bdlbet Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bdlbet ("bdlbet", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("Member", "you", "your") who register for and use the bdlbet online betting and gaming platform accessible at bdlbet.co and through the bdlbet mobile application ("Platform").

bdlbet takes the privacy of its members seriously. We understand that your personal data is important to you, and we are committed to handling it responsibly, transparently, and in compliance with applicable data protection laws, including those applicable to our operating jurisdiction and the jurisdictions in which our members reside.

2 Data Controller

For the purposes of applicable data protection law, bdlbet acts as the data controller in respect of personal data collected from members of the bdlbet Platform. As data controller, bdlbet determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with this Policy and applicable law.

If you have any questions regarding bdlbet's role as data controller, or wish to exercise any of your data subject rights, please contact our data support team using the contact details set out in Section 14 of this Policy.

3 Personal Data We Collect

3.1 Registration Data. When you create a bdlbet account, we collect the following personal data: your full legal name, date of birth, email address, mobile number, and residential address. This data is required to verify your identity, confirm your eligibility to use the Platform (including age verification), and create your account.

3.2 Identity Verification Data. bdlbet may request copies of government-issued identity documents (such as your Malaysian IC, passport, or driver's licence) and proof of address documents for the purposes of identity verification, age verification, and compliance with anti-money laundering obligations.

3.3 Financial Data. We collect data relating to your deposits and withdrawals, including your payment method details (such as bank account details, eWallet identifiers for Touch n Go eWallet and Boost, and FPX transaction references). Full payment card numbers are not stored by bdlbet — card transactions are processed by our licensed payment service providers who are subject to their own PCI-DSS compliant data security obligations.

3.4 Transaction and Betting Data. We collect records of all bets placed, casino sessions, slot game rounds, deposits, withdrawals, and promotional bonuses claimed on your bdlbet account. This data is retained for account history, dispute resolution, and regulatory compliance purposes.

3.5 Technical and Usage Data. When you access the bdlbet Platform, we automatically collect certain technical data, including your IP address, browser type and version, device type and operating system, pages visited, session duration, and referring URL. This data is used for security monitoring, fraud prevention, and service improvement.

3.6 Communications Data. We retain records of communications between you and bdlbet customer support, including live chat transcripts, email correspondence, and support ticket records, for quality assurance and dispute resolution purposes.

3.7 Responsible Gaming Data. If you make use of bdlbet's responsible gaming tools — including deposit limits, loss limits, session time limits, or self-exclusion — we record these settings and any changes to them. This data is used to enforce your responsible gaming preferences and is treated with the highest level of confidentiality.

4 How We Use Your Personal Data

bdlbet uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your bdlbet account, including processing your login credentials and managing your account settings.
• Identity and age verification: Confirming that you are who you say you are and that you meet bdlbet's age eligibility requirement of 21 years or older.
• Transaction processing: Processing your deposits and withdrawals in MYR via your chosen payment method, and maintaining records of all financial transactions on your account.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and responsible gaming regulations, including reporting obligations to relevant authorities where required by law.
• Fraud prevention and security: Monitoring the Platform for unusual or suspicious activity, detecting and preventing fraud, money laundering, and other illegal conduct, and protecting the integrity of the sportsbook and casino products.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance in relation to your bdlbet account.
• Service improvement: Analysing aggregate, anonymised usage data to understand how the Platform is used and to improve the products, features, and user experience offered by bdlbet.
• Marketing communications: Sending you promotional offers, bonus notifications, and product updates where you have consented to receive such communications, or where we have a legitimate interest in doing so subject to your right to opt out.
• Responsible gaming enforcement: Applying and enforcing the responsible gaming settings you have activated on your account, including self-exclusion periods and deposit limits.

5 Legal Basis for Processing

bdlbet processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary for the performance of your bdlbet account agreement and the provision of Platform services, including account creation, bet processing, and payment handling.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory obligations, including anti-money laundering, age verification, and tax reporting requirements.
• Legitimate interests: Processing carried out for bdlbet's legitimate business interests, including fraud prevention, security monitoring, service improvement, and direct marketing, provided that such interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your specific, informed consent, including the sending of marketing communications. You may withdraw your consent at any time by contacting bdlbet support or adjusting your account notification settings.

