At Bitstarz, protecting your personal information is a responsibility we take seriously. This Privacy Policy explains what data we collect, how we use it, who we may share it with, and what rights you hold as a registered player on the Bitstarz platform.
256-bit SSL Encryption
All data transmitted between your device and the Bitstarz platform is protected by industry-standard 256-bit SSL encryption. Your personal and financial details are never transmitted in plain text.
No Data Selling
Bitstarz does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information belongs to you — we only use it to operate and improve your experience on our platform.
Minimal Data Collection
We collect only the personal data that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively.
Your Rights, Respected
You have the right to access, correct, port, and request deletion of your personal data at any time. We will respond to all verified data rights requests within a reasonable timeframe.
Transparent Cookie Use
We use cookies and similar technologies only for essential platform functionality, session management, and anonymous analytics. No third-party advertising cookies are deployed without your consent.
Data Retention Limits
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. Data is securely deleted or anonymised once the retention period expires.
This Privacy Policy (hereinafter referred to as "the Policy") is issued by Bitstarz (hereinafter referred to as "Bitstarz", "we", "us", or "the Platform") and governs the collection, processing, storage, use, and disclosure of personal data pertaining to individuals (hereinafter referred to as "User", "you", or "your") who access or use the website located at https://bitstarz.cam and all associated services.
Bitstarz is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy describes in clear terms what personal data we collect about you, why we collect it, how we use and protect it, and the rights you hold in relation to that data.
By accessing or using the Bitstarz platform — including registering an account, making a deposit, or participating in any game or promotion — you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Bitstarz platform.
Bitstarz does not sell, lease, or trade your personal data to any third party for commercial marketing purposes. Your data is used solely to operate the Platform, verify your identity, process payments, and comply with our legal obligations.
For the purposes of this Privacy Policy, the following definitions apply:
Bitstarz collects personal data through several channels, including account registration, account use, payment transactions, customer support interactions, and your device's technical connection to our Platform. The categories of personal data we collect are set out below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / Passport / Driver's Licence number | Account registration, KYC verification, age eligibility check |
| Contact Data | Email address, mobile phone number | Account communications, support responses, security alerts |
| Address Data | Residential address (as stated on proof-of-address document) | KYC verification, regulatory compliance |
| Financial Data | Payment method details (e.g., Touch'n Go, Maybank account reference, USDT wallet address) | Processing deposits and withdrawals, AML compliance |
| Verification Documents | Copies of identification documents, proof-of-address documents, selfie images submitted during KYC | Identity verification, fraud prevention, regulatory obligation |
| Communications Data | Messages sent via live chat or email, support ticket content | Customer support, dispute resolution, quality assurance |
When you access the Bitstarz Platform, we automatically collect certain technical data about your device and connection, including:
Copies of identity documents and financial verification materials submitted during the KYC process are classified as Sensitive Personal Data. These are stored in encrypted form on secure servers, are accessible only to authorised compliance personnel, and are never shared with any third party except where required by applicable law.
Bitstarz uses your personal data for the following purposes:
Bitstarz processes your personal data on the following legal bases:
Bitstarz does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may disclose your personal data to the following categories of recipients, strictly limited to what is necessary for the stated purpose:
In order to process your deposits and withdrawals, we share necessary transaction data with the payment providers you select — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX gateway operators, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing services. These providers operate under their own privacy policies and are contractually bound to handle your data securely.
We may engage specialist third-party KYC and identity verification services to assist with the verification of your identity documents. These processors are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.
Bitstarz may disclose your personal data to competent legal, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or in response to a lawful request from a government body. In all such cases, we will disclose only the minimum data necessary to fulfil the legal obligation.
We may share data with specialist fraud prevention or cybersecurity service providers to identify and prevent fraudulent activity, account takeovers, and money laundering on the Platform.
Under no circumstances will Bitstarz share your personal data with any third-party advertiser, data broker, or marketing agency. Your data is used exclusively to operate the Platform and fulfil our legal obligations.
Bitstarz uses cookies and similar tracking technologies (including local storage objects and session identifiers) to operate and improve the Platform. The following categories of cookies are in use:
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the Platform. Bitstarz does not deploy third-party advertising or retargeting cookies.
