Nextbet Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Nextbet ("Nextbet", "we", "us", "our"), the operator of the online betting and live casino platform at https://nextbet.cam (the "Platform"), collects, uses, discloses, stores, and protects the personal data of individuals who register accounts, visit the Platform, or otherwise interact with our services ("you", "your", "the Player").

Nextbet is committed to handling personal data responsibly and in accordance with applicable data protection standards. This Policy is intended to be transparent and written in plain, accessible English so that all players — including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia — clearly understand their rights and our obligations.

By registering a Nextbet account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree with this Policy, you should not use the Platform.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, Nextbet.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a data processing agreement.
• "KYC Data" means identity and address verification documents collected as part of the Know Your Customer process.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and session management.
• "Special Category Data" means sensitive personal data including biometric data, health information, or data relating to criminal convictions, which Nextbet processes only where strictly required by law.

3. Data Controller

The Data Controller for personal data collected through the Nextbet Platform is the legal entity operating Nextbet at https://nextbet.cam. For enquiries relating to data protection, including requests to exercise your rights, contact us at:

• Email: [email protected]
• Live Chat: Available 24/7 on the Nextbet Platform.

We will acknowledge all data-related enquiries within 5 business days and provide a substantive response within 30 calendar days.

4. Personal Data We Collect

Nextbet collects the following categories of personal data, depending on your interactions with the Platform:

4.1 Registration Data

Collected when you create a Nextbet account:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city, state, and postcode)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Malaysian Ringgit / MYR by default)

4.2 Identity Verification (KYC) Data

Collected when you submit verification documents in accordance with our anti-money-laundering obligations:

• Copy of your Malaysian Identity Card (MyKad) — front and back — or valid passport
• Proof of residential address (utility bill, bank statement, or equivalent dated within 3 months)
• Proof of payment method (screenshot or document confirming ownership of the payment method used)
• Selfie or portrait photograph (where specifically requested for identity confirmation)

4.3 Financial & Transaction Data

Collected when you deposit or withdraw funds via methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency networks:

• Payment method type and masked identifier (e.g., last four digits of account number)
• Transaction amount, date, and reference number
• Cryptocurrency wallet addresses (where crypto is used)
• Deposit and withdrawal history associated with your account

Nextbet does not store full bank account numbers, card numbers, or e-wallet PINs on its servers. Payment authentication is handled by certified third-party payment processors.

4.4 Betting & Gaming Activity Data

• Sports bets placed, odds accepted, and outcomes
• Casino games played, wager amounts, and results
• Bonus activations, wagering progress, and promotional participation
• Session duration and game history

4.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies

4.6 Communications Data

• Records of live chat, email, and support interactions
• Feedback and complaint records
• Marketing communication preferences and opt-in/opt-out records

5. How We Collect Personal Data

Nextbet collects personal data through the following channels:

Collection Method	Examples
Directly from you	Account registration forms, KYC document uploads, support messages, preference settings
Automatically via technology	Cookies, session tracking, IP address logging, device fingerprinting for fraud prevention
From payment providers	Transaction confirmation data from DuitNow, FPX, Touch 'n Go eWallet, and other processors
From identity verification services	Third-party KYC verification partners used to validate identity documents
From fraud prevention services	Risk scoring data from third-party fraud and AML screening tools

6. Purposes of Processing & Legal Basis

Nextbet processes your personal data for the following purposes, each supported by an appropriate legal basis:

Purpose	Legal Basis
Account registration and management	Contract performance
Age verification (21+ requirement)	Legal obligation; contract performance
KYC identity verification	Legal obligation (AML/CTF compliance)
Processing deposits and withdrawals	Contract performance
Fraud detection and prevention	Legitimate interests; legal obligation
Responsible gambling monitoring and intervention	Legal obligation; legitimate interests (player protection)
Customer support and dispute resolution	Contract performance; legitimate interests
Platform security and abuse prevention	Legitimate interests
Marketing communications (where opted in)	Consent
Compliance with applicable laws and regulations	Legal obligation
Platform analytics and improvement	Legitimate interests (anonymised / aggregated where possible)

7. Data Sharing & Disclosure

Nextbet does not sell, rent, or otherwise commercially exploit your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: Data shared with payment service providers (including FPX network banks, e-wallet operators such as Touch 'n Go eWallet and Boost, and cryptocurrency network facilitators) solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Identity documents may be shared with contracted third-party KYC service providers for the purpose of verifying your identity and age. These providers act as Data Processors under binding agreements.
• Fraud Prevention and AML Services: Transaction and account data may be shared with contracted anti-money-laundering screening and fraud detection services to fulfil regulatory obligations.
• Regulatory Authorities: Nextbet may be required to disclose personal data to regulators, law enforcement agencies, financial intelligence units, or courts where required by applicable law, court order, or regulatory direction.
• Professional Advisors: Personal data may be disclosed to legal counsel, auditors, or accountants in the context of professional advice, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of Nextbet's business, personal data may be transferred to the relevant successor entity. Players will be notified of any such transfer that materially affects their rights under this Policy.

