BD89 Privacy Policy – Personal Data Protection for Malaysian Members

BD89 takes the privacy of every member seriously. In today's digital world, personal information is a valuable asset — and we understand that your trust in the bd89 platform depends greatly on how we manage the data you share with us.

This Privacy Policy describes the data handling practices of bd89 transparently and comprehensively. This document covers what types of data we collect, why we need it, who can access it, how long we retain it, and what your rights are as the owner of that data. We believe you deserve to know all of this before deciding to share your information with us.

Privacy Policy BD89 complies with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We continually update our privacy practices in line with legal changes and the latest technological developments to ensure the best possible protection for every bd89 member.

BD89 only collects data that is genuinely necessary to provide a secure, fully functional platform service that meets legal requirements. The following are the categories of data we may collect:

BD89 does not collect more data than is necessary. We apply the principle of data minimisation — only data that is relevant and necessary for the stated purpose will be collected from bd89 platform members.

BD89 collects your personal data through several different channels during your use of the platform. It is important that you understand each of these data collection methods:

• Account Registration — When you register a bd89 account, you provide us directly with basic information such as your name, email address, phone number, and password.
• KYC Verification — When you upload an identity document (MyKad or passport) for identity verification prior to your first withdrawal, we retain the relevant information in a secure record.
• Financial Transactions — Each time you make a deposit via TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, or withdraw funds to your Malaysian bank account, the BD89 system records the relevant transaction details.
• Gaming Activity — Platform bd89 automatically records your gaming activity — bets placed, games played (football, badminton, e-sports, slots, Live Casino, lottery), session duration, and game outcomes. This data is used for Responsible Gaming purposes and service improvement.
• Automatic Technical Data — When you browse the bd89 platform, our servers automatically record your IP address, device type, operating system, web browser, and other technical session data for security and platform maintenance purposes.
• Support Interactions — When you contact the BD89 support team via live chat or email, the conversation is retained for service quality, staff training, and dispute resolution purposes.

BD89 uses your personal data only for legitimate, stated purposes. Every use of data has a solid legal basis — whether to fulfil a service contract, comply with legal obligations, or based on the platform's legitimate interest in maintaining the security and integrity of its operations. The following are the primary purposes for data use at bd89:

• Account Management — Creating, verifying, and managing your BD89 account, including password recovery and two-factor authentication.
• Transaction Processing — Securely and accurately processing deposits via Malaysian e-wallets and FPX, as well as withdrawals to your local bank account.
• Fraud Prevention — Detecting and preventing fraudulent activity, money laundering, multiple account creation, and other unauthorised activity on the bd89 platform.
• Legal Compliance — Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and other statutory reporting requirements imposed under Malaysian law.
• Responsible Gaming — Monitoring gameplay patterns to identify signs of problem gambling and providing relevant self-management tools to bd89 members who need them.
• Customer Support — Providing accurate and effective assistance when you contact the BD89 support team via live chat or email.
• Platform Enhancement — Analysing usage patterns in aggregate (not at an individual level) to improve the functionality, performance, and user experience of the bd89 platform.
• Service Communications — Sending important notifications related to your account, such as transaction confirmations, terms updates, or security information.

One of the core principles of the Privacy Policy BD89 is that we never sell members' personal data. However, in the course of operating the platform, there are limited situations where we need to share data with certain parties:

• Payment Provider — Recognised Malaysian payment service providers such as TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX receive the transaction data necessary to process your deposits and withdrawals. This data is shared solely for the purpose of processing those specific transactions.
• Game Providers — Third-party game providers that supply slots, Live Casino, e-sports, or other games on the bd89 platform may receive the minimum session data required for the game's technical functionality. They do not receive your financial or full identity data.
• Statutory Authorities — BD89 will disclose member data to Malaysian authorities (such as the police, courts, or regulatory bodies) when required by law, court order, or valid legal process. In such situations, we disclose only the data that is strictly required.
• Technical Service Providers — Technology companies that help us operate and maintain the bd89 platform (such as hosting providers, analytics services, and cybersecurity firms) may access certain data in the course of performing their duties. All such providers are bound by strict confidentiality agreements and are prohibited from using the data for any other purpose.

