Privacy at a Glance
These cards highlight the core principles of how Sandibet handles your personal data. They are a summary only — the full legally binding policy follows below.
What We Collect
We collect registration details, transaction records, device and browser information, and usage patterns on the Platform. We collect only what is genuinely necessary to operate your account and meet our regulatory obligations.
How We Use Your Data
Your data is used to manage your Sandibet account, process deposits and withdrawals in MYR, detect fraud, comply with KYC requirements, and send relevant service communications. We do not sell your data.
Who We Share With
We share data with payment processors (e.g., DuitNow, FPX partners), identity verification providers, and regulatory bodies where required by law. We never share your personal data with third-party advertisers or data brokers.
How We Protect It
All data is protected with256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. Access controls, intrusion detection, and regular third-party security audits are in place across all Sandibet systems.
Your Rights
You have the right to access, correct, export, or request deletion of your personal data at any time. Submit a request via our support email and we will respond within 30 days in accordance with applicable data protection law.
Cookies & Tracking
Sandibet uses essential cookies to keep you logged in and maintain session security. We also use analytics cookies to understand how the Platform is used so we can improve the experience. You can manage preferences in your browser settings.
Introduction
This Privacy Policy ("Policy") sets out how Sandibet ("Company", "we", "us", "our") collects, processes, stores, shares, and protects personal data obtained from individuals ("Users", "Members", "you") who access or use the Sandibet platform at https://sandibet.cam ("Platform") and all associated services.
Sandibet is committed to protecting the privacy of all members, including players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We operate in accordance with applicable data protection legislation and industry best practices for the responsible handling of personal information.
By registering for an account, depositing funds, or continuing to use the Sandibet Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference into this document.
Definitions
The following terms have the meanings assigned to them below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or can reasonably be used to identify a living individual, directly or indirectly. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion. |
| Data Controller | Sandibet, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | A third party that processes personal data on behalf of Sandibet under a data processing agreement. |
| Data Processor | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
| Cookie | A small text file placed on a User's device by the Platform for session management, analytics, or preference storage. |
| KYC | Know Your Customer — the identity and age verification process mandated for regulatory compliance in the online gaming industry. |
Personal Data We Collect
Sandibet collects the following categories of personal data, depending on how you interact with the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number | Account registration, KYC verification, age compliance (21+) |
| Contact Data | Email address, mobile phone number, residential address | Account communications, security alerts, support |
| Financial Data | Payment method details, transaction history, deposit/withdrawal records in MYR | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, browser type and version, device identifiers, operating system | Platform security, fraud detection, service delivery |
| Usage Data | Pages visited, games played, wager history, session duration, login timestamps | Platform improvement, responsible gambling monitoring, analytics |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Customer service quality assurance, complaint resolution |
We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers unless specifically required by applicable law or with your explicit consent.
How We Collect Personal Data
Sandibet collects personal data through the following means:
- Direct collection: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
- Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, log files, pixel tags, and similar tracking technologies.
- Third-party sources: Identity and address verification data from regulated KYC providers; fraud screening data from risk management partners; payment confirmation data from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other payment processors.
- Public sources: Publicly available information used to supplement identity verification, fraud prevention, or compliance checks where legally permitted.
Data Processing — How We Use Your Data
Sandibet processes your personal data for the following specific purposes:
- Account Management: Creating, maintaining, and securing your Sandibet member account, including processing login authentication and two-factor verification.
- Payment Processing: Facilitating deposits and withdrawals in Malaysian Ringgit (MYR) through your chosen payment method, and maintaining accurate transaction records.
- Regulatory Compliance: Meeting Know Your Customer (KYC), Anti-Money Laundering (AML), and Counter-Terrorism Financing (CTF) obligations, including age verification to enforce the 21+ requirement.
- Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, and other security threats through automated risk-scoring and manual review.
- Responsible Gambling: Monitoring usage patterns to identify potential problem gambling behaviours and applying safeguards such as session alerts, deposit limit enforcement, and self-exclusion management.
- Customer Support: Responding to enquiries, resolving disputes, and improving service quality based on support interaction history.
- Platform Improvement: Analysing aggregated usage data to enhance Platform performance, game selection, and user experience.
- Marketing Communications: Sending promotional emails, bonus notifications, and platform updates to members who have not opted out of marketing communications.
Marketing Opt-Out: You may opt out of receiving marketing communications from Sandibet at any time by updating your communication preferences in your account settings or by contacting our support team. Opting out of marketing will not affect transactional or service-related communications necessary for your account.
Legal Basis for Processing
Sandibet processes your personal data on the following legal grounds, as applicable to each processing activity:
- Contractual Necessity: Processing required to perform our obligations under the Member Agreement with you, including account management and payment processing.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and CTF obligations.
- Legitimate Interests: Processing carried out in pursuit of Sandibet's legitimate business interests, such as fraud prevention, platform security, and business analytics, where those interests are not overridden by your privacy rights.
- Consent: Processing based on your explicit consent, such as for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Data Sharing & Third Parties
Sandibet does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following circumstances and with the following categories of recipients:
- Payment Processors: Financial data shared with payment service providers including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, and cryptocurrency network processors, solely to facilitate your transactions.
