1. Introduction
bbc888 ("we", "us", "our") is the operator of the online gaming platform accessible at bbc888.app and any associated mobile applications (collectively, the "Platform"). We are committed to protecting the privacy of our Members and visitors and to handling personal data responsibly in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia where applicable.
This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, the measures we take to protect it, and the rights available to you in relation to your personal data. Please read this Policy carefully. If you have any questions, contact us at the address provided in Section 13.
2. Personal Data We Collect
bbc888 collects personal data in the following categories:
- Registration Data: Full legal name, date of birth, gender, Malaysian identity card number or passport number (where required for KYC verification), residential address, email address, and phone number provided when you open a bbc888 Account.
- Financial Data: Payment method details (e.g., Touch 'n Go eWallet account reference, bank account details for FPX or DuitNow transactions, CIMB Clicks or Maybank2u account identifiers). bbc888 does not store full card numbers or banking credentials directly — payment transactions are processed through PCI-DSS-compliant third-party payment processors.
- Identity Verification Documents: Copies of government-issued identification, utility bills, or other documents submitted in response to a KYC request.
- Transaction Data: Records of all deposits, withdrawals, bets placed, games played, bonus claims, and associated timestamps and amounts within your bbc888 Account.
- Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and session timestamps collected automatically when you access the bbc888 Platform.
- Communications Data: Records of communications between you and the bbc888 support team, including live chat transcripts and email correspondence.
- Responsible Gaming Data: Records of any deposit limits, self-exclusion requests, or cooling-off periods applied to your Account, retained for compliance and player protection purposes.
- Marketing Preferences: Your stated preferences regarding promotional communications from bbc888, including opt-in and opt-out records.
3. How We Use Your Personal Data
bbc888 uses the personal data we collect for the following purposes:
- To create and administer your bbc888 Account and verify your identity;
- To process deposits, withdrawals, and in-platform transactions in MYR;
- To provide access to the bbc888 gaming Platform, including live casino, sportsbook, slots, and football betting services;
- To verify age eligibility and comply with our obligations under applicable gaming regulations — bbc888 is strictly for users aged 21 and above;
- To conduct Know Your Customer (KYC) and anti-money laundering (AML) checks as required by our licensing obligations;
- To detect and prevent fraud, account abuse, bonus exploitation, and other prohibited conduct;
- To provide customer support and respond to enquiries, complaints, and disputes;
- To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts);
- To send you promotional and marketing communications where you have consented to receive them;
- To administer responsible gaming tools and self-exclusion requests;
- To analyse Platform usage, improve our services, and develop new features;
- To comply with legal obligations, regulatory requirements, and court orders.
4. Legal Basis for Processing
- Contractual Necessity: Processing required to perform the contract between you and bbc888 (i.e., operating your Account and providing gaming services).
- Legal Obligation: Processing required to comply with applicable laws, including age verification, KYC, AML screening, and responsible gaming obligations under our gaming licence.
- Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
- Consent: Processing for marketing communications where you have given explicit consent. You may withdraw consent at any time by contacting bbc888 support.
5. Sharing of Personal Data
bbc888 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients:
- Payment Processors: Third-party payment service providers (including those supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT TRC20) to facilitate deposits and withdrawals. These processors are contractually required to handle your data securely and only for the purpose of processing transactions.
- Identity Verification Providers: Third-party KYC and AML screening services used to verify identity documents and screen against sanctions lists.
- Game Software Providers: Game studios and live casino platform providers whose software operates within the bbc888 Platform may receive session data for the purpose of game delivery and integrity monitoring.
- Regulatory and Law Enforcement Authorities: Where required by law, court order, or gaming regulatory authority, bbc888 may disclose Member data to the relevant authority.
- Professional Advisers: Legal, accounting, and auditing professionals engaged by bbc888 on a confidential basis.
- Business Transfers: In the event of a merger, acquisition, or sale of bbc888 assets, Member data may be transferred to the acquiring entity, subject to the same data protection obligations.
6. Cookies and Tracking Technologies
- bbc888 uses cookies and similar tracking technologies to operate the Platform, maintain session state after login, remember your preferences, and analyse usage patterns.
- Strictly Necessary Cookies are required for the Platform to function and cannot be disabled. They include session authentication tokens and security cookies.
- Analytical Cookies collect aggregated, anonymised data about how visitors use the Platform, which bbc888 uses to improve the user experience.
- Functional Cookies remember your preferences such as language settings and preferred game categories.
- You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in to bbc888 and use the Platform.
7. Data Retention
- bbc888 retains personal data for as long as your Account is active and for a minimum of five (5) years following Account closure, to meet legal, regulatory, and audit obligations.
- Transaction and betting records are retained for a minimum of five (5) years from the date of each transaction in accordance with anti-money laundering regulations.
- Communications data (live chat transcripts, support emails) is retained for a minimum of two (2) years.
- KYC verification documents are retained for the duration required by applicable regulations, typically five (5) years from the date of the last transaction associated with the Account.
- Where you have exercised a right to erasure (see Section 8), bbc888 will delete or anonymise your data to the extent permitted by law, retaining only what is required for ongoing legal obligations.
8. Your Data Protection Rights
Subject to applicable law, you have the following rights in relation to your personal data held by bbc888:
- Right of Access: You may request a copy of the personal data bbc888 holds about you.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data.
- Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
- Right to Restriction: You may request that we restrict processing of your data pending resolution of a dispute or correction request.
- Right to Data Portability: You may request a structured, machine-readable copy of data you have provided to bbc888.
- Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, contact bbc888 support via live chat or at the email address in Section 13. bbc888 will respond within 30 days of receiving a verifiable request.
9. Data Security
- bbc888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include 256-bit SSL/TLS encryption for all data in transit, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments, and secure infrastructure with firewalls and intrusion detection systems.
- Payment data is processed through PCI-DSS-compliant payment processors. bbc888 does not store full bank account credentials or card numbers on its own servers.
- In the event of a data breach that is likely to result in a risk to your rights and freedoms, bbc888 will notify the relevant regulatory authority and affected Members in accordance with applicable law.
- You are responsible for maintaining the confidentiality of your bbc888 Account credentials. If you believe your Account has been compromised, contact bbc888 support immediately.
10. Children's Privacy
The bbc888 Platform is strictly for individuals aged 21 and above. bbc888 does not knowingly collect personal data from persons under the age of 21. If we become aware that a Member is under the minimum age, we will close the Account immediately, return any Real Funds balance pending verification, and delete any personal data collected. If you believe a person under 21 has registered an Account, please notify bbc888 support immediately.
11. International Data Transfers
- Your personal data may be transferred to and processed in countries outside Malaysia where bbc888's service providers, game studios, or technical infrastructure are located.
- Where such transfers occur, bbc888 ensures that appropriate safeguards are in place — such as contractual data protection clauses equivalent to those required under Malaysian PDPA principles — to maintain the same standard of protection for your data regardless of where it is processed.
12. Changes to This Privacy Policy
bbc888 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members through the Platform or by email to the address on file. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the revised terms.
13. Contact Us
For questions, concerns, or data subject requests relating to this Privacy Policy or your personal data, please contact the bbc888 Data Protection team via:
- 24/7 Live Chat support on the bbc888 Platform
- Email: [email protected] (plain text reference — not a clickable link)
bbc888 will acknowledge your request within five (5) business days and endeavour to resolve it within 30 days. Complex requests may take longer, in which case we will notify you of the expected timeframe.