Privacy Policy

NeroBet ("NeroBet", "Company", "we", "us", "our") operates the online casino and sports betting platform accessible at https://nerobet.cam (the "Platform"). We are committed to protecting the personal data of all individuals who interact with our Platform, including registered players, visitors, and individuals who contact our support team.

This Privacy Policy ("Policy") explains how NeroBet collects, processes, stores, shares, and protects your personal data in connection with your use of the Platform and all associated services. It also describes the rights you hold in relation to your personal data and how you can exercise those rights.

This Policy applies to all users of the NeroBet Platform regardless of the device or method by which the Platform is accessed, including desktop browsers, mobile browsers, and any NeroBet applications. It should be read together with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference into our overall regulatory framework.

By registering an account on NeroBet or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means NeroBet, which determines the purposes and means of processing personal data.
• "Data Processor" means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of NeroBet.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data.
• "KYC" means Know Your Customer — the identity and age verification process conducted by NeroBet in compliance with applicable regulations.
• "AML" means Anti-Money Laundering obligations applicable to NeroBet's operation of online gambling services.
• "Cookies" means small text files stored on your device by your web browser at the request of the Platform, used to retain session information and preferences.

NeroBet collects the following categories of personal data in connection with the operation of the Platform:

NeroBet collects personal data through the following primary channels:

• Direct Provision: Information you provide directly to NeroBet when registering an account, completing KYC verification, making deposits or withdrawal requests, participating in promotions, or contacting our support team.
• Automated Technical Collection: Information collected automatically through your use of the Platform, including session cookies, server logs, and analytics tools that record how the Platform is accessed and used.
• Third-Party Payment Processors: Transaction confirmation data shared with NeroBet by our payment processing partners, including Malaysian banking institutions, e-wallet providers (such as Touch 'n Go and Boost), and DuitNow/FPX infrastructure, to the extent necessary to process and verify your transactions.
• Identity Verification Providers: Where NeroBet engages third-party KYC and identity verification services, those providers may share verification results and supporting data with NeroBet in order to complete your account verification.
• Fraud Prevention & AML Services: In connection with our legal obligations, NeroBet may receive supplementary data from fraud detection and anti-money laundering screening services.

NeroBet processes your personal data only for specific, clearly defined purposes. The table below outlines the principal purposes for which we process your data:

• Account Registration and Management: To create, maintain, and administer your NeroBet account, including processing login credentials, managing your balance, and maintaining your transaction history.
• KYC and Age Verification: To verify your identity and confirm that you are at least 21 years of age, as required under our responsible gambling obligations and applicable regulations.
• Payment Processing: To process deposit and withdrawal transactions via your selected Malaysian payment methods, including Maybank2u, Touch 'n Go eWallet, DuitNow, FPX, and others.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited activities on the Platform.
• Regulatory Compliance: To meet NeroBet's obligations under applicable KYC, AML, and data protection regulations, including the retention of required records for statutory minimum periods.
• Customer Support: To respond to queries, resolve disputes, investigate complaints, and provide ongoing support to registered players.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the functionality, stability, and user experience of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news relevant to your account — only where you have provided explicit consent to receive such communications and have not subsequently opted out.
• Responsible Gambling: To monitor your gaming activity for signs of problem gambling and to enforce responsible gambling measures including self-exclusion, deposit limits, and reality checks.

NeroBet relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML screening, and the retention of financial records.
• Legitimate Interests: Processing carried out in pursuit of NeroBet's legitimate business interests — specifically fraud prevention, platform security, and the improvement of our Services — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities for which NeroBet relies on your freely given, specific, and informed consent — principally the sending of direct marketing communications. You may withdraw consent at any time by contacting our support team or adjusting your account notification preferences.

