Privacy Policy — How Ovabet Protects Your Personal Data

1 Introduction

This Privacy Policy ("Policy") sets out the basis on which Ovabet ("we", "us", "the Operator", "the Platform") collects, processes, stores, and discloses personal data submitted by or collected from users ("you", "the User", "the Player") who register, interact with, or otherwise use the Ovabet platform accessible at ovabet.lat.

Ovabet is committed to protecting the privacy of all players and website visitors. We process personal data in accordance with the requirements of our international gaming licence and applicable data protection principles. This Policy applies to all services offered through the Ovabet platform, including sports betting, live casino, slots, esports wagering, and customer support interactions.

By creating an Account or continuing to use the Ovabet Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree, you should not register an Account or submit any personal data to the Platform.

2 Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or indirectly, including name, identification number, contact details, IP address, and financial account information.
• "Data Controller" — Ovabet, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third party that processes personal data on behalf of Ovabet under a contractual obligation, including payment processors, KYC verification providers, and IT infrastructure partners.
• "Processing" — any operation performed on personal data, including collection, storage, organisation, retrieval, use, disclosure, and deletion.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer, the mandatory identity verification process applied to all registered players before withdrawal privileges are activated.
• "Cookie" — a small text file placed on a user's device by the Platform to enable technical functionality, session management, and analytics.

3 Data We Collect

Ovabet collects the following categories of personal data from registered players and website visitors:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify the 21+ minimum age requirement)
• Gender (optional, for account personalisation)
• Nationality and country of residence
• National identity document number (MyKad for Malaysian players, or valid passport number for other nationalities)

3.2 Contact Data

• Email address (primary contact method and account recovery)
• Mobile phone number (required for account registration and two-factor authentication)
• Residential address (required for KYC compliance and fraud prevention)

3.3 Financial Data

• Bank account details (account number and registered name) for players withdrawing via Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect
• E-wallet account identifiers (phone number or account ID) for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions
• Cryptocurrency wallet addresses used for BTC, ETH, USDT, or BNB deposits and withdrawals
• Transaction history including deposit amounts, withdrawal amounts, dates, payment methods, and processing statuses

3.4 Platform Usage Data

• Betting and gaming activity logs, including wagered amounts, game types, session durations, and win/loss records
• Login timestamps and session activity records
• Device identifiers, operating system information, and browser type
• IP address and geolocation data at the time of login and transaction

3.5 Communication Data

• Correspondence records from live chat support interactions
• Email communication history with the Ovabet support team
• Voluntary feedback, survey responses, and dispute documentation

4 How We Collect Data

Ovabet collects personal data through the following means:

• Direct submission: Information you voluntarily provide during account registration, KYC verification, payment transactions, support interactions, and any form submissions on the Platform.
• Automated collection: Technical data such as IP address, device identifiers, session logs, and cookie data collected automatically when you access or use the Platform.
• Third-party verification: Identity data returned by KYC and anti-fraud service providers in the course of verifying documents you have submitted.
• Payment processors: Transaction confirmation data, payment status updates, and wallet verification data transmitted by our integrated Malaysian payment partners (e.g., FPX, DuitNow network processors).

5 Purposes of Data Processing

Ovabet processes your personal data for the following clearly defined purposes:

• Account Registration and Management: To create, maintain, and administer your Ovabet account, including processing login credentials and account recovery requests.
• Identity Verification (KYC): To verify your identity and age in compliance with our international licensing obligations, and to prevent minors from accessing the Platform.
• Payment Processing: To process deposits and withdrawals via Malaysian payment methods including Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, and supported cryptocurrencies.
• Anti-Money Laundering (AML) Compliance: To monitor, detect, and report suspicious financial activity as required by our licensing jurisdiction.
• Platform Security and Fraud Prevention: To detect and prevent unauthorised account access, multiple-account registration, bonus abuse, and other fraudulent activities.
• Customer Support: To respond to enquiries, investigate complaints, and resolve disputes raised by registered players.
• Responsible Gambling: To administer self-exclusion requests, deposit limits, loss limits, and session time tools, and to identify players who may be exhibiting problem gambling behaviour.
• Service Improvement and Analytics: To analyse aggregated and anonymised usage patterns for the purpose of improving Platform features, betting market offerings, and user experience.
• Legal and Regulatory Compliance: To retain records as required by our licensing authority and to respond to lawful requests from competent authorities.

