Privacy Policy candybet

We respect the privacy of every member. This document explains exactly how candybet manages your personal information — from collection through to protection and your rights as a user.

Updated: January 2026 English International Licensing

Why Your Privacy Matters to candybet

Every action we take regarding your personal data is guided by the principles of protection, transparency and accountability.

High-Level Data Encryption

All personal data and financial transactions are protected using SSL/TLS encryption technology. Your information cannot be read or intercepted by unauthorised parties while in transit.

No Sale of Data to Third Parties

candybet has never sold, rented or traded members' personal information to any third party for marketing or commercial purposes without your consent.

Full Control in Your Hands

You have the right to access, correct and request deletion of your personal data at any time. The process is simple — contact our support team and we will respond within a reasonable timeframe.

International Licensing Compliance

candybet operates under an international licence that requires responsible data management practices, including strict KYC (Know Your Customer) procedures to ensure account security.

Multi-Layer Account Protection

Our security system uses real-time monitoring to detect suspicious activity. Any unauthorised access attempts will be blocked automatically to protect your account.

24/7 Privacy Support

If you have any questions about your data privacy, our 24/7 support team is available via live chat within your account or by email in both Malay and English.

Important Notice: This Privacy Policy applies to all users of the candybet website. By creating an account or continuing to use our services, you agree to the terms stated here. Please read carefully before registering.
SECTION 1

Introduction and Scope of This Policy

candybet ("we", "our platform") is committed to protecting the privacy of all users who access and use the services offered on the candybet.run website. This Privacy Policy describes in detail the types of personal information we collect, the purposes for that collection, how we store and protect that information, and the rights you hold regarding your personal data.

This policy applies to all individuals who:

  • Register or hold an active account on the candybet platform
  • Browse the candybet.run website whether as a guest or registered member
  • Contact our support team through any of the available channels
  • Use any of the services, promotions or features we offer
Important Note: candybet services are for individuals aged 21 and above only. We do not knowingly collect information from individuals below this age limit. Should we discover that such information has been provided, it will be deleted immediately.
SECTION 2

Personal Information We Collect

In operating a safe and responsible online gambling platform, candybet needs to collect various categories of personal information. This information is collected directly from you during registration, during use of the platform, or through your communications with us.

Information Category Data Examples Primary Purpose
Identity Information Full name, date of birth, identity card number (MyKad) Identity verification (KYC), licensing requirement compliance
Contact Information Email address, mobile phone number Account communications, security verification, customer support
Financial Information E-wallet name, bank account number, deposit and withdrawal records Payment processing, fraud detection, legal compliance
Technical Data IP address, device type, web browser, operating system Account security, suspicious activity detection, platform improvements
Usage Data Betting records, game preferences, transaction history Responsible gambling monitoring, service improvements
Communication Data Live chat history, email correspondence with support Quality control, complaint resolution, service records
SECTION 3

How We Use Your Information

candybet uses the personal information collected solely for legitimate purposes required to deliver our services. We will not use your data for purposes contrary to what is stated in this policy without first obtaining your consent.

Your personal information is used for the following purposes:

  • Account Verification and Registration — Verifying your identity during sign-up and ensuring that only eligible individuals (aged 21 and above) can use the platform
  • Financial Transaction Processing — Securely processing deposits with a minimum of RM50 and withdrawals with a minimum of RM100, and releasing funds to the registered payment method within 5–30 minutes
  • Account Security — Detecting and preventing fraud, hacking and unauthorised use of accounts
  • Legal and Licensing Compliance — Meeting the obligations imposed under the international licence we hold, including anti-money laundering reporting requirements
  • Customer Support — Providing accurate and effective assistance when you contact our 24/7 support team
  • Service Improvements — Analysing aggregated usage patterns to improve the platform experience, without identifying you individually
  • Responsible Gambling — Monitoring betting patterns to identify the need for protective intervention, in line with our commitment to responsible gambling
  • Service Communications — Sending important account-related notices, service terms updates and security alerts
Marketing: We will only send you promotional communications if you have given specific consent to receive them. You may withdraw this consent at any time by contacting our support team.
SECTION 4

Information Sharing and Disclosure

candybet takes a very strict approach to sharing your personal information. As a general rule, we do not disclose your personal information to any third party except in the circumstances described below.

