Privacy Policy

This Privacy Policy ("Policy") is issued by bestsuper ("bestsuper", "we", "us", "our") and applies to all personal data collected from individuals ("Player", "User", "you") who access or use the bestsuper platform located at https://bestsuper.cam and any related services, features, or communications channels.

bestsuper operates as an online casino and sports betting platform serving players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other cities and states. In the course of providing our services, we necessarily process certain personal information about you.

bestsuper takes its data protection obligations seriously. This Policy has been prepared in a manner that aligns with the principles of Malaysia's Personal Data Protection Act 2010 ("PDPA") and internationally recognised data privacy standards. We process your personal data lawfully, fairly, and transparently.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or is reasonably capable of identifying a living individual, directly or indirectly, including name, identification number, contact details, financial information, and online identifiers such as IP addresses and device IDs.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, or erasure.
• "Data Controller" means bestsuper, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of bestsuper pursuant to a written data processing agreement.
• "KYC Data" means identity documents and supporting verification materials submitted by you as part of the Know Your Customer process.
• "Sensitive Data" means a subset of personal data that warrants heightened protection, including financial account details, identity document numbers, and where applicable, health-related disclosures made in connection with responsible gambling self-assessments.
• "Cookie" means a small data file placed on your device by the bestsuper website for the purpose of session management, analytics, personalisation, or security.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia (Act 709).

bestsuper collects the following categories of personal data from players. The specific data collected in any given circumstance depends on how you interact with the Platform.

We do not collect or process special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless strictly necessary and lawfully permitted.

bestsuper collects your personal data through the following channels and mechanisms:

• Account Registration: When you create a bestsuper account, you directly provide identity, contact, and age verification information.
• KYC Verification: When you submit identity and address documents as part of the mandatory verification process prior to withdrawal.
• Deposits and Withdrawals: When you transact via any supported payment method (Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB, Public Bank, RHB, Hong Leong, or cryptocurrency), financial and transactional data is generated and retained.
• Platform Interactions: As you navigate and use the Platform — placing bets, playing games, claiming bonuses — gaming activity and session data is automatically recorded.
• Customer Support: When you contact our Live Chat, submit a support ticket, or correspond with our team via email, the communications and any information you provide are recorded.
• Cookies and Tracking Technologies: Our website uses cookies and similar technologies as described in Section 8 of this Policy to collect technical and behavioural data automatically.
• Third-Party Sources: In limited circumstances, we may receive personal data about you from third parties, including identity verification bureaus, fraud prevention databases, and payment processors, for the purpose of completing KYC checks or preventing fraud.

bestsuper processes your personal data for the following specific and clearly defined purposes:

• Account Creation and Management: To register your account, verify your identity, manage your account settings, and maintain your player profile.
• Service Delivery: To enable you to access and use all Platform features — placing bets on EPL, Liga Super Malaysia, UFC, and other markets; playing casino and slot games; claiming bonuses; and participating in promotions.
• Payment Processing: To process deposits and withdrawals in MYR via your selected payment methods, and to maintain accurate financial records of all transactions.
• KYC and Age Verification: To verify that you are 21 years of age or older and that you are the legitimate account holder, as required by our Terms & Conditions and responsible gambling obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct.
• Customer Support: To respond to your queries, complaints, and support requests in English, Bahasa Melayu, or Chinese, and to maintain a record of our interactions for quality assurance and dispute resolution purposes.
• Responsible Gambling: To administer deposit limits, self-exclusion requests, session reminders, and other responsible gambling tools, and to monitor gaming patterns that may indicate problem gambling behaviour.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable law, including anti-money laundering (AML) requirements, counter-financing of terrorism (CFT) obligations, and responses to lawful requests from Malaysian regulatory or law enforcement authorities.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the performance, design, and security of the Platform.
• Marketing Communications: Where you have provided consent, to send you information about bestsuper promotions, new games, and special offers via email or push notification. You may withdraw this consent at any time.

bestsuper processes your personal data on the following lawful bases, consistent with the principles of the Personal Data Protection Act 2010 (Malaysia) and internationally recognised data protection frameworks:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform our contractual obligations to you under the Terms & Conditions — specifically, to maintain your account and process your transactions.
• Consent: Where we process your data for marketing communications or non-essential cookies, we do so on the basis of your explicit consent, which you may withdraw at any time without affecting your account status.
• Legitimate Interests: We process certain data (including gaming activity logs and technical data) on the basis of our legitimate interest in operating a fair, secure, and commercially viable platform — provided that this processing does not override your fundamental privacy rights.
• Legal Obligation: We process KYC data, transaction records, and certain identification information on the basis of our legal obligations under applicable AML and CFT legislation, and to respond to lawful regulatory or law enforcement requests.

bestsuper does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose your personal data only in the following specific circumstances:

• Payment Processors: We share financial data with licensed payment service providers — including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking institutions (Maybank, CIMB, Public Bank, RHB, Hong Leong), DuitNow, FPX, and cryptocurrency exchange networks — solely for the purpose of processing your transactions.
• Identity Verification Providers: We engage accredited third-party KYC and document verification services to assist in the confirmation of your identity and age. These providers process your KYC data under strict confidentiality obligations.
• Game Software Providers: Certain gaming activity data (such as session identifiers and bet records) may be shared with the third-party game studios whose titles are hosted on the Platform, for the purpose of game operation and dispute resolution.
• Fraud Prevention Databases: We may share data with industry fraud prevention databases to detect and prevent multi-accounting, bonus abuse, and money laundering.
• IT and Infrastructure Providers: We engage cloud hosting, data analytics, and cybersecurity vendors who process data on our behalf as Data Processors under written agreements that impose equivalent privacy protections to those set out in this Policy.
• Legal and Regulatory Authorities: We will disclose personal data to Malaysian regulatory bodies, law enforcement agencies, or courts where we are legally required or compelled to do so by a valid court order, regulatory direction, or applicable law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bestsuper's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. We will notify affected players of any such transfer in advance where legally permissible.