6 Legal Basis for Processing

Ovabet relies on the following legal bases for processing personal data, in accordance with internationally recognised data protection principles:

• Contractual Necessity: Processing necessary to fulfil our obligations to you under the Ovabet Terms & Conditions, including operating your account, processing transactions, and providing customer support.
• Legal Obligation: Processing required to comply with our international gaming licence obligations, including KYC, AML monitoring, and record retention requirements.
• Legitimate Interests: Processing carried out to pursue the legitimate interests of the Operator, including fraud detection, platform security, and service improvement, where those interests are not overridden by your fundamental rights.
• Consent: Where processing is based on consent (for example, optional marketing communications from Ovabet), you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Third Parties

Ovabet does not sell, rent, or trade your personal data with any third party for commercial marketing purposes. Personal data is shared only in the following strictly defined circumstances:

7.1 Authorised Service Providers (Data Processors)

Ovabet engages third-party service providers who process personal data on our behalf under binding data processing agreements, including:

• Payment processors — Malaysian banking partners and e-wallet operators (Maybank, CIMB, Touch 'n Go, Boost, GrabPay, DuitNow, FPX network) to facilitate deposits and withdrawals;
• KYC / identity verification providers — to verify submitted identity documents and perform age checks;
• Anti-fraud and AML screening tools — to monitor transactions and flag suspicious activity;
• IT infrastructure and cloud hosting providers — to store and serve platform data securely;
• Customer support tools — to manage and record support interactions.

7.2 Legal and Regulatory Disclosure

Ovabet may disclose personal data to competent authorities, licensing bodies, or law enforcement agencies where required to do so by applicable law, court order, or regulatory obligation. We will, where legally permissible, notify the affected account holder prior to making any such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of the Operator's business assets, personal data may be transferred to the acquiring entity as part of the transaction, subject to the receiving entity agreeing to be bound by equivalent data protection standards.

8 Data Retention

Ovabet retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by our licensing obligations:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

9 Data Security

Ovabet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the Ovabet platform servers;
• Encrypted storage of sensitive personal data at rest, including identity documents and financial account details;
• Two-factor authentication (2FA) available for all registered accounts, strongly recommended for all Malaysian players;
• Role-based access controls limiting employee access to personal data to only those whose job functions require it;
• Continuous security monitoring for intrusion attempts, unusual login patterns, and data breach indicators;
• Regular security audits and penetration testing of Platform infrastructure.

10 Cookies & Tracking Technologies

Ovabet uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and collect analytical data on how the Platform is used. The following categories of cookies are employed:

Ovabet does not use third-party advertising cookies or behavioural tracking cookies linked to external advertising networks. Cookies set by Ovabet do not contain personally identifiable information in an unencrypted form. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair Platform functionality.

11 Your Rights as a Data Subject

As a registered Ovabet player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via 24/7 live chat or at the email address listed in Section 15.

Ovabet will respond to all valid data subject requests within 30 calendar days of receipt. Where a request is complex or numerous, the response period may be extended by a further 60 days with prior notification.

12 International Data Transfers

Ovabet is operated under an international gaming licence and its infrastructure and service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred to countries that may not have data protection laws equivalent to those in your jurisdiction, Ovabet implements appropriate safeguards including:

• Binding contractual obligations (data processing agreements) with all third-party service providers that receive personal data;
• Standard contractual clauses modelled on internationally recognised data protection frameworks;
• Technical security measures including encrypted data transmission and storage to protect data in transit and at rest regardless of server location.

Malaysian players should be aware that by registering on the Ovabet platform, they consent to the transfer of their personal data to jurisdictions outside Malaysia as described in this Policy, where necessary for the purposes set out in Section 5.

13 Data of Minors

If Ovabet becomes aware that personal data has been collected from an individual under the age of 21, the relevant Account will be immediately suspended, all data submitted will be securely deleted to the extent legally permissible, and any funds held in the Account will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care may have registered an Account on Ovabet, please contact our 24/7 support team immediately via live chat so that the Account can be suspended and investigated without delay.

14 Amendments to This Policy

Ovabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform services. The revised Policy will be published on this page with a new "Last Updated" date. Where a material change is made to how we process personal data, we will provide advance notice via the registered email address associated with your Account.

Your continued use of the Ovabet Platform following the effective date of any such amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how your data is protected.

15 Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data, please reach out to the Ovabet support team through the following channels:

When submitting a formal data subject request by email, please include your registered account username, a clear description of your request, and (if you are requesting access to or deletion of your data) confirmation that you have passed identity verification via the Platform. This helps us process your request securely and efficiently.