Privacy Policy BD89 — Member Personal Data Protection

This Privacy Policy is issued by BD89 and applies to all users who access or register on our platform via the website bd89.ng as well as the official bd89 mobile app. This document explains in detail how we handle your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international standards.

By registering an account or continuing to use the BD89 platform, you are deemed to have read, understood, and agreed to all provisions of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team.

This Privacy Policy covers all activities on our platform, including account registration, login, deposits and withdrawals, participation in games, use of the VIP programme, and any communications between you and the BD89 team.

BD89 collects various types of information to ensure our platform operates securely and efficiently. The information we collect can be divided into two main categories: information you provide directly and information collected automatically when you use the platform.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

• Device Data: The device type, operating system, browser version, and screen resolution you use when accessing the bd89 platform.
• Network Data: IP address, approximate location based on IP, internet service provider (ISP) name, and connection protocol used.
• Usage Data: Pages visited, time spent, click sequences, games played, and betting patterns — used to enhance the user experience.
• Transaction Data: Deposit history, withdrawals, wagering, wins, and bonus usage within your account.
• Cookie Data: Session information, language preferences, and analytics cookie data — subject to your consent via the platform's cookie settings.

Every piece of data we collect is used for a clear and lawful purpose. bd89 does not use your data for any purpose beyond what is stated below without first obtaining your additional consent.

• Account Management: To process registration, verify identity, enable login, and manage all functions related to your account.
• Financial Processing: To process deposits, withdrawals, bonus payments, and all other financial transactions carried out through the bd89 platform.
• Platform Security: To detect and prevent fraudulent activity, money laundering, account abuse, and other cybersecurity threats that may affect you or our platform.
• Legal Compliance: To fulfil our obligations under the PDPA 2010, anti-money laundering (AML) laws, and reporting requirements to relevant authorities where required by law.
• Customer Support: To respond to enquiries, resolve complaints, and provide technical assistance through the various support channels available.
• Service Improvement: To analyse usage patterns in order to improve platform design, speed, user experience, and the range of games offered.
• Marketing Communications: To send promotions, bonus offers, and the latest platform updates — only to members who have consented to receive such communications.
• Responsible Gaming: To analyse wagering patterns to identify members who may require additional support or protection in line with our responsible gaming policy.

BD89 does not sell members' personal data to any third party for marketing or commercial purposes. However, there are certain situations where we need to share some of your data with selected third parties to ensure our platform operates properly and securely.

4.1 Authorised Third Parties

• Payment Providers: Financial institutions, payment processors, and e-wallet providers such as DuitNow, FPX, Touch 'n Go, GrabPay, and Boost that are required to process your transactions. They receive only the minimum information necessary to complete the payment.
• Game Providers: Third-party game providers supplying slots, Live Casino, and Sports Betting products on our platform. Data is shared on a limited basis and solely for game operation purposes.
• KYC Services: Third-party identity verification service providers that assist us in conducting legally required KYC checks securely.
• Analytics Services: Analytics tools we use to understand platform usage patterns — shared data is aggregated and cannot be used to identify individuals.
• Cloud Infrastructure: Cloud service providers hosting bd89's technical infrastructure, subject to strict data confidentiality agreements.

4.2 Legally Required Disclosures

BD89 may disclose your personal data to government authorities, law enforcement, or courts where we are legally required to do so by law, court order, or valid legal process. In such situations, we will endeavour to notify you in advance unless prohibited by law.

BD89 continuously invests in the latest security infrastructure to ensure your personal and financial data is always protected. We employ multiple layers of protection working together to create a safe environment for every member.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and bd89's servers is encrypted using industry-standard encryption protocols — ensuring no third party can intercept or read your data in transit.
• Stored Data Encryption: Sensitive data such as bank account numbers and KYC information is encrypted at rest using the internationally recognised AES-256 encryption algorithm.
• Internal Access Controls: Only authorised bd89 staff may access members' personal data, and only to the extent necessary to perform their duties. All access is logged and actively monitored.
• Regular Security Testing: BD89 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities.
• Real-Time Threat Detection System: Our platform is equipped with an anomaly detection system that monitors suspicious activity around the clock and automatically responds to identified threats.
• Two-Factor Authentication (2FA): Members can and are encouraged to enable two-factor authentication to add an extra layer of security to their account login process.

The bd89 platform uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and ensure security features function correctly. The following are the types of cookies we use:

• Essential Cookies: Required for the platform to function correctly — including login session cookies, language settings, and security preferences. These cookies cannot be disabled as they are critical to platform operations.
• Analytics Cookies: Helps us understand how members use the platform — most visited pages, user flows, and site performance. Data is collected in aggregate and does not personally identify individuals.
• Functional Cookies: To save user preferences and settings such as display theme, game preferences, and notification settings for a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, cyber attacks, and to ensure the integrity of your login sessions.

You can manage cookie settings through your web browser or via the cookie settings panel available on the BD89 platform. Please note that disabling certain cookies may affect platform functionality.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by BD89. We are committed to respecting and facilitating the exercise of these rights:

BD89 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account is active on the BD89 platform and for a reasonable period after the account becomes inactive.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's financial and tax reporting legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure, in accordance with the requirements of the Anti-Money Laundering Act 2001.
• Security Logs: Retained for 2 years for the purpose of security incident investigation and fraud prevention.
• Support Communication Data: Retained for 3 years for reference and resolution of any disputes that may arise.

Upon expiry of the defined retention period, your data will be securely deleted or anonymized using industry-recognized data deletion procedures.

BD89 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in platform operations. We are committed to keeping you informed of any material changes.

When significant changes occur, we will notify you through one or more of the following methods:

• In-platform notifications on bd89 while you are logged in.
• Email notification to the email address registered in your account.
• Updates the "Last Updated" date shown at the top of this document.

Continued use of the bd89 platform after any changes take effect constitutes your acceptance of the latest version of this Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bd89 handles your personal data, our team is ready to assist you. We have a dedicated Data Protection Officer (DPO) to address privacy-related matters.

You can reach us through the following channels:

• Live Chat: Available 24/7 via the bd89 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for more detailed written inquiries regarding privacy and data protection.
• General Support Email: [email protected] — for general inquiries regarding accounts and services.

We aim to respond to all privacy-related enquiries within 3 working days and resolve all official requests within 14 working days of the date of receipt.