2waybet Privacy Policy

1. Introduction

2waybet ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access or interact with https://2waybet.cam ("the Site"). This Privacy Policy describes our practices regarding the collection, use, disclosure and safeguarding of personal information provided by you ("User", "you") when using any feature of the 2waybet platform.

This document has been prepared to provide transparency to our Malaysian user base and all other eligible international users. We aim to comply with applicable data protection principles, including those set out in Malaysia's Personal Data Protection Act 2010 (PDPA) to the extent they apply to our operations, as well as international data protection standards relevant to our licensing jurisdiction.

By registering an account on 2waybet, making a deposit, placing a wager or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to these practices, please discontinue use of the platform.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a specific living individual, including name, identification number, contact details, financial data and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, retrieval, correction, erasure or destruction.
• "Data Controller" means the entity responsible for determining the purposes and means of Processing. For the purposes of this Policy, 2waybet is the Data Controller for Personal Data submitted through the platform.
• "Data Processor" means any third party that processes Personal Data on behalf of 2waybet under a contractual arrangement, including payment processors, KYC service providers and analytics platforms.
• "KYC" means Know Your Customer — the mandatory identity verification process conducted before withdrawal approval or as required by compliance protocols.
• "PDPA" means Malaysia's Personal Data Protection Act 2010, which governs the processing of personal data in commercial transactions.
• "Cookies" means small text files stored on your device by your web browser when you visit the platform, used to retain session information, preferences and analytical data.

3. Data We Collect

3.1 Registration and Account Data

When you create a 2waybet account, we collect the information you provide during the registration process. This typically includes:

• Full legal name as it appears on your identification document;
• Date of birth (used to verify the 21+ age requirement);
• Residential address, including city and postcode;
• Email address and mobile phone number;
• Chosen username and securely hashed password;
• Preferred currency (MYR for Malaysian users) and language settings.

3.2 KYC Verification Documents

Before processing withdrawals or as required by our compliance team, we may request documentary evidence including your MyKad (Malaysian national identity card), passport, proof of residential address such as a utility bill or bank statement issued within the past three months, and, where applicable, proof of ownership of your payment method.

3.3 Financial and Transaction Data

We record all deposit and withdrawal transactions associated with your account, including payment method type (such as Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong or approved cryptocurrency channels), transaction reference numbers, amounts in MYR, timestamps and processing status. We do not store full bank account numbers, card numbers or e-wallet PINs on our servers.

3.4 Betting and Gaming Activity

We maintain records of all bets placed, markets accessed, odds accepted, game sessions participated in and outcomes. This data is used for account integrity checks, responsible gambling monitoring, dispute resolution and regulatory reporting.

3.5 Technical and Device Data

When you access 2waybet, our systems automatically collect certain technical data including IP address, browser type and version, device type and operating system, referral URL, session duration, pages visited and click patterns. This data supports platform security, fraud prevention and performance optimisation.

3.6 Communications Data

When you contact our support team at [email protected] or through any in-platform messaging feature, we retain the content of that communication, your contact details and the timestamp for the purpose of support fulfilment, dispute investigation and quality assurance.

4. Data Processing

2waybet processes your personal data for the following specific purposes:

5. Legal Basis for Processing

2waybet processes personal data under the following legal bases, each of which is applied consistently with internationally recognised data protection frameworks:

5.1 Contractual Necessity

Processing is necessary for the performance of the contract between you and 2waybet — specifically, the operation of your account, processing of deposits and withdrawals, and provision of access to sports betting markets and casino entertainment.

5.2 Legal Obligation

We are required to verify user identities, maintain transaction records, enforce the 21+ age restriction and report suspicious activity as part of our obligations under applicable anti-money laundering and responsible gambling frameworks within our licensing jurisdiction.

5.3 Legitimate Interest

Certain processing activities — including fraud detection, platform security monitoring, analytics and service improvement — are conducted on the basis that they serve our legitimate business interests without overriding your fundamental privacy rights.

5.4 Consent

Where we send promotional communications, use non-essential cookies or process data for purposes not covered by the bases above, we rely on your explicit consent. You may withdraw consent at any time by contacting [email protected].

6. Data Sharing and Disclosure

6.1 Service Providers and Data Processors

2waybet works with selected third-party service providers who process personal data on our behalf under contractual data-processing agreements. These include payment gateway operators supporting Touch 'n Go eWallet, DuitNow, FPX and bank transfer channels; KYC and identity verification providers; fraud prevention and AML screening tools; and platform analytics providers. These parties are permitted to use personal data solely for the purposes of providing services to 2waybet.

