Privacy Policy BD88 – Our Commitment to Protecting Malaysian Players' Data

BD88 is an online entertainment platform operating in Malaysia under the domain https://bd88.my. As the platform operator, we act as the data controller responsible for all personal data collected through the use of our platform.

We take the privacy of Malaysian players seriously. This Privacy Policy was established to provide full transparency on how BD88 collects, processes, stores and protects your personal data. It also outlines your rights in relation to that data and how to exercise them.

This Policy applies to all users of the BD88 including website visitors, registered members, and former members whose accounts have been closed. Personal data may be processed differently depending on a user's status and the nature of their interaction with the BD88 platform.

This Privacy Policy should be read in conjunction with BD88 Terms & Conditions which together form the entire agreement between you and our platform. In the event of any conflict between these documents regarding data protection, the provisions in this Privacy Policy shall prevail.

BD88 collects personal data from you through several means. The following are the categories of data we may collect:

We may also receive data about you from legitimate third-party sources where required for identity verification or fraud prevention purposes. This data is used solely for the stated purpose and is stored to the same security standards as data collected directly from you.

BD88 using the personal data collected for the following purposes, all subject to a valid legal basis:

• Account Management: Creating and managing your BD88 account, verifying your identity at login, and keeping your account secure from unauthorized access.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and securely handling withdrawals to your bank account or e-wallet.
• Gaming Services Provision: Giving you access to all games available on the BD88 platform, including slots, Live Casino, table games, lottery, and Sports Betting on badminton and football.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, duplicate account usage, and any security threats that could compromise the BD88 platform or other players.
• Service Communications: Sending you important notifications about your account, changes to our terms, active promotions, and security-related information you need to be aware of.
• Customer Support: Helping resolve enquiries, complaints or technical issues that you raise with the BD88 support team.
• Platform Improvements: Analysing aggregated and anonymised usage data to understand how Malaysian players use the BD88 platform and to make relevant improvements.
• Legal Compliance: Meeting the legal and regulatory obligations applicable to BD88's platform operations, including anti-money laundering (AML) and know your customer (KYC) requirements.

We will not use your personal data for any purpose other than those stated above without first obtaining your consent or without a valid legal basis for doing so.

BD88 does not sell or rent your personal data to any third party. However, there are specific situations where we need to share data with the following parties for platform operational purposes:

• Payment Service Providers: Payment processing companies that facilitate transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX. These providers receive only the data necessary to process the relevant transaction and are bound by strict confidentiality agreements with BD88.
• Game Providers: Gaming software companies such as Evolution Gaming, Pragmatic Play, and SA Gaming that provide Live Casino, slots, and table games to the BD88 platform. Data is shared only to the extent necessary for the games to function.
• Technology Service Providers: Companies that provide the server infrastructure, cybersecurity services and analytics tools used by BD88. All such providers are bound by data processing agreements that require them to protect your data.
• Legal Authorities: Law enforcement agencies, regulatory bodies, or courts where we are legally required to disclose data, or where disclosure is necessary to protect the legal rights of BD88 or the public.

In situations where BD88 involved in a merger, acquisition, or asset sale, players' personal data may be transferred as part of that transaction. We will notify you in advance by email or a prominent notice on the platform should such a situation arise.

The security of your personal data is our top priority BD88. We implement the following technical and organisational security measures to protect your data:

• Encryption in Transit: All data transmitted between your device and BD88's servers is encrypted using 256-bit SSL/TLS protocols, ensuring no third party can intercept or read your data in transit.
• Storage Encryption: Sensitive data stored in BD88's databases, including financial information and identity verification documents, is encrypted using AES-256 — the encryption standard classified as suitable for confidential data by the United States government.
• Strict Access Controls: Access to players' personal data within the BD88 organisation is restricted to staff who genuinely need it to perform their duties. All access is logged and monitored.
• Regular Security Auditing: BD88's security systems undergo independent penetration testing and security audits at least once a year.
• 24/7 Monitoring: BD88's cybersecurity team monitors our systems around the clock to detect and respond to any threats or suspicious access attempts.

Data Retention Period: BD88 retains your personal data for as long as your account is active and for the period required after account closure in accordance with applicable legal and regulatory requirements. In general:

• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering requirements.
• Basic account data is retained for 5 years after account closure.
• Customer support communication records are retained for 3 years.
• Anonymised analytics data may be retained for longer periods for service improvement purposes.

Platform BD88 uses cookies and similar tracking technologies to enhance your experience and for analytics purposes. Cookies are small text files stored on your device by your web browser.

The types of cookies used by BD88 are:

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the platform. BD88 and may prevent you from logging in or accessing certain features. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

As a player BD88 registered in Malaysia, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

BD88 takes child protection very seriously. Our platform is strictly for individuals aged 18 and above, with no exceptions.

We do not knowingly collect personal data from individuals under the age of 18. BD88's registration process requires age verification, and we carry out additional checks on accounts suspected of belonging to underage individuals.

Parents or guardians who discover that a child under their care has been using the platform BD88 without authorisation should contact our support team immediately. We will take prompt action to close the account and process any winnings or balance in accordance with the appropriate procedures.

In the course of operating the platform, BD88 may need to transfer your personal data to servers or systems located outside Malaysia, particularly in relation to cloud technology infrastructure and international game provider systems.

When such a data transfer takes place, BD88 ensure that:

• The recipient country or organisation maintains a level of data protection that is adequate or equivalent to Malaysian standards.
• Appropriate data transfer agreements are in place, including standard contractual clauses that safeguard your rights.
• Data transfers are limited to the minimum necessary for legitimate operational purposes.
• All transferred data remains subject to the protections and rights set out in this BD88 Privacy Policy, regardless of where it is stored.

If you have any questions about the international data transfers carried out by BD88 or would like a copy of the relevant data protection agreement, please contact us at support@bd88.my.

BD88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or new platform features we introduce. When we make significant changes, we will:

• Displaying a clear notice on the BD88 platform homepage for at least 14 days before the changes take effect.
• Sending email notifications to all affected active members with a clear, easy-to-understand summary of the changes.
• Updating the "Last Updated" date at the top of this document and maintaining an archive of previous versions for reference.
• For particularly significant changes that materially affect your privacy rights, we may ask for your consent again.

If you have any enquiries, concerns or complaints regarding how BD88 handling your personal data, we encourage you to reach out to us directly. We are committed to resolving any privacy concerns in a transparent and timely manner.

You can reach the BD88 data privacy team via:

• Email: support@bd88.my – use the subject line "Privacy Policy Enquiry" for faster processing.
• Live Chat: Via the live chat widget on the BD88 platform, available 24 hours a day, 7 days a week.

We will acknowledge receipt of your privacy enquiry within 2 business days and provide a full response within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection authority.