Your personal information may be shared with the following parties in specific circumstances only:

  • Payment Service Providers — Entities such as e-wallet processors (Touch 'n Go eWallet, ShopeePay, DuitNow), banking institutions (for FPX transactions) and cryptocurrency networks (USDT, BTC, ETH) required to process your payments
  • Platform Technology Providers — Technical partners who provide platform infrastructure, gaming systems and cloud services supporting our operations, and who are bound by strict confidentiality agreements
  • Regulatory Bodies and Law Enforcement — Legitimate authorities when we are required by law or court order to disclose certain information
  • Licensing Auditors and Inspectors — Bodies authorised under our international licensing framework to conduct compliance audits

In all of the above sharing situations, we disclose only the minimum necessary information, and all receiving parties are bound by confidentiality and data protection obligations that are as strict as our own standards.

SECTION 5

Data Storage and Retention Period

candybet stores all personal information on servers protected with the latest security technology. Data is encrypted at rest and in transit using recognised industry protocols.

How long we retain your personal information depends on the data category and the purpose for which it was collected:

  • Active Account Data — Retained for as long as your account remains active or is needed to provide services to you
  • Financial Transaction Records — Retained for the minimum period required by licensing and legal compliance requirements, typically no less than five years
  • Identity Verification Data (KYC) — Retained in accordance with the period set by international licensing regulations to ensure a complete audit trail
  • Closed Account Data — After an account is closed, certain information will be kept for the period required by law before being permanently deleted
Data Deletion: When your personal information is no longer needed for a legitimate purpose, we will delete or anonymise it in a secure manner so that it cannot be recovered.
SECTION 6

Your Rights Regarding Personal Data

As a candybet member, you hold important rights regarding your personal information. We fully respect these rights and provide clear channels for you to exercise them. To submit any request, contact our 24/7 support team via live chat or email.

Right of Access You have the right to know what personal information we hold about you and to request a copy of it at any time.
Right of Rectification If any information we hold is inaccurate or out of date, you have the right to request that we correct it.
Right of Erasure You may request the deletion of your personal data, subject to legal obligations that require us to retain certain records.
Right to Restrict Processing In certain circumstances, you may request that we limit how we process your data while an investigation or claim is pending.
Right to Data Portability You have the right to receive a copy of your personal data in a structured, machine-readable format for transfer if needed.
Right to Object You have the right to object to the processing of your data for marketing purposes at any time, and we will stop immediately.
SECTION 7

Cookies and Tracking Technologies

The candybet.run website uses cookies and similar tracking technologies to improve the user experience, maintain login session security, and understand general platform usage patterns.

Types of cookies we use:

  • Essential Cookies (Required) — Needed for basic website functions such as login session verification, security controls and page navigation. Without these cookies, some parts of the platform will not work correctly.
  • Performance Cookies — Collect information about how visitors use our website, such as the most frequently visited pages and time spent. This information is used in aggregate form to improve the platform.
  • Preference Cookies — Allow the website to remember your choices such as language and display settings to provide a more personalised experience.

You can control the use of cookies through your web browser settings. However, blocking certain cookies may affect the functionality of some parts of our platform.

SECTION 8

Personal Information Security

candybet continually invests in robust cybersecurity infrastructure to ensure your personal information is always protected. The security measures we implement include multiple layers of protection:

  • SSL/TLS encryption for all communication between your browser and our servers
  • Data encryption at rest for all sensitive information
  • Strict role-based access controls — only authorised staff may access personal data
  • Continuous security monitoring and auditing at all times
  • Two-factor authentication (2FA) for administrative access to internal systems
  • Regular penetration testing to identify and address any vulnerabilities
  • Mandatory information security training for all staff who handle personal data
Data Breach Response: In the event of any security breach affecting your personal data, candybet will notify you and the relevant authorities within the timeframe required by our licensing obligations.
SECTION 9

Changes to This Privacy Policy

candybet reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or relevant technological developments.

When we make significant changes, we will:

  • Update the "Last Updated" date shown at the top of this document
  • Display a clear notice on the platform's main page about the changes
  • Send email notifications to all registered members for changes that materially affect their rights

Continued use of the candybet platform after changes to this Privacy Policy take effect will be considered your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

SECTION 10

Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal information, please contact the candybet Privacy and Data Protection team through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 within your account after logging in, in Malay and English

We aim to respond to all privacy-related enquiries within a reasonable timeframe. For formal requests such as data access, correction or deletion, please include your identity verification information to help us process your request accurately and securely.

Response Time: Our support team is reachable at any time via live chat for general enquiries. Formal data requests requiring review will be processed within a reasonable timeframe depending on the complexity of each case.

Ready to Get Started?

Register your candybet account with confidence — your data privacy and security are our priority. Enjoy a 100% welcome bonus up to RM500 on your first deposit.

SSL-Protected Data 24/7 Support Withdrawal in 5–30 Minutes Minimum Deposit RM50