All third parties to whom personal data is disclosed are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified in their agreements with Nextbet.

8. International Transfers of Personal Data

Nextbet operates internationally and may transfer your personal data to servers or service providers located outside Malaysia. Where such transfers occur, Nextbet ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that impose equivalent data protection obligations on the recipient.
• Transfers only to jurisdictions or service providers that maintain security standards equivalent to those described in this Policy.

By using the Nextbet Platform, you consent to the transfer of your personal data to servers or processors outside Malaysia where such transfers are necessary for the provision of the services described in this Policy.

9. Data Retention

Nextbet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention guidelines apply:

Data Category	Retention Period
Account registration data	Duration of account + 5 years after closure (regulatory requirement)
KYC identity documents	Duration of account + 5 years after closure
Transaction and payment records	Duration of account + 7 years (AML/financial record obligation)
Betting and gaming activity logs	Duration of account + 3 years after closure
Support and communications records	3 years from the date of the interaction
Technical and device data (logs)	Up to 12 months from collection
Marketing preference records	Until withdrawal of consent + 2 years

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to any individual.

10. Data Security

Nextbet implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the Nextbet Platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive stored data — including KYC documents and financial records — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within Nextbet is restricted on a strict need-to-know basis. Staff with access undergo training on data protection obligations.
• Intrusion detection and monitoring: Our systems are monitored around the clock for suspicious activity, intrusion attempts, and anomalous access patterns.
• Penetration testing: The Platform undergoes regular security audits and penetration testing conducted by qualified third-party security professionals.
• Incident response: In the event of a data breach that poses a risk to your rights, Nextbet will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

11. Cookies & Tracking Technologies

The Nextbet Platform uses cookies and similar tracking technologies to operate core functionality, improve user experience, and conduct analytics. The categories of cookies we use are:

Cookie Type	Purpose	Essential?
Session cookies	Maintain your logged-in session while you use the Platform	Yes
Authentication cookies	Verify your identity and prevent session hijacking	Yes
Preference cookies	Remember your language, display preferences, and responsible gambling settings	No
Analytics cookies	Aggregate, anonymised data on Platform usage to improve the user experience	No
Fraud prevention cookies	Help identify and prevent fraudulent activity, bonus abuse, and duplicate accounts	Yes

You may control non-essential cookies through your browser settings. Note that disabling essential cookies may prevent core Platform functionality from operating correctly. Nextbet does not use cookies to track your activity across unrelated third-party websites.

12. Your Data Rights

As a player on the Nextbet Platform, you hold the following rights in relation to your personal data:

To exercise any of the above rights, contact Nextbet via live chat or email at [email protected]. Please include your registered username and a description of your request. We may ask for verification of your identity before processing the request.

13. Marketing Communications

Nextbet may send you marketing communications about promotions, bonuses, new game releases, and platform updates via email or in-platform notifications, provided you have opted in to receive such communications during registration or via your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email.
• Updating your notification preferences in your account settings.
• Contacting our support team via live chat or email.

Opting out of marketing communications does not affect transactional messages relating to your account — such as deposit confirmations, withdrawal updates, KYC status notifications, and security alerts — which we are required to send as part of the service.

14. Minors

The Nextbet Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process.

If Nextbet becomes aware that an account has been registered by a person under the age of 21, the account will be immediately closed, all balances will be reviewed in accordance with applicable law, and the personal data associated with the account will be deleted in accordance with our retention policy.

If you believe an underage individual has registered on the Platform, please notify us immediately via live chat or at [email protected].

15. Third-Party Services & External Links

The Nextbet Platform may integrate third-party services including payment gateways, analytics tools, and game content providers. These third parties operate under their own privacy policies and Nextbet is not responsible for their data practices.

We recommend reviewing the privacy policies of any third-party services you interact with through the Platform. Nextbet does not endorse or make any representation regarding the privacy practices of third-party payment providers including but not limited to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX bank operators.

16. Amendments to This Policy

Nextbet reserves the right to amend this Privacy Policy at any time. Material changes that affect your rights or how your data is processed will be communicated to registered players via the email address on file, with at least 7 days' notice before the revised Policy takes effect.

Minor updates — such as corrections to phrasing, additions of new sub-processors, or clarifications that do not change the substance of the Policy — may be updated without individual notification, with the "Last updated" date revised accordingly.

Continued use of the Nextbet Platform after the effective date of any Policy amendment constitutes your acceptance of the revised terms. If you do not agree with an amended Policy, you should cease using the Platform and request account closure.

17. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Nextbet Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly on the Nextbet Platform. Response time typically under 5 minutes.
• Email: [email protected] — responses within 30 calendar days for data rights requests, within 12 hours for general support.

Please include your registered account username, a clear description of your request or concern, and any relevant reference numbers in all correspondence.