Bitstarz retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
Upon expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous in a manner that prevents identification of individual Users.
Bitstarz implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Notwithstanding the security measures above, no transmission over the internet or method of electronic storage is completely secure. While Bitstarz takes all reasonable steps to protect your data, we cannot provide an absolute guarantee against unauthorised access or security breaches. In the event of a material security breach affecting your personal data, we will notify you as required by applicable law.
Subject to applicable data protection law, you hold the following rights in relation to your personal data held by Bitstarz. To exercise any of these rights, please contact our support team via the live chat feature or the email address listed in Section 15.
Right of Access
You have the right to request a copy of all personal data Bitstarz holds about you, along with information on how it is processed.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
Right to Restrict Processing
You may request that we restrict processing of your personal data in certain circumstances, such as while a dispute over accuracy is resolved.
Right to Data Portability
Where processing is based on consent or contract, you may request your data in a structured, machine-readable format for transfer to another provider.
Right to Object
You may object to processing based on legitimate interests, including profiling for responsible gambling monitoring purposes.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
If you believe your data rights have been infringed, you have the right to lodge a complaint with the applicable data protection supervisory authority.
We will respond to all verifiable data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We may require you to verify your identity before processing a data rights request.
The operation of the Bitstarz Platform may involve the transfer of your personal data to servers or service providers located outside of Malaysia. Where such international transfers occur, Bitstarz takes steps to ensure that your data receives an equivalent level of protection to that provided under applicable data protection law, including through the use of appropriate contractual safeguards with all data processing partners.
Where we engage third-party service providers located in other jurisdictions (for example, KYC verification services or cloud infrastructure providers), we require those providers to implement data protection standards that are consistent with the protections described in this Policy. Such providers are engaged under contractual terms that prohibit them from using your data for any purpose other than providing the contracted service to Bitstarz.
The Bitstarz Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, solicit, or process personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21 years of age without appropriate parental consent, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your child has provided personal data to Bitstarz without your knowledge, please contact us immediately at the details provided in Section 15 so that we may investigate and take appropriate action.
Access to the Bitstarz platform is restricted to adults aged 21 and above. Age verification checks are conducted as part of the KYC process. Bitstarz takes its obligations with respect to underage gambling prevention extremely seriously.
The Bitstarz Platform may, from time to time, contain references or links to third-party websites or services (for example, payment provider portals accessed during deposit or withdrawal). Bitstarz has no control over the content, privacy practices, or data handling of those third-party sites and accepts no responsibility for their privacy policies or practices.
We strongly encourage you to review the privacy policy of any third-party site you visit, particularly when submitting personal or financial information. The fact that a link appears on the Bitstarz Platform does not constitute an endorsement of that third party's privacy practices.
Bitstarz reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Any material changes will be communicated to registered Users by way of a prominent notice on the Platform, and where practicable, by email to the address registered on your account.
The date of the most recent revision to this Policy is indicated at the top of this page. Your continued use of the Bitstarz Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to remain informed of how we protect your personal data.
If you do not agree to any revisions to this Policy, you should discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.
If you have any questions, concerns, or requests in relation to this Privacy Policy, or if you wish to exercise any of the data rights described in Section 10, please contact the Bitstarz Data Privacy team through the following channel:
Email: [email protected]
Subject Line: Privacy Request — [Your Name]
Live Chat: Available 24/7 within the Platform (login required)
Response Time: Within 30 days for formal data rights requests; within 48 hours for general privacy queries
When submitting a data rights request, please include sufficient information to enable us to verify your identity — such as the email address registered to your account and your registered full name. This is necessary to protect your personal data from unauthorised disclosure to third parties.
For all other account-related queries, including payment issues, KYC assistance, or responsible gambling requests, our 24/7 live chat team is available directly within the Platform. We aim to provide initial responses to all live chat messages within two minutes.
Questions about how your data is used? Our support team is available 24/7 to walk you through any aspect of this Policy or assist with a data rights request. Bitstarz is built on trust — and that starts with transparency.