bcb88g Privacy Policy

1Who We Are and How to Contact Us

bcb88g is the operator of the online gaming platform accessible at bcb88g.app. bcb88g acts as the data controller in respect of personal data collected through the platform, meaning we determine the purposes and means of processing your personal data.

If you have any questions about this Privacy Policy or wish to exercise any of your data subject rights, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours, 7 days a week via the bcb88g platform

When contacting bcb88g regarding a data protection matter, please include your registered email address and a description of your request to allow us to locate your account and respond efficiently.

2Data We Collect

bcb88g collects personal data in the following categories:

bcb88g does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or biometric data) except where biometric liveness checks are used as part of the KYC process, in which case such data is processed solely for identity verification and is not retained beyond the completion of the verification process.

3How We Collect Your Data

bcb88g collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, participating in promotions, or submitting feedback.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the bcb88g platform, including through cookies, server logs, and device fingerprinting technologies (see Section 7).
• Third-Party Sources: Identity verification data from KYC service providers; fraud and risk assessment data from fraud prevention services; payment verification data from payment processors including Touch 'n Go, Boost, GrabPay, Maybank, CIMB, and Hong Leong Bank.
• Publicly Available Sources: In limited circumstances, bcb88g may supplement your profile with information from publicly available sources for fraud prevention or regulatory compliance purposes.

4Legal Basis for Processing

bcb88g processes your personal data on the following legal bases:

• Contract Performance: Processing necessary for the performance of the contract between bcb88g and the Player, including account operation, payment processing, game delivery, and withdrawal processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC/AML requirements imposed by the relevant gaming authority and applicable financial crime regulations.
• Legitimate Interests: Processing necessary for bcb88g's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, customer support quality, and platform improvement — where such interests are not overridden by the Player's privacy rights.
• Consent: Processing of certain optional data categories (such as marketing communications preferences) where consent is the appropriate legal basis. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

5How We Use Your Data

bcb88g uses personal data for the following purposes:

• Account Management: Creating and maintaining your bcb88g account, verifying your identity and age, processing login authentication including two-factor authentication.
• Service Delivery: Processing deposits and withdrawals in MYR, delivering game services, administering bonuses and promotional offers, maintaining game history and account records.
• Regulatory Compliance: Fulfilling KYC, AML (Anti-Money Laundering), and CTF (Counter-Terrorism Financing) obligations as required by the relevant gaming authority; age verification; player fund protection obligations.
• Responsible Gaming: Monitoring gameplay patterns for indicators of problem gambling; administering responsible gaming tools (deposit limits, session timers, self-exclusion) as set by the Player or mandated by regulatory requirements.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct; maintaining platform security and integrity.
• Customer Support: Responding to enquiries, resolving disputes, processing account closure requests, and improving support quality.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal status, account security alerts); sending promotional communications to Players who have opted in to receive them.
• Platform Improvement: Analysing aggregate usage patterns to improve platform performance, game library, and user experience.

6Data Sharing and Third-Party Disclosure

6.1 Service Providers. bcb88g shares personal data with third-party service providers who process data on bcb88g's behalf under contractual data processing agreements. Categories of service providers include: payment processors (including e-wallet and FPX banking partners); KYC and identity verification providers; fraud prevention and risk assessment services; game studio providers (who receive session and gameplay data necessary to deliver game services); cloud infrastructure providers; and customer support platform providers.

6.2 Regulatory Authorities. bcb88g may be required to disclose personal data to the relevant gaming authority, financial intelligence units, law enforcement agencies, or other regulatory bodies pursuant to legal obligation or regulatory request. Such disclosures are made only to the extent required by law.

6.3 No Sale of Personal Data. bcb88g does not sell, rent, or trade personal data to any third party for that third party's own marketing or commercial purposes.

6.4 Business Transfers. In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of bcb88g's assets, personal data held by bcb88g may be transferred to the successor entity. Players will be notified of any such transfer and any material change to data processing practices that results from it.

