Ceriabet Privacy Policy

Introduction

Ceriabet (hereinafter referred to as "the Operator", "we", "us", or "our") is committed to the responsible and transparent handling of the personal data of its Members. This Privacy Policy (the "Policy") sets out in clear terms the nature of the personal information we collect when you access or use the Ceriabet platform, the purposes for which that information is processed, the circumstances under which it may be disclosed to third parties, and the rights available to you under applicable data protection law.

By registering a Ceriabet account, depositing funds, accessing games, or otherwise engaging with any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy forms part of and should be read together with the Ceriabet Terms & Conditions.

Ceriabet takes the privacy and security of personal data seriously. Our practices are designed to meet internationally recognised data protection standards, with particular attention to the needs and rights of Members located in Malaysia.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, whether directly (e.g., name, national identification number) or indirectly (e.g., IP address, account identifier).
• "Processing" refers to any operation performed on Personal Data, including collection, recording, storage, retrieval, consultation, use, disclosure, alignment, combination, restriction, erasure, or destruction.
• "Data Subject" / "Member" / "You" refers to any natural person who has registered or otherwise interacts with the Ceriabet Platform and whose Personal Data is processed by the Operator.
• "Platform" refers to the Ceriabet website, mobile-optimised interface, applications, gaming systems, and associated digital properties.
• "Controller" refers to Ceriabet as the entity that determines the purposes and means of processing Personal Data.
• "Processor" refers to a third party that processes Personal Data on behalf of Ceriabet under contractual instruction.
• "KYC" refers to Know Your Customer verification procedures used to confirm the identity, age, and residency of Members.
• "Cookies" refers to small text files stored on a Member's device by the Platform's web infrastructure for functional, analytical, or preference-related purposes.

Data We Collect

Ceriabet collects the following categories of Personal Data from Members and prospective users:

We do not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where strictly required for identity verification or compliance with specific regulatory obligations.

How Data Is Collected

Ceriabet collects Personal Data through the following channels and mechanisms:

• Direct Submission: Information you provide directly when completing our registration form, submitting KYC documents, contacting support, setting account preferences, or participating in promotions.
• Automated Technical Collection: Data collected automatically through server logs, cookies, web beacons, and similar technologies when you access the Platform. This includes IP addresses, device fingerprints, and session behaviour.
• Payment Processing Partners: Transaction-level data received from payment processors and gateway providers when you deposit or withdraw funds via methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency networks.
• Identity Verification Providers: Where applicable, third-party KYC service providers may return structured verification outcomes based on the documents you submit.
• Fraud Detection Systems: Automated risk-scoring systems may process Technical & Usage Data to identify unusual patterns that suggest account compromise, fraud, or multi-accounting.

Data Processing & Purposes

Ceriabet processes Personal Data for the following specific and legitimate purposes:

1. Account Administration: To create, maintain, and manage your Member account, including authentication, password resets, and account security monitoring.
2. Identity & Age Verification (KYC): To verify that you meet the minimum age requirement of 21 years, confirm your identity, and fulfil anti-money laundering (AML) obligations.
3. Payment Processing: To process deposit and withdrawal transactions accurately through supported Malaysian payment methods and cryptocurrency networks, and to maintain complete financial records.
4. Service Delivery: To provide access to games, betting markets, live dealer products, promotional offers, and all other features of the Platform.
5. Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver after-care following account-related issues.
6. Legal & Regulatory Compliance: To comply with applicable anti-money laundering regulations, licensing conditions, court orders, and lawful requests from governmental and regulatory authorities.
7. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, account takeover, and other integrity threats.
8. Responsible Gambling: To monitor gameplay patterns that may indicate problem gambling, administer self-exclusion and cooling-off requests, and enforce deposit and loss limits.
9. Platform Improvement: To analyse aggregated usage patterns, identify technical performance issues, and improve the Platform's functionality, navigation, and mobile experience for Malaysian users.
10. Marketing Communications: Where you have given explicit consent, to send you promotional emails, bonus notifications, or Platform updates. You may withdraw this consent at any time by contacting support or updating your account preferences.

Legal Bases for Processing

Ceriabet relies on the following legal bases when processing your Personal Data:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with KYC/AML requirements, regulatory reporting, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in the legitimate interests of Ceriabet or third parties, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications or non-essential cookies, where your specific, informed consent has been obtained. Such consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

Ceriabet does not sell or rent your Personal Data to third parties for commercial purposes. We may, however, share your data with the following categories of recipients in specific and limited circumstances:

• Payment Service Providers: Data necessary to process transactions is shared with relevant payment gateways including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB, Hong Leong Bank, and cryptocurrency processing networks. These providers act as data processors under binding contractual terms.
• Identity Verification Providers: KYC document data is transmitted to contracted third-party identity verification specialists for the sole purpose of confirming your eligibility.
• Game Content Providers: Gameplay and session data may be accessible to licensed game studios and platform providers whose software is integrated into the Ceriabet environment, solely for the purpose of delivering the relevant game service.
• Fraud Prevention & Risk Management Services: Technical and usage data may be shared with contracted security and fraud detection providers to identify and mitigate platform integrity threats.
• Regulatory Authorities & Law Enforcement: Where required by applicable law, regulation, or court order, Ceriabet will disclose Personal Data to relevant governmental, regulatory, or law enforcement bodies.
• Professional Advisers: Lawyers, auditors, accountants, and insurers may have limited access to specific data where necessary in the course of providing professional services to Ceriabet, subject to confidentiality obligations.

