Semibola Privacy Policy

01 Introduction

Semibola ("we", "us", "our") is committed to safeguarding the privacy of all individuals who access and use the Semibola online gaming platform, accessible at semibola.cam and any associated subdomains or mobile-optimised interfaces (collectively, the "Platform").

This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, share, and protect personal data in connection with the Platform. It applies to all registered users ("Players"), visitors who browse the Platform without registering, and individuals who interact with our customer support channels.

By accessing the Platform or creating a Semibola account, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in the context of this Policy, typically the registered Player or Platform visitor.
• "Data Controller" means Semibola, as the entity that determines the purposes and means of processing Personal Data.
• "Third Party" means any natural or legal person other than Semibola and the Data Subject.
• "KYC" means Know Your Customer — the identity and age verification process required of Players before withdrawals are processed.
• "Cookies" means small text files placed on your device by the Platform for purposes including session management, analytics, and personalisation.
• "MYR" means Malaysian Ringgit — the native currency of the Semibola Platform.

03 Personal Data We Collect

Semibola collects only the personal data necessary to provide, secure, and improve the Platform and its associated services. The categories of personal data we may collect are set out in the table below:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data (other than voluntary self-disclosure for responsible gaming purposes), or biometric data beyond what is strictly required for KYC identity verification.

04 How We Collect Personal Data

Semibola collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional communication.
• Automatically through the Platform — via cookies, web beacons, server logs, and similar tracking technologies as you browse and use the Platform. This includes IP address, device identifiers, session data, and usage behaviour.
• From payment processors and financial institutions — when you initiate transactions via supported Malaysian payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect. We receive confirmation of transaction status and associated reference data.
• From KYC verification service providers — where we engage third-party identity verification partners to assist in validating the authenticity of identity documents submitted during the KYC process.
• From fraud prevention and security partners — including third-party risk scoring services used to detect and prevent fraudulent activity, money laundering, and account compromise.

05 Purposes of Processing & Legal Basis

We process your personal data only where we have a lawful basis to do so. The table below sets out the purposes for which we process personal data and the corresponding legal basis for each:

06 Data Sharing with Third Parties

Semibola does not sell, rent, or trade your personal data. We share personal data with third parties only in the circumstances described below, and only to the extent strictly necessary for the identified purpose:

• Payment processors and financial institutions: When you deposit or withdraw funds using a Malaysian payment method — including Touch 'n Go eWallet, DuitNow, FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong Connect), Boost, or GrabPay — your transaction data is shared with the relevant payment processor to complete the transaction.
• KYC and identity verification providers: Third-party services engaged to assist in the verification of identity documents. These providers are contractually bound to process data solely for verification purposes.
• Fraud prevention and security partners: Risk intelligence providers who assist Semibola in identifying and preventing fraudulent activity, account takeover attempts, and money laundering.
• Gaming software providers: Suppliers of the casino games, live dealer systems, and sportsbook technology that power the Platform. These providers may receive session and gameplay data to ensure game integrity and resolve disputes.
• Customer support and communication platforms: Third-party tools used to operate our live chat and email support channels.
• Legal and regulatory authorities: Where required by applicable law, court order, or legitimate regulatory direction, Semibola may disclose personal data to relevant authorities.
• Business successors: In the event of a merger, acquisition, or sale of substantially all of Semibola's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required by contract to maintain appropriate technical and organisational security measures and to process data only as instructed by Semibola.

07 International Data Transfers

Semibola operates as an international platform. Your personal data may be transferred to and processed in countries other than Malaysia, including countries where data protection laws may differ from those in your home jurisdiction.

Where such transfers occur, Semibola takes appropriate measures to ensure that your personal data receives an adequate level of protection consistent with this Policy. These measures may include:

• Transferring data only to countries recognised as providing an adequate level of data protection;
• Using contractual clauses that impose equivalent data protection obligations on the recipient entity;
• Applying additional technical safeguards such as end-to-end encryption for data in transit.

By using the Platform and providing your personal data, you acknowledge that your information may be processed outside of Malaysia, and you consent to such transfers being made in accordance with this Policy.

08 Data Retention

Semibola retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

• Active account data: Retained for the duration of your account relationship with Semibola plus a reasonable period thereafter to address any post-closure disputes or regulatory enquiries.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of collection, in accordance with standard anti-money laundering (AML) record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for a period of three (3) years from the date of the interaction, unless there is an ongoing dispute requiring longer retention.
• Marketing consent records: Retained for as long as your consent is active, plus one (1) year following withdrawal of consent to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not practicable, data is securely destroyed using industry-standard methods.

