Your privacy matters to us. This Privacy Policy explains what personal information bento123 collects from users of our online casino and sports betting platform, how we use and protect that data, and what rights you hold as a Malaysian user under applicable data protection principles.
These highlights summarise our key data practices. Please read the full Privacy Policy below for complete details.
This Privacy Policy ("Policy") is published by bento123 ("the Company", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://bento123.cam ("the Platform"). It describes how bento123 collects, uses, stores, discloses, and protects the personal data of individuals ("User", "you", or "your") who access or use our services.
bento123 is committed to handling personal data responsibly, in accordance with applicable data protection principles and best practices for the online gaming sector. Our Platform serves players across Malaysia, including users in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and beyond, and we recognise our obligations to protect the personal information of every individual who trusts us with their data.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference into the overall agreement between you and bento123.
By registering an account on the Platform or continuing to use the Platform after this Policy is published, you acknowledge that you have read and understood its contents and consent to the data practices described herein.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
bento123 collects personal data in the following categories, depending on the nature of your interaction with the Platform:
When you create a bento123 account, we collect your full legal name, date of birth, residential address, email address, mobile telephone number, preferred username, and account currency preference (MYR for Malaysian users).
To comply with anti-money laundering regulations and our responsible gambling obligations, we collect copies of identity documents such as your Malaysian Identity Card (MyKad), Passport, or Driver's Licence; proof of residential address; a selfie photograph holding your identity document; and proof of payment method ownership where required.
We collect records of all deposits, withdrawals, bets placed, and game activity on your Account. This includes transaction amounts, timestamps, payment method identifiers (e.g., the last four digits of a bank account or e-wallet identifier), and transaction reference numbers. We do not store full payment card numbers or online banking credentials.
When you access the Platform, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, referring URL, pages visited, session duration, and other standard web analytics data.
If you contact our support team via live chat or email, we retain records of that correspondence, including the content of messages, timestamps, and the resolution of any queries or complaints.
Where you use responsible gambling tools such as deposit limits, session time limits, or self-exclusion requests, we record this information as part of our responsible gambling monitoring obligations. This data is used to enforce your stated preferences and to identify patterns that may indicate problem gambling behaviour.
bento123 processes personal data on the following legal bases, depending on the specific processing activity:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract |
| Processing deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, etc. | Performance of a contract |
| Identity verification (KYC) | Legal obligation (AML compliance) |
| Responsible gambling monitoring and self-exclusion enforcement | Legal obligation / Legitimate interest |
| Fraud prevention and security monitoring | Legitimate interest |
| Analytics and Platform performance optimisation | Legitimate interest |
| Marketing communications (where opted in) | Consent |
| Responding to support enquiries | Performance of a contract / Legitimate interest |
| Compliance with regulatory or law enforcement requests | Legal obligation |
bento123 uses the personal data we collect for the following specific purposes:
bento123 does not sell or rent your personal data to any third party. We may disclose your personal data to the following categories of recipients, strictly for the purposes described in this Policy:
We engage third-party service providers to perform functions on our behalf, including identity verification providers, payment processing partners (including gateway operators that facilitate transactions with Maybank, CIMB, Public Bank, and Malaysian e-wallet providers), IT infrastructure providers, analytics platforms, and customer support software vendors. All such providers are bound by data processing agreements requiring them to process personal data solely on our instructions and in accordance with applicable data protection standards.
Where you play games hosted by third-party game studios on the Platform, limited technical data (such as session identifiers and bet records) may be shared with those providers to facilitate game delivery, RTP calculation, and jackpot progressive systems. Game providers do not receive your personal identification data unless explicitly required for certified game auditing purposes.
bento123 will disclose personal data to competent Malaysian regulatory, law enforcement, or financial intelligence authorities where required by law, pursuant to a valid legal process, or where disclosure is necessary to protect the rights, property, or safety of bento123, its users, or the public.