In all of the above data-sharing scenarios, BD89 ensures that all recipients meet data protection standards equivalent to or higher than those we hold ourselves to. No member data is shared with any entity that does not have a legitimate need to access it.

Protecting your personal data from unauthorised access, loss, or misuse is a responsibility that BD89 take very seriously. We continuously invest in security infrastructure to ensure your data is always protected to the highest available standards.

Key technical security measures that bd89 covers:

• 256-bit SSL Encryption — All data transmitted between your device and bd89's servers is encrypted using TLS 1.3 with 256-bit keys — the same standard used by leading banking institutions in Malaysia.
• Two-Factor Authentication (2FA) — Two-factor authentication is available for all bd89 accounts, providing an additional layer of security at login.
• Secure Password Storage — BD89 account passwords are never stored in plain text. We use a strong one-way hashing algorithm (bcrypt) to store passwords securely.
• Continuous Monitoring — The bd89 security team monitors all account activity and transactions 24 hours a day to detect any suspicious activity or unauthorised access attempts.
• Financial Data Segregation — BD89 members' funds are held in accounts that are segregated from the company's operational accounts, ensuring your money is always available and protected.
• Regular Security Audits — The bd89 platform undergoes regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities before they can be exploited.

BD89 does not retain your personal data indefinitely. We maintain a clear data retention policy based on operational needs and legal obligations:

• Active Account Data — For as long as your BD89 account remains active, we retain all relevant data to deliver uninterrupted service and ensure a seamless user experience.
• Financial Transaction Records — In compliance with Malaysian legal requirements relating to anti-money laundering and financial record-keeping, transaction data is retained for seven (7) years after the transaction date.
• KYC Verification Data — Identity documents and verification records are retained for the period required by Malaysian law — typically five (5) to seven (7) years after account closure.
• Customer Support Records — bd89 support conversation history is retained for three (3) years for reference purposes, dispute resolution, and service quality improvement.
• Marketing Data — If you have consented to receive marketing communications from BD89, your marketing preferences are retained until you withdraw that consent.
• After Account Closure — When a bd89 account is closed at your request, data not required to be retained by law will be deleted or anonymised within 90 days.

As a member BD89 residing in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). We fully respect these rights and make it easy for you to exercise them:

Platform BD89 uses cookies and similar tracking technologies to deliver a better user experience, enhance security, and understand how members use the bd89 platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the platform. bd89. For details on the cookies used, please contact BD89 support.

Platform BD89 is intended for individuals aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian who discovers that a child or ward in your care has provided their personal data to bd89 without your knowledge, please contact us immediately at support@bd89.my. We will take immediate steps to remove the relevant data and close the associated account once your identity as the guardian has been verified.

BD89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to the way we operate. Any changes will be handled as follows:

• Material changes to the Privacy Policy will be communicated to members via their registered email and/or prominent notifications within the bd89 platform at least 14 days before taking effect.
• The "Updated" date at the top of this document will always reflect the date of the most recent changes made to BD89's Privacy Policy.
• For changes that require your renewed consent (such as changes to how we use your data for new purposes), BD89 will obtain your active consent before those changes take effect.
• Previous versions of the bd89 Privacy Policy are available upon request through customer support.

We encourage you to review this Privacy Policy page periodically to ensure you are always aware of how BD89 protect and manage your data.

If you have any questions, concerns, or complaints regarding how BD89 handling your personal data, we encourage you to contact us directly. We are committed to responding to and resolving every privacy enquiry seriously and within a reasonable timeframe.

• Privacy Email — Send your privacy enquiry to support@bd89.my with the subject line "Privacy Enquiry" for a faster and more organised resolution. Response within 3 working days.
• 24/7 Live Chat — For general privacy enquiries or to report an urgent concern, contact the BD89 support team via the in-platform live chat, available 24 hours a day.

If after contacting BD89 you are still not satisfied with how we have handled your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority. BD89 will cooperate fully with any investigation conducted by the applicable authority.