Privacy Policy bbiplay – Malaysia Member Data Protection & Privacy

Why Is This Data Needed?

Identity and contact information is collected to verify your identity during registration and the KYC process, and to reach you regarding your account or customer support. This is a fundamental requirement for any financial platform operating responsibly.

Financial data is required to process your deposits and withdrawals securely, ensure your funds reach the correct account, and comply with anti-money laundering (AML) requirements mandated by law.

Technical data helps bbiplay detect suspicious activity, protect your account from unauthorised access, and improve the user experience based on how the platform is used overall.

1 Introduction

This Privacy Policy ("Policy") is published by bbiplay ("we", "Platform", "company") and describes our privacy practices regarding personal information collected through the bbiplay website, mobile app, and all related services. This Policy forms part of the overall agreement between you and bbiplay, together with the platform's Terms and Conditions.

Bbiplay is committed to protecting the privacy of all its members and users in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and continually review our data management practices to ensure ongoing compliance.

This Policy applies to all individuals who access or use the bbiplay platform, including website visitors, registered members, and any party that interacts with us through official communication channels.

2 Information Collection

2.1 Information You Provide Directly

We collect information you voluntarily provide when interacting with the bbiplay platform, including:

• Account registration details: username, password, full name, date of birth, phone number, and email address
• Identity verification documents (KYC): MyKad, passport, or valid government-issued ID
• Financial information: bank account number, bank name, and e-wallet details for deposit and withdrawal purposes
• Communications with the bbiplay customer support team via live chat, email, or Telegram
• Feedback, reviews, or responses to surveys we conduct

2.2 Information Collected Automatically

When you use the bbiplay platform, our systems automatically record certain technical information, including your device's IP address, the web browser type and operating system used, pages visited and time spent browsing, as well as cookie data and similar tracking technologies. This information is used solely for security purposes, service improvement, and detection of suspicious activity.

2.3 Information From Third Parties

In certain situations, bbiplay may receive information about you from trusted third parties such as identity verification service providers, financial institutions for transaction verification purposes, and fraud prevention agencies. This information is used solely to fulfil our compliance obligations and protect the security of your account.

3 Use of Information

Bbiplay uses the personal information collected for the following purposes:

• Service Provision: To create and manage your account, process deposit and withdrawal transactions, and provide access to all bbiplay platform services
• Identity Verification: To complete the KYC process required to comply with anti-money laundering (AML) regulations and other legal obligations
• Account Security: To detect and prevent fraud, unauthorised access, and suspicious activity on your account
• Customer Support: To respond to enquiries, resolve issues, and provide the necessary technical support
• Platform Communications: To send important account-related notifications, promotions you have opted in to receive, and material policy updates
• Service Improvement: To analyse aggregated usage patterns in order to improve platform features, user experience, and product offerings
• Legal Compliance: To fulfil applicable legal and regulatory obligations, and to cooperate with authorities as required by law

4 Data Sharing With Third Parties

4.1 General Principles

Bbiplay does not sell, rent, or disclose members' personal information to third parties for their own marketing purposes. Data sharing only occurs in the limited circumstances set out below, and is always subject to strict confidentiality agreements.

4.2 Trusted Service Providers

Bbiplay works with a number of trusted third-party service providers to keep the platform running, including payment gateway providers, identity verification service providers, cloud server operators that meet high security standards, and licensed gaming software providers. All such providers are contractually bound to protect your data and use it only for authorised purposes.

4.3 Legal Obligations

Bbiplay may disclose personal information to government authorities, law enforcement agencies, or courts when required to do so by applicable law, or when we have reasonable grounds to believe that such disclosure is necessary to prevent fraud, illegal activity, or threats to public safety.

5 Data Storage & Security

5.1 Retention Period

Bbiplay retains your personal information for as long as your account is active or as long as necessary to provide services. Once an account is closed, personal data is kept for the minimum period required by law — typically between 5 and 7 years — before being securely deleted or anonymised.

5.2 Security Measures

Bbiplay implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction, including:

• 256-bit SSL encryption for all data in transit
• Encryption of sensitive data stored in the database
• Strict access controls based on the need-to-know principle
• Regular security audits and penetration testing
• Intrusion detection system and 24/7 monitoring
• Mandatory data security training for all bbiplay staff

5.3 Servers & Data Location

Bbiplay member data is stored in secure data centres that comply with international security standards. All servers use redundant backup systems to ensure data availability and prevent data loss due to technical failure.

6 Cookies & Tracking Technologies

Bbiplay uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit the bbiplay website.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how users interact with the platform to help us improve the overall experience. All data is collected in aggregate and anonymised form.
• Functional Cookies: Saves your preferences such as language and display settings so you don't have to reset them each time you log in.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the bbiplay platform.

7 Your Rights as a Data Subject

As a bbiplay member and data subject under Malaysia's PDPA, you have the following rights regarding your personal information:

To exercise any of the above rights, please contact the bbiplay support team via live chat or email. We will process your request within 30 calendar days of receipt. In complex cases, this period may be extended to up to 60 days with prior notification.

8 Children's Data

The bbiplay platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If we discover that we have collected personal data from a person under 18 without proper age verification, we will take immediate steps to delete that data and close the account in question.

9 Cross-Border Data Transfers

In the context of bbiplay's global platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. In all such cases, bbiplay ensures that such data transfers are carried out with adequate safeguards — whether through adequacy decisions, standard contractual clauses, or other recognised protection mechanisms.

Bbiplay only partners with cloud and infrastructure service providers that hold internationally recognised security certifications such as ISO 27001 and SOC 2, ensuring your data is protected to the same standard regardless of physical storage location.

10 Changes to the Privacy Policy

Bbiplay reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform service developments. The "Updated" date at the top of this document will always reflect the date of the most recent revision.

For material changes — that is, changes that significantly affect how we use your personal data — bbiplay will notify members via their registered email or through an in-platform notice at least 7 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how bbiplay handles your personal information, or if you wish to exercise any of your data rights, please contact us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on the bbiplay platform
• Telegram: Via bbiplay's official support channel on Telegram

Bbiplay's Privacy Officer will review all privacy-related requests and complaints with due seriousness. We aim to respond within 14 business days from the date your request is received. For more complex cases requiring in-depth investigation, we will keep you updated on progress within the same timeframe.

If you are not satisfied with the response we provide, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner or the relevant data protection authority in your region.