bd88 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out the manner in which bd88 ("bd88", "we", "us" or "our"), the operator of the website located at https://bd88.casa, collects, processes, stores, discloses and protects personal data provided by or generated through the actions of individuals ("User", "you" or "your") who register for or access the bd88 platform.

This Policy applies to all users of the bd88 platform, including persons accessing the site from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations in Malaysia and permitted regions. By registering an account or continuing to use the bd88 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the bd88 Terms & Conditions, which govern the broader relationship between bd88 and its users. Where this Policy conflicts with the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

2 Definitions

The following terms have specific meanings within this Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial information and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means bd88, which determines the purposes and means by which personal data is processed.
• "Data Processor" means a third party that processes personal data on behalf of bd88, such as a payment gateway, cloud hosting provider or fraud detection service.
• "Cookies" means small data files placed on a user's device by a website for the purpose of storing session information, preferences or analytics data.
• "KYC Data" means identity and address verification documentation collected to satisfy Know Your Customer obligations, including copies of identity documents such as a Malaysian MyKad, driving licence or passport.
• "Sensitive Data" means a subset of personal data that warrants heightened protection, including financial account details, identity document numbers and information related to health or gambling behaviour patterns.

3 Information We Collect

3.1 Registration Information

When you create a bd88 account, we collect your full legal name, date of birth, gender, residential address, email address, telephone number and chosen username. This information is used to establish your account identity, verify age eligibility and facilitate communication with you regarding your account.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your identity before processing withdrawals, bd88 may request copies of valid identity documents. For Malaysian users, accepted documents include a valid MyKad, Malaysian driving licence or passport. Proof of residential address — such as a utility bill or bank statement dated within the past three months — may also be required. We may additionally request a selfie taken while holding your identity document.

KYC documents are processed in a secure environment and are retained only for the period required by applicable regulatory obligations.

3.3 Financial and Transaction Data

bd88 collects information related to deposits, withdrawals, wagering activity and payment methods used. This includes transaction amounts in MYR, payment method type (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong), transaction timestamps and partial payment identifiers. Full card numbers and complete banking credentials are not stored by bd88.

3.4 Technical and Device Data

When you access bd88, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, session duration, page navigation paths and referring URLs. This data is collected for security monitoring, fraud prevention and platform performance optimisation.

3.5 Customer Support Communications

If you contact bd88 via email or the platform's support function, we retain records of those communications including the nature of the query, the responses provided and any attachments submitted. These records are used to resolve your query and to improve our service quality.

3.6 Responsible Gambling Data

Where you choose to use responsible gambling tools such as deposit limits, session limits or self-exclusion, bd88 retains records of those elections and enforces them on your account. This information is treated as sensitive data and is not used for marketing purposes.

4 How We Use Your Information

bd88 uses collected personal data for the following purposes:

• Account administration: creating, maintaining and managing your registered account, including verification and authentication.
• Payment processing: facilitating deposits and withdrawals through supported payment channels in MYR.
• Identity verification: completing KYC checks required before processing withdrawals or in response to regulatory obligations.
• Fraud prevention and security: detecting and preventing unauthorised account access, collusion, money laundering and other prohibited activities.
• Regulatory compliance: meeting obligations under applicable anti-money laundering, data protection and gaming regulations.
• Customer support: responding to queries, resolving disputes and managing complaints.
• Platform improvement: analysing usage patterns, identifying technical issues and optimising the user experience.
• Responsible gambling: applying and enforcing limits, exclusions or other protective measures elected by the user.
• Communications: sending account-related notifications, security alerts and — where you have opted in — promotional communications.

5 Legal Basis for Data Processing

bd88 processes personal data only where a lawful basis exists. The applicable legal bases for the processing activities described in this Policy are as follows:

• Contractual necessity: processing required to perform the agreement between bd88 and the user, including account management, payment processing and game access.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money laundering and age verification requirements.
• Legitimate interests: processing carried out to pursue the legitimate business interests of bd88, including fraud detection, platform security and service improvement, where those interests are not overridden by the rights and interests of the user.
• Consent: processing based on an express, freely given and specific consent provided by the user, such as consent to receive marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Disclosure and Third-Party Sharing

6.1 Payment Service Providers

To process deposits and withdrawals, bd88 shares relevant transaction data with authorised payment service providers. These may include the operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and approved cryptocurrency networks. Each payment provider operates under its own privacy terms and applicable financial regulations.

6.2 KYC and Identity Verification Providers

bd88 may engage specialist identity verification service providers to assist with the processing and assessment of KYC documentation. These providers act as data processors under contractual obligations that restrict their use of the data to the specified verification purpose.

6.3 Fraud Prevention and Security Services

Technical data including IP addresses, device identifiers and session logs may be shared with fraud prevention services and cybersecurity providers for the purpose of detecting and preventing unauthorised access, account takeover and financial crime.

6.4 Legal and Regulatory Authorities

bd88 may disclose personal data to law enforcement agencies, regulatory bodies or courts where required by applicable law, a valid court order or in response to an official regulatory investigation. bd88 will notify affected users of such disclosures where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of bd88's business, personal data held may be transferred to the successor entity. Users will be notified of any material change in data controller identity arising from such a transaction.

7 Cookies and Tracking Technologies

The bd88 platform uses cookies and similar tracking technologies to support core platform functionality, maintain session state, remember user preferences and collect analytics data about platform usage. The following categories of cookies may be used:

• Essential cookies: required for the platform to function correctly. These cannot be disabled without materially affecting your ability to use the site.
• Session cookies: temporary cookies that expire when your browser session ends, used to maintain your logged-in state during a visit.
• Analytics cookies: used to collect aggregated, anonymised data about how users navigate the platform, which pages are visited most frequently and where errors occur.
• Preference cookies: used to store settings such as display preferences and language choices between sessions.

You may manage cookie settings through your browser's privacy controls. Disabling all cookies may impair certain platform features including session management and responsible gambling tool enforcement.

8 Data Security

bd88 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption of data in transit using TLS/HTTPS protocols across all platform connections.
• Encryption of sensitive data at rest, including stored KYC documentation and financial records.
• Strict internal access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments and monitoring of platform infrastructure for vulnerabilities.
• Incident response procedures for promptly identifying, containing and notifying affected parties of any data breach.

9 Data Retention

bd88 retains personal data for the period necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable law. The following general retention guidelines apply:

• Account and registration data: retained for the lifetime of the active account and for a period of at least five years following account closure, to satisfy regulatory and audit requirements.
• Transaction and financial data: retained for a minimum of five to seven years following the relevant transaction, in accordance with applicable financial record-keeping obligations.
• KYC documentation: retained for the period required by applicable anti-money laundering regulations, typically five years from the end of the customer relationship.
• Support communications: retained for two years from the date of the interaction or for the duration of any related dispute resolution process, whichever is longer.
• Technical and device data: retained for up to twelve months for security monitoring purposes, after which it is anonymised or deleted.

Where personal data is no longer required for any lawful purpose, bd88 will securely delete or irreversibly anonymise it so that it can no longer be associated with any individual.

10 User Rights

Subject to applicable legal limitations, registered bd88 users have the following rights in relation to their personal data:

To exercise any of these rights, please contact bd88 at the email address provided in Section 14. We will acknowledge your request within five business days and endeavour to respond in full within 30 calendar days. Certain rights may be limited where their exercise conflicts with bd88's legal obligations or the legitimate interests of other users.

11 Children and Minors

The bd88 platform is strictly intended for adults. The minimum age requirement for accessing bd88 casino-style gaming and sports betting services is 21 years of age. bd88 does not knowingly collect personal data from any individual below this age threshold.

If bd88 becomes aware that personal data has been collected from a person below the minimum age, such data will be promptly deleted, the account closed and any deposits returned subject to verification. Parents or guardians who believe that a minor has registered on bd88 should contact support immediately.

bd88 employs age verification measures at registration and may request additional proof of age at any point during the account lifecycle, including before processing withdrawals.

12 International Data Transfers

Certain service providers engaged by bd88 — including cloud hosting, fraud prevention and payment processing partners — may be located in jurisdictions outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Malaysia, bd88 will implement appropriate contractual safeguards, including standard contractual clauses or equivalent protective mechanisms.

By using the bd88 platform, you acknowledge that your personal data may be transferred to, stored in and processed in jurisdictions other than Malaysia. bd88 will only permit such transfers where an adequate level of protection is in place for your data.

13 Amendments to This Policy

bd88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, operational practices or the services offered. The date of the most recent review is displayed at the top of this page.

Where changes are material — for example, a change to how personal data is shared with third parties or a change in retention periods — bd88 will provide advance notice to registered users via their registered email address or through a notice displayed on the platform. Continued use of the bd88 platform following the effective date of a revised Policy constitutes acceptance of the updated terms.

14 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by bd88, please contact our team using the details below:

Website email: [email protected]

Please include your registered account username and a clear description of your request or concern. For data subject rights requests, include the specific right you wish to exercise and any relevant account or transaction references. bd88 aims to acknowledge all privacy-related enquiries within five business days.

For responsible gambling concerns, including requests for self-exclusion or account restrictions, please visit the Responsible Gambling section of this site for dedicated guidance.