bdlbet Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is published by bdlbet ("bdlbet", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at bdlbet.app ("Platform"). It governs the collection, use, storage, disclosure, and protection of personal data relating to users of the Platform ("Members", "you", "your").

1.2 This Policy forms part of the bdlbet Terms & Conditions and should be read alongside them. By registering an account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

1.3 bdlbet is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and the data protection requirements imposed by bdlbet's international gaming licence.

2. Personal Data We Collect

2.1 bdlbet collects the following categories of personal data from Members and prospective Members:

2.1.1 Identity Data

• Full legal name as per government-issued identification;
• Date of birth;
• National identity number (MyKad number) or passport number;
• Copies of government-issued photo identification and proof of address (collected during KYC verification).

2.1.2 Contact Data

• Email address;
• Malaysian mobile telephone number;
• Residential address (as provided during KYC).

2.1.3 Financial Data

• Payment method details (e-wallet account identifiers, bank account details — where applicable);
• Transaction history (deposits, withdrawals, and amounts);
• Account wallet balance.

2.1.4 Gaming & Behavioural Data

• Game history and wager records;
• Session duration and frequency data;
• Responsible gaming tool usage;
• Promotional and bonus engagement history.

2.1.5 Technical Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Login timestamps and session activity logs;
• Cookies and similar tracking technologies (see Section 9).

2.1.6 Communications Data

• Records of communications between you and bdlbet support (live chat transcripts, emails);
• Feedback and survey responses where voluntarily provided.

3. How We Collect Personal Data

3.1 bdlbet collects personal data through the following means:

• Direct provision: Data you provide during account registration, KYC verification, payment transactions, or when contacting support;
• Automated collection: Technical and behavioural data collected automatically as you interact with the Platform via cookies, log files, and session tracking;
• Third-party sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance data providers; payment transaction data from payment processors (Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank).

4. Purposes of Data Processing

4.1 bdlbet processes your personal data for the following purposes:

• Account Management: Creating, maintaining, securing, and closing your bdlbet account;
• Identity Verification (KYC): Verifying your identity and age (21+) as required by our gaming licence and anti-money laundering obligations;
• Payment Processing: Processing deposits, withdrawals, and maintaining accurate financial records of all transactions;
• Provision of Services: Enabling access to casino games, sportsbook markets, live dealer tables, Lucky Bingo, and all other Platform features;
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct;
• Legal & Regulatory Compliance: Meeting obligations imposed by gaming licence conditions, anti-money laundering legislation, and other applicable law;
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling and to administer responsible gaming tools including self-exclusion;
• Customer Support: Responding to enquiries, complaints, and requests for account assistance;
• Service Improvement: Analysing aggregated usage data to improve Platform performance, game selection, and user experience;
• Marketing Communications: Sending promotional offers and Platform updates to Members who have consented to receive them (opt-out available at any time from Account Settings).

5. Legal Basis for Processing

5.1 bdlbet processes personal data on the following legal bases under applicable data protection law:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions — account management, payment processing, and provision of gaming services;
• Legal Obligation: Processing required to comply with gaming licence conditions, AML/CFT obligations, and other regulatory requirements;
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications, where your explicit opt-in consent has been obtained. You may withdraw this consent at any time.

6. Disclosure of Personal Data to Third Parties

6.1 bdlbet does not sell your personal data to third parties. We may disclose personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• KYC and Identity Verification Providers: Third-party services used to verify your identity and age;
• Payment Processors: Financial institutions and e-wallet operators (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank) necessary to process your transactions;
• Fraud and Compliance Screening Services: Providers that assist bdlbet in meeting its AML/CFT obligations and detecting fraudulent activity;
• Game Content Providers: Third-party game studios and live casino providers may receive technical session data necessary to deliver their games — personal identity data is not shared with game providers;
• Regulatory and Licensing Authorities: bdlbet may be required to disclose Member data to its gaming licensing authority or to law enforcement agencies pursuant to a valid legal order or regulatory requirement;
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and platform maintenance service providers, each bound by strict data processing agreements.

6.2 In the event of a corporate restructuring, merger, or acquisition, Member data may be transferred to a successor entity, subject to the same privacy protections as described in this Policy.

7. Data Retention

7.1 bdlbet retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction records: Retained for a minimum of five (5) years from the date of account closure, as required by AML/CFT legislation and gaming licence conditions;
• KYC documentation: Retained for a minimum of five (5) years from the date of collection or from the date of the last relevant transaction, whichever is later;
• Support communications: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of prior consent.

7.2 Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bdlbet's data destruction policy.

8. Data Security

8.1 bdlbet implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial and identity data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all staff access to systems containing personal data;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures for the detection, containment, and notification of personal data breaches.

8.2 While bdlbet takes all reasonable precautions to secure personal data, no online system can be guaranteed to be completely immune to security threats. You should take precautions to protect your own account — including using a strong, unique password and enabling 2FA.

9. Cookies and Tracking Technologies

9.1 bdlbet uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session and storing account preferences. These cannot be disabled without impairing your use of the Platform;
• Analytics Cookies: Used to collect aggregated, anonymised data about how Members use the Platform, enabling bdlbet to improve performance and user experience;
• Security Cookies: Used to support fraud detection and account security features.

9.2 You may manage cookie preferences through your browser settings. Blocking essential cookies will impair your ability to use the Platform. bdlbet does not use cookies for third-party advertising targeting.

10. Your Data Protection Rights

10.1 Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by bdlbet:

• Right of Access: To request a copy of the personal data bdlbet holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of personal data in certain circumstances (note: this right may be limited by legal retention obligations);
• Right to Restriction: To request that bdlbet restrict the processing of your personal data in certain circumstances;
• Right to Data Portability: To receive a structured, machine-readable copy of personal data you have provided, where processing is based on consent or contract;
• Right to Object: To object to processing based on legitimate interests, including profiling;
• Right to Withdraw Consent: To withdraw consent to marketing communications at any time by updating your preferences in Account Settings.

10.2 To exercise any of these rights, please contact bdlbet's Data Protection Officer at [email protected] (plain text — not a clickable link). bdlbet will respond to verified requests within thirty (30) days.

11. Children's Privacy

11.1 The bdlbet Platform is strictly restricted to individuals aged 21 years and above. bdlbet does not knowingly collect personal data from persons under the age of 21. If you believe that a person under the age of 21 has provided personal data to bdlbet, please contact us immediately so that the data can be deleted and the account closed. Verification of age is a mandatory step in the bdlbet account registration process.

12. International Data Transfers

12.1 bdlbet's operational infrastructure may involve the transfer of personal data to servers or service providers located outside of Malaysia. Where personal data is transferred internationally, bdlbet ensures that appropriate safeguards are in place — including contractual clauses and data processing agreements — to protect the data to a standard equivalent to that provided under Malaysian data protection law.

13. Changes to This Privacy Policy

13.1 bdlbet reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to Members via the email address registered to their account and/or via a prominent notice on the Platform. Updated versions of this Policy will be published on this page with a revised effective date. Your continued use of the Platform after the publication of a revised Policy constitutes your acceptance of the changes.

14. Contact & Data Protection Officer

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or bdlbet's data processing practices, please contact:

14.2 If you are not satisfied with bdlbet's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority or gaming regulatory body under the jurisdiction of bdlbet's international gaming licence.