Privacy Policy BCB88MY – Personal Data Protection for Malaysian Players

BCB88MY collects various categories of personal data during the registration process and ongoing platform use. We collect only what is strictly necessary for the identified purposes and do not gather excessive data beyond operational requirements.

All personal data collected by BCB88MY used solely for the following legitimate and stated purposes. We will not use your data for any other purpose without first obtaining your explicit consent:

• Account Management: To create, verify, and manage your BCB88MY account, including identity checks (KYC) and age verification for 21+.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and to process withdrawals to your Malaysian bank account.
• Service Delivery: To give you access to all BCB88MY games – live casino, baccarat, blackjack, poker, Sports Betting, virtual sports and slots.
• Security & Fraud Prevention: To identify and prevent fraudulent activity, money laundering, duplicate account creation, and bonus abuse.
• Customer Support: To assist you when you contact BCB88MY support regarding account, transaction, or gaming issues.
• Legal Compliance: To comply with Malaysia's legal obligations, including anti-money laundering (AML) requirements and identity verification requirements stipulated by our licence.
• Platform Improvements: To analyse aggregated usage patterns for the purpose of improving the overall performance, usability, and user experience of the BCB88MY platform.
• Service Communications: To send you important account-related notifications, including deposit confirmations, withdrawal updates, changes to terms, and security alerts.

BCB88MY does not sell, rent, or share members' personal data with third parties for marketing purposes. However, there are limited circumstances in which we may need to share certain information:

Authorised Third-Party Service Providers

BCB88MY works with carefully selected third-party service providers to support platform operations. These include:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX providers to process financial transactions. They receive only the minimum data required to complete each transaction.
• Gaming Software Providers: Live casino and game providers partnering with BCB88MY, who receive the session data required to deliver gameplay. All such providers are bound by strict confidentiality agreements.
• Identity Verification Services: Third-party KYC service providers engaged to verify member identities for anti-money laundering compliance purposes.

Mandatory Disclosure to Authorities

BCB88MY may be required to disclose members' personal data to authorities in the following circumstances:

• Upon a valid court order or investigation warrant issued by a Malaysian law enforcement agency
• To the regulatory body that issues BCB88MY's operating licence, as part of an audit or compliance process
• To prevent or detect financial crime, including money laundering, fraud, or terrorism financing, in accordance with Malaysian law

In all such disclosure cases, BCB88MY will share only the minimum data necessary and will notify the affected member where permitted by law.

BCB88MY implements multiple layers of security to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

Technical Security

• 256-bit SSL Encryption: All communications between your web browser and BCB88MY's servers are encrypted using TLS 1.3 with AES-256 encryption. This means every piece of data – including login credentials, transaction data, and game history – is unreadable to any party attempting to intercept the connection.
• Stored Data Encryption: Sensitive data such as passwords is stored in an irreversible hashed format. Financial information such as bank account numbers is stored in encrypted form using industry security standards.
• Secure Servers: BCB88MY data is stored in ISO 27001-certified data centres with multi-layered physical and cyber protection, including biometric access controls, 24/7 surveillance, and an Intrusion Prevention System (IPS).
• Two-Factor Authentication: BCB88MY offers two-factor authentication (2FA) as an added layer of security for your account login, and we encourage all members to enable it.

Internal Access Controls

Access to members' personal data within BCB88MY is restricted solely to staff with a legitimate business need. All relevant BCB88MY personnel undergo regular data protection training and are bound by strict confidentiality agreements. Access logs are recorded and monitored to detect any suspicious activity.

Platform BCB88MY uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform. The following types of cookies are used:

How to Manage Your Cookies

You can manage and delete cookies through your web browser settings at any time. Please note, however, that disabling mandatory cookies may affect certain BCB88MY platform functions, including the ability to log in and play. BCB88MY does not support third-party cookies for advertising purposes.

Under the Malaysian Personal Data Protection Act 2010 (PDPA) and the commitment of BCB88MY to member privacy, you have the following rights regarding your personal data:

BCB88MY retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable Malaysian laws and regulations. The following are retention period guidelines for the various categories of data:

• Identification & Verification Data (KYC): Retained for the duration of the active account period plus a minimum of 7 years after account closure, in line with Malaysia's anti-money laundering legal requirements.
• Financial Transaction Records: All MYR deposit and withdrawal records are retained for 7 years in line with financial reporting requirements and Malaysia's Anti-Money Laundering Act.
• Gaming Activity History: Betting records and game history on BCB88MY are retained for 5 years for compliance, dispute resolution, and internal audit purposes.
• Support Communication Logs: Live chat conversation records and support emails are retained for 2 years for quality control and complaint resolution purposes.
• Technical Data & Access Logs: Security logs and technical data are retained for 12 months for fraud detection and platform security purposes.
• Marketing Data: Marketing communication preferences are retained until you withdraw consent or close your BCB88MY account.

Once the retention period expires, data will be securely deleted or anonymised in a form that cannot be linked to any individual. BCB88MY conducts periodic data retention reviews to ensure data that is no longer needed is promptly removed.

BCB88MY reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Whenever we make a material amendment, we will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to all registered members via email and/or in-platform notifications on BCB88MY
• Displaying a clear notice on the platform's homepage for at least 7 days after an amendment comes into effect

Continued use of the BCB88MY platform after any amendment to this Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any amendment, you may close your BCB88MY account and request a full withdrawal of your balance before the amendment takes effect. We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns or complaints regarding how BCB88MY handles your personal data, or if you wish to exercise any of the data protection rights outlined in this Privacy Policy, please reach out to us through the following channels: