Romabet is committed to handling your personal data with care, transparency, and respect. This Privacy Policy explains exactly what we collect, why we collect it, how we use and protect it, and the rights you have over your information as a member of our platform.
Last updated: January 2026This Privacy Policy ("Policy") governs the collection, processing, storage, use, and protection of personal data by Romabet ("we", "us", "our"), the operator of the online sports betting and live casino platform accessible at romabet.casa ("the Platform" or "the Site").
Romabet recognises that your personal data is valuable and that you have a right to know precisely how it is handled. This Policy is written to be clear and readable — not deliberately obscure — so that every member, whether based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or anywhere else in Malaysia, understands exactly what they are consenting to when they use our platform.
By registering a Romabet Account, depositing funds, placing bets, accessing the live casino, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to this Policy, you must not use the Platform.
🔒 Privacy Commitment: Romabet does not sell your personal data to third parties for marketing purposes. We process your data only to the extent necessary to deliver our services, meet legal obligations, and keep your account secure.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Romabet, the operator of romabet.casa, is the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, Romabet is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently in accordance with applicable data protection principles.
Romabet processes Member data under applicable data protection legislation governing the handling of personal information by online service operators. Where we engage third-party Data Processors — for example, payment gateway providers (including Touch 'n Go eWallet operator services, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX networks, and cryptocurrency processing services) — we ensure those processors are bound by appropriate contractual data protection obligations.
Romabet collects the following categories of Personal Data that you provide voluntarily when registering, verifying, transacting, or contacting us:
When you access the Platform, our systems automatically collect certain technical and behavioural data:
In certain circumstances, Romabet may receive Personal Data about you from third parties, including KYC and identity verification service providers, fraud detection and anti-money laundering screening services, and payment processing partners. Such data is used only for the purposes of verifying your identity, assessing fraud risk, and fulfilling regulatory obligations.
Romabet processes Personal Data under the following lawful bases, each of which applies to specific processing activities:
| Legal Basis | Processing Activity |
|---|---|
| Contractual Necessity | Account registration, payment processing, bet settlement, withdrawal processing, and customer support — all necessary to deliver the services you have requested. |
| Legal Obligation | KYC verification, AML screening, regulatory reporting, fraud investigation, and age verification — required under applicable laws and licensing conditions. |
| Legitimate Interests | Platform security monitoring, fraud detection, abuse prevention, service analytics, responsible gambling monitoring, and product improvement — where our interests do not override your rights. |
| Consent | Marketing communications, optional cookies, and personalised promotional offers — where you have given explicit, withdrawable consent. |
Romabet uses the Personal Data we collect for the following specific purposes:
Romabet will not use your Personal Data for any purpose that is incompatible with the purposes for which it was originally collected without providing you with prior notice and, where required, obtaining your consent.
Romabet does not sell, rent, or trade your Personal Data to third parties for their independent commercial purposes. We may, however, share your Personal Data with the following categories of recipients where necessary and lawful:
No Sale of Data: At no point does Romabet sell, lease, or otherwise transfer your Personal Data to third parties for advertising, profiling, or commercial data aggregation purposes unrelated to the operation of the Platform.
Cookies are small text files placed on your device by a website to remember information about your visit. They are widely used to make websites work effectively, improve user experience, and provide analytical data to website operators. Romabet uses cookies and similar tracking technologies including web beacons and local storage objects.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, account authentication, payment security tokens, and anti-fraud measures. Cannot be disabled without breaking core functionality. | Not required |
| Functional | Remembering your language preferences, display settings, and recent bet selections to improve your experience on return visits. | Not required |
| Analytics | Aggregated and anonymised data on Platform usage patterns, page performance, and feature adoption — used to improve the Platform for all members. | Consent-based |
| Marketing | Tracking interactions with promotional content for the purpose of delivering relevant offers to opted-in Members. Never used to build profiles for third-party advertising. | Consent-based |
You can manage and withdraw consent for non-essential cookies at any time through your browser settings or the cookie preference controls available on the Platform. Note that disabling strictly necessary cookies will affect the functionality of your Account.
Romabet retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law, whichever is the longer period. The following retention framework applies:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Where data has been anonymised, it may be retained indefinitely for analytical purposes.
Romabet implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes, but is not limited to:
Your Responsibility: While we take extensive measures to protect your data on our end, you are responsible for maintaining the security of your Account credentials. Never share your password with anyone. Romabet staff will never ask for your password via chat, email, or any other channel.
As a Member of the Romabet platform, you have the following rights in relation to your Personal Data. You may exercise any of these rights at any time by contacting our support team:
Request a copy of the Personal Data Romabet holds about you, along with information on how it is being processed.
Request correction of any inaccurate or incomplete Personal Data we hold about you. Account details can also be updated directly in your settings.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
Request that we limit processing of your data to storage only, pending resolution of an accuracy dispute or while a legitimate interests objection is assessed.
