s36bet Privacy Policy

s36bet operates the online betting and casino platform accessible at s36bet.co ("the Platform"). For the purposes of this Privacy Policy, s36bet is the data controller in respect of all personal data collected from players and visitors through the Platform.

s36bet operates under an international gaming authority licence. Our data practices are governed by the requirements of that licence, applicable data protection legislation, and the anti-money laundering and know-your-customer obligations that apply to licensed gaming operators. If you have questions about how s36bet handles your personal data, contact our support team at: [email protected]

s36bet collects personal data in the following categories, depending on the nature of your interaction with the Platform:

s36bet does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where explicitly required for responsible gaming assessments conducted at the Player's request.

s36bet processes your personal data for the following purposes:

• Account administration — creating, verifying, maintaining, and closing your s36bet account;
• Service delivery — processing bets, settling winnings, executing deposits and withdrawals in MYR, and delivering all platform features;
• Identity verification (KYC) — confirming your identity, age (21+), and eligibility to use s36bet, as required by our gaming licence and AML obligations;
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, money laundering, and account compromise;
• Responsible gaming — monitoring play patterns to identify problem gambling indicators and administering self-exclusion, deposit limits, and cooling-off periods;
• Customer support — responding to your enquiries, resolving complaints, and providing technical assistance;
• Legal and regulatory compliance — meeting the reporting and record-keeping obligations imposed by s36bet's gaming licence and applicable law;
• Platform improvement — analysing aggregated, anonymised usage data to improve platform design, game selection, and user experience;
• Marketing communications — where you have opted in, sending personalised bonus offers, promotions, and platform updates. You may opt out at any time via your account notification settings.

s36bet does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where required by anti-money laundering systems that flag suspicious transaction patterns for human review.

s36bet processes your personal data under the following legal bases:

• Contractual necessity — processing required to perform the contract between you and s36bet (account administration, transaction processing, bet settlement);
• Legal obligation — processing required to comply with AML, KYC, and gaming licence obligations, including transaction record retention and suspicious activity reporting;
• Legitimate interests — fraud prevention, platform security, and service improvement where these interests are not overridden by your data protection rights;
• Consent — marketing communications and optional cookies, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

s36bet does not sell, rent, or trade your personal data. s36bet shares personal data with third parties only in the following circumstances:

• Payment processors — Touch n Go, Boost, GrabPay, Maybank, CIMB, and other payment service providers receive the transaction data necessary to process deposits and withdrawals. These parties act as independent data controllers for their own payment processing purposes.
• Game providers — licensed gaming studios whose games are hosted on s36bet receive session and game-play data necessary to operate their games. All providers are contractually bound to data protection standards consistent with this Policy.
• Identity verification services — third-party KYC service providers may process your identity documents to verify your eligibility. These providers operate under strict data processing agreements with s36bet.
• Regulatory authorities — s36bet's gaming licence authority and financial intelligence units may receive transaction and identity data as required by law, including suspicious transaction reports.
• Professional advisers — lawyers, auditors, and insurers may access personal data to the extent necessary for their professional services, subject to confidentiality obligations.
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal data held by s36bet may be transferred to the acquiring entity, subject to equivalent data protection commitments.

s36bet retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to meet applicable legal and regulatory retention requirements. The following retention periods apply as general guidelines:

• Account data and KYC documents — retained for the duration of your account plus a minimum of 5 years following account closure, as required by AML regulations;
• Transaction records — retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping obligations;
• Betting and game-play history — retained for a minimum of 3 years from account closure;
• Support communications — retained for 2 years following the resolution of the relevant enquiry or complaint;
• Marketing opt-in records — retained for the duration of your consent and for 2 years following withdrawal of consent, for compliance auditing purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

Subject to applicable data protection legislation and the regulatory obligations applicable to licensed gaming operators, you have the following rights in respect of your personal data held by s36bet:

• Right of access — request a copy of the personal data s36bet holds about you;
• Right to rectification — request correction of inaccurate or incomplete personal data;
• Right to erasure — request deletion of personal data where retention is no longer necessary or lawful (subject to regulatory retention obligations that override this right);
• Right to restriction — request that s36bet restrict processing of your data in certain circumstances, such as while a dispute is pending;
• Right to data portability — receive a structured, machine-readable copy of personal data you provided to s36bet, where processing is based on consent or contract;
• Right to withdraw consent — withdraw previously granted consent for marketing communications or optional cookies at any time, without affecting the lawfulness of prior processing;
• Right to object — object to processing based on legitimate interests, subject to s36bet's overriding compliance obligations.

To exercise any of the above rights, contact s36bet via live chat support or by email at [email protected]. s36bet will respond to verified requests within 30 days. Requests may be subject to identity verification before s36bet can action them.

s36bet uses cookies and similar tracking technologies on the Platform. The following cookie categories are used:

s36bet does not use third-party advertising cookies or behavioural profiling cookies that track you across other websites. You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to s36bet.

s36bet implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and s36bet's servers;
• Encryption of sensitive data fields (including passwords) at rest using industry-standard hashing algorithms;
• Access controls restricting personal data access to authorised personnel only, on a need-to-know basis;
• Two-factor authentication available for all s36bet player accounts;
• Login notification emails for new device or location logins;
• Regular security assessments and penetration testing of the Platform.

Notwithstanding these measures, no internet transmission or digital storage system can be guaranteed to be 100% secure. If s36bet becomes aware of a security breach affecting your personal data, we will notify affected players and relevant regulatory authorities in accordance with applicable legal obligations.

s36bet is strictly for individuals aged 21 and above. s36bet does not knowingly collect personal data from any individual under the age of 21. If s36bet becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately and any collected personal data will be deleted, subject to any regulatory retention obligations that may apply in the context of the underage registration.

If you believe that a minor may have registered on s36bet using false age information, please contact s36bet support immediately via live chat so that we can investigate and take appropriate action.

s36bet may update this Privacy Policy from time to time to reflect changes in our data practices, platform services, or applicable legal and regulatory requirements. The "Last updated" date at the top of this Policy will be revised when material changes are made.

Where changes are material, s36bet will provide notice to registered account holders via email and/or a prominent notice on the Platform before the changes take effect. Your continued use of the s36bet Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes.

If you have questions, concerns, or requests relating to this Privacy Policy or s36bet's data practices, please contact s36bet's support team through the following channels:

• Live chat — available 24/7 directly within the s36bet Platform at s36bet.co
• Email — [email protected] (plain text; not a clickable link)

s36bet aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days. Complex requests, particularly those involving large volumes of data or requiring legal review, may take up to 45 days with prior notification to you.

If you are not satisfied with s36bet's handling of your personal data request or complaint, you have the right to escalate to the relevant data protection authority or the dispute resolution mechanism provided by s36bet's gaming licence authority.