1 Introduction
This Privacy Policy (hereinafter "this Policy" or "the Policy") is published by bcb88d (hereinafter "bcb88d", "We", "Us", or "Our"), the operator of the online gaming and sports betting platform accessible at https://bcb88d.cam and any associated subdomains or mobile interfaces.
This Policy describes how bcb88d collects, receives, uses, stores, shares, transfers, and processes personal data belonging to individuals who access our platform, register an account, or interact with our services (hereinafter "You", "the Player", "the User", or "the Data Subject"). It applies to all personal data processed in connection with your use of bcb88d, including data collected through our website, live chat system, email communications, and payment processing flows.
bcb88d is committed to handling your personal data responsibly and in accordance with internationally recognised data protection standards. We recognise our obligations to Malaysian users and to the broader requirements imposed by our international gaming licence. By registering an account or using the bcb88d platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
Note for Malaysian Users: Malaysia's Personal Data Protection Act 2010 (PDPA) establishes key data subject rights. While bcb88d is an internationally licensed platform operating under offshore jurisdiction, we align our data protection practices with the principles of the Malaysian PDPA and apply them to all Malaysian users. If you have questions about your rights under Malaysian law, we encourage you to consult the relevant authority.
2 Definitions
For the purposes of this Policy, the following terms shall have the meanings set out below:
- "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual — including your name, email address, Malaysian IC number, date of birth, IP address, and payment details.
- "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, erasure, or destruction.
- "Data Controller" means bcb88d, the entity that determines the purposes and means of processing your personal data.
- "Data Processor" means a third party that processes personal data on behalf of bcb88d under a written agreement and our instructions — for example, a payment gateway provider such as the FPX or DuitNow infrastructure operator.
- "KYC Data" means identity verification documents submitted during the Know Your Customer process — including government-issued ID (MyKad, Passport, Driver's Licence), proof of address documents, and selfie photographs.
- "Cookies" means small text files placed on your device by the bcb88d platform to enable functional, analytical, and security features as described in Section 10 of this Policy.
- "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for one or more defined purposes.
3 Personal Data We Collect
bcb88d collects the following categories of personal data in connection with your use of the platform:
| Category |
Examples |
Purpose |
| Identity Data |
Full name, date of birth, nationality, gender, MyKad / Passport number |
Account registration, KYC verification, age enforcement (21+) |
| Contact Data |
Email address, mobile number |
Account communications, support, promotional notices (with consent) |
| Financial Data |
Bank account details, e-wallet identifiers (Maybank2u, DuitNow, Touch 'n Go), transaction history |
Processing deposits and withdrawals, fraud prevention |
| KYC Documents |
Scanned or photographed ID cards, utility bills, selfies holding ID |
Regulatory identity verification, AML compliance |
| Technical Data |
IP address, device type, browser, operating system, session timestamps |
Platform security, fraud detection, geolocation screening |
| Behavioural Data |
Game history, bet amounts, session duration, deposit and withdrawal patterns |
Responsible gambling monitoring, bonus eligibility, platform improvement |
| Communication Data |
Live chat transcripts, email correspondence, support ticket content |
Dispute resolution, service quality assurance, legal compliance |
4 How We Collect Your Data
4.1 Directly From You
The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to any promotional offer. This includes data entered into registration forms, live chat sessions, and document upload interfaces.
4.2 Automatically During Platform Use
When you access the bcb88d platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device fingerprint, browser type, pages visited, click patterns, and session duration. This data is collected to maintain platform security, detect fraud, and ensure the integrity of our services.
4.3 From Third-Party Service Providers
In some circumstances, we may receive personal data about you from third parties — for example, from payment processors such as FPX or DuitNow when processing a transaction, from identity verification services during KYC review, or from fraud screening services when assessing account risk. Any data received from third parties is handled in accordance with this Policy.
5 How We Use Your Personal Data
bcb88d processes your personal data for the following purposes:
- Account Creation and Management: To register your account, verify your identity, manage your login credentials, and maintain your account settings and preferences.
- Payment Processing: To facilitate deposits via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels, and to process withdrawal requests to your verified payment method.
- KYC and Regulatory Compliance: To verify your age (21+ requirement), confirm your identity, comply with anti-money laundering (AML) obligations, and meet the requirements of our international gaming licence.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
- Responsible Gambling: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, apply deposit limits, and implement responsible gambling interventions where appropriate.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via our 24/7 live chat and email support channels.
- Marketing and Promotions: Where you have provided consent, to send you relevant promotional offers, bonus notifications, and platform updates. You may withdraw marketing consent at any time by contacting support.
- Platform Improvement: To analyse aggregated usage data, improve platform performance, and develop new features that better serve Malaysian players.
- Legal Compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.
6 Legal Basis for Processing
bcb88d processes your personal data on one or more of the following legal grounds:
- Contractual Necessity: Processing required to perform the contract between you and bcb88d — including account management, payment processing, and game provision.
- Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC verification, AML requirements, and licence conditions.
- Legitimate Interests: Processing carried out in bcb88d's legitimate business interests — such as fraud prevention, platform security, and responsible gambling monitoring — where those interests are not overridden by your data protection rights.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 Who We Share Your Data With
bcb88d does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to data processing agreements:
- Payment Processors: FPX, DuitNow, and the technical operators of Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, and GrabPay, to the extent required to facilitate your transactions.
- Identity Verification Providers: Third-party KYC and AML screening services that assist in verifying your identity and assessing account risk.
