Privacy Policy

Introduction

Onexbet ("Company", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("Player", "User", "you") who access or use the onexbet platform, including the website at https://onexbet.casa, any associated mobile-optimised pages, and all related services (collectively, the "Platform").

This Privacy Policy ("Policy") explains in plain, accessible language what personal data we collect from you, for what purposes we process it, with whom we share it, how we protect it, how long we keep it, and what rights you have with respect to your personal information.

This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy, both of which are incorporated by reference and govern your use of the Platform. If you do not agree to the practices described in this Policy, please discontinue use of the Platform immediately.

This Policy applies to all users of the Platform worldwide, including players located in Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — as well as users in other countries and territories.

Definitions

In this Privacy Policy, the following terms have the meanings set out below:

Data Controller

For the purposes of applicable data protection laws, Onexbet acts as the Data Controller with respect to all personal data collected and processed through the Platform. We are responsible for ensuring that your personal data is handled in accordance with this Policy and applicable data protection legislation in the jurisdictions in which we operate.

Onexbet operates under international gaming licensing. Our data protection practices are governed by the requirements of our licensing jurisdiction as well as generally accepted international data protection principles.

For all data-related enquiries, requests, or complaints, please contact our Data Protection team at: [email protected]

Data We Collect

We collect personal data from you in the following categories, depending on how you interact with the Platform:

Purposes of Data Processing

Onexbet processes your personal data for the following specific and legitimate purposes:

• Account Registration and Management: Creating and maintaining your onexbet account, verifying your identity, and managing account settings and preferences.
• Service Delivery: Processing deposits, settling bets, crediting winnings, and facilitating withdrawals via DuitNow, FPX, e-wallets, or cryptocurrency channels.
• KYC and Regulatory Compliance: Verifying your identity and age (21+ requirement), assessing source of funds, and meeting anti-money laundering (AML) and counter-terrorism financing (CTF) obligations imposed by our international gaming licence.
• Fraud Prevention and Security: Detecting and preventing fraudulent transactions, unauthorised account access, bonus abuse, and collusion.
• Customer Support: Responding to your queries and complaints through live chat, email, and WhatsApp in English, Bahasa Melayu, and Mandarin.
• Responsible Gambling: Monitoring betting patterns to identify potential problem gambling behaviour and administering self-exclusion requests, deposit limits, and session controls.
• Platform Improvement: Analysing usage data to improve the performance, design, and content of the Platform.
• Marketing Communications: Sending promotional offers and bonus announcements where you have provided explicit consent to receive such communications. Consent may be withdrawn at any time.
• Legal Obligations: Complying with applicable laws, court orders, regulatory demands, or licensing authority requirements, including the disclosure of data to authorities where legally mandated.

Legal Basis for Processing

Where international data protection principles require a legal basis for the processing of personal data, Onexbet relies on the following grounds:

• Contractual Necessity: Processing required to perform the contract between you and Onexbet, including operating your account, processing payments, and settling bets.
• Legal Obligation: Processing necessary to comply with our obligations under gaming licence conditions, AML/CTF laws, and applicable regulatory requirements.
• Legitimate Interests: Processing carried out to further Onexbet's legitimate business interests, including fraud prevention, platform security, and improvement of services, where those interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the setting of non-essential cookies.

Data Sharing

Onexbet does not sell your personal data. We may share your data with the following categories of third parties strictly for the purposes described in this Policy:

• Payment Service Providers: Entities processing transactions on your behalf, including banks operating FPX rails (Maybank, CIMB, Public Bank, Hong Leong), DuitNow network operators, e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency payment processors for BTC, ETH, USDT, and LTC transactions.
• Identity Verification Providers: Licensed third-party KYC and anti-fraud service providers that assist in verifying your identity, age, and document authenticity.
• Gaming and Technology Providers: Licensed game studios and platform technology providers who operate components of the Platform under contractual data processing agreements.
• Regulatory and Licensing Authorities: Our licensing authority and any other regulatory body to whom we are legally obliged to disclose player data upon request.
• Law Enforcement and Courts: Government authorities, law enforcement agencies, or courts when we are required by law or court order to disclose personal data.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who are bound by duties of confidentiality.