Cookies & Tracking Technologies

Ceriabet uses cookies and similar technologies to maintain session continuity, remember user preferences, analyse aggregated Platform usage, and support fraud detection functions. The following categories of cookies are deployed on the Platform:

• Strictly Necessary Cookies: Essential for core Platform functionality including login sessions, account authentication, and transaction security. These cannot be disabled without impairing basic Platform operation.
• Functional Cookies: Cookies that remember your language preferences, display settings, and previously selected payment methods to enhance your experience on subsequent visits.
• Analytical Cookies: Aggregate-level tracking used to understand navigation patterns, identify performance bottlenecks, and improve Platform design. No individual user is identified through these cookies.
• Security & Fraud Detection Cookies: Technical identifiers used to detect anomalous access patterns, potential account takeovers, and multi-accounting activity.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access core Platform features, though some preference-based functionality may be impaired.

Data Retention

Ceriabet retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to meet legal, regulatory, and operational obligations. The following indicative retention periods apply:

• Account & Identity Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with standard AML and financial record-keeping requirements.
• Transaction & Financial Records: Retained for a minimum of seven (7) years following each transaction, consistent with financial regulatory obligations applicable in the licensing jurisdiction.
• KYC Documentation: Retained for the duration of the account and for a minimum of five (5) years following closure, or longer if required by applicable law or regulatory direction.
• Communication & Support Records: Retained for up to three (3) years from the date of the relevant interaction, or longer where the communication relates to an unresolved dispute or legal matter.
• Technical & Usage Data: Retained in aggregated or anonymised form indefinitely for analytical purposes; identifiable records retained for up to twelve (12) months from collection.

Upon expiry of the applicable retention period, Personal Data is securely deleted, anonymised, or archived in accordance with our internal data lifecycle procedures.

Security Measures

Ceriabet implements a layered security architecture to protect Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our key security measures include:

• Encryption in Transit: All data exchanged between your device and our servers is protected using industry-standard TLS/SSL encryption. Ensure the padlock symbol is visible in your browser's address bar when accessing the Platform.
• Encryption at Rest: Sensitive data including identity documents and financial records is encrypted at rest using strong symmetric encryption algorithms.
• Access Controls: Access to Personal Data within our organisation is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Infrastructure Security: Servers and data storage systems are hosted in secure data centres with physical access controls, redundant power systems, and continuous monitoring.
• Fraud & Anomaly Detection: Automated systems monitor login activity, transaction patterns, and session behaviour to identify and respond to potential security incidents in real time.

Your Rights as a Data Subject

Subject to applicable data protection legislation and the Operator's legal obligations, you have the following rights in relation to your Personal Data held by Ceriabet:

• Right of Access: You may request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to Rectification: You may request correction of any Personal Data that is inaccurate or incomplete.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data in circumstances where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while the accuracy of data is contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of data you have provided to us.
• Right to Object: You may object at any time to processing carried out on the basis of legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact Ceriabet via the support channels listed in Section 15. We will respond to all valid rights requests within a reasonable period and no later than thirty (30) calendar days of receipt, unless the complexity of the request requires an extension, in which case we will inform you accordingly.

Minors & Age Verification

The Ceriabet Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Our KYC verification procedures are designed to identify and reject registrations by underage applicants.

If we become aware that Personal Data has been collected from or on behalf of a person who is under the age of 21, we will take immediate steps to suspend the relevant account, delete the associated data, and return any deposited funds to the source payment method where technically feasible.

Parents and guardians who have reason to believe that a minor has registered on the Platform or accessed it without authorisation are encouraged to contact our support team without delay so that the matter can be investigated and resolved promptly.

International Data Transfers

Ceriabet operates under international licensing standards and may utilise infrastructure, service providers, or game content partners located in jurisdictions outside Malaysia. As a result, your Personal Data may be transferred to, stored in, or processed in countries other than your country of residence.

When Personal Data is transferred internationally, Ceriabet takes appropriate steps to ensure that such transfers are carried out in compliance with applicable data protection requirements. These measures may include ensuring that recipient jurisdictions provide an adequate level of data protection, or entering into binding contractual arrangements with international processors that impose obligations equivalent to those required in the originating jurisdiction.

By using the Ceriabet Platform, you acknowledge and accept that your Personal Data may be transferred internationally as described in this section.

Policy Amendments

Ceriabet reserves the right to update, modify, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, the "Effective Date" displayed at the top of this page will be updated.

We recommend that Members review this Policy periodically to remain informed of how their Personal Data is being handled. Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. Where a change materially affects your rights, we will make reasonable efforts to notify you through your registered email address or via an in-platform notification.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to raise a privacy-related concern, please contact Ceriabet through the following channels:

• 24/7 Live Chat: Available directly within the Ceriabet Platform — the fastest channel for general support and account enquiries.
• Email: [email protected] (plain text only — not a clickable link)

When submitting a data subject rights request, please include sufficient information to allow us to verify your identity and locate the relevant records. We will acknowledge receipt of your request promptly and respond in full within thirty (30) calendar days unless a permitted extension applies.

For matters specifically relating to responsible gambling, including self-exclusion requests or account restrictions, please indicate the nature of your enquiry clearly when contacting support so that the relevant team can assist you as a priority.