rollbit Privacy Policy

Last updated: 1 January 2026

1. Introduction

rollbit ("rollbit", "we", "us" or "our") operates the website at https://rollbit.cam and provides English-language casino entertainment information, sports betting guidance and related financial-transaction content primarily for adult users in Malaysia. rollbit is committed to protecting the privacy and personal data of all individuals who interact with the Platform.

This Privacy Policy ("Policy") describes the categories of personal data rollbit collects, the purposes for which it is processed, the conditions under which it may be shared and the rights available to users in relation to their data. It should be read alongside the rollbit Terms and Conditions, which govern the broader terms of Platform use.

By accessing, registering on or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent that consent is required as a legal basis for processing.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, transmission, alteration and deletion.
• "Data Subject" means the natural person to whom personal data relates — in the context of this Policy, a rollbit User or Platform visitor.
• "Controller" means rollbit as the entity that determines the purposes and means of processing personal data.
• "Third-Party Processor" means any organisation that processes personal data on rollbit's behalf under a data processing agreement.
• "KYC" means Know Your Customer — identity and payment-ownership verification procedures required for account management.
• "Cookies" means small data files placed on a user's device by a web browser to facilitate session management and analytics.

3. Data We Collect

rollbit collects personal data in the following categories depending on how you interact with the Platform:

3.1 Registration and Account Data

When you create an Account, we collect your full legal name, date of birth, residential address, email address, phone number and chosen username. This information is required to establish and maintain your Account.

3.2 Identity Verification Data

To comply with KYC obligations, rollbit may collect copies of government-issued identification documents (such as MyKad or passport), proof of residential address and evidence of ownership of the payment method used. These documents are processed by rollbit and, where applicable, by authorised third-party verification providers.

3.3 Financial and Transaction Data

rollbit records all deposit and withdrawal transactions, including the payment method used (for example, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong or USDT TRC20), transaction amounts in MYR, processing timestamps and transaction reference numbers.

3.4 Usage and Behavioural Data

We automatically collect information about how you use the Platform, including pages visited, game sessions accessed, betting activity, session duration, device type, browser version, operating system and IP address.

3.5 Communications Data

If you contact rollbit support at [email protected] or through any in-platform chat facility, we retain records of those communications, including the content of messages, timestamps and any attachments provided.

3.6 Technical and Device Data

rollbit collects device identifiers, browser fingerprints, cookie data and other technical metadata to maintain platform security, detect fraud and ensure consistent service delivery.

4. How We Use Your Data

Purpose	Data Categories Used
Account creation and management	Registration data, identity documents
Identity and payment verification (KYC)	Identity documents, financial data
Processing deposits and withdrawals	Financial data, transaction records
Fraud prevention and security monitoring	Technical data, usage data, financial data
Compliance with legal and regulatory obligations	All categories as required by law
Customer support and dispute resolution	Communications data, account data
Platform performance and improvement	Usage and behavioural data, technical data
Responsible gambling monitoring	Usage data, transaction data, account data
Sending service communications and account alerts	Registration data, communications data

5. Legal Basis for Processing

5.1 Contractual necessity: Processing is necessary to perform the contract between rollbit and the User — for example, to operate the Account, process payments and provide access to platform services.

5.2 Legal obligation: Processing is required to comply with applicable anti-money laundering, counter-terrorist financing, identity verification and data retention laws.

5.3 Legitimate interests: rollbit processes certain data to pursue legitimate interests such as fraud prevention, platform security, responsible gambling monitoring and internal analytics, where those interests are not overridden by the rights and interests of Users.

5.4 Consent: Where rollbit relies on consent as a legal basis — for example, for non-essential cookies or optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect Account functionality where other legal bases apply.

6. Data Sharing and Disclosure

6.1 rollbit does not sell, rent or trade personal data to third parties for their own marketing purposes.

