Privacy Policy BC8MY – Data Protection & Privacy for Malaysia Players Guaranteed

1. Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes the personal data collection, use, storage, and disclosure practices carried out by BC8MY ("we", "Platform") through the website bc8my.pro and the BC8MY mobile app.

By registering an account or using any BC8MY service, you agree to the processing of your personal data as described in this Policy. If you do not agree, please discontinue use of the platform and close your account.

BC8MY operates in compliance with Malaysia Personal Data Protection Act 2010 (PDPA). We act as a "data processor" and are fully responsible for the data we hold about you.

2. Personal Data We Collect

BC8MY collects various categories of personal data depending on how you interact with our platform. Below is a summary of the types of data collected:

We only collect data necessary for the stated purpose. We do not collect sensitive data such as health information or religious beliefs unless required by law.

3. Purpose of Data Collection & Processing

BC8MY processes your personal data for the following purposes, based on the applicable legal basis:

• Identity verification (KYC) — to comply with anti-money laundering regulations and player age verification requirements.
• Account management — enables you to log in, manage your profile, and handle deposits and withdrawals.
• Transaction processing — to securely process deposits and withdrawals via integrated payment methods.
• Platform security — to detect fraud, unauthorized access, and suspicious activity.
• Legal compliance — to fulfill reporting obligations to relevant authorities when required.
• Service improvement — to analyze usage patterns and improve the player experience.
• Service communications — to send transaction notifications, security updates, and important account information.
• Marketing (with consent) — to deliver BC8MY promotional content and offers if you have given your consent.

4. Data Sharing & Disclosure

BC8MY does not sell your personal data. We only share your data in the following limited circumstances:

• Payment service providers — banks, FPX, DuitNow, and eWallet providers integrated with the BC8MY platform to process your financial transactions.
• Game providers — gaming software companies that provide slots, Live Casino, and sports betting content on the BC8MY platform, subject to strict confidentiality agreements.
• IT service providers — hosting companies, cloud infrastructure, and cybersecurity firms that help us operate the platform securely.
• Legal Authority — if required by court order, law enforcement investigation, or mandatory reporting obligations.

All third parties that receive BC8MY player data are bound by strict data processing agreements and are prohibited from using that data for any purpose other than the requested service.

5. Data Security & Protection

BC8MY continually invests in technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure:

• Transit encryption — all communications between the platform and your device are protected by TLS 1.3 with a valid 256-bit SSL certificate.
• Storage encryption — sensitive data such as passwords and financial information is encrypted in the database using bcrypt and AES-256 algorithms.
• Internal access controls — only BC8MY staff with a legitimate business need may access player data, and such access is logged and audited regularly.
• 24/7 security monitoring — an automated threat detection system continuously monitors the platform for any unusual activity.
• Regular security testing — penetration testing and security audits are conducted by independent third parties annually.

While BC8MY takes all reasonable steps to protect your data, no security system is entirely perfect. In the event of a serious data breach, we will notify affected players within 72 hours after the breach is identified.

6. Cookies & Tracking Technologies

BC8MY uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Types of cookies we use:

• Essential Cookies — required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance Cookies — to collect statistical information on how players use the platform for improvement purposes. This data does not personally identify individuals.
• Preference Cookies — to save your personal settings such as language preferences and display settings for your convenience.
• Analytic Cookies — helps us understand overall platform usage patterns for strategic planning purposes.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the bc8my platform.

7. Your Rights as a Data Subject

Under Malaysia's PDPA and bc8my's privacy principles, you have the following rights regarding your personal data:

8. Data Retention Period

BC8MY retains your personal data for as long as necessary to fulfil the purpose for which it was collected, including legal obligations, accounting, and reporting. General retention guidelines are as follows:

• Active account data — retained for the duration of the active account period plus 7 years after account closure for financial compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's tax and anti-money laundering legal requirements.
• Support communication logs — retained for 2 years for quality assurance and dispute resolution purposes.
• Technical log data — retained for 90 days for security and technical troubleshooting purposes.
• Marketing data — retained until you withdraw your consent or close your account.

Once the retention period expires, data will be securely deleted or anonymised in accordance with BC8MY's high-standard data deletion procedures.

9. Cross-Border Data Transfers

In the course of platform operations, some bc8my player data may be processed or stored outside Malaysia, primarily by the cloud service providers and international gaming technology vendors we use.

BC8MY ensures that any cross-border data transfers are carried out with appropriate safeguards, including:

• Binding data processing agreements with all third-party service providers.
• Assessment of the data protection level in the destination country before any transfer is permitted.
• Use of recognised standard contractual clauses to ensure ongoing protection.

10. Protection of Children

BC8MY is a platform exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If you believe someone under 18 has registered a bc8my account, please notify us immediately. We will investigate and close the account at once, and delete all related data in accordance with our security procedures.

11. Links to Third-Party Platforms

The BC8MY platform contains links to third-party services such as payment providers and gaming platforms. Once you leave the BC8MY platform and access a third-party platform, BC8MY's Privacy Policy no longer applies.

BC8MY is not responsible for the privacy practices or content of third-party platforms. We encourage you to read the privacy policy of each platform you visit independently.

12. Amendments to This Privacy Policy

BC8MY reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological advancements.

Whenever this Policy is amended in a material way, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to registered players via email or bc8my in-app notifications.
• In the case of major amendments, obtaining fresh consent from players before the changes take effect.

Continued use of the bc8my platform after any amendments are published is considered acceptance of the revised Policy. If you do not agree with the amendments, you must stop using the platform and close your account.