All third parties with whom we share personal data are contractually required to process that data solely for the agreed purpose, in accordance with appropriate security standards, and in a manner consistent with this Policy.

International Data Transfers

As an international online gaming platform, Onexbet may transfer your personal data to countries outside Malaysia for processing by our service providers and gaming partners. Some of these countries may have data protection laws that differ from those applicable in Malaysia.

Where such transfers occur, Onexbet implements appropriate safeguards to ensure that your personal data remains protected to a standard consistent with this Policy. These safeguards may include contractual clauses obligating recipient organisations to maintain adequate data protection standards, or reliance on recipients located in jurisdictions recognised as providing an adequate level of data protection.

Data Retention

Onexbet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or licensing obligations. Specific retention periods are determined by the following criteria:

• Active Accounts: Personal data is retained for the duration of your account relationship with Onexbet and for a period of at least five (5) years following account closure, to satisfy AML/CTF record-keeping requirements under international licensing obligations.
• KYC Documents: Identity documents and verification records are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of five (5) years for audit and regulatory compliance purposes.
• Support Communications: Records of customer support interactions are retained for up to three (3) years to support quality assurance and dispute resolution.
• Marketing Consent Records: Consent records for marketing communications are retained until consent is withdrawn and for a reasonable period thereafter as evidence of lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for analytical purposes.

Cookies & Tracking Technologies

Onexbet uses cookies and similar tracking technologies on the Platform to support functionality, enhance your experience, and collect usage analytics. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, processing transactions, and enabling security features. These cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data on how users interact with the Platform — pages visited, features used, error occurrences — to help us improve the user experience.
• Functional Cookies: Enable personalised features such as remembering your preferred language, currency display (MYR or cryptocurrency), and game preferences.
• Marketing and Tracking Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. Only placed with your explicit consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality or personalisation features of the Platform. Consent to non-essential cookies can be withdrawn at any time.

Security Measures

Onexbet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit AES encryption for all data stored at rest.
• TLS 1.3 protocol for all data transmitted between your device and the Platform.
• Two-factor authentication (2FA) available for all Player accounts.
• Continuous IP anomaly detection and automated account access monitoring.
• Regular penetration testing conducted by independent security specialists.
• Access to personal data within Onexbet restricted on a strict need-to-know basis, with role-based access controls and audit logging.
• Staff training on data protection and information security obligations.

Your Data Rights

Subject to applicable data protection laws and regulatory requirements, you may have the following rights in relation to your personal data held by Onexbet:

To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 calendar days of receiving a valid request. We may require verification of your identity before processing any request. Please note that certain rights may be limited or overridden by our legal and regulatory obligations, including AML/CTF record-keeping requirements.

Minors & Age Policy

Onexbet strictly prohibits the use of the Platform by any person under the age of 21. The Platform is intended exclusively for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21.

During registration, all Players are required to confirm that they are aged 21 or over and to provide documentary evidence of identity and date of birth during KYC verification. Any account found to belong to or be operated on behalf of a person under 21 will be immediately closed, all funds will be returned where legally permissible, and the matter may be reported to relevant authorities.

If you have reason to believe that a minor has registered an account with Onexbet, please notify us immediately at [email protected].

Changes to This Policy

Onexbet reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or business operations. Material changes will be notified to registered Players via email or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of those changes. If you do not agree to the updated Policy, you must cease using the Platform and contact us to close your account.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Onexbet, please contact our Data Protection and Customer Support team using the details below. All communications must be submitted in English.

Email: [email protected]

Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time: 3–5 minutes.

Support Languages: English, Bahasa Melayu, Mandarin Chinese.