Privacy Policy

1. Introduction

This Privacy Policy describes the practices followed by grmbet in relation to personal data collected through the website at grmbet.cam, associated mobile interfaces, account services, casino games, sports betting features, customer support channels, and payment operations. It should be read together with the grmbet Terms & Conditions.

By visiting the platform or creating a grmbet account, you acknowledge that your information may be processed as described in this Policy. Where consent is required for a particular activity, grmbet will seek that consent through an appropriate notice or account setting. If you disagree with this Policy, you should discontinue use of the platform.

2. Scope of This Policy

This Policy applies to personal data obtained when a person visits grmbet, registers an account, completes verification, deposits or withdraws MYR, places a sports or casino bet, contacts support, sets responsible gambling controls, or otherwise interacts with the platform.

It covers registered players throughout Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. It also applies to visitors who browse publicly available pages without registering, although the information collected from an unregistered visitor is generally more limited.

The Policy does not alter the rules governing account eligibility, bonus use, wagering, withdrawals, prohibited conduct, or dispute handling. Those matters are addressed in the grmbet Terms & Conditions.

3. Personal Data We Collect

grmbet collects information that is reasonably necessary to provide platform services, maintain secure accounts, process transactions, respond to enquiries, and satisfy applicable record-keeping duties. The precise information collected depends on how you use grmbet.

Information provided directly

You provide information when registering, verifying an account, contacting grmbet, updating profile details, applying account limits, or submitting payment information. You must ensure that this information is accurate and kept current.

Information generated through use

Certain records are created automatically when you interact with sports markets, live casino tables, slots, bonuses, MYR wallets, or security features. These records support correct settlement, account history, platform integrity, and dispute investigation.

4. How We Use Personal Data

grmbet may process personal data for the following operational purposes:

• Creating, maintaining, authenticating, and securing player accounts.
• Confirming that a user is aged 21 or above and otherwise eligible to use grmbet.
• Processing MYR deposits and withdrawals through supported payment methods.
• Settling sports bets, casino wagers, bonuses, promotions, and account balances.
• Completing KYC checks and detecting identity fraud, multiple accounts, payment abuse, or suspicious activity.
• Responding to enquiries, technical issues, transaction questions, and formal complaints.
• Applying deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls.
• Improving page performance, mobile usability, platform stability, and game navigation.
• Sending essential account, payment, security, Policy, or Terms updates.
• Establishing, exercising, or defending legal rights and responding to lawful requests.

grmbet does not use personal information in a manner that is materially incompatible with the purpose for which it was collected unless another lawful ground applies or the affected user has been notified.

5. Grounds for Processing

Depending on the information and activity concerned, grmbet may process personal data because processing is necessary to provide requested services, comply with applicable obligations, protect legitimate business and security interests, or act with the user's consent.

Service performance

Account and transaction data is required to deliver core services requested by a registered player, such as opening an account, recording a bet, settling a result, crediting a win, or processing a withdrawal.

Legitimate interests

grmbet has legitimate interests in maintaining platform security, preventing fraud, improving mobile performance, resolving disputes, understanding technical faults, and protecting players and the wider service from misuse.

Consent

Where processing depends on consent, users may withdraw that consent through available account settings or by contacting grmbet. Withdrawal does not affect processing lawfully completed before the request and may not apply to records that must be retained for another valid reason.

6. Payments, Identity Checks, and KYC

Malaysian players may use supported services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or RHB where available. When a transaction is requested, grmbet processes payment references, MYR amounts, account ownership details, and related verification information.

grmbet may request government-issued identification, proof of address, a payment ownership record, or other reasonable documentation. Such checks help confirm age and identity, protect withdrawals, prevent unauthorised use, and detect suspicious financial activity.

Full payment credentials are not necessarily stored by grmbet when a transaction is handled by a payment service provider. Information received from or sent to a provider is limited to what is reasonably required to complete the transaction, investigate an issue, or satisfy applicable compliance requirements.

7. Cookies and Device Information

grmbet may use cookies, local storage, and comparable technologies to keep users signed in, remember settings, maintain session security, measure technical performance, identify errors, and protect the platform against abuse.

Essential technologies are necessary for authentication, security, wallet functions, and navigation. Optional analytics or preference technologies may help grmbet understand whether pages work effectively across smartphones, tablets, and desktop devices.