6 Sharing Your Personal Data

6.1 bdlbet does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and only to the extent required:

• Payment service providers: Processing deposits and withdrawals via Touch n Go eWallet, Boost, FPX, and other approved Malaysian payment channels. These providers process your payment data under their own privacy policies and are subject to financial industry data security standards.
• Identity verification providers: Third-party KYC and identity verification services used to confirm your identity and age as part of the registration and verification process.
• Game providers: Licensed game suppliers whose products are hosted on the bdlbet Platform (such as Pragmatic Play, Evolution Gaming, and PG Soft) may receive your account identifier and game session data for the purposes of game delivery and dispute resolution.
• Technology and infrastructure providers: Cloud hosting, content delivery, analytics, and security vendors who process data on bdlbet's behalf under data processing agreements that impose equivalent data protection obligations.
• Regulatory and law enforcement authorities: Where bdlbet is required by applicable law, court order, or regulatory authority direction to disclose your personal data.

6.2 All third parties with whom bdlbet shares personal data are contractually required to process that data only for the specified purpose and in accordance with applicable data protection standards.

7 Cookies and Tracking Technologies

The bdlbet Platform uses cookies and similar tracking technologies (including web beacons and local storage) to enhance your user experience, maintain your session, and collect usage analytics. The categories of cookies used by bdlbet include:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations.
• Analytics cookies: Used to collect anonymised data about how visitors navigate the Platform, which pages are most visited, and how the Platform is used, in order to improve our products and services.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of bdlbet's marketing campaigns. These are only placed where you have provided consent.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

8 Data Security

bdlbet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: 256-bit SSL encryption for all data in transit; encryption of sensitive data fields at rest; access controls restricting employee access to personal data on a need-to-know basis; regular security audits and penetration testing; and incident response procedures for detecting and reporting data breaches.

While bdlbet takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your bdlbet login credentials and for ensuring that your own devices are adequately secured.

9 Data Retention

bdlbet retains your personal data for as long as your account remains active or as is necessary to fulfil the purposes described in this Policy. Specifically:

• Account registration and identity data is retained for the duration of your account and for five years following account closure.
• Financial transaction records are retained for seven years following the transaction date for regulatory compliance and audit purposes.
• Betting and gaming records are retained for five years.
• Customer support communications are retained for three years from the date of the interaction.
• Responsible gaming records, including self-exclusion applications, are retained for the duration of the exclusion period and for five years thereafter.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

10 Your Data Subject Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bdlbet:

• Right of access: The right to request a copy of the personal data bdlbet holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bdlbet's legal retention obligations.
• Right to restriction: The right to request that bdlbet restricts its processing of your personal data in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, machine-readable format and to request its transfer to another service provider where technically feasible.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact bdlbet's data support team using the contact details in Section 14. bdlbet will respond to all valid requests within 30 calendar days.

11 Children's Privacy

The bdlbet Platform is strictly for adults aged 21 and above. bdlbet does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by a person under 21, we will immediately close the account, delete the associated personal data to the extent permitted by our legal retention obligations, and retain only the information necessary to prevent re-registration by the same individual. If you have reason to believe that an underage person has accessed the bdlbet Platform using your account or otherwise, please contact bdlbet support immediately.

12 International Data Transfers

Where bdlbet transfers personal data outside of Malaysia — for example, to cloud service providers or game suppliers whose servers are located in other countries — we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. These safeguards may include contractual data transfer agreements incorporating standard data protection clauses, or transfers to countries that have been assessed as providing an adequate level of data protection.

13 Updates to This Privacy Policy

bdlbet may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes to this Policy, we will notify registered members via the email address associated with their bdlbet account and/or by displaying a prominent notice on the Platform. The updated Policy will indicate the date on which it was last revised. Your continued use of the bdlbet Platform following notification of changes constitutes your acceptance of the revised Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bdlbet's handling of your personal data, please contact our data support team through the following channels:

• Live Chat: Available 24/7 directly within the bdlbet Platform and mobile application.
• Email: [email protected] — please include "Privacy Request" in your subject line for data subject rights enquiries.

bdlbet will acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 calendar days.