6.2 rollbit may share personal data with the following categories of recipients where necessary:

• Payment processors and gateway providers — to facilitate MYR deposit and withdrawal transactions through methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay and supported Malaysian banks.
• Identity verification providers — to complete KYC checks on account holders in accordance with applicable compliance requirements.
• Technology and hosting providers — to maintain platform infrastructure, data storage and security systems.
• Regulatory and law enforcement authorities — where rollbit is legally required to disclose data in response to a lawful request or court order.
• Professional advisers — including legal counsel, auditors and compliance consultants, subject to confidentiality obligations.

6.3 All third-party processors engaged by rollbit are required to process personal data only on rollbit's documented instructions and to maintain appropriate technical and organisational security measures.

7. Data Retention

7.1 rollbit retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice, this means:

• Account and identity data: retained for the duration of the Account and for a minimum of five years following Account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• Transaction records: retained for a minimum of five years from the date of each transaction.
• Communications data: retained for up to three years or as required for dispute resolution purposes.
• Technical and usage data: generally retained for up to twelve months in identifiable form; anonymised usage statistics may be retained indefinitely.

7.2 Where a User requests deletion of their data, rollbit will delete or anonymise personal data to the extent not precluded by legal retention obligations. Confirmation of the action taken will be provided within a reasonable period.

8. Data Security

8.1 rollbit implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include encrypted data transmission, access controls, regular security assessments and staff data-handling awareness.

8.2 Users are responsible for maintaining the confidentiality of their own Account credentials. rollbit recommends using a unique, strong password and advises against sharing login details with any other person. rollbit will never contact you by any channel to request your password or one-time security code.

8.3 In the event of a personal data breach that is likely to result in a risk to your rights, rollbit will take immediate steps to contain the breach and notify affected users in accordance with applicable legal requirements.

9. Cookies and Similar Technologies

9.1 rollbit uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device by your browser that enable the Platform to recognise your session and preferences.

9.2 The following categories of cookies may be used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Collect anonymised information about how users navigate the Platform, helping rollbit identify pages that may require improvement.
• Functionality cookies: Remember your preferences such as language settings and session timeouts to personalise your experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

9.3 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access core Account functions, though some performance or personalisation features may be reduced.

10. User Rights

Subject to applicable law and operational limitations, Users may exercise the following rights in relation to their personal data held by rollbit:

• Right of access: Request a copy of the personal data rollbit holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations.
• Right to restriction: Request that rollbit restricts the processing of your personal data in certain circumstances, for example while an accuracy dispute is resolved.
• Right to object: Object to processing of your personal data carried out on the basis of legitimate interests, where your circumstances justify it.
• Right to data portability: Request that rollbit provides your personal data in a structured, commonly used and machine-readable format, where technically feasible.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time with effect from the date of withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] from the email address registered to your Account. rollbit will acknowledge your request within five business days and provide a substantive response within thirty days, subject to any extensions permitted by law.

11. Minors and Age Restriction

11.1 rollbit does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for adults aged 21 and above.

11.2 If rollbit becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted promptly and the associated Account will be closed. Adults who share devices with minors should apply appropriate parental control software to prevent access to the Platform.

12. International Data Transfers

12.1 rollbit operates infrastructure that may involve transfer of personal data to countries outside Malaysia. Where such transfers occur, rollbit takes steps to ensure that appropriate safeguards are in place to protect the data in a manner consistent with this Policy and applicable data protection requirements.

12.2 Safeguards used for international transfers may include contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable to rollbit.

13. Amendments to This Policy

13.1 rollbit may update this Privacy Policy from time to time to reflect changes in data practices, legal requirements or platform functionality. The "Last updated" date at the top of this document indicates when the most recent revision was made.

13.2 Where an amendment materially affects how rollbit processes your personal data, registered Users will be notified by email or through a prominent notice on the Platform prior to the amendment taking effect. Continued use of the Platform after notification constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or rollbit's data practices, please contact us using the details below. All correspondence should be in English and submitted from the email address registered to your Account where your enquiry relates to Account data.

Email: [email protected]

Support hours: 24 hours a day, 7 days a week

rollbit aims to acknowledge all privacy-related queries within five business days and to provide a substantive response within thirty days. For complex requests, we may notify you of an extension to this timeline in accordance with applicable law.