In the event that bento123 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer and the implications for the processing of their data.
bento123 processes payment data exclusively to facilitate deposits and withdrawals via verified Malaysian payment channels. Our payment data handling practices include the following safeguards:
By using bento123 payment services, you acknowledge that the respective payment service providers — including but not limited to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong — have their own privacy policies governing their handling of your payment data. bento123 is not responsible for the privacy practices of those third-party providers.
bento123 uses cookies and similar tracking technologies on the Platform for the following purposes:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens. Essential for Platform operation. | Session / Short-term |
| Functional | Storing user preferences such as language, currency display (MYR), and responsible gambling settings. | Up to 12 months |
| Analytics | Aggregated usage statistics to improve Platform performance. Data is anonymised wherever possible. | Up to 24 months |
| Marketing (opt-in) | Tracking of promotional campaign performance where consent has been given. Not used for third-party ad targeting. | Up to 12 months |
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect Platform functionality, including the ability to maintain a secure login session. We do not use third-party advertising networks or cross-site tracking technologies on the bento123 Platform.
bento123 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual.
bento123 implements a layered security architecture to protect the personal data of our users. Our technical and organisational security measures include:
Despite these measures, no security system is infallible. In the event of a data breach that materially affects your personal data or rights, bento123 will notify you as soon as reasonably practicable and take all reasonable steps to contain and remediate the breach.
As a user of the bento123 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] or via live chat. We will respond to verified requests within a reasonable period.
You have the right to request a copy of the personal data bento123 holds about you. We will provide this in a structured, commonly used format.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most account information directly via Account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Mandatory AML records cannot be deleted prior to their legally required retention period.
In certain circumstances, you may request that we restrict the processing of your data — for example, while you contest its accuracy or pending review of an objection to processing.
Where processing is based on your consent or contract performance, you may request your personal data in a machine-readable format for transfer to another service provider.
You have the right to object to processing based on legitimate interests, including the use of your data for direct marketing purposes. Objections to marketing can be actioned via Account settings immediately.
bento123 does not knowingly collect personal data from individuals under the age of 21. Our Platform is strictly for adult users aged 21 and above. Age verification is a mandatory component of our KYC process — every user is required to provide proof of age before any withdrawal is processed or, where deposit thresholds are reached, during account activity.
If bento123 becomes aware that personal data has been collected from a person under 21, we will immediately deactivate the associated account, return any deposited funds in accordance with our refund procedures, and delete all personal data associated with that account as quickly as our legal obligations permit.
Parents or guardians who believe their minor child has created a bento123 account are encouraged to contact us immediately at [email protected]. We will investigate and act promptly on any such report.
In providing our services to Malaysian users, bento123 may transfer certain personal data to service providers or technology infrastructure partners located outside Malaysia. Such transfers occur for purposes including cloud infrastructure hosting, identity verification processing, and analytics.
Where personal data is transferred internationally, bento123 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that which would apply within Malaysia. These safeguards include contractual data processing agreements with overseas processors, requiring them to handle personal data in accordance with standards no less protective than those described in this Policy.
By using the bento123 Platform, you consent to the transfer of your personal data as described in this section, subject to the safeguards described above.
bento123 is subject to anti-money laundering (AML) and counter-terrorism financing (CTF) obligations applicable to online gaming operators. In fulfilment of these obligations, we may be required to:
bento123's AML obligations may, in some circumstances, take precedence over the data rights described in Section 11. In particular, we may be legally prohibited from disclosing the existence or details of an AML investigation to the User concerned. We will always act within the bounds of applicable law in balancing these obligations.
bento123 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our data processing practices, or the nature of our services. When material changes are made to this Policy, we will notify registered users via email to the address on their Account and/or via a prominent notice on the Platform prior to the changes taking effect.
The "Effective Date" displayed at the top of this Policy reflects the date on which the current version came into force. We recommend that users review this Policy periodically to remain informed about how bento123 handles their personal data. Continued use of the Platform after the effective date of an amended Policy constitutes acceptance of the revised terms.
If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data by bento123, please contact us through any of the following channels:
We aim to acknowledge all formal data rights requests within 5 business days and to resolve them fully within 30 days of receipt. Where a request is particularly complex, we will notify you of the extended timeframe and the reasons for it.
bento123 — Trusted by Malaysian Players
Competitive Liga Super Malaysia and EPL odds, instant e-wallet withdrawals via Touch 'n Go and DuitNow, and a security infrastructure you can trust — all at bento123.
21+ only. Gambling involves financial risk. Please gamble responsibly.