Request your Personal Data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
Object to processing carried out on the basis of legitimate interests, including direct marketing. Marketing opt-outs take effect within 48 hours of request.
Withdraw any consent you have given — including marketing consent or analytics cookie consent — at any time without penalty. Withdrawal does not affect the lawfulness of prior processing.
If you believe your data rights have been infringed, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
To exercise any of the above rights, please contact our support team through the 24/7 live chat on the Platform or via email at [email protected]. We will acknowledge your request within five (5) business days and aim to respond substantively within thirty (30) calendar days. Where requests are complex or numerous, we may extend this period by a further thirty (30) days with prior notice.
Romabet's platform infrastructure and some of its third-party Data Processors operate in jurisdictions outside Malaysia. Where your Personal Data is transferred internationally, Romabet ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable Malaysian data protection principles.
Such safeguards may include contractual clauses in agreements with Data Processors that impose equivalent data protection obligations, ensuring transfers are limited to jurisdictions with adequate data protection frameworks, or maintaining technical and organisational security measures appropriate to the risk profile of the transfer.
If you have questions about specific international transfer arrangements or wish to obtain information about the safeguards in place for your data, you may request this information through our support team.
Romabet's services are strictly restricted to persons aged 21 years and above. We do not knowingly collect, process, or store Personal Data from any person under the age of 21. Age verification is a mandatory component of our KYC process, and accounts where the Member is found to be under 21 are immediately suspended and associated data is processed only to the extent necessary to close the account and return any deposited funds.
If you are a parent or guardian and you believe a minor has provided Personal Data to Romabet without your knowledge, please contact us immediately at [email protected]. We will investigate and, where confirmed, promptly delete the relevant data and close the account.
21+ Only: Our platform is exclusively for adults aged 21 and above. By using Romabet, you confirm that you meet this age requirement. This is not merely a terms clause — it is enforced through identity verification and is fundamental to our responsible gambling commitment.
The Romabet platform integrates with third-party services including payment processors, game content providers, and identity verification services. While we ensure that all Data Processors we engage with are bound by appropriate contractual data protection obligations, each third-party service provider operates under its own privacy policy and is independently responsible for its data handling practices.
Payment processing through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing services involves the transmission of financial and identity data to those respective providers. Romabet is not responsible for the privacy practices of these providers once data has been transmitted to them for the purposes of processing your transaction. We encourage Members to review the privacy policies of their payment service providers.
This Privacy Policy applies solely to data processed by Romabet directly. It does not extend to any third-party websites or services that may be referenced in communications from us or accessible via third-party integrations.
Romabet reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the operational requirements of the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Where changes are material — meaning they significantly affect how we process your Personal Data or your rights in relation to that data — Romabet will provide at least fourteen (14) days' advance notice by email to your registered address and/or by a prominent banner notification on the Platform, prior to the updated Policy taking effect.
Continued use of the Platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.
If you have any questions, requests, or concerns regarding this Privacy Policy or the way Romabet processes your Personal Data, please contact our dedicated privacy team through the following channels:
Romabet will acknowledge all privacy-related communications within five (5) business days. If you are not satisfied with how we have handled your data rights request or privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. We encourage Members to contact us directly first, as we are committed to resolving concerns without requiring escalation.
For responsible gambling concerns — including self-exclusion requests, deposit limit reductions, or gambling-related support — please visit our Responsible Gambling page or contact our 24/7 support team immediately. These requests are treated with the highest priority.
A summary of the core data protection principles and security measures that underpin every aspect of how Romabet handles your personal information.
Romabet does not sell, rent, or trade your Personal Data to third parties for advertising or commercial data profiling purposes. Your data is used only to operate your account and comply with our legal obligations.
All data transmitted between your device and the Romabet platform is protected by industry-standard TLS encryption. Passwords are hashed and never stored in plain text — not even our own staff can see them.
KYC verification protects you and the Platform. By confirming that every withdrawal recipient matches the registered account holder, we prevent unauthorised access to your funds and reduce fraud risk.
Access, correct, restrict, or delete your data — your rights under applicable data protection law are fully honoured by Romabet. Exercise any right by contacting our support team at any time.
Data is kept only as long as legally required — typically five years for transaction records — and then securely deleted. We do not accumulate data indefinitely or for purposes beyond what this Policy describes.
Marketing communications are sent only to Members who have opted in, and you can withdraw consent at any time. We never use deceptive framing or pre-ticked consent boxes in any of our communications.
Your data is in safe hands at Romabet. Visit the homepage to explore our full range of sports betting markets, live casino games, and MYR payment options built for Malaysian players.
Questions about your data? Email [email protected] or use 24/7 Live Chat on the platform.