Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which Sersanbet ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data provided by or collected about registered players and visitors to the Sersanbet website at sersanbet.cam and all associated services.

Sersanbet operates as an online casino and sports betting platform serving players primarily in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. Given the nature of our services — which involve financial transactions in Malaysian Ringgit (MYR), identity verification, and regulated gambling activity — the collection of certain categories of personal data is both operationally necessary and legally required under our international licensing obligations.

This Policy is written in plain, accessible English and is intended to be read and understood by any player using the Sersanbet Platform. It forms an integral part of the Sersanbet Terms and Conditions and should be read alongside that document. By registering an Account or using the Platform, you confirm your acknowledgement and acceptance of the practices described in this Policy.

For the purposes of this Privacy Policy, the following definitions apply:

Sersanbet collects personal data across several distinct categories. The specific data collected from you will depend on the nature of your interaction with the Platform.

A. Registration & Account Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth
• Residential address (including city, state, and postcode)
• Email address
• Mobile telephone number
• Username and encrypted password
• Preferred currency (Malaysian Ringgit / MYR as default)
• Nationality and country of residence

B. Identity Verification (KYC) Data

• Copy of government-issued photo ID (Malaysian MyKad — front and back, Driver's Licence, or valid Passport)
• Proof of residential address (utility bill, bank statement, or official government correspondence dated within three months)
• Selfie photograph holding your identity document
• Ownership verification documentation for payment methods used on the Account

C. Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, methods, and reference numbers)
• Payment method identifiers (e.g., masked e-wallet account numbers, bank account last four digits for Maybank, CIMB, Public Bank, Hong Leong, RHB, etc.)
• Cryptocurrency wallet addresses where applicable (BTC, USDT)
• Wagering history, game session data, and betting records

D. Technical & Usage Data

• IP address and approximate geolocation data derived therefrom
• Device type, operating system, and browser type and version
• Session duration, pages visited, and navigation patterns within the Platform
• Login timestamps and access logs
• Cookies and similar tracking technology data (see Section 10)

E. Communications Data

• Records of support interactions via live chat and email
• Complaint and feedback records
• Marketing preference records (opt-in and opt-out history)

Personal data is collected through the following channels and mechanisms:

• Direct provision by you: Information you submit during Account registration, KYC verification, support interactions, or when updating your Account profile.
• Automated collection: Technical data collected automatically when you access the Platform, including device information, IP address, session data, and cookie-derived data.
• Transaction processing: Data generated or received as a result of deposits, withdrawals, and wagering activity conducted through the Platform.
• Third-party payment processors: Transaction confirmation data and fraud screening data returned by our approved Malaysian payment partners (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and partnered banking institutions) and cryptocurrency payment processors.
• Identity verification providers: Data returned by third-party KYC verification services engaged to authenticate identity documents submitted by players.
• Fraud prevention and compliance services: Data from third-party anti-fraud, anti-money-laundering, and sanctions screening tools that process player data on our behalf under data processing agreements.

Sersanbet processes your personal data on one or more of the following lawful bases, depending on the specific purpose for which the data is used:

The personal data collected by Sersanbet is used for the following specific purposes:

• Account creation and management: Establishing, maintaining, and administering your registered Account on the Platform.
• Service delivery: Providing access to casino games, sports betting markets (including Liga Super Malaysia, EPL, La Liga, UFC, and other markets), live dealer services, and all other Platform features.
• Payment processing: Processing deposits and withdrawals in MYR via your chosen payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other supported methods.
• Identity verification (KYC): Verifying your identity and age in compliance with our licensing obligations and to prevent underage gambling.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeover, and other security threats.
• Responsible gambling: Administering responsible gambling tools including deposit limits, loss limits, session limits, and self-exclusion; and monitoring gambling patterns to identify and support at-risk players.
• Customer support: Responding to your queries, complaints, and support requests via live chat and email.
• Legal and regulatory compliance: Meeting our obligations under applicable international gaming licensing requirements, anti-money-laundering regulations, and other legal obligations.
• Platform improvement: Analysing usage patterns and technical performance data to improve the Platform's functionality, stability, and user experience.
• Marketing communications (with consent): Sending you relevant promotional offers, bonus notifications, and product updates where you have opted in to receive such communications. You may withdraw consent at any time.

