Privacy Policy BD89 – Personal Data Protection for Malaysian Players

BD89 is an online entertainment platform operating for adult users in Malaysia. In delivering our services, we collect certain personal data required to enable you to enjoy a smooth, secure, and enjoyable gaming experience.

Our commitment to privacy goes beyond a legal obligation — it is a core value we uphold. bd89 has never and will never sell, rent, or disclose your personal information to third parties for marketing purposes without your explicit consent. Every data-related decision is made with your interests and security as the top priority.

• We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA).
• All bd89 staff who handle user data are bound by strict confidentiality agreements.
• Our systems are regularly audited by independent parties to ensure data security compliance.

BD89 only collects information that is strictly necessary to provide our services. We do not collect excessive or irrelevant data. The following are the categories of information we collect:

Registration & Identity Information:

• Full name as it appears on your identification document.
• National Identity Card number (MyKad) or passport for KYC verification purposes.
• Date of birth to verify you are 18 years of age or older.
• Active email address and phone number for communication and account verification.
• Passwords encrypted using the bcrypt standard.

Financial Information:

• Bank account number registered for deposit and withdrawal purposes.
• Transaction records including deposits, withdrawals, and wagering history.
• Digital wallet information (Touch 'n Go, GrabPay) where applicable.

Technical & Usage Information:

• IP address and general geographic location (state/city).
• Device type, operating system, and web browser version.
• Game activity logs and login session records.
• Cookie data and your platform settings preferences.

Every piece of information we collect has a clear and legitimate purpose. bd89 uses your data solely for the following purposes:

We will not use your data for any purpose other than those stated above without obtaining your prior consent. If you do not wish to receive marketing communications, you may opt out at any time through your account settings.

BD89 continually invests in the latest security infrastructure to ensure your data is always protected. The following are the key security measures we implement:

• Data encryption in transit: All communication between your device and bd89 servers is protected by TLS 1.3 encryption, the highest-grade security protocol used by global financial institutions.
• Data encryption at rest: Sensitive information such as passwords and banking details is encrypted using the AES-256 standard in our database.
• Strict access controls: Only BD89 staff with specific authorisation may access user data, and all access is logged for audit purposes.
• Regular security testing: We conduct regular penetration testing and vulnerability scans through independent third parties.
• Two-factor authentication (2FA): Available for all accounts to add an extra layer of security.
• 24/7 Monitoring: Our threat monitoring system operates around the clock to detect and respond to any suspicious activity.

Your data is retained for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Once the retention period expires, data will be securely deleted using non-recoverable methods.

BD89 does not sell or rent your personal information to any third party for marketing purposes. However, in the following limited situations, we may share your information with trusted parties:

• Payment service providers: Integrated payment gateways that process your transactions — all compliant with PCI DSS standards and bound by strict data protection agreements.
• Identity verification service providers: Our KYC partner helps us verify player identities to meet Anti-Money Laundering (AML) legal requirements.
• Platform analytics providers: Anonymous technical data used to improve the user experience.
• Legal authorities: Where required by court order, law enforcement authorities, or a competent regulatory body, we will comply with the applicable disclosure obligations.

All third parties working with bd89 are required to meet data protection standards equal to or higher than our own. We conduct thorough due diligence on all service partners before any data sharing is approved.

The bd89 website and app use cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform — for example, the most frequently visited pages and server response times. This data is collected anonymously.
• Preference Cookies: Stores your preferences such as language, display theme, and saved login information.
• Analytics Cookies: Used to understand overall usage patterns for the purpose of continuous platform improvement.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the BD89 platform. Continued use of our platform after reading this notice is considered your consent to the use of cookies as described.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal information we hold about you:

BD89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. Any material amendments will be communicated to you via:

• In-platform notifications on bd89 while you are logged in.
• Notification email to the address registered in your account.
• Update the "Last Updated" date at the top of this document.

We encourage you to review this page periodically. Continued use of the bd89 platform after any amendments take effect will be considered your acceptance of the updated terms. If you do not agree with any amendments, you have the right to close your account and we will process that request in accordance with established procedures.

If you have any questions, concerns, or wish to exercise your rights regarding this Privacy Policy, the bd89 Data Privacy team is ready to assist you. We are committed to responding to every inquiry within 3 business days and resolving requests within 30 business days.

You can reach us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week on the bd89 platform.
• Support Email: [email protected] (displayed as plain text only, no clickable link)
• Language: Support available in Bahasa Melayu and English.

When contacting us regarding privacy matters, please clearly state the type of request (e.g., "Data Access Request" or "Data Deletion Request") and include your account number to help us process it faster.