πŸ”’ Official SportPesa Document

SportPesa Malaysia Privacy Policy – Member Data Protection & Privacy

Your privacy is more than a legal obligation to us β€” it is a responsibility we take seriously. Find out exactly what data we collect, how it is used, and what your rights are as a SportPesa Malaysia member.

256-bit SSL Encrypted Data Never Sold to Third Parties Updated: 1 Jan 2026

SportPesa's Privacy Commitment

Data is collected only for stated purposes
Never sold to advertisers or third parties
You may request deletion of your data at any time
Personal Data Protection Act 2010 Compliance

SportPesa's Six Pillars of Privacy Protection

How we keep your personal data safe and protected at all times

256-bit SSL Encryption

All data transmitted between your device and SportPesa's servers is encrypted using 256-bit SSL technology – the same standard used by Malaysian banking institutions. No one can intercept or read your data in transit.

No Sale of Data to Third Parties

SportPesa has never and will never sell, rent, or share members' personal information with any advertising company or commercial third party. Your data is used solely for the purposes of operating the SportPesa platform.

Malaysia PDPA 2010 Compliance

SportPesa's privacy policy is designed and updated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all data processing principles prescribed under applicable Malaysian law.

Full Transparency in Data Use

We clearly inform you what data is collected, what it is used for, how long it is retained, and who may access it. There is no hidden data collection or use of data beyond what is stated in this policy.

Full Control in Your Hands

You have the right to access, correct, transfer, or request deletion of your personal data at any time. Simply contact the SportPesa team and we will process your request within the timeframe required by law.

Data Breach Notification

In the event of any security incident affecting member data, SportPesa will notify the affected members and the relevant authorities within the timeframe required by Malaysian law, without any unnecessary delay.

1Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how SportPesa Malaysia ("SportPesa", "we", "our platform") collects, uses, stores, protects, and shares your personal data when you use the sportpesa.onl website and all related services.

We are committed to protecting the privacy of every SportPesa member and platform user. This Policy has been drawn up in accordance with the requirements of Malaysia Personal Data Protection Act 2010 (PDPA) and leading international standards in data protection.

This policy applies to all information collected through the SportPesa platform, including during account registration, use of Sports Betting and Live Casino services, financial transactions, and interactions with our customer support team.

Please note: By registering for or using the SportPesa platform, you agree to the collection and use of your personal data as described in this Privacy Policy. Please read it carefully before proceeding with registration.

2Types of Personal Data We Collect

SportPesa only collects data that is strictly necessary to provide a safe, seamless, and legally compliant service. The following are the categories of data we collect:

Data Category Example Primary Purpose
Identity DataFull name, MyKad/Passport number, date of birthAge & identity verification
Contact DataMalaysian phone number, email address, residential addressCommunication & account verification
Financial DataPayment method (TNG/GrabPay/DuitNow), transaction historyDeposit & withdrawal processing
Technical DataIP address, device type, web browser, operating systemSecurity & fraud detection
Usage DataBetting history, games played, session durationExperience personalisation & issue detection
Communication DataCustomer support correspondence and complaintsIssue resolution & service improvement

We no collecting sensitive data such as medical information, religious beliefs, or political views. All financial data (e.g. card numbers) is processed through PCI-DSS certified payment gateways and is not stored directly on SportPesa's servers.

3How and Why We Use Your Personal Data

SportPesa uses your personal data for the following legitimate and transparent purposes:

  1. Account management: Creating, verifying, and securely maintaining your SportPesa account
  2. Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling withdrawal requests to your account
  3. Legal compliance: Meeting Anti-Money Laundering (AML) requirements, customer identity verification (KYC), and all applicable regulatory obligations
  4. Fraud prevention: Detecting, investigating, and preventing fraudulent activity, multi-account usage, and platform abuse
  5. Customer support: Responding to enquiries, resolving complaints, and assisting members with technical or account issues
  6. Personalise your experience: Delivering personalised game recommendations and promotions based on your preferences and usage history
  7. Service communications: Sending important notifications relating to your account, security, and changes to the terms of service
  8. Platform improvements: Analysing usage patterns to improve the quality and security of the SportPesa platform

