bcb888 Privacy Policy

This Privacy Policy ("Policy") is issued by bcb888 ("bcb888", "we", "us", or "our") and applies to all personal data collected from individuals who access or use the bcb888 online gaming platform at bcb888.club ("Platform"), including all registered Members and visitors who have not completed registration.

bcb888 is committed to protecting the privacy and security of personal data. This Policy describes what personal data bcb888 collects, why it is collected, how it is used and stored, with whom it may be shared, and what rights you hold in respect of your personal data. This Policy should be read in conjunction with the bcb888 Terms & Conditions.

By registering an Account with bcb888 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not register an Account or continue using the Platform.

bcb888 collects the following categories of personal data:

bcb888 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data except where required by specific KYC or regulatory obligations and with explicit consent where applicable law requires it.

The majority of personal data bcb888 holds is provided directly by you when you: (a) complete the bcb888 registration form; (b) submit KYC verification documents; (c) make a deposit or withdrawal request; (d) contact bcb888 support via live chat or email; or (e) participate in promotional activities or surveys.

When you access bcb888, certain Technical Data is collected automatically through cookies, server logs, and analytics tools. This includes your IP address, device identifiers, and browsing behaviour on Platform pages. See Section 9 for details on cookies.

bcb888 may receive personal data about you from: (a) identity verification service providers conducting KYC checks on bcb888's behalf; (b) payment processors confirming the outcome of transaction authorisation requests; (c) fraud detection services flagging suspicious activity patterns; and (d) responsible gaming databases where a Member has self-excluded across multiple licensed platforms.

bcb888 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your bcb888 Account, verifying your identity and age, and administering your login credentials and account preferences.
• Service Delivery: Processing deposits and withdrawals in MYR, crediting bonuses, recording game outcomes, and delivering customer support interactions.
• Regulatory Compliance: Fulfilling bcb888's obligations under its international gaming authority licence, including KYC verification, anti-money-laundering screening, responsible gaming monitoring, and regulatory reporting.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeover attempts, bonus abuse, and other security incidents affecting the Platform or its Members.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling behaviour, administering self-imposed deposit limits and self-exclusion requests, and interacting with Members where responsible gaming concerns arise.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify performance bottlenecks, improve game load times, and optimise the Platform interface for Malaysian users accessing via mobile devices on Maxis, Celcom, Digi, and U Mobile networks.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal approvals, security alerts) and, where you have consented, promotional communications about bcb888 offers.
• Legal Proceedings: Exercising or defending bcb888's legal rights in disputes and complying with court orders or regulatory directives requiring disclosure.

bcb888 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform bcb888's obligations under the Member Account agreement, including account management, payment processing, and game operation.
• Legal Obligation: Processing required to comply with bcb888's obligations under its international gaming authority licence, applicable anti-money-laundering legislation, and any other regulatory requirement to which bcb888 is subject.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where bcb888's legitimate interests in maintaining a secure and compliant platform are not overridden by your privacy interests.
• Consent: Processing for optional promotional communications, where you have affirmatively opted in to receive such communications. You may withdraw consent at any time by contacting support or adjusting your Account notification preferences.

bcb888 does not sell, rent, or otherwise commercially exploit your personal data. bcb888 shares personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: Touch 'n Go eWallet, Boost, DuitNow, and FPX-connected financial institutions (including Maybank, CIMB, Public Bank) receive transaction data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification service providers receive copies of your submitted documents to conduct automated and manual identity checks on bcb888's behalf.
• Fraud & AML Screening Services: Transaction data and identity information may be shared with fraud detection and anti-money-laundering compliance service providers.
• Responsible Gaming Databases: Where required by bcb888's licence conditions, self-exclusion registrations may be shared with cross-operator responsible gaming databases.
• Regulatory Bodies: bcb888 may be required to disclose personal data to its international gaming authority regulator, law enforcement agencies, or other competent authorities in response to lawful requests, court orders, or regulatory directives.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by bcb888 may access personal data on a confidential basis to the extent necessary for the professional services they provide.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bcb888's business assets, personal data may be transferred as part of that transaction, subject to the same protections described in this Policy.

All third parties with whom bcb888 shares personal data are required to process such data only for the purposes for which it was shared and in accordance with applicable data protection standards.

bcb888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to bcb888's legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your Account's active status plus five (5) years following Account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following Account closure or the last transaction date, whichever is later, in compliance with applicable financial crime prevention regulations.
• Transaction Records: Retained for seven (7) years for tax and regulatory compliance purposes.
• Support Communications: Live chat transcripts and email correspondence retained for three (3) years from the date of the interaction.
• Technical Logs: Server access logs and IP address records retained for ninety (90) days for security monitoring and fraud investigation purposes.