Sersanbet does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors and financial institutions: Your transaction data is shared with our approved payment partners — including Malaysian e-wallet operators, FPX/DuitNow banking infrastructure providers, and cryptocurrency payment processors — solely for the purpose of processing your deposit and withdrawal requests.
• Identity verification providers: KYC documentation submitted by you may be processed by third-party identity verification service providers engaged by Sersanbet under binding data processing agreements that restrict their use of your data to the specific verification purpose.
• Fraud prevention and AML compliance services: Transaction and Account data may be shared with anti-fraud and anti-money-laundering screening services to fulfil our regulatory obligations.
• Game content providers: Certain game-related technical data (session identifiers, game results) may be shared with our licensed international game studio partners for game integrity and RNG audit purposes. These providers do not receive personally identifiable data beyond what is technically required.
• Legal and regulatory authorities: Where required by law, court order, or a valid regulatory request from a competent authority, Sersanbet may be required to disclose personal data. We will notify you of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of Sersanbet's business or assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections as described in this Policy.

Sersanbet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in accordance with our data destruction procedures.

Sersanbet implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Sersanbet Platform is encrypted using industry-standard 256-bit SSL encryption. The Platform enforces HTTPS across all pages and services.
• Data at rest encryption: Personal data stored in Sersanbet's databases is encrypted at rest using AES-256 encryption.
• Password security: Account passwords are stored as one-way cryptographic hashes and are never stored or transmitted in plain text. Players are encouraged to use strong, unique passwords and to enable two-factor authentication.
• Access controls: Access to personal data within Sersanbet's internal systems is restricted on a strict need-to-know basis. Staff access to player data is logged, monitored, and subject to regular access reviews.
• Intrusion detection and monitoring: The Platform's infrastructure is continuously monitored for anomalous activity, intrusion attempts, and security incidents.
• Vendor security assessments: Third-party processors who handle player data on Sersanbet's behalf are subject to security assessments prior to engagement and periodic review thereafter.

In the event of a personal data breach that poses a significant risk to your rights and freedoms, Sersanbet will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

The Sersanbet Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A "cookie" is a small text file placed on your device by a website server when you visit that site.

Sersanbet uses the following categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These include session authentication cookies, security tokens, and cookies that remember your login state. These cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Used to remember your preferences and settings — such as your preferred language, currency (MYR), and responsible gambling tool configurations — to provide a personalised experience across sessions.
• Analytics Cookies: Used to collect anonymised and aggregated data about how visitors navigate and use the Platform. This data helps us identify pages that are not functioning well, improve load times, and enhance the overall user experience. No personally identifiable information is included in analytics data.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats by analysing behavioural patterns during your session.

You may manage and disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies are available through the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, etc.).

As a player whose personal data is processed by Sersanbet, you hold a number of rights in relation to that data. We are committed to facilitating the exercise of these rights in a timely and transparent manner.

To exercise any of the rights described above, please contact us at [email protected] from the email address registered to your Account. We will respond to all rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days with prior written notice.

Requests for data access, erasure, or portability must be submitted from the email address registered to the relevant Account to enable secure identification of the requester. We may require additional identity verification before processing certain requests.

The Sersanbet Platform is strictly intended for adults. We enforce a minimum age requirement of 21 years for all gambling activities, consistent with responsible gaming standards applicable to internationally licensed operators serving the Southeast Asian market.

Sersanbet does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process, and Accounts found to belong to underage individuals will be immediately suspended and all balances returned to the verified payment source.

If you have reason to believe that a person under the age of 21 has registered an Account on the Platform or has provided personal data to Sersanbet, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

As an internationally licensed online gaming platform, Sersanbet may transfer your personal data to countries outside Malaysia in the course of providing its services. Such transfers may occur when engaging third-party service providers — such as KYC verification services, payment processors, or fraud prevention providers — whose infrastructure is located in other jurisdictions.

Where personal data is transferred internationally, Sersanbet ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within our own systems. These safeguards may include:

• Binding contractual clauses with the receiving entity that impose data protection obligations consistent with this Policy;
• Transfer to entities located in jurisdictions that have been assessed as providing an adequate level of data protection; or
• Application of technical and organisational measures that ensure the protection of transferred data regardless of the receiving jurisdiction's domestic laws.

Sersanbet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable regulatory requirements, or the services we provide. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where amendments are material in nature — for example, where we introduce a new category of data collection or a new purpose for processing — we will notify registered players via the email address associated with their Account no fewer than seven (7) calendar days prior to the amendment taking effect. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically. Previous versions of this Policy are available upon request by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or Sersanbet's handling of your personal data, please contact us using the following details:

We are committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to a complaint, you retain the right to escalate the matter to the relevant supervisory authority in your jurisdiction or to the competent authority within Sersanbet's licensing jurisdiction.