Browser settings generally allow users to restrict or delete cookies. Blocking essential storage may prevent login, payment, betting, or security functions from operating correctly. Device and network information may still be processed where necessary to secure the service.

8. When Personal Data May Be Shared

grmbet does not sell personal data to third-party marketers. Information may, however, be disclosed to carefully selected service providers where necessary for legitimate platform operations. These recipients may include:

• Payment processors, e-wallet operators, banks, and transaction verification services.
• Identity verification, fraud prevention, security, and risk-management providers.
• Hosting, infrastructure, technical support, and data storage providers.
• Customer service systems used to maintain support and complaint records.
• Professional advisers, auditors, or insurers acting under appropriate confidentiality duties.
• Competent authorities where disclosure is required by law or necessary to address fraud, security, or legal claims.

Providers are expected to process information only for authorised purposes and to apply appropriate safeguards. grmbet seeks to limit each disclosure to the information reasonably required for the relevant service or obligation.

9. Data Security

grmbet applies organisational and technical controls intended to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. Measures may include encrypted transmission, restricted administrative access, account authentication, monitoring, staff access controls, and security reviews.

No online service can guarantee absolute security. Players also have an important role: passwords should be unique, verification codes must never be shared, and accounts should not remain signed in on public or shared devices. Any suspected unauthorised access should be reported promptly to grmbet.

10. Data Retention

Personal data is retained for as long as reasonably necessary to maintain an active account and deliver grmbet services. Following account closure, certain information may continue to be retained where required for financial records, security investigations, dispute resolution, fraud prevention, responsible gambling controls, or applicable legal obligations.

Retention periods differ according to the type of information and the reason for processing it. When information is no longer required, grmbet will take reasonable steps to delete, anonymise, or securely isolate it in accordance with internal retention procedures.

A request to close an account does not automatically erase every record. For example, transaction histories and self-exclusion information may need to remain available to prevent circumvention, protect the player, and preserve an appropriate audit trail.

11. User Rights and Requests

Subject to applicable law and any relevant exceptions, users may ask grmbet to provide information about the personal data associated with their account. Users may also request correction of inaccurate information, restriction of particular processing, deletion where appropriate, or withdrawal of consent.

Before completing a request, grmbet may ask for reasonable identity verification. This protects account information from unauthorised disclosure. Requests may be refused or limited where they conflict with another person's rights, platform security, legal privilege, or mandatory record retention.

12. Responsible Gambling Information

grmbet may process account activity, deposit patterns, losses, session behaviour, limit requests, cooling-off records, and self-exclusion status to support responsible gambling measures. This processing helps apply user-selected controls and identify activity that may warrant an account review.

Information connected with self-exclusion may be retained after account closure to prevent an excluded player from opening another account or bypassing restrictions. This is an important player-protection purpose and may take priority over a general deletion request.

Players may review available controls and support information on the grmbet Responsible Gambling page. Gambling should remain entertainment and must never be treated as guaranteed income. Only money that can be comfortably lost should be used.

13. Age Restriction and Minors

grmbet is intended exclusively for players aged 21 and above. The platform does not knowingly permit minors to register, deposit, or gamble. Age information and identity documents may be processed to confirm eligibility.

If grmbet identifies an account belonging to a person under 21, access may be suspended while the matter is investigated. A parent or guardian who believes a minor has provided personal information should contact support with sufficient details for an appropriate review.

14. Changes to This Privacy Policy

grmbet may update this Policy to reflect changes in platform features, security practices, legal requirements, payment methods, or data processing activities. The effective date displayed at the top of the page indicates when the current version took effect.

Where a change materially affects registered users, grmbet may provide an account notice or other appropriate communication. Continued use after an updated Policy becomes effective indicates acknowledgement of the revised information practices, except where fresh consent is legally required.

15. Contact Us

Questions about this Privacy Policy, account information, data security, or an individual rights request may be directed to the grmbet support team. To protect privacy, include only the information needed to explain the request and do not send a password or one-time security code.

• Support availability: 24 hours a day through platform support channels.
• Email: [email protected]
• Languages: English, Mandarin, and Bahasa Melayu.

grmbet may request identity confirmation before discussing protected account information. General information about accounts, payments, and platform use is also available through the FAQ page.