7Cookies and Tracking Technologies

The bcb88g platform uses cookies and similar tracking technologies to support platform functionality, security, and performance analysis. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — session management, login authentication, security tokens, and load balancing. These cannot be disabled without materially impairing platform functionality.
• Performance Cookies: Collect anonymised data about how Players interact with the platform — pages visited, features used, error events — to support platform improvement. These do not identify individual Players.
• Functional Cookies: Remember your preferences — such as language and display settings — to personalise your bcb88g experience between sessions.
• Analytics Cookies: Support aggregate traffic and behaviour analysis. Data collected is anonymised and aggregated prior to analysis.

bcb88g does not use third-party advertising or tracking cookies that share your data with advertising networks. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the bcb88g platform.

8Data Retention

bcb88g retains personal data for the periods set out below, or for longer periods where required by applicable law or regulation:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with gaming regulatory and AML record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of the relevant transaction, as required by applicable AML and gaming regulations.
• KYC Documentation: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Support Communications: Retained for three (3) years from the date of the communication, or longer where the communication is relevant to an ongoing dispute or regulatory matter.
• Technical and Usage Data: Retained for up to two (2) years from collection, unless required for longer by fraud prevention, regulatory compliance, or dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bcb88g's data retention procedures.

9Data Security

bcb88g implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks associated with its processing. These measures include:

• End-to-end TLS 1.3 encryption for all data transmitted between your device and bcb88g's servers;
• Encryption of sensitive data at rest, including payment details and KYC documentation;
• Role-based access controls limiting access to personal data to authorised personnel on a need-to-know basis;
• Multi-factor authentication for internal system access;
• Intrusion detection and threat monitoring systems;
• Regular security audits and penetration testing by qualified third parties;
• Incident response procedures including breach notification protocols.

Notwithstanding the above, no information security measures are completely impenetrable. In the event of a data security incident affecting your personal data, bcb88g will notify affected Players and relevant regulatory authorities as required by applicable law.

10International Data Transfers

bcb88g's platform operations involve the use of service providers whose infrastructure may be located outside Malaysia. Where personal data is transferred to a third country, bcb88g ensures that appropriate safeguards are in place to protect the data, including contractual data transfer mechanisms (such as standard contractual clauses), or the transfer is to a jurisdiction recognised as providing an adequate level of data protection. Players may request information about the specific safeguards applicable to any particular international transfer by contacting bcb88g support.

11Your Rights as a Data Subject

Subject to applicable data protection law and certain limitations arising from bcb88g's regulatory and legal obligations, you hold the following rights with respect to your personal data:

• Right of Access: The right to request a copy of the personal data bcb88g holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to bcb88g's regulatory retention obligations (which may prevent full erasure during the applicable retention period).
• Right to Restriction of Processing: The right to request that bcb88g restrict processing of your personal data in certain circumstances.
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact bcb88g support via live chat or by email at [email protected]. bcb88g will respond to data subject requests within 30 calendar days. In certain circumstances, bcb88g may need to verify your identity before processing a request.

12Children and Minors

The bcb88g platform is strictly for individuals aged 21 years and above. bcb88g does not knowingly collect personal data from individuals under the age of 21. If bcb88g becomes aware that personal data has been collected from a minor, the account will be immediately suspended, the data will be securely deleted, and any deposited funds will be returned to the verified payment source. If you believe a minor has registered an account on bcb88g, please contact support immediately.

13Changes to This Privacy Policy

bcb88g may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform operations. Material changes will be communicated to registered Players via email to the registered address or through a prominent notice on the bcb88g platform, with reasonable advance notice prior to the change taking effect. The effective date at the top of this Policy indicates when the current version was last updated. Continued use of the bcb88g platform following notification of a material change constitutes acceptance of the revised Policy.

14Complaints

If you believe bcb88g has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you may raise a complaint directly with bcb88g support in the first instance. bcb88g will investigate and respond to data-related complaints within 30 calendar days.

If you are not satisfied with bcb88g's response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. bcb88g will cooperate fully with any supervisory authority investigation.