We are committed to protecting your personal data. This policy explains what we collect, why we collect it, how we use it, and what rights you have over your information.
Last Updated: 1 January 2026Six key principles that govern how 20bet handles your personal information. Full details follow in the policy sections below.
We only collect personal data that is strictly necessary to operate your 20bet account, process transactions, and comply with applicable regulatory requirements.
All data transmissions between your device and the 20bet platform are encrypted using industry-standard 256-bit SSL technology, protecting data in transit at all times.
20bet does not sell, rent, or trade your personal data to unaffiliated third parties for marketing or commercial purposes. Your data is not a product we profit from.
You have the right to access, correct, delete, and port your personal data at any time. Submit a request to our support team and we will respond within a reasonable timeframe.
We use cookies and similar technologies solely to improve your platform experience and gather anonymised usage analytics. No advertising tracking cookies from third parties.
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Data is securely deleted when no longer needed.
This Privacy Policy ("Policy") describes how 20bet ("we", "us", "our", "the Platform") collects, uses, processes, stores, and protects personal information relating to users ("you", "User", "Player") of the 20bet platform, accessible at https://20bet.casa.
20bet is an English-language online sports betting and gaming platform serving players in Malaysia. Our operations serve users across Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and throughout Malaysia. We recognise that privacy is a fundamental right and we are committed to handling your personal data with integrity, transparency, and strict security.
This Policy applies to all personal data collected through the 20bet website, account registration process, customer support interactions, payment transactions, and any other point at which you provide information to us. By using the Platform and creating or maintaining an account, you acknowledge that you have read, understood, and agreed to the terms of this Policy.
This Policy should be read in conjunction with our Terms & Conditions, which form an integral part of your agreement with 20bet.
This Policy is updated periodically to reflect changes in our data practices or applicable laws. The "Last Updated" date at the top of this page indicates the most current version. We recommend reviewing this Policy regularly.
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial data, location data, or any combination of data that could identify a specific individual. |
| "Data Controller" | 20bet, the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | Any third party that processes personal data on behalf of 20bet, subject to contractual data processing agreements. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose. |
| "Cookies" | Small text files placed on your device by the Platform to facilitate session management, analytics, and user experience improvements. |
| "KYC" | Know Your Customer — the identity and age verification process applied by 20bet to confirm a user's identity, age, and source of funds where required. |
20bet collects personal data at various stages of your interaction with the Platform. The categories of data we may collect include, but are not limited to, the following:
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information, except where strictly required for responsible gambling purposes (e.g., self-exclusion records) or by applicable law.
20bet processes personal data only where a valid legal basis exists. The applicable legal bases for our data processing activities are as follows:
| Legal Basis | Examples of Processing Activities |
|---|---|
| Contract Performance | Account creation and management; processing deposits and withdrawals; resolving disputes; providing customer support. |
| Legal Obligation | KYC / AML identity verification; age verification (21+ requirement); fraud prevention and detection; regulatory reporting obligations. |
| Legitimate Interests | Platform security and fraud prevention; analytics to improve product performance; bonus abuse detection; responsible gambling monitoring. |
| Consent | Marketing communications (where you have opted in); non-essential cookies; promotional preference management. |
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent may be submitted by contacting our support team.
20bet uses the personal data we collect for the following purposes:
We use registration and identity data to create and maintain your account, verify your eligibility to use the Platform (including age verification — you must be 21 or older), process deposits and withdrawals via your chosen Malaysian payment methods, and deliver the betting and gaming services you request.
We use identity, financial, and transaction data to comply with anti-money laundering (AML) obligations, conduct Know Your Customer (KYC) checks, detect and prevent fraud, bonus abuse, and collusion, and respond to requests from regulatory or law enforcement authorities where we are legally required to do so.
Financial and transaction data is used to process your deposit and withdrawal requests through your chosen payment method — whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, direct bank transfer via Maybank, CIMB, Public Bank, or Hong Leong Bank, or a cryptocurrency wallet. We retain transaction records to ensure accurate account histories and to handle any payment disputes.
