BCB8 Privacy Policy – Malaysian Players' Personal Data Protection, Fully Taken Care Of by BCB8

This Privacy Policy describes BCB8's practices regarding the collection, use, disclosure and protection of personal information you provide when using the bcb8.xyz platform and all related services. "BCB8", "we", "platform" refer to the BCB8 Sports Betting and casino service provider operating in Malaysia.

BCB8 takes the privacy of our members very seriously. We understand that in today's digital landscape, trust in a platform depends greatly on how it handles users' personal information. That is why we invest heavily in security infrastructure, staff training, and the development of clear, easy-to-understand policies — not just confusing legal language.

This policy applies to all information BCB8 collects through our website, mobile app (where applicable), customer support services, and all other interaction channels between you and BCB8. By using the BCB8 platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

BCB8 collects personal data from you in various ways as you interact with our platform. Below is a full overview of the types of data we collect and how they are gathered:

Data You Provide Directly:

• Identity information: full name, date of birth, MyKad number (for KYC verification)
• Contact information: email address, Malaysian phone number, residential address
• Account information: username, password (stored in encrypted form), security questions
• Identity verification documents: copy of MyKad, bank statement (when requested for KYC)
• Financial information: payment methods used (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX) – BCB8 does not store bank account details or full card numbers

Automatically Collected Data:

• Device information: device type, operating system, web browser version
• Network information: IP address, geographic location (city/state level only), internet service provider
• Platform activity data: pages visited, searches made, games played, betting history, session duration
• Cookie data and similar tracking technologies (see Section 7 for more information)

BCB8 uses the personal data collected solely for legitimate purposes necessary to operate the platform and deliver the services you use. The following outlines how we use your data:

• Account Management: Creating and maintaining your BCB8 account, processing registration, verifying your identity and enabling secure login.
• Transaction Processing: Processing deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX accurately and securely.
• Service Provision: Providing access to Sports Betting (Malaysia Super League, EPL, badminton, cricket), Live Casino, roulette and e-sports (MPL Malaysia, DOTA 2) as requested by you.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, platform abuse, and violations of our Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and providing appropriate support to members who need it.
• Service Communications: Sending important account-related communications, transaction updates, terms changes, and security notices.
• Marketing (with your consent): Sending promotional information, bonus offers and BCB8 updates — only to members who have given consent to receive marketing communications.
• Legal Compliance: Fulfilling legal obligations under PDPA 2010 and other applicable Malaysian laws.

BCB8 does not sell, rent or trade members' personal data to any third party for marketing purposes. However, in the course of operating the platform, BCB8 may share your data with the following parties within a limited and lawful scope:

• Payment Service Providers: Payment gateways that process your transactions (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX providers) receive only the information required to process those transactions. They are bound by strict confidentiality agreements.
• Game Software Provider: Live casino and gaming software providers (such as Evolution Gaming for live roulette) may receive session IDs and game data necessary to run the games. They do not receive your full identity information.
• Technical Service Providers: Companies that assist BCB8 with technical operations such as hosting, platform analytics and fraud detection – all under strict data protection agreements.
• Malaysian Authorities: BCB8 will disclose information to Malaysian authorities (police, courts, regulatory bodies) when required by law or a valid court order. BCB8 will notify you of such requests unless prohibited from doing so by law.

In all of the above cases, BCB8 ensures that only the minimum necessary information is shared, and all receiving parties are bound by adequate confidentiality and data security obligations.

BCB8 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• Transmission Encryption: All data transmitted between your device and BCB8's servers is encrypted using TLS (Transport Layer Security) protocol with 256-bit SSL encryption.
• Storage Encryption: Sensitive data such as passwords is stored in a hashed format that cannot be decrypted. Sensitive financial information is encrypted at rest.
• Access Controls: Access to member personal data within BCB8's systems is restricted to staff who genuinely require it to carry out their duties, with full audit logs maintained.
• Security Monitoring: BCB8's systems are continuously monitored to detect suspicious activity, intrusion attempts, and unusual anomalies.
• Security Testing: BCB8 conducts regular penetration testing to identify and patch vulnerabilities before they can be exploited.
• Staff Training: All BCB8 staff who handle personal data undergo rigorous data protection training and are bound by confidentiality agreements.

While BCB8 takes all reasonable steps to protect your data, no security system in the world can be guaranteed 100% safe from every threat. In the unlikely event of a data security incident affecting your personal data, BCB8 will notify you and the relevant authorities within the timeframe required by law.

BCB8 retains your personal data only for as long as necessary for the purposes described in this Privacy Policy, or to fulfil applicable legal obligations. The following are BCB8's data retention guidelines:

• Active Account Data: Retained for as long as your account is active on BCB8 and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Support Communication Logs: Retained for 3 years following your last interaction, for reference and dispute resolution purposes.
• KYC (Identity Verification) Data: Retained for the period required under Malaysian KYC laws, typically 5 to 7 years.
• Analytics & Performance Data: Stored in aggregated form that cannot be individually identified after a certain period.

When data is no longer needed and there is no legal obligation to retain it, BCB8 will securely delete or anonymise it in accordance with our approved data deletion procedures.

BCB8 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device by your web browser when you visit bcb8.xyz.

BCB8 uses several types of cookies, as described in the sections below. More information about the cookies we use and how to manage their settings can be found through your browser settings or by contacting the BCB8 support team.

Under Malaysia's Personal Data Protection Act 2010 and BCB8's internal commitments, you have the following rights with respect to your personal data:

• Right of Access: You have the right to obtain a copy of the personal data BCB8 holds about you in a readily readable format.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal information in your BCB8 account.
• Right to Withdraw Consent: You may withdraw consent for marketing communications at any time without affecting your use of the BCB8 platform.
• Right to Object: You have the right to object to the processing of your personal data in certain circumstances provided for by law.
• Right to Erasure: In certain circumstances (where data is no longer needed or consent has been withdrawn), you may request the deletion of your personal data, subject to BCB8's legal obligations.
• Right to Lodge a Complaint: If you believe BCB8 has violated your privacy rights, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact the BCB8 team by email at support@bcb8.xyz with the subject line "Privacy Rights Request". BCB8 will respond to your request within 14 business days.

BCB8 does not provide services to individuals under 18 years of age and does not knowingly collect personal data from children or minors. Age verification is enforced during the account registration process.

If BCB8 discovers that personal data has been collected from a person under 18 years of age without valid parental or guardian consent, we will take immediate steps to delete that information and close the associated account.

If you believe your child or someone under 18 in your care has registered for or used the BCB8 platform, please contact us immediately at support@bcb8.xyz so we can take the appropriate action.

BCB8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. Any material changes will be communicated to you via:

• Email notice to your registered address at least 14 days before the changes take effect
• Notice prominently displayed on the bcb8.xyz homepage
• Updating the "Last Effective Date" at the top of this document

We encourage you to review this Privacy Policy periodically to stay informed about how BCB8 protects your personal information. Continued use of the BCB8 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how BCB8 handles your personal data, please reach out to us through the following channels:

• Email: support@bcb8.xyz (with the subject line "Privacy Enquiry" or "Privacy Rights Request")
• Live Chat: Available on the BCB8 platform – 24 hours a day, 7 days a week

BCB8 is committed to responding to all privacy-related enquiries within 14 working days. For formal complaints that cannot be resolved through the above channels, you may contact the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my for further guidance.

We value the trust you place in BCB8 and are committed to maintaining it through privacy practices that are transparent, responsible and centred on the interests of our members.