be communicated to users via:

• A prominent notification on the grabet website's main page
• An email notification to the address registered with your account
• A notification in your account upon your next login after the amendment is made

The "Last Updated" date at the top of this page will be updated each time an amendment is made. Your continued use of the grabet platform after an amendment takes effect constitutes your agreement to the amended Privacy Policy. We encourage you to review this page periodically to ensure you are always up to date.

10. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal information, the grabet support team is available to assist through the following channels:

• 24/7 Live Chat: Accessible directly through the grabet platform in Malay and English, seven days a week at all times
• Support Email: [email protected] — for written enquiries requiring documentation or detailed information

We aim to respond to every privacy-related enquiry within a reasonable time. For complaints requiring a thorough investigation, we may need additional information to verify your identity before any action can be taken.