Bvbx Privacy Policy — Member Personal Data Protection

Bvbx ("we", "the platform", or "bvbx.win") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the bvbx online casino platform.

This policy applies to all users of the bvbx platform, including registered members, website visitors, and any individuals who interact with our content, services, or communication channels — whether through the official website, mobile app, or any other digital channel operated by bvbx.

We operate this platform in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) and international data protection standards. In the event of any conflict between a translated version of this document and the Malay version, the Malay version shall prevail.

Bvbx collects two main categories of information: information you provide directly to us, and information collected automatically as you use our platform.

Information you provide directly:

• Full name, national identification number (MyKad) or passport number.
• Email address, mobile number, and residential address.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• KYC (Know Your Customer) documents including MyKad photo and bank statements.
• Any information you share through customer support channels or live chat.

Information collected automatically:

• IP address, browser type, operating system, and device information.
• Game session data including date, time, game type, and wagering amounts.
• Deposit and withdrawal transaction history within the platform.
• Cookie data and tracking technologies as described in Section 6.
• Server access logs that record activity within the bvbx platform.

Every piece of information we collect has a clear and legitimate purpose. bvbx uses your personal data only for the following purposes:

Bvbx will not use your data for any purpose not stated in this document without first obtaining your additional consent. If the purpose of processing changes significantly, we will notify you via an in-platform notification or email.

Bvbx treats your personal data as a trust that must be safeguarded to the highest standard. We does not sell your personal information to any third party. Data sharing only occurs in the following limited circumstances:

• Payment Providers: Minimal transaction information shared with licensed payment providers such as FPX, DuitNow, and digital wallet operators to process your financial transactions.
• Game Providers: Usernames and game session data are shared with third-party game providers (such as Evolution and Pragmatic Play) solely to deliver a seamless gaming experience.
• KYC Services: Identity verification documents are shared with licensed KYC service providers we engage to meet our legal compliance obligations.
• Law Enforcement: bvbx will disclose required information to regulatory authorities or law enforcement agencies when mandated by a court order or valid legal requirement.
• Business Transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the new entity, which will be bound by the same or stricter privacy obligations.

All third parties receiving data from bvbx are required to comply with strict data confidentiality agreements and are only permitted to use that data for the specific agreed purposes.

The security of your data is bvbx's top priority. We implement multiple layers of technical and organisational protection to ensure your information is always safe from unauthorised access, loss, or misuse.

• Transit Encryption: All communications between your device and bvbx servers are secured by TLS 1.3 protocol with AES-256 encryption, the same standard used by leading financial institutions.
• Storage Encryption: Sensitive data stored in our databases is encrypted using advanced encryption algorithms before being saved.
• Strict Access Controls: Only bvbx staff with a legitimate business need are permitted to access member personal data, and all access is logged and monitored on a regular basis.
• Regular Security Testing: bvbx conducts regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Two-Factor Authentication: 2FA is available on all member accounts to add an extra layer of security during login.
• 24/7 Monitoring: Our continuous threat monitoring system tracks suspicious activity and automatically responds to intrusion attempts.

Bvbx uses cookies and similar tracking technologies to enhance the user experience, analyze platform usage patterns, and deliver more relevant content to you.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymous data on how users interact with the platform to help us improve performance and user experience.
• Preference Cookies: Stores user preferences such as language settings, display themes, and game preferences so they don't need to be reconfigured each time.
• Analytics Cookies: Used to analyse traffic and aggregate user behaviour to help us understand how the platform is used.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality of some parts of the bvbx platform. Continued use of the bvbx platform after the cookie notice is displayed is considered consent to our use of essential cookies.

Your personal data is stored on servers located in data centres that meet high-grade security standards. bvbx only retains your data for as long as it is needed for the stated purpose or as required by applicable law.

In situations where data processing requires the transfer of information outside Malaysia — for example to international game providers — bvbx ensures that adequate protections are in place through:

• Data transfer agreements compliant with Malaysia's PDPA standards.
• Assessment of data protection adequacy in the recipient country.
• Standard contractual clauses that bind data recipients to equivalent protection obligations.
• Internationally recognised data security certifications held by the receiving party.

When data is no longer needed, bvbx will delete or anonymise it in a secure and irreversible manner, in line with our data deletion policy.

As a bvbx member, you have the following rights regarding your personal data, which can be exercised at any time by contacting our support team:

We will process every request within 7 business days. For cases requiring further investigation, we will notify you within 3 business days with an estimated timeline. Please note that certain rights may be subject to legal obligations that prevent us from fulfilling a request in full.

The bvbx platform is intended exclusively for adult users aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have inadvertently collected information from underage individuals, we will take immediate steps to delete that information from our systems and close the relevant account. Parents or guardians who become aware that their child has registered on bvbx are asked to contact us immediately so that appropriate action can be taken.

The bvbx platform may contain links to third-party websites or services in certain contexts, such as game providers or payment information. This Privacy Policy applies solely to the bvbx platform and does not cover the privacy practices of those third-party websites.

Bvbx is not responsible for the content, privacy policies, or practices of any third-party websites that may be linked from our platform. We encourage you to read the privacy policy of every website you visit to understand how your information is handled by those parties.

Bvbx reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle personal data.

Any significant changes will be communicated to you via one or more of the following methods:

• Notifications displayed prominently on the bvbx platform homepage.
• Notification emails sent to your registered email address.
• In-account notifications during your next login session.

The "Updated" date shown at the top of this document indicates the date of the most recent revision. Continued use of the bvbx platform after any amendments are published constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you through the following channels:

• Live Chat 24/7: The fastest channel for urgent queries — available on every page of the bvbx platform.
• Privacy Email: [email protected] — for written inquiries requiring a detailed response.
• FAQ Section: Visit FAQ page for answers to frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex data rights requests, the processing period is up to 7 business days as stated in Section 8.