Privacy Policy — How Mangga2Bet Handles Your Data

1Introduction

Mangga2Bet (hereinafter referred to as "the Company", "we", "us", or "our") operates the online sports betting and casino platform accessible at mangga2bet.cam (the "Platform"). This Privacy Policy applies to all individuals who access, browse, or register an account on the Platform, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia.

Mangga2Bet recognises that the personal data you share with us is sensitive and that you have a right to know how it is handled. This Policy sets out in plain, structured terms the categories of data we collect, the purposes for which we use it, the circumstances in which it may be shared with third parties, the safeguards we apply to protect it, and the rights you may exercise in relation to it.

This Privacy Policy should be read together with the Mangga2Bet Terms and Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing activities described herein to the extent that consent is the applicable legal basis.

2Definitions

The following terms carry the meanings assigned below throughout this Privacy Policy:

3Data We Collect

Mangga2Bet collects personal data through the following channels and in the following categories:

3.1 Registration Data

When you create an account on the Platform, we collect: full legal name, date of birth, residential address (including city and country), email address, mobile phone number, and the username and encrypted password you choose.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering and responsible gambling obligations, we collect copies of government-issued identity documents (Malaysian MyKad, driver's licence, or passport), proof of residential address (such as a utility bill or bank statement dated within three months), and, where enhanced verification is required, a selfie holding the relevant identity document.

3.3 Financial and Transaction Data

We record details of all deposits and withdrawals processed through your Account, including the payment method used (for example, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or supported cryptocurrency addresses), transaction amounts in MYR, timestamps, and reference numbers. We do not store complete bank card numbers or banking credentials.

3.4 Platform Usage Data

We collect data about how you interact with the Platform, including login timestamps, pages visited, games played, bets placed, session durations, device type, operating system, browser version, and IP address. This data is used to improve the Platform experience and to detect and investigate suspicious activity.

3.5 Support Communications

If you contact the Mangga2Bet support team via live chat, email, or any other channel, we retain a record of the communication, including the content of messages, attachments, and the contact method used.

3.6 Cookies and Similar Technologies

Mangga2Bet uses cookies and similar tracking technologies as described in Clause 7 of this Policy. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect Platform functionality.

4How We Use Your Data

Mangga2Bet processes your personal data only for legitimate, specified purposes. The table below summarises the primary processing activities and their respective purposes:

5Legal Basis for Processing

Where an applicable data protection framework requires a lawful basis for processing Personal Data, Mangga2Bet relies on one or more of the following grounds:

• Contractual necessity: Processing required to perform the agreement between you and the Company, including providing access to the Platform, processing payments, and maintaining your Account.
• Legal obligation: Processing necessary to comply with anti-money-laundering regulations, licensing requirements, and other applicable laws under the international regulatory framework within which the Company operates.
• Legitimate interests: Processing carried out to protect the Platform against fraud and security threats, to monitor responsible gambling obligations, and to improve Platform services, provided that these interests are not overridden by your privacy rights.
• Consent: Where you have provided specific, informed, and voluntary consent to a processing activity — for example, receiving promotional communications — consent serves as the legal basis. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6Data Sharing & Disclosure

Mangga2Bet does not sell, rent, or otherwise transfer your Personal Data to third parties for their own commercial use. We may share data in the following limited circumstances:

6.1 Third-Party Service Providers

We engage trusted third-party processors to operate specific platform functions, including payment gateway providers (such as FPX aggregators and e-wallet operators), KYC verification service providers, cloud hosting and content delivery infrastructure providers, and fraud detection and analytics technology vendors. All such processors are contractually required to handle your data only in accordance with our instructions and applicable data protection standards.

6.2 Regulatory and Legal Authorities

We may disclose Personal Data to competent regulatory or law enforcement authorities where required by applicable law, pursuant to a lawful court order, or where disclosure is necessary to investigate, prevent, or take action with respect to suspected illegal activity, including financial crime or fraud.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, Personal Data held by Mangga2Bet may be transferred to the acquiring entity. You will be notified of any such change that materially affects the processing of your data.

6.4 Responsible Gambling Registries

Where a player has voluntarily applied for self-exclusion or where the Company is required to report to an applicable responsible gambling registry under its licensing conditions, limited identifying information may be shared with that registry for the purpose of enforcing the exclusion.