09 Security Measures

Semibola employs a multi-layered approach to protecting the security of your personal data. Our technical and organisational security measures include:

• Encryption in transit: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) 1.2 or higher.
• Encryption at rest: Stored personal data, including KYC documents and financial records, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised personnel only, on a strict need-to-know basis. Access is subject to role-based permissions and audit logging.
• Two-factor authentication (2FA): Available for all Player accounts to reduce the risk of unauthorised access.
• Regular security assessments: The Platform undergoes periodic penetration testing and vulnerability assessments by independent security professionals.
• Incident response procedures: Semibola maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected individuals in accordance with our obligations under applicable law.

10 Cookies & Tracking Technologies

Semibola uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core functions such as user authentication, session management, and security features. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies allow the Platform to remember your preferences and settings — such as your chosen language, region, and display preferences — to provide a more personalised experience.
• Analytical / Performance Cookies: We use anonymised analytics data to understand how Players navigate the Platform, identify popular features, and detect performance issues. This helps us continuously improve the user experience.
• Security & Fraud Prevention Cookies: These cookies assist in detecting and preventing fraudulent activity, bot traffic, and account takeover attempts by identifying unusual usage patterns.

Semibola does not use third-party advertising cookies or share cookie-based data with advertising networks for targeted marketing purposes.

You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. For further information on managing cookies, refer to your browser's help documentation.

11 Your Rights as a Data Subject

Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by Semibola:

• Right of Access: You have the right to request a copy of the personal data Semibola holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most registration details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to Semibola's legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of Semibola's legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of your rights, please contact our Data Protection team via live chat or by writing to support@semibola.cam. We will respond to your request within 30 days. In some cases, we may need to verify your identity before we can process your request.

12 Minors & Age Policy

The Semibola Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from persons under 21.

All new registrations are subject to age verification as part of the KYC process. Where Semibola becomes aware that personal data has been submitted by or on behalf of a person under 21, we will immediately close the relevant account, delete the associated personal data to the extent permitted by law, and return any deposited funds to the source payment method.

If you believe that a person under 21 has registered an account on Semibola, please contact our support team immediately via live chat.

13 Third-Party Services & Links

The Platform integrates with various third-party services to deliver its features — including payment processing gateways for Touch 'n Go eWallet, DuitNow, FPX, and other Malaysian payment methods, as well as live casino and gaming software providers. When you use these integrated services, your data may be processed by the relevant third party in accordance with their own privacy policies.

Semibola is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party services you engage with in connection with your use of the Platform. Our integration of a third-party service does not constitute an endorsement of that provider's privacy practices.

14 Marketing Communications & Opt-Out

With your consent, Semibola may send you promotional communications by email or in-app notification. These communications may include information about new features, promotions, bonus offers, and events relevant to Malaysian players — such as Liga Super Malaysia season promotions, EPL betting offers, and special MYR deposit bonuses.

You may opt out of receiving marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any promotional email;
• Adjusting your communication preferences through your account settings; or
• Contacting our support team via live chat with a specific request to opt out of all marketing communications.

Opting out of marketing communications will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, or account security alerts — which are required for the operation of your account.

15 Amendments to This Policy

Semibola reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will provide advance notice to registered Players via email notification or a prominent in-platform notice.

The "Last Updated" date at the top of this page will be revised each time the Policy is amended. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you do not agree with a revised Policy, you should cease using the Platform and may request account closure through our support team. Any personal data collected prior to the effective date of a revised Policy will continue to be processed in accordance with the Policy version in force at the time of collection, to the extent required by applicable law.

16 Contact Us & Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or Semibola's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform. Full coverage from 8:00 AM to 2:00 AM MYT daily, including public holidays. Provide your registered email address or account username for faster resolution.
• Email: support@semibola.cam — please type this address manually into your email client. Include "Privacy Request" in the subject line and provide a clear description of your query. We aim to respond within five (5) business days for privacy-related requests.

For formal data subject access requests, erasure requests, or other rights-based enquiries, please specify the nature of your request clearly and include a copy of a valid identity document (such as your MyKad or passport) to enable us to verify your identity before processing the request.