- Gaming Platform Providers: Game studio and live dealer platform operators who supply the games available on bcb88d. These providers receive only the session data required to deliver their services.
- IT Infrastructure and Security Providers: Cloud hosting, cybersecurity, and platform monitoring services that support bcb88d's operations under strict data security agreements.
- Legal and Regulatory Authorities: Where required by law, court order, or the direction of a competent regulatory authority, bcb88d may disclose your personal data to law enforcement or regulatory bodies.
Our commitment: Any third party that processes data on behalf of bcb88d is contractually required to implement appropriate data security measures and is prohibited from using your personal data for any purpose other than the specific service they provide to bcb88d.
8 Data Security
bcb88d takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the bcb88d platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock symbol in your browser address bar at all times.
- Access Controls: Access to personal data within bcb88d is restricted to authorised personnel on a strict need-to-know basis. Staff with access to sensitive data undergo background screening and regular data protection training.
- Password Hashing: Account passwords are stored as one-way cryptographic hashes. bcb88d does not store or have access to your plaintext password.
- Regular Security Audits: Our platform undergoes scheduled internal security reviews and periodic external penetration testing.
- Fraud Monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, unusual transaction patterns, and other security anomalies.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, bcb88d will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.
9 Data Retention
bcb88d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulatory obligations, or our international gaming licence conditions. The following general retention periods apply:
- Account and identity data: Retained for the duration of your active Account and for a minimum of 5 years following account closure, to comply with AML and licensing requirements.
- Transaction and financial records: Retained for a minimum of 7 years in accordance with standard financial record-keeping obligations.
- KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
- Communication and support records: Retained for 3 years from the date of the interaction, or longer if the matter is the subject of ongoing legal proceedings.
- Marketing preferences and consent records: Retained for the duration of your account and updated whenever you change your preferences.
- Technical and log data: Typically retained for 12 months for security and fraud detection purposes, after which it is anonymised or deleted.
10 Cookies & Tracking Technologies
bcb88d uses cookies and similar tracking technologies to operate the platform, maintain your session, and collect analytical data. The categories of cookies we use are as follows:
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable session management, login authentication, and basic security features. These cannot be disabled without impacting platform functionality.
- Functional Cookies: Used to remember your preferences — such as language settings and your last-used payment method — so that the platform behaves as you expect on subsequent visits.
- Analytical Cookies: Used to collect aggregated, anonymised data on how users interact with the bcb88d platform. This data helps us identify technical issues and improve the user experience. Individual users are not identified by these cookies.
- Security Cookies: Used to detect suspicious or fraudulent activity, verify that requests originate from legitimate user sessions, and protect against cross-site request forgery (CSRF) attacks.
Cookie management: You may control cookies through your browser settings. Disabling strictly necessary cookies may prevent some platform features from functioning correctly. Analytical and functional cookies can be disabled without affecting core platform access. Refer to your browser's help documentation for instructions on managing cookie preferences.
11 Your Rights as a Data Subject
As a player on the bcb88d platform, you hold the following rights in relation to your personal data. These rights may be subject to legal limitations where bcb88d has overriding legal obligations to retain or process data:
- Right of Access: You may request a copy of the personal data bcb88d holds about you, along with information on how it is being used. We will respond to verified access requests within 30 calendar days.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update most account details directly through your account profile settings.
- Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that bcb88d may retain certain data where required by law or regulatory obligation, even after an erasure request.
- Right to Restrict Processing: You may request that bcb88d restrict its processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
- Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that your personal data be provided to you in a structured, machine-readable format.
- Right to Object: You may object to processing based on bcb88d's legitimate interests, including profiling for responsible gambling purposes. You may also object to marketing processing at any time.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will verify your identity before processing any data subject request.
12 Minors & Age Restriction
The bcb88d platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process personal data relating to individuals under the age of 21. Registration on bcb88d requires affirmative confirmation of age eligibility, and KYC verification is used to enforce this requirement.
If bcb88d becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the original payment source.
If you believe that a minor has registered on the bcb88d platform using false information, please contact our support team immediately so that the matter can be investigated and resolved promptly.
13 Cross-Border Data Transfers
bcb88d operates under an international gaming licence and may process or store personal data on servers located outside of Malaysia. In cases where your personal data is transferred to countries that do not have data protection laws equivalent to those in Malaysia, bcb88d will implement appropriate safeguards — such as contractual data processing agreements — to ensure that your data receives an equivalent level of protection.
Payment data processed through FPX and DuitNow is handled within Malaysia's domestic interbank network and is subject to the applicable Malaysian banking regulations. Data related to international payment methods and cryptocurrency transactions may be processed by service providers in other jurisdictions.
14 Amendments to This Policy
bcb88d reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform operations. Material changes to this Policy will be communicated to registered users via email notification or a prominent notice on the platform at least 14 days prior to the changes taking effect.
The version number and effective date at the top of this document indicate when the Policy was last revised. Your continued use of the bcb88d platform after the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bcb88d holds about you, please contact us through one of the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, directly on the bcb88d platform. Our support agents can handle general privacy enquiries in real time.
- Email: [email protected] — for formal data subject requests, please include "Privacy Request" in the subject line and provide sufficient information to verify your identity.
We aim to acknowledge all privacy-related enquiries within 3 business days and to resolve substantive data subject requests within 30 calendar days of identity verification.
Responsible Gambling & Data: If you wish to exercise self-exclusion, set deposit limits, or make use of any responsible gambling tool — which involves processing your personal data for player protection purposes — please visit our
Responsible Gambling page or contact support directly. These requests are handled with the highest priority.