You may opt out: For non-mandatory marketing communications (such as promotions and special offers), you may opt out at any time via your profile settings or by contacting the SportPesa support team.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), SportPesa processes your personal data on the following valid legal bases:

  • Consent: When you register an account and agree to our Terms & Privacy Policy, you give your consent to the data processing necessary for account operations
  • Contract fulfilment: Processing is required to provide the services you have requested – including account management, bet processing, and payment settlement
  • Legal obligation: Certain processing is required to comply with Malaysian law, including the PDPA 2010, the Anti-Money Laundering Act 2001, and other applicable regulations
  • Legitimate interest: Fraud prevention, system security, and service improvements that do not affect members' fundamental rights

5Data Sharing with Third Parties

SportPesa does not sell, rent, or trade member personal data to any third party for commercial purposes. Data may only be shared in the following limited and controlled circumstances:

  • Payment processors: Certified payment gateways (such as processors supporting Touch 'n Go, GrabPay, DuitNow) receive only the minimum transaction data required to process payments – all are PCI-DSS certified
  • Regulatory authority: When required by Malaysian law, a court order, or a directive from a legitimate authority
  • KYC service provider: For identity verification as required under Malaysia's AML laws – data is transmitted in encrypted form
  • Infrastructure service provider: The cloud hosting companies that store our data are bound by strict data processing agreements and are prohibited from using the data for their own purposes

Our Commitment: All third parties handling SportPesa data are bound by strict confidentiality and data protection agreements. They are not permitted to use SportPesa member data for any purpose other than those specified by us.

6Data Retention Period

SportPesa retains personal data only for as long as necessary to fulfil the original purpose of collection, or as required under Malaysian law:

  • Active account data: Retained for the duration your account is active and for 5 years after account closure (AML compliance requirement)
  • Financial transaction records: Retained for 7 years in accordance with Malaysian tax and financial regulatory requirements
  • Security & access logs: Retained for 12 months for security incident investigation purposes
  • Customer support communication records: Retained for 3 years for reference and dispute resolution
  • Cookie data: Depending on the type of cookie – from the current session up to a maximum of 13 months (see Section 8)

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any individual. The deletion process uses methods that ensure data cannot be recovered.

7SportPesa Data Security Measures

SportPesa continually invests in security infrastructure to ensure member personal data remains protected at all times. Key security measures we have implemented include:

  • 256-bit SSL Encryption: All data in transit is protected with banking-grade encryption
  • Static data encryption: Sensitive data stored in databases is encrypted using AES-256
  • Two-factor authentication (2FA): An additional security layer for logins and withdrawals
  • 24/7 Monitoring: A threat detection system operates around the clock to identify unusual activity
  • Regular security testing: Penetration testing and security audits are conducted regularly by independent parties
  • Internal access controls: SportPesa staff may only access data necessary for their specific role – least privilege principle
  • Staff security training: All staff who handle member data undergo regular data security training

Note: While SportPesa takes all reasonable steps to protect your data, no digital system can be guaranteed 100% secure. You also play a role in your account's security – do not share your password and ensure your device is always kept up to date.

8Cookies & Tracking Technologies

SportPesa uses cookies and similar tracking technologies to enhance user experience and platform security. There are four types of cookies we use:

You can manage your cookie preferences through your web browser. Please note that disabling certain cookies may affect the functionality of some areas of the SportPesa platform. For more information on managing cookies in your browser, please refer to your browser's documentation.

Your Data Protection Rights as a SportPesa Member

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data

πŸ‘οΈ
Right of Access

Request a copy of all your personal data held by SportPesa. We will provide a full, human-readable report within 14 business days.

✏️
Right to Correction

Request the correction of inaccurate or incomplete data in your account. We will verify and update the records within 7 business days.

πŸ—‘οΈ
Right to Erasure

Request the deletion of your personal data when it is no longer needed, unless a legal obligation prevents such deletion.