6.2 Regulatory and Legal Disclosure

We may disclose personal data to regulatory authorities, law enforcement agencies or our licensing body where we are legally obligated to do so, or where we believe in good faith that such disclosure is necessary to prevent fraud, protect the rights of users or comply with a judicial order.

6.3 No Sale of Personal Data

2waybet does not sell, rent or trade personal data to third parties for their own commercial or marketing purposes under any circumstances.

7. Cookies and Tracking Technologies

7.1 Types of Cookies Used

2waybet uses the following categories of cookies on the platform:

• Essential cookies: Required for core platform functionality including session management, login persistence and security token validation. These cannot be disabled without disrupting platform access.
• Functional cookies: Retain your preferences such as language settings, preferred sports markets and display options across sessions.
• Analytical cookies: Collect aggregated, anonymised data about how users navigate the platform to identify usability improvements. No personally identifiable information is included in analytical data reports.
• Security and fraud-prevention cookies: Detect unusual behaviour patterns, multiple account attempts and other signals associated with fraudulent access.

7.2 Cookie Management

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential cookies will prevent you from logging in or using core 2waybet features. Browser settings for cookie management vary by browser; consult your browser's help documentation for specific instructions.

8. Data Retention

2waybet retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including compliance with legal and regulatory retention obligations.

• Active account data: Retained for the duration of your account relationship with 2waybet.
• Transaction and KYC records: Retained for a minimum of five years following account closure or the date of the last transaction, in accordance with anti-money laundering regulatory requirements.
• Support communications: Retained for up to three years from the date of the interaction.
• Technical and device logs: Typically retained for up to 12 months for fraud analysis and security investigation purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data management procedures.

9. International Data Transfers

2waybet may transfer personal data to servers or service providers located outside Malaysia, including in the jurisdiction where our operating licence is held. Where such transfers occur, we take reasonable steps to ensure that appropriate data protection safeguards are in place, including contractual data processing agreements with service providers that require data to be handled in accordance with applicable privacy standards.

By using 2waybet, Malaysian users acknowledge and consent to the transfer of their personal data to jurisdictions outside Malaysia that may have different data protection laws than those applicable in Malaysia.

10. User Rights

Subject to applicable law and our compliance obligations, you have the following rights in respect of your personal data held by 2waybet:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal data. Where you are able to update information directly through your account settings, you are encouraged to do so.
• Right to Erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit our processing of your data in certain defined circumstances.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request". We aim to respond within 30 days, though complex requests may require additional time. We may need to verify your identity before processing any request.

11. Children's Privacy and Age Policy

2waybet is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been created by or for a person under 21, that account will be immediately suspended, and all relevant personal data will be deleted in accordance with our data management procedures.

12. Data Security

2waybet implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and 2waybet servers;
• Secure, one-way hashing of account passwords using recognised cryptographic standards;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Routine security audits and monitoring of platform infrastructure;
• Documented incident response procedures for potential data breaches.

Notwithstanding these measures, no transmission over the internet or electronic storage system is completely secure. Users are also responsible for maintaining the security of their own account credentials and should never share their password or one-time verification code with any other person.

13. Third-Party Services and Links

The 2waybet platform may reference or display information about third-party payment services such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow and FPX. When you complete a transaction through any of these channels, you are subject to the privacy policy of the respective payment provider in addition to this Policy. 2waybet is not responsible for the data practices of third-party payment processors once a transaction is directed to their systems.

2waybet does not embed third-party social media widgets, advertising networks or external tracking pixels on pages where sensitive account or financial information is displayed.

14. Policy Amendments

2waybet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements or platform features. The effective date at the top of this document will be updated whenever a material change is made.

Where changes are significant, we will notify registered users via the email address on file or via a prominent notice on the platform. Continued use of 2waybet following the publication of an amended Policy constitutes acceptance of the updated terms. If you do not agree with any amendment, you should close your account and cease using the platform.

15. Contact Us

For all privacy-related enquiries, data rights requests, concerns regarding data handling or requests to withdraw consent, please contact the 2waybet data team in writing. All formal privacy correspondence should be submitted in English and clearly marked with the relevant subject matter.

Email: [email protected]
(Plain text — this is not a clickable link. Please copy and paste this address into your email client.)

We aim to acknowledge all data rights requests within five business days and to resolve them within 30 days, subject to complexity and the need for identity verification prior to disclosure or deletion of data.