All third-party Data Processors engaged by bestsuper are required to implement appropriate technical and organisational security measures and are prohibited from using your personal data for any purpose other than those specified by bestsuper.

The bestsuper website uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to deliver and improve the Platform experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function correctly. They include session authentication tokens, load balancing cookies, and security cookies. These cannot be disabled without affecting core Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated and anonymised data about how players navigate the Platform — which pages are visited, how long sessions last, and which features are most used. This data helps us improve the Platform for Malaysian players.
• Functional Cookies: Allow the Platform to remember your preferences, such as your language setting, odds format, and display options. These cookies improve personalisation but are not strictly necessary.
• Marketing Cookies: Used, where you have consented, to deliver relevant promotions and to measure the effectiveness of our campaigns. These cookies are not placed without your prior consent.

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. For non-essential cookies, you may also adjust your preferences via the cookie preference centre accessible on the Platform.

bestsuper retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of 7 years following account closure, in accordance with AML record-keeping obligations.
• Financial and Transaction Records: Retained for a minimum of 7 years from the date of each transaction, consistent with financial record-keeping requirements under Malaysian law.
• KYC Documents: Retained for a minimum of 5 years following account closure, or longer where required by a specific legal or regulatory obligation.
• Gaming Activity Logs: Retained for 3 years from the date of each session or bet record, or longer where the data relates to an unresolved dispute or regulatory inquiry.
• Customer Support Communications: Retained for 2 years from the date of the final communication in a given interaction, or longer where the matter relates to a live dispute.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data is anonymised, it may be retained indefinitely for aggregate analytical purposes, as it no longer constitutes personal data.

bestsuper implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial account details and KYC documents;
• Role-based access controls that restrict internal access to personal data to authorised personnel only, on a strict need-to-know basis;
• Multi-factor authentication for staff accessing systems that contain personal data;
• Regular penetration testing, vulnerability assessments, and security audits conducted by independent cybersecurity firms;
• Real-time fraud detection and suspicious activity monitoring systems;
• Secure data centres with physical access controls, redundant infrastructure, and automated backup systems.

While we employ industry-standard security practices, no system of data transmission over the internet or electronic storage is entirely infallible. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bestsuper will notify affected players and, where required, the relevant Malaysian regulatory authorities, in accordance with applicable legal obligations and within the timeframes prescribed by law.

As a player whose personal data is processed by bestsuper, you hold the following rights under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles. To exercise any of these rights, please contact our Data Protection team at [email protected].

We will respond to all valid rights requests within 21 days of receipt of a sufficiently identified and specific request. Where a request is particularly complex or involves a large volume of data, we may extend this period by a further 30 days, with prior notification to you. We will not charge a fee for standard rights requests unless a request is manifestly unfounded or excessive.

The bestsuper Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. If you are under 21 years of age, you must not use the Platform or provide any personal data to us.

Where bestsuper discovers or reasonably suspects that an account has been registered by or on behalf of a person under the age of 21, we will immediately:

• Suspend and close the account;
• Delete or destroy any personal data associated with the account in accordance with our data deletion procedures;
• Return any real-money funds deposited, after deducting the value of any winnings derived from wagering activity;
• Where the circumstances warrant, refer the matter to the appropriate Malaysian authorities.

Parents and guardians who become aware that a person under their care has provided personal data to bestsuper are requested to contact us immediately at [email protected] so that we may take appropriate action.

The bestsuper Platform may display references to or integrate functionality from third-party service providers — including payment processors, game software studios, and infrastructure providers. These third parties operate under their own independent privacy policies, over which bestsuper has no control.

bestsuper is not responsible for the privacy practices, data handling procedures, or content of any third-party services. Players are encouraged to review the privacy policies of any third-party services they interact with in connection with their use of the bestsuper Platform.

bestsuper does not endorse and accepts no liability for the data practices of any third-party service provider beyond the obligations imposed on such providers through our Data Processing Agreements.

bestsuper reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of our services. The effective date of the current version of this Policy is stated at the top of this document.

Where we make a material change to this Policy — for example, a change in the categories of data we collect, the purposes for which we process data, or the third parties with whom we share data — we will notify registered players via email and/or an in-platform notification at least 14 days before the change takes effect.

Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. Where a revision requires your consent (for example, a new processing purpose not covered by your original consent), we will seek fresh consent before proceeding with the relevant processing activity.

We recommend that you review this Policy periodically to stay informed about how bestsuper protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bestsuper handles your personal data, please contact our Data Protection team through any of the following channels. We are committed to responding to all privacy-related enquiries promptly and in the language of your choice.

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP). bestsuper cooperates fully with all lawful regulatory enquiries from the JPDP and other competent authorities.