Communications data — including the content of support interactions — is used to respond to your queries, investigate complaints, and resolve disputes. Support records may be retained to maintain quality standards and provide context for any future interactions.
Technical and usage data is used in aggregate, anonymised form to analyse user behaviour, identify platform performance issues, improve site navigation and feature design, and understand usage patterns across devices and locations. This analysis does not identify you as an individual.
Betting activity data is monitored to identify patterns that may indicate problematic gambling behaviour. Where such patterns are detected, 20bet may take appropriate steps in line with our Responsible Gambling policy, including contacting you about self-limitation tools or restricting your account pending a review. This processing is conducted in your interests and in line with our responsible gambling obligations.
Where you have provided explicit consent, we may use your email address to send you information about promotions, bonuses, and platform updates relevant to your use of 20bet. You may opt out of marketing communications at any time by contacting our support team. Opting out of marketing does not affect the processing of data necessary for account operations.
20bet does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients, strictly as necessary and subject to appropriate data protection safeguards:
To process your deposits and withdrawals, we share relevant financial data with authorised payment processors, including e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), banking partners supporting DuitNow and FPX (including Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank), and cryptocurrency processing services. These providers receive only the data necessary to execute the specific transaction.
We engage third-party KYC and identity verification services to assist with document verification and age confirmation. These processors act under contractual data processing agreements and are permitted to use your data only for the specific verification purpose for which it was shared.
20bet may disclose personal data to competent governmental, regulatory, or law enforcement authorities where we are required to do so by applicable law or a valid legal order. We will not disclose data beyond what is strictly required by the specific legal obligation.
We use third-party cloud hosting, security, and analytics infrastructure providers to operate the Platform. These providers process data as Data Processors under contractual agreements that restrict their use of your data to providing the contracted service.
In order to protect the Platform and its users from fraud, we may share limited identifying data with fraud prevention and detection networks. This sharing is conducted under the legitimate interests legal basis and is proportionate to the risk being addressed.
In all cases where personal data is shared with third parties, 20bet requires contractual guarantees that the recipient will protect your data to at least the same standard applied by 20bet itself. We do not authorise any third party to use your personal data for their own commercial purposes.
20bet uses cookies and similar technologies (collectively, "Cookies") on the Platform. Cookies are small data files placed on your device when you visit the Platform. They serve a number of purposes as described below.
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for the Platform to function. These enable session management, account login, and security features. They cannot be disabled without impairing Platform functionality. |
| Analytics Cookies | Collect anonymised usage data (pages visited, session duration, device type) to help us understand how the Platform is used and improve its performance. |
| Functional Cookies | Remember your preferences (e.g., language, display settings) to provide a more personalised experience on return visits. |
| Security Cookies | Support fraud detection and account security monitoring by identifying unusual access patterns or suspicious login behaviour. |
You may manage or disable non-essential Cookies through your browser settings. Please note that disabling certain Cookies may affect the functionality of the Platform. Detailed instructions for managing cookies in common browsers are available through the support documentation of your specific browser application.
20bet does not use third-party advertising or behavioural tracking cookies. We do not permit external advertising networks to place tracking technologies on the Platform.
20bet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
While 20bet employs robust security measures, no data transmission or storage system can be guaranteed 100% secure. You are responsible for maintaining the security of your account credentials. 20bet will never ask for your password via any communication channel.
20bet retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required to meet our legal, regulatory, and contractual obligations. The following general retention guidelines apply:
| Data Category | Typical Retention Period |
|---|---|
| Account Registration Data | Duration of active account plus 5 years following account closure, to satisfy AML and regulatory record-keeping obligations. |
| KYC / Identity Verification Documents | Duration of account plus a minimum of 5 years post-closure, in line with standard anti-money laundering retention requirements. |
| Financial & Transaction Records | Minimum of 5 years from the date of each transaction, to support financial audits, dispute resolution, and regulatory compliance. |
| Support Correspondence | 3 years from the date of the last support interaction, to provide context for future disputes or quality assurance reviews. |
| Analytics & Usage Data | Up to 24 months in anonymised or pseudonymised form for platform performance analysis purposes. |
| Marketing Consent Records | Until consent is withdrawn, plus an additional period as required to demonstrate compliance with consent obligations. |
Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.