7Cookies & Tracking Technologies

Mangga2Bet uses cookies and similar technologies to operate the Platform effectively and to understand how players interact with it. The principal categories of cookies we deploy are as follows:

• Strictly necessary cookies: Required for core Platform functions such as maintaining your login session, remembering your preferred language, and enabling secure transactions. These cookies cannot be disabled without impairing Platform functionality.
• Analytical cookies: Used to collect aggregated, anonymised data about page visits, session durations, and navigation paths. This information helps us identify areas for improvement without identifying individual players.
• Functional cookies: Store preferences you have set, such as display settings and notification preferences, so that your choices are remembered across sessions.
• Security cookies: Help detect and prevent fraudulent activity, unauthorised account access, and other security threats by recognising known device signatures and flagging anomalous login behaviour.

You may manage or disable non-essential cookies at any time through the settings in your web browser. Please be aware that doing so may limit the availability of certain Platform features. Mangga2Bet does not currently operate a separate cookie consent banner; by continuing to use the Platform you acknowledge the use of cookies as described in this clause.

8Data Retention

Mangga2Bet retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Active account data is retained for the duration of your account relationship with Mangga2Bet.
• KYC and identity documents are retained for a minimum of five years from the date of collection, or for such longer period as may be required by applicable anti-money-laundering regulations.
• Transaction records are retained for a minimum of five years from the date of the relevant transaction.
• Support communications are retained for a period of three years from the date of the last interaction, or longer if the subject matter relates to an ongoing dispute or investigation.
• Analytical and usage data in anonymised or aggregated form may be retained indefinitely, as it no longer constitutes Personal Data once individual identifiers have been removed.

When the retention period for a category of data expires and no overriding legal obligation requires continued storage, the data will be securely deleted or irreversibly anonymised.

9Data Security

Mangga2Bet implements technical and organisational security measures appropriate to the sensitivity of the personal data it processes. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields at rest within our database infrastructure;
• Role-based access controls ensuring that only authorised personnel have access to specific categories of personal data;
• Regular security testing and vulnerability assessments of Platform infrastructure;
• Incident response procedures for detecting, containing, and notifying affected parties in the event of a data breach.

While Mangga2Bet takes its security obligations seriously, no method of transmission over the internet or method of electronic storage is completely secure. Players are encouraged to use strong, unique passwords, to enable any available two-factor authentication options, and to contact the support team immediately if they suspect that their Account has been compromised.

10Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in relation to the personal data that Mangga2Bet holds about you:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we limit processing of your data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing relies on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the Mangga2Bet support team via live chat or email (see Clause 14). We will respond to verified requests within a reasonable period and in any case within the timeframe required by applicable law. We may need to verify your identity before processing a request.

11Minors & Age Verification

The Mangga2Bet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under this age. Age verification is a mandatory step in the KYC process, and any account found to have been registered by a person under 21 years of age will be suspended immediately.

If you are a parent or guardian and believe that a minor in your care has accessed or attempted to register on the Platform, please contact the support team immediately at [email protected] (plain text — not a clickable link). We will investigate and take appropriate action, including deletion of any data collected in connection with the minor's account.

12International Data Transfers

Mangga2Bet is operated under an international online gambling licence and its infrastructure may involve servers, processors, and technology vendors located outside Malaysia. As a result, your personal data may be transferred to and processed in jurisdictions other than Malaysia. Where such transfers occur, Mangga2Bet takes steps to ensure that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to the protections applicable in your home jurisdiction.

Safeguards may include contractual data processing agreements with Third-Party Processors that incorporate standard data protection clauses, or other arrangements recognised as providing adequate protection under applicable data protection frameworks.

13Policy Amendments

Mangga2Bet reserves the right to amend this Privacy Policy at any time. Where changes are material, we will notify you by publishing a revised Policy on the Platform and updating the "Last updated" date at the top of this page. For significant changes that may materially affect how your personal data is used, we may also send a notification to the email address registered on your Account.

Your continued use of the Platform following the publication of an amended Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how your data is being handled.

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Mangga2Bet, please contact our support team through the live chat channel available on the Platform. You may also reach us by email. Our support team is available 24 hours a day, 7 days a week.

Email contact (plain text — not a clickable link): [email protected]

Please include your registered username and a brief description of your query or request so we can direct it to the appropriate team. We aim to acknowledge all privacy-related requests within one business day and to resolve them within the timeframe required by applicable law.