NeroBet does not sell, rent, or trade your personal data with third-party marketers or advertisers. Your personal data may be shared with the following categories of recipients strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

• Payment Service Providers: Malaysian banking institutions and payment infrastructure providers (including those facilitating Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions) to process financial transactions.
• KYC and Identity Verification Providers: Third-party verification services engaged by NeroBet to conduct identity checks, age verification, and document authentication.
• Fraud Prevention and AML Service Providers: Specialist screening services that assist NeroBet in meeting its fraud detection and anti-money laundering obligations.
• Technology and Infrastructure Providers: Cloud hosting providers, data centre operators, and technical infrastructure partners who process data on our behalf under contractual obligations that mirror our own data protection commitments.
• Regulatory Authorities and Law Enforcement: Government bodies, regulators, courts, or law enforcement agencies where disclosure is required by law, court order, or regulation.
• Professional Advisors: Legal, audit, financial, and compliance advisors engaged by NeroBet, who are bound by professional confidentiality obligations.

NeroBet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with our AML and regulatory recordkeeping obligations.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of the relevant transaction, consistent with applicable financial record retention requirements.
• Gaming Activity Data: Retained for a minimum of three (3) years following the relevant activity, for regulatory compliance and dispute resolution purposes.
• Communications Data: Support correspondence is retained for up to three (3) years from the date of the communication unless a longer period is required for an unresolved dispute.
• Technical and Usage Data: Retained in aggregated or anonymised form for platform improvement purposes. IP address logs are retained for up to twelve (12) months in identifiable form for fraud prevention purposes.
• Marketing Preferences: Records of your marketing consent or opt-out status are retained for the duration of your account and for up to three (3) years following account closure.

Upon the expiry of the applicable retention period, NeroBet will securely delete or anonymise your personal data in accordance with our internal data destruction procedures.

NeroBet implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport Layer Encryption: All data transmitted between your device and the NeroBet Platform is protected by 256-bit SSL/TLS encryption.
• Data Storage Security: Personal data at rest is stored using encryption and access controls that restrict access to authorised personnel only.
• Access Controls: Employee access to personal data is granted strictly on a need-to-know basis. All access is logged and subject to periodic review.
• Multi-Factor Authentication: NeroBet's internal systems require multi-factor authentication for staff accessing sensitive data environments.
• Penetration Testing and Security Audits: The Platform undergoes regular security assessments, including penetration testing, to identify and remediate vulnerabilities.
• Incident Response: NeroBet maintains a documented data breach response procedure. In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify you and the relevant regulatory authority without undue delay and in accordance with applicable law.

NeroBet uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your session state, remembering your login status, and enabling core Platform functionality. These cookies cannot be disabled without significantly impairing your use of the Platform.
• Functional Cookies: Used to remember your preferences and settings (such as language preferences and display configurations) to provide a more personalised experience.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, time spent, and technical errors encountered. This data is used exclusively for Platform improvement and does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent access attempts, including bot activity and credential stuffing attacks.

NeroBet does not use third-party advertising or cross-site tracking cookies. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies will impair your ability to use the Platform.

Subject to applicable data protection law, you hold the following rights in relation to your personal data held by NeroBet. To exercise any of these rights, please contact our support team at support@nerobet.cam.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where NeroBet is required by law to retain your personal data (such as for AML and KYC records). Where NeroBet is unable to fully comply with a request, we will explain the reason in writing.

If NeroBet becomes aware that personal data has been collected from a person under 21 years of age, such data will be immediately deleted and the associated account will be permanently closed. All funds associated with the account may be forfeited in accordance with our Terms & Conditions.

If you have reason to believe that a person under 21 has registered on NeroBet, please contact our support team immediately at support@nerobet.cam. NeroBet takes underage access extremely seriously and will act promptly on all such reports.

NeroBet reserves the right to amend this Privacy Policy at any time. Changes will be published on this page with a revised "Last Updated" date. We will notify registered players of any material changes to this Policy via email or in-Platform notification where reasonably practicable, and will provide a reasonable period for review before the changes take effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the amended terms. We encourage you to review this Policy periodically to stay informed about how NeroBet protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by NeroBet, please contact our team using the following details:

When submitting a data subject rights request, please include your registered Account username, the nature of your request, and (where applicable) the specific data or processing activity your request relates to. This will allow our team to process your request as efficiently as possible.