- Identity Verification Providers: Identity data shared with regulated KYC and AML screening service providers for the purpose of age and identity verification.
- Regulatory Authorities: Personal and financial data disclosed to relevant governmental, regulatory, or law enforcement authorities where required by law or valid legal process.
- Technology Service Providers: Technical data processed by cloud hosting, cybersecurity, and analytics vendors acting as data processors under binding data processing agreements with Sandibet.
- Professional Advisers: Data shared with legal counsel, auditors, or compliance consultants under strict professional confidentiality obligations, where necessary.
All third-party data processors engaged by Sandibet are contractually required to implement appropriate technical and organisational security measures and to process personal data only on Sandibet's documented instructions.
International Data Transfers
In the course of providing the Sandibet service, your personal data may be transferred to and processed in countries outside of Malaysia. Such transfers may occur when we engage cloud infrastructure providers or KYC verification services that operate data centres in other jurisdictions.
Where personal data is transferred internationally, Sandibet takes reasonable steps to ensure that the recipient provides an adequate level of data protection, including through the use of contractual safeguards, data processing agreements, or other legally recognised transfer mechanisms where applicable.
Data Retention
Sandibet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity records | Duration of account + 5 years post-closure | AML/KYC regulatory requirements |
| Transaction and financial records | 7 years from transaction date | Financial record-keeping obligations |
| Support and communication logs | 3 years from last interaction | Dispute resolution and service quality |
| Technical and usage data | 13 months from collection | Platform analytics and security |
| Marketing preference records | Until opt-out or account closure | Consent management |
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.
Cookies & Tracking Technologies
Sandibet uses cookies and similar tracking technologies to operate the Platform and improve the Member experience. The categories of cookies we use are as follows:
- Essential Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. Essential cookies cannot be disabled without affecting the ability to use the Platform.
- Analytics Cookies: Used to collect aggregated, anonymised data about how Members navigate and use the Platform. This helps us identify areas for improvement and optimise the user experience.
- Preference Cookies: Store your language preferences, display settings, and certain account configuration choices to provide a personalised experience across sessions.
- Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts.
You can manage cookie preferences through your browser's built-in settings. Disabling certain cookies may limit Platform functionality. We do not use cookies to serve third-party advertising on Sandibet.
Your Data Rights
Subject to applicable law, you have the following rights with respect to your personal data held by Sandibet. To exercise any right, contact us at with the subject line "Data Rights Request". We will respond within 30 days.
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data where no longer necessary.
Right to Restrict
Request that we limit processing while a dispute is resolved.
Right to Portability
Receive your data in a machine-readable format for transfer.
Right to Object
Object to processing based on legitimate interests or for marketing.
Withdraw Consent
Withdraw consent for processing at any time without penalty.
Automated Decisions
Request human review of decisions made solely by automated means.
Please note that certain rights may be limited where Sandibet has a legal obligation to retain data (e.g., KYC records required under AML regulations) or where the exercise of the right would adversely affect the rights of other individuals.
Children's Privacy
Sandibet is strictly an adult platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21 years. The Platform is not directed at, designed for, or intended to be used by anyone below this minimum age.
If we become aware that personal data has been collected from an individual under 21 without appropriate age verification, we will take immediate steps to delete that information, close the associated account, and return any deposited funds to the source payment method.
🔞 21+ Only: If you are a parent or guardian and believe your child has registered on Sandibet, please contact us immediately at so we can investigate and take appropriate action.
Security Measures
Sandibet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
- Encryption in Transit: All data transmitted between your device and the Sandibet Platform is encrypted using TLS 1.2 or higher with256-bit SSL certificates.
- Encryption at Rest: Stored personal data and financial records are protected using AES-256 encryption across all Sandibet database infrastructure.
- Access Controls: Strict role-based access controls (RBAC) limit staff access to personal data on a strict need-to-know basis, with all access logged and auditable.
- Two-Factor Authentication: Available to all Sandibet members and mandated for all staff accessing internal systems containing personal data.
- Penetration Testing: Regular third-party security assessments and penetration tests are conducted to identify and remediate vulnerabilities.
- Incident Response: A documented data breach response procedure is in place, including notification protocols where required by applicable law.
While we take every reasonable precaution, no electronic transmission or storage method is completely secure. Sandibet cannot guarantee the absolute security of your data and encourages all members to use strong, unique passwords and enable two-factor authentication on their accounts.
Changes to This Privacy Policy
Sandibet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered members via the email address on file at least seven (7) days before the updated policy takes effect.
The "Last Updated" date at the top of this page will reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or Sandibet's data handling practices, please contact our Data Support team through the following channels:
- Email:
- Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" for faster routing
- Live Chat: Available 24/7 via the Platform — ask to speak with the Data Support team
- Response Target: We aim to acknowledge all data-related enquiries within 5 business days and provide a substantive response within 30 days
This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions of this Policy are archived and available upon written request. For concerns relating to responsible gambling and your account, please also visit our Responsible Gambling page.
Privacy You Can Count On at Sandibet
We take data protection seriously so you can focus on what matters — enjoying the platform. Questions about your data? Our team is here around the clock, in English, Bahasa Melayu, and Mandarin.
🔞 Sandibet is for players aged 21 and above only. Gambling involves financial risk — please play responsibly.