Privacy Policy BK333 — Personal Data Protection for Malaysia Members

1. Introduction

Bk333 ("we", "Platform", or "company") values the privacy of every individual who interacts with our website and app. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data protection.

This document details the types of data we collect, why we need it, how we use it, who we may disclose it to, and how long we retain it. It also explains your rights as a data subject and how you can exercise them.

This Privacy Policy applies to all users of the bk333 platform, including website visitors, registered members, and former members whose data we continue to hold for legal compliance purposes.

2. Personal Data We Collect

We collect various types of personal data depending on how you interact with the bk333 platform. Below is a detailed breakdown of the data we collect:

Data You Provide Directly

• Identity Information: Full name, date of birth, MyKad or passport number, nationality.
• Contact Information: Email address, phone number, residential address.
• Financial Information: Bank name, bank account number, and digital wallet details for deposit and withdrawal purposes.
• KYC Documents: Copy of identity card, passport, utility bill, or bank statement as proof of identity and address.
• Account Information: Username, password (stored in hashed form), language preference, and account settings.

Automatically Collected Data

• Technical Data: IP address, browser type and version, device operating system, screen resolution.
• Usage Data: Pages visited, session duration, games played, login frequency.
• Transaction Data: Deposit, withdrawal, wagering, and wins history.
• Location Data: General location information based on IP address for geo-compliance purposes.
• Cookie Data: Session cookies, functional cookies, and analytics cookies as described in Section 7.

Summary Table of Data Collected

3. How We Use Your Data

Bk333 uses your personal data for lawful and transparent purposes. Every use of data has a clear legal basis — whether by contract, legal obligation, our legitimate interests, or your consent.

• Account Management: Creating, verifying, and maintaining your account, as well as processing account-related requests.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• KYC and Anti-Money Laundering (AML) Compliance: Verifying your identity in accordance with Malaysia's legal requirements.
• Fraud Prevention: Identifying, investigating, and preventing fraudulent activity, system manipulation, or unauthorised use of the platform.
• Service Improvement: Analysing usage patterns to improve platform design, user experience, and game offerings.
• Service Communications: Sending important notifications related to your account, transactions, promotions you have subscribed to, and policy updates.
• Customer Support: Helping resolve technical issues, transaction disputes, and account-related queries.
• Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and offer appropriate support.

4. Data Sharing with Third Parties

BK333 does not sell your personal data to anyone. However, we may share certain information with third parties in the following limited circumstances:

Licensed Service Providers

We share necessary data with companies that help us deliver our services, including payment processors, KYC service providers, gaming software suppliers, and customer service platforms. All such providers are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

Legal Requirements

Bk333 may be required to disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies when mandated by Malaysian law or a court order. We will notify you of such disclosure unless prohibited by law.

Business Transfer

Should bk333 be involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction. You will be notified in advance via a prominent notice on our website.

5. Data Retention Period

Bk333 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Below are general guidelines for our retention periods:

• Active Account Data: Retained for the duration of your active account.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction date, in accordance with Malaysian financial legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure for AML compliance purposes.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Marketing Data (if consented): Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.

6. Data Security Measures

Bk333 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

Technical Measures

• Data encryption in transit using TLS 1.3 protocol.
• Data encryption at rest using AES-256 standard.
• Passwords are stored using the bcrypt hashing function with a random salt.
• Web application firewall (WAF) updated on a regular basis.
• Real-time threat monitoring and intrusion detection systems (IDS).
• Penetration testing conducted periodically by independent third parties.

Organisational Measures

• Role-based access control — staff may only access data relevant to their responsibilities.
• Mandatory security awareness training for all bk333 staff annually.
• Binding confidentiality agreements for all staff and contractors.
• Documented and regularly tested incident response procedures.

7. Cookies and Tracking Technologies

Bk333 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how members use our services.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Saving your preferences such as language, theme, and display settings for a more personalised experience.
• Analytics Cookies: Helping us understand how members use the platform — most visited pages, time spent in each section, and more. This data is collected in aggregate and does not personally identify you.
• Security Cookies: Helping us detect suspicious activity, repeated login attempts, and potential fraud.

You may manage your cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of the bk333 platform.

8. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by us:

To exercise any of the above rights, please contact our data protection team via in-platform live chat or by email at [email protected]. We will respond within the timeframe required by law.

9. Protection of Children's Data

The bk333 platform is exclusively for individuals aged 18 years and above. We do not accept registrations from minors and do not knowingly collect personal data from children.

Should we discover that personal data of individuals under 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered on our platform, please contact us immediately.

10. Privacy Policy Amendments

Bk333 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. Any material changes will be communicated to you via:

• In-app or on-site notification via bk333.
• Email to the address registered on your account (for important changes).
• Updates the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the bk333 platform after any changes take effect indicates your acceptance of the updated terms.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the live chat button at the bottom corner of the bk333 website or app.
• Privacy Email: [email protected] — for inquiries specifically related to data protection.
• General Support: [email protected] — for general inquiries related to accounts and services.

Our team is committed to handling all privacy-related inquiries seriously and within a reasonable timeframe. For unresolved complaints, you have the right to refer to the Department of Personal Data Protection Malaysia.