CandyBet is committed to safeguarding the privacy of every Member who uses our platform. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we retain it, and what rights you have over your own information.
These cards highlight the pillars of our data protection approach. Full details are in the legal document below.
All data transmitted between your device and CandyBet's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Maybank2u and major Malaysian financial institutions.
We collect only the personal data strictly necessary to operate your account, process payments via DuitNow, FPX or Touch 'n Go eWallet, and comply with regulatory obligations. Nothing more.
CandyBet does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information stays within our carefully vetted operational ecosystem.
You have the right to access, correct, port, restrict, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days.
We retain personal data only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law — not indefinitely and not unnecessarily.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, CandyBet will notify affected Members promptly and take immediate remedial action.
This Privacy Policy (hereinafter referred to as "Policy") is published by CandyBet (hereinafter "CandyBet", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at candybet.cam (the "Platform"). This Policy applies to all personal data collected from individuals (hereinafter "you", "User", or "Member") who access, register on, or otherwise interact with the Platform.
CandyBet is committed to protecting your personal data and processing it in a fair, transparent, and lawful manner. This Policy explains your rights in relation to your personal data, describes the categories of data we collect, and sets out the purposes and legal bases for which that data is processed. Please read this Policy carefully alongside our Terms & Conditions.
By creating an account on CandyBet or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should immediately cease use of the Platform and request account closure via our support team.
This Policy may be updated periodically to reflect changes in applicable law, regulatory guidance, or our data processing practices. We will notify registered Members of any material changes via email or a prominent notice on the Platform.
For the purposes of this Privacy Policy, the following definitions shall apply:
CandyBet collects personal data across several categories depending on how you interact with the Platform. The categories are set out in the table below:
| Category | Examples of Data Collected | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad or passport number | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, phone number, residential address (including city e.g. Kuala Lumpur, Penang, Johor Bahru) | Account communications, support, withdrawal verification |
| Financial Data | Bank account details, e-wallet identifiers (Maybank2u, CIMB, Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay), transaction history | Payment processing, fraud prevention, AML compliance, withdrawal processing |
| Technical Data | IP address, browser type and version, device type, operating system, session timestamps | Platform security, fraud detection, geolocation compliance |
| Usage Data | Pages visited, games played, bet history, session duration, click-path data | Platform improvement, responsible gambling monitoring, personalisation |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Customer support, dispute resolution, quality assurance |
| Marketing Preferences | Communication opt-in or opt-out status, promotional preference settings | Direct marketing (where consent is given), personalised offers |
CandyBet collects personal data through the following means:
CandyBet processes your personal data on the following legal bases, depending on the specific purpose of processing:
CandyBet uses the personal data we collect for the following purposes:
Marketing Communications: You may opt out of receiving promotional emails and SMS messages from CandyBet at any time by updating your account notification preferences or contacting our support team. Opting out of marketing does not affect transactional or account-related communications.
CandyBet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with the following categories of recipients where necessary and lawful:
We engage carefully vetted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include payment processors (including those facilitating FPX, DuitNow, and e-wallet transactions), identity verification providers, cloud hosting services, customer support platforms, and fraud detection specialists.
We may disclose personal data to competent governmental, regulatory, or law enforcement authorities where we are required or permitted to do so by applicable law — including in response to lawful requests, court orders, or for the purposes of AML reporting and responsible gambling compliance.
In the event of a merger, acquisition, restructuring, or sale of all or part of CandyBet's business, your personal data may be transferred to the relevant successor entity. We will notify affected Members prior to any such transfer and ensure that appropriate data protection safeguards remain in place.
We may share personal data with legal advisers, auditors, and other professional consultants where necessary in connection with legal proceedings, compliance audits, or regulatory enquiries — subject to confidentiality obligations.
CandyBet uses cookies and similar technologies (including web beacons and local storage) to enhance your experience on the Platform, ensure its security, and analyse usage patterns. The following cookie categories are used:
You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in or complete transactions.
CandyBet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with our legal obligations, or to resolve disputes and enforce our agreements. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 7 years post-closure | AML regulatory requirement |
| Financial Transaction Data | 7 years from date of transaction | Legal and tax compliance |
| KYC Documentation | 5 years post-account closure | AML/regulatory obligation |
| Support & Communications Data | 3 years from last interaction | Dispute resolution, legitimate interest |
| Technical & Usage Data | 13 months (rolling) | Platform analytics, fraud prevention |
| Marketing Preference Data | Until consent withdrawn or account closed | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.
CandyBet implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:
While CandyBet takes all reasonable steps to protect your personal data, no system is entirely immune to security risks. You are also responsible for keeping your account credentials confidential and should report any suspected unauthorised access to our support team immediately.
Subject to applicable law, you have the following rights in relation to your personal data held by CandyBet. To exercise any of these rights, please contact us at [email protected] with clear identification of your request. We will respond within 30 days.
You have the right to request a copy of the personal data CandyBet holds about you, along with information about how it is processed.
You have the right to request correction of any personal data that is inaccurate or incomplete. You may also update certain account details directly through your account settings.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or an objection is being considered.
Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
The CandyBet Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and have reason to believe that a minor in your care has registered on or used the CandyBet Platform, please contact our support team immediately at [email protected] so we can investigate and take appropriate action.
The CandyBet Platform may contain references to or integrations with third-party services, including payment gateways (such as those facilitating FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, and CIMB Clicks transactions) and game content providers. Each of these third parties operates under its own privacy policy and data processing terms, which are independent of this Policy.
CandyBet is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform. Our selection of payment and service partners is guided by their demonstrated commitment to data security and regulatory compliance.
CandyBet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Any material amendments will be communicated to registered Members via email or through a prominent notice on the Platform, with reasonable advance notice prior to the changes taking effect.
The "Last Reviewed" date at the top of this page will be updated to reflect the date of the most recent revision. We recommend reviewing this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by CandyBet, please contact us through the following channels:
Please include your registered account username, a description of your request or concern, and any relevant reference details to allow our team to handle your query efficiently. For data subject rights requests, we may need to verify your identity before processing your request.
This Privacy Policy was last reviewed and updated on 1 January 2026. CandyBet recommends that all Members review this page periodically to remain informed of our current data protection practices.