20bet operates as an online platform serving Malaysian players. In certain circumstances, your personal data may be transferred to, processed by, or stored in locations outside of Malaysia, including where we use cloud-based infrastructure or third-party processors whose operations span multiple jurisdictions.
Where such international transfers occur, 20bet ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within Malaysia. These safeguards may include:
By using the Platform, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Malaysia for the purposes described in this Policy. If you have concerns about cross-border data transfers, please contact us using the details in Section 15.
20bet respects your rights in relation to your personal data. Subject to applicable law and certain conditions, you may exercise the following rights by submitting a written request to our support team:
Request a copy of the personal data 20bet holds about you, together with information about how it is used.
Request correction of inaccurate or incomplete personal data held in your account.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that processing of your data be restricted in certain circumstances, such as while a dispute about accuracy is being resolved.
Request a copy of data you have provided to 20bet in a structured, machine-readable format, where technically feasible.
Object to processing of your personal data based on legitimate interests or direct marketing, including profiling for marketing purposes.
To exercise any of the above rights, please contact our support team with your full name, registered email address, and a clear description of your request. We will acknowledge your request within 5 business days and aim to fulfil it within 30 days, subject to identity verification and any applicable legal limitations.
Certain rights may be limited where their exercise would conflict with 20bet's legal obligations — for example, we are required to retain transaction records for anti-money laundering compliance purposes, which may limit your right to erasure in relation to those records.
The 20bet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory component of our account registration and KYC process.
If 20bet becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration of age or any other means — that account will be immediately suspended, all funds held will be reviewed, and the personal data of the underage individual will be deleted as promptly as is consistent with our legal obligations.
If you are a parent or guardian and believe that a person under your care has registered an account on 20bet, please contact our support team immediately at [email protected] with relevant details so that we can investigate and take appropriate action without delay.
The 20bet Platform does not contain links to third-party websites for advertising or affiliate purposes. However, the Platform integrates with third-party payment processors and service providers as described in Section 6. When you initiate a payment or identity verification process, you may be directed to or interact with the interface of a third-party service provider (such as your bank's FPX portal or your e-wallet application).
20bet is not responsible for the privacy practices of third-party payment providers or banking partners. Their collection and use of your data during payment processing is governed by their own privacy policies. We encourage you to review the privacy notices of any third-party service you interact with when using the Platform.
20bet reserves the right to amend this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, changes in applicable privacy laws, organisational changes, or improvements to our platform's security posture.
Where amendments are material — that is, where they substantively affect your rights or the way we use your personal data — we will endeavour to notify registered users by displaying a prominent notice on the Platform or by sending a communication to your registered email address, prior to the changes taking effect.
The version of this Policy bearing the "Last Updated" date displayed at the top of this page is the current binding version. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with the amended Policy, you should cease use of the Platform and may request account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 20bet processes your personal data, please contact us using the details below. All contact information is provided as plain text — no clickable email or phone links are used on this Platform.
When submitting a data subject rights request, please include sufficient information for us to verify your identity before processing the request. This is a necessary security measure to ensure we do not disclose personal data to an unauthorised party.
Your privacy is important to us. We are committed to responding to all privacy-related queries fairly, transparently, and in a timely manner. For broader questions about how the Platform operates, you may also consult our FAQ page or our Terms & Conditions.
Join thousands of Malaysian players who trust 20bet for secure betting, fast Malaysian payment processing, and transparent data practices. 21+ only. Play responsibly.
For players aged 21 and above only. Gambling can be addictive — please play within your means.