🚫
Right to Object to Processing

Object to the processing of your data for direct marketing purposes, or in situations where processing is based on legitimate interest that does not override your rights.

πŸ“¦
Right to Data Portability

Receive a copy of your data in a structured, machine-readable format (JSON/CSV) for transfer to another service of your choice.

⏸️
Right to Restrict Processing

Request SportPesa to restrict how we process your data while your dispute or complaint is being investigated and resolved.

9How to Exercise Your Rights

To exercise any of the rights listed above, you may contact the SportPesa data protection team by email at privacy@sportpesa.onl or via our 24/7 live chat. Please include the following information in your request:

  • Your full name and SportPesa account email address
  • The type of right you wish to exercise (access, correction, deletion, etc.)
  • Specific details about the data or your request

SportPesa will respond to all data rights requests within 14 business days. For more complex cases, this period may be extended to 30 days, and you will be notified accordingly. No fees are charged for reasonable data rights requests.

10Minor Protection

The SportPesa platform is intended for users aged 18 years and above only. We do not knowingly collect personal data from minors. Should we become aware that data from a minor has been collected, we will promptly delete that data and close the account in question.

Parents or guardians who suspect their child has registered a SportPesa account are urged to contact our support team immediately. We will resolve the matter promptly and return any relevant funds.

11Amendments to This Privacy Policy

SportPesa reserves the right to update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. When material changes are made:

  • A notification will be sent to your registered email address at least 14 days before the changes take effect
  • A prominent notice will be displayed on the sportpesa.onl homepage
  • The "Updated" date at the top of this document will be revised

Continued use of the SportPesa platform after the effective date of any changes constitutes acceptance of the amended policy. We encourage you to review this Privacy Policy periodically.

12How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how SportPesa handles your personal data, please contact us via:

  • Data protection email: privacy@sportpesa.onl
  • General support email: support@sportpesa.onl
  • Live Chat: Available 24/7 on the SportPesa website in Bahasa Malaysia
  • Response time: Within 48 hours for privacy-related emails; within minutes for live chat

This Privacy Policy is written in Bahasa Malaysia. In the event of any ambiguity or conflict in interpretation, the Bahasa Malaysia version shall be final and binding for all SportPesa Malaysia members.

FAQ – SportPesa Privacy & Data

Answers to the most frequently asked questions about data privacy at SportPesa

SportPesa transmits only the minimum required data to payment providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX) to process your transactions. This consists of standard technical information such as transaction amounts and payment references – not your betting history or casino account details. All payment providers we work with comply with PCI-DSS security standards and Malaysia's PDPA.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA 2010. However, limitations apply β€” SportPesa is required to retain certain financial records for 7 years under Malaysian taxation and Anti-Money Laundering laws, and account records for 5 years after account closure for compliance purposes. Data that can be deleted immediately includes marketing preferences, browsing history, and optional profile information. Contact privacy@sportpesa.onl with a written request and we will advise you precisely which data can and cannot be deleted.

When an account is closed, your personal data is not deleted immediately. SportPesa retains data in accordance with legally mandated retention periods β€” financial records for 7 years and account records for 5 years after closure. This is a mandatory requirement under Malaysian law relating to AML and taxation. Once the retention period expires, all data will be securely deleted or anonymised. During the retention period, your data is not used for any commercial purpose β€” it is kept solely for compliance requirements.

No. SportPesa does not share member data with advertising networks or social media platforms for targeted advertising outside our platform. We may show you relevant promotions within the SportPesa platform based on your usage history (for example, football-related offers if you regularly bet on the Malaysia Super League), but this is done entirely within the SportPesa ecosystem. You can opt out of these marketing communications through your account profile settings.

πŸ”’ Your Data Is Safe with SportPesa

Your privacy is safeguarded with 256-bit SSL, PDPA 2010 compliance, and our commitment to never selling your data to anyone. Join 500,000+ members who trust SportPesa Malaysia today.

For users aged 18 and above only. Bet responsibly.

Bahasa Melayu