Betfair Privacy Policy — How We Protect Your Personal Data

1Introduction

Betfair ("we", "Platform") treats user privacy as a top priority in every operational decision we make. This Privacy Policy is designed to give you a clear and comprehensive understanding of how we handle your personal data from the moment you register until you are no longer active on the platform.

We understand that you entrust us with highly personal information, and we take that trust seriously. Every data-related decision is made with the interests and safety of our users as the top priority — especially our Malaysian user community, who make up a significant portion of our user base.

2Data Collected

Betfair collects your personal data through several different channels — directly from you during registration and platform use, and automatically via tracking technologies as you browse our website.

Data you provide directly:

• Full name, date of birth, and identification number upon account registration.
• Email address and phone number for communication and verification purposes.
• Residential address collected during the KYC process.
• Payment method details such as bank account or digital wallet information for transaction processing.
• Identity verification documents such as a copy of your national ID or passport during the verification process.
• Any information you share when contacting our customer support team.

Data collected automatically:

• IP address and approximate location information based on your internet connection.
• The type of device, operating system, and web browser version you use.
• Activity history on the platform, including games played and bets placed.
• Login and logout timestamps, along with active session duration.
• Data from your interactions with the platform interface, such as clicks and page navigation.

3Purpose of Data Use

Betfair uses the personal data collected for specific and transparent purposes. We do not use your data for any purpose not stated in this policy without obtaining your prior consent.

• Account management — process registrations, verify identities, and maintain accurate account records.
• Transaction processing — handle deposits, withdrawals, and all financial activities on the platform.
• Legal compliance — fulfil KYC, anti-money laundering (AML), and reporting obligations set by the relevant authorities.
• Platform Security — detect and prevent fraud, unauthorised access, and suspicious activity.
• Service improvement — analyse usage patterns to improve platform functionality and user experience.
• Service communications — send important account notices, security updates, and promotional information (with your consent).
• Customer Support — process enquiries, complaints, and support requests you submit.

4Legal Basis for Data Processing

Betfair processes your personal data on a valid legal basis. Our data processing is based on one or more of the following grounds:

• Contract performance — processing necessary to provide the services you requested as part of our user agreement.
• Legal obligation — processing mandated by applicable law, including gambling and anti-money laundering regulations.
• Legitimate interests — processing required for platform security, fraud prevention, and service improvement.
• Consent — processing for direct marketing purposes, which requires your explicit consent.

5Data Sharing with Third Parties

Betfair does not sell your personal data to any third party. However, in operating our platform, we may share data with the following parties in limited and controlled circumstances:

• Payment service providers — to securely process deposits and withdrawals through recognised payment channels.
• Technology service providers — companies providing platform infrastructure, cloud services, and analytics tools, bound by strict data protection agreements.
• Regulatory Authority — when required by law or a valid court order.
• Fraud prevention agency — to verify identities and prevent fraudulent activity in order to protect all platform users.

6Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred to and processed in countries other than Malaysia. When such transfers occur, Betfair ensures adequate protections are in place through the following mechanisms:

• Standard contractual clauses approved by the relevant regulatory authority.
• Binding data processing agreements with all data recipients outside the country.
• Assessment of the data protection standards in the recipient country prior to approving any transfer.

7Data Retention Period

Betfair retains your personal data only for as long as necessary to fulfil the purpose of collection, or as required by applicable law. In general:

• Active account data is retained for as long as your account remains active on the platform.
• Financial transaction records are retained for a minimum of seven (7) years for anti-money laundering compliance purposes.
• Customer support communication logs are retained for three (3) years after case resolution.
• Data collected during the KYC process is retained for five (5) years after account closure.

Once the defined retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8Cookies and Tracking Technologies

Betfair uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

• Essential cookies — required for core platform functions such as session authentication and security. These cookies cannot be disabled.
• Performance cookies — collect information on how you use the platform to help us improve functionality and performance.
• Functional cookies — remember your preferences such as language and display settings to improve ease of use.
• Analytical cookies — help us understand overall platform usage patterns through anonymised data.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the platform.

9How to Exercise Your Rights

To exercise any of the privacy rights stated in this policy, you may contact betfair's data protection team by email at [email protected] or via the in-platform support ticket system. Please clearly state the type of request you wish to make along with your account information.

Betfair will process all privacy rights requests within fourteen (14) business days. In complex cases, this period may be extended to thirty (30) days with prior notice to you.

10Data Security Measures

Betfair implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse. These include data encryption at rest and in transit, role-based access controls, two-factor authentication for all internal system access, and regular penetration testing by independent security experts.

11Changes to the Privacy Policy

Betfair reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform functionality. Any significant changes will be communicated to you via your registered email or a prominent notice on the platform at least thirty (30) days before taking effect.

Continued use of the platform after a change notification is posted constitutes your acceptance of the updated Privacy Policy.

12Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how betfair handles your personal data, please contact our Data Protection Officer: