Privacy Policy Ceriabet — Data Protection & Your Personal Information

Ceriabet ("we", "Platform" or "Ceriabet") respects the privacy of every individual who uses our services. This Privacy Policy is an official document that explains in detail how we collect, process, store, protect and, in certain circumstances, share your personal information when you use the Ceriabet online gaming platform at ceriabet.vu.

This policy applies to all users of the Ceriabet platform, including unregistered website visitors, registered members and any individual who communicates with our customer support team through any channel — whether via live chat, email or phone.

This Privacy Policy should be read in conjunction with Terms and Conditions and Responsible Gaming Policy Ceriabet forms part of the overall agreement between you and our platform. All these documents collectively form the legal framework governing your relationship with Ceriabet.

Ceriabet only collects information that is strictly necessary to provide high-quality services, ensure platform security and comply with applicable legal requirements. The following are the categories of information we may collect:

We may also collect information you provide voluntarily, such as personal preferences, feedback on games or suggestions for platform improvements. This information is invaluable in helping us continuously enhance our service quality.

The information we collect is used exclusively for legitimate and reasonable purposes related to ceriabet platform operations. Below is a detailed explanation of how your data is used:

• Account Management: Creating and maintaining your account, processing registration, verifying identity and enabling you to securely access all platform features.
• Transaction Processing: Processing deposits and withdrawals quickly and securely, verifying payment details and ensuring funds reach the correct destination without errors.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account usage and other security threats that could affect the platform and other members.
• Legal Compliance: Meeting the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLA) and KYC regulations mandated by our licensed authorities.
• Customer Support: Providing accurate and personalised assistance when you contact our support team, resolving complaints and continually improving overall customer service quality.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and reaching out to members who may need support or customised betting limits.
• Service Communications: Sending important notifications regarding your account, changes to terms, promotions you have agreed to receive and relevant platform updates.
• Analytics & Improvement: Analysing usage patterns in aggregate and anonymised form to better understand member needs and develop more useful new features.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, every processing of personal data must have a valid legal basis. Ceriabet processes your data on the following grounds:

• Consent: For marketing communications and any processing beyond contractual requirements, we require and rely on your clear and voluntary consent. You may withdraw this consent at any time.
• Contractual Requirements: The majority of data processing is necessary to fulfil our contractual obligations to you — namely providing gaming services, processing payments, and managing your account.
• Legal Obligations: We are legally required to process certain data for KYC compliance, AMLA obligations and reporting to our licensed authorities.
• Legitimate Interests: For fraud prevention, platform security, and internal service improvement purposes, we may process data based on our legitimate interests, provided this does not override your fundamental rights.

Ceriabet does not sell or trade members' personal data to any party. However, there are limited situations where sharing information with certain parties is necessary for smooth platform operations and legal compliance:

• Trusted Service Providers: We share necessary data with third-party service providers that support platform operations, including payment gateway providers, KYC identity verification services, licensed game providers and cloud infrastructure providers. All are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.
• Legal Authorities: We may disclose information to the police, courts or other enforcement bodies when required to do so by a court order, warrant or valid legal requirement. Any such request will be carefully reviewed by our legal team before data is released.
• Licensed Body & Regulator: Information required for licensing, audit and compliance reporting purposes may be shared with the regulatory bodies overseeing ceriabet platform operations.
• Business Transfer: In the event of any merger, acquisition, or sale of ceriabet assets, member personal data may be transferred as part of that transaction. Members will be notified in advance via appropriate notice.

Ceriabet uses cookies and similar tracking technologies to enhance the user experience, maintain session security and analyse overall platform usage patterns. Understanding how we use these technologies is important to you as a member.

Types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login, session security and navigation. They cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: Used to remember your preferences such as language, display settings and game preferences to ensure a more personalised and consistent experience each time you visit.
• Analytics Cookies: Helping us understand how members interact with the platform — the most frequently visited pages, time spent and common navigation paths. This data is used in aggregate form and is not linked to individual identities.
• Security Cookies: Used to detect suspicious sessions, prevent unauthorised access and protect your account from threats such as session hijacking and CSRF attacks.

You can manage cookie settings through your web browser's preferences. However, disabling certain cookies may affect the functionality and security of the platform. For more information on managing cookies, refer to your web browser's help documentation.

Ceriabet retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable law. We will not retain your data longer than necessary.

Our data retention principles:

• Active Account Data: Retained for the duration that your account remains active and operational on the Ceriabet platform, plus any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with AMLA requirements.
• Security Logs: Retained for 12 months for security incident investigation and fraud detection purposes.
• Support Communications: Retained for 3 years to help resolve any disputes that may arise.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices, you have the following rights regarding your personal data held by Ceriabet:

To exercise any of the rights above, please contact our Data Protection Officer via the official ceriabet email. We will process your request within 30 days calendar days from the date of receipt. In complex cases, this period may be extended by up to 60 days with notice to you.

Ceriabet continuously invests in the latest security infrastructure to ensure that members' personal data is protected at every stage — during transmission, during processing and during storage. Below is a comprehensive overview of the protection layers we have implemented:

• Data Transmission Encryption: All communications between your device and ceriabet's servers are secured by TLS 1.3 with continuously renewed 256-bit SSL certificates. This ensures no third party can intercept or read the data transmitted.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and identification documents, is encrypted using the industry-standard AES-256 algorithm.
• Two-Factor Authentication (2FA): Ceriabet fully supports 2FA for member accounts, adding an extra layer of protection against unauthorised access even if your password is compromised.
• Continuous Monitoring: Our intrusion detection system (IDS) and intrusion prevention system (IPS) operate around the clock to detect and block threats in real time.
• Regular Security Testing: We conduct regular penetration testing and security audits by independent third-party security experts to identify and remediate any vulnerabilities.
• Internal Access Controls: The principle of least privilege is applied — each staff member can only access the data required for their specific role, nothing more.

While we take all reasonable precautions, no security system can guarantee 100% absolute protection. You also play an important role in keeping your account secure — use a strong password, enable 2FA, and never share your login credentials with anyone.

The ceriabet platform uses a range of trusted third-party services to ensure smooth and secure operations. These service providers may process some of your personal data in a limited and specific capacity:

• Payment Gateway Providers: To process deposits and withdrawals, transaction details must be shared with licensed payment gateways operating under Bank Negara Malaysia regulations. These providers maintain their own strict privacy policies and security standards.
• KYC & Identity Verification Services: To meet KYC requirements, your identity documents may be processed by a licensed third-party identity verification service provider. This data is used solely for verification purposes and is not retained longer than necessary.
• Game Providers: Game studios and casino software providers partnering with ceriabet may receive the minimum technical data required to run games properly. All our game providers hold valid licences and comply with industry privacy standards.
• Cloud Infrastructure: Data is stored in licensed, high-prestige cloud data centres that hold internationally recognised security certifications.

Ceriabet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements. All amendments will take effect as soon as the updated version is published on this website.

How we notify you of changes:

• For minor changes, we will update the "Last Updated" date at the top of this document.
• For significant or material changes that affect your rights, we will send a notification to the email address registered with your account at least 14 days before the changes take effect.
• In the case of highly material changes, we may request your renewed consent before you can continue using the platform.

We encourage you to review this page periodically to stay informed of how we protect your privacy. Continued use of the ceriabet platform after a change notice is considered acceptance of the updated terms.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact ceriabet's Data Protection Officer (DPO) directly.

You can reach us via the platform's official email: [email protected]

Please include the following information in your message to help us process it faster:

• Your full name and ceriabet account ID
• The nature of your query or complaint, clearly stated
• The specific right you wish to exercise (if applicable)
• Any relevant supporting information

Our team is committed to responding within 3 business days for general inquiries and 30 calendar days for formal rights requests under PDPA. We take every privacy complaint seriously and will conduct a thorough investigation into each reported case.