Where bcb888 no longer has a lawful basis to retain personal data, it will be securely deleted or anonymised in accordance with bcb888's data destruction procedures.

bcb888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and bcb888 servers;
• AES-256 encryption for stored sensitive personal data including KYC documents and financial data;
• Strict access controls ensuring that only authorised bcb888 personnel may access personal data on a need-to-know basis;
• Regular security vulnerability assessments and penetration testing of bcb888 platform infrastructure;
• Multi-factor authentication requirements for internal bcb888 systems that hold Member personal data;
• Incident response procedures for the detection, containment, and notification of personal data breaches.

Notwithstanding these measures, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bcb888 will notify affected Members without undue delay in accordance with its regulatory notification obligations.

Cookies are small text files placed on your device by a website you visit. bcb888 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform experience for Malaysian Members.

• Strictly Necessary Cookies: Required for the Platform to function. These maintain your login session, remember your language preference (English or Bahasa Malaysia), and enable secure payment processing. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Collect anonymised aggregate data about how Members interact with the Platform — such as which game categories are most accessed and where page load times are slowest. This data is used to improve Platform performance and is not linked to individual Member identities.
• Functional Cookies: Remember your display preferences, such as game lobby filter settings and responsible gaming tool configurations, so these do not need to be reconfigured on each visit.

bcb888 does not serve third-party advertising cookies, social media tracking pixels, or any cross-site behavioural advertising technologies on Platform pages.

You may configure your browser to refuse all cookies or to indicate when a cookie is being sent. Please be aware that disabling strictly necessary cookies will impair core Platform functionality including login session maintenance. Most modern browsers (Chrome, Safari, Firefox, Edge) provide cookie management settings in their Privacy or Security menus.

As a bcb888 Member, you hold the following rights in respect of your personal data, subject to applicable legal and regulatory conditions:

• Right of Access: You may request a copy of the personal data bcb888 holds about you. bcb888 will respond to access requests within thirty (30) calendar days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (such as email address updates) can be made via Account Settings. Corrections to identity data require KYC document resubmission.
• Right to Erasure: You may request deletion of your personal data. Note that bcb888 is required by its regulatory obligations to retain certain data for minimum periods as described in Section 7, which takes precedence over erasure requests for retained categories.
• Right to Restrict Processing: You may request that bcb888 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing on legitimate interests grounds.
• Right to Data Portability: You may request a machine-readable export of personal data you have directly provided to bcb888, where technically feasible.
• Right to Object: You may object to processing based on bcb888's legitimate interests, including profiling for responsible gaming monitoring purposes, and to processing for direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact bcb888's Data Protection contact via live chat or at the email address in Section 14. bcb888 may need to verify your identity before processing your request to protect the privacy of other Members and prevent fraudulent data access requests.

bcb888 is strictly an adult platform. The Platform is not directed at, and bcb888 does not knowingly collect personal data from, persons under the age of twenty-one (21). 21+

Age verification is a mandatory step in the bcb888 KYC process. Where bcb888 discovers or is notified that personal data has been collected from an individual who is under 21, the relevant Account will be immediately suspended, all associated personal data will be reviewed and securely deleted to the extent not required for regulatory investigation purposes, and the matter will be referred to bcb888's compliance team.

If you are aware that a person under the age of 21 has registered an Account with bcb888, please notify bcb888 immediately via live chat.

bcb888's primary data infrastructure is hosted in data centres that maintain the security standards required by bcb888's international gaming authority licence. Where personal data is processed by third-party service providers located outside Malaysia, bcb888 ensures that appropriate safeguards are in place to protect the data, including contractual clauses that require the third party to apply data protection standards equivalent to those required by bcb888's regulatory obligations.

By using bcb888, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Malaysia as described above, subject to the safeguards set out in this Policy.

bcb888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, bcb888's data practices, or the structure of the Platform. Where amendments are material, bcb888 will provide notice to active Members via registered email or in-platform notification at least seven (7) calendar days prior to the effective date of the change.

The current version of this Policy, with its effective date, is always available at bcb888.club/privacy-policy. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or bcb888's handling of your personal data, please contact bcb888 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, in English and Bahasa Malaysia. Live chat is the recommended channel for urgent data protection concerns.
• Email: [email protected]

bcb888 aims to acknowledge all written data protection enquiries within forty-eight (48) hours and to provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a high volume of data, bcb888 will notify you of any extension to this timeline within the initial thirty-day period.

If you are not satisfied with bcb888's handling of your personal data or your data rights request, you have the right to lodge a complaint with bcb888's international gaming authority regulator or with the competent data protection supervisory authority in your jurisdiction.