Privacy Policy BBClub – Your Personal Data Protection

01 Introduction

BBClub ("we", "Platform", or "bbclub") takes the privacy of every user seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the bbclub.fun website, the bbclub mobile app, and all related services.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards for the trusted online gaming industry. This policy is designed to give you a clear and honest picture of how your data is managed — no confusing legal language, no hidden fine print.

If you have any questions about this policy or how we manage your data, our privacy team is available via live chat in the bbclub app at any time.

02 Information We Collect

We only collect information that is strictly necessary to provide you with a safe, fair, and legally compliant service. The following are the categories of information we collect:

A. Information You Provide Directly

• Registration information: Full name, date of birth, phone number, email address, and the password you create when registering your bbclub account.
• Identity verification documents (KYC): A copy of your MyKad, passport, or other identity document required to verify your identity and age in accordance with legal compliance requirements.
• Financial information: Bank account numbers, digital wallet details (Touch 'n Go eWallet, GrabPay), and information related to your deposits and withdrawals.
• Profile information: Communication preferences, account settings, and other information you voluntarily provide in your profile.

B. Information Collected Automatically

• Usage data : Pages you visit, games you play, session duration, buttons you click, and general navigation patterns within the platform.
• Device information: Device type, operating system, web browser version, screen resolution, and unique device identifier.
• Network data: IP address, approximate geographic location (city/state level), internet service provider (ISP) name, and connection data.
• Cookie and tracking data: Session cookies, preference cookies, and identifiers that help us recognise you when you return to the platform. More details in Section 6.

03 How We Use Your Information

The information we collect is used solely for the following purposes. We will not use your data for any other purpose without obtaining your consent first:

You may withdraw your consent to marketing communications at any time through your account settings or by contacting the bbclub support team. Withdrawal of consent will not affect any data processing carried out prior to that date.

04 Information Sharing

BBClub does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We only share your data in the following limited circumstances:

• Payment service providers: Third parties that process your financial transactions — such as partner banks, digital wallet providers, and payment gateways — receive only the information necessary to complete those transactions.
• Game providers: Game software providers that power the games on the bbclub platform may receive anonymised player identifiers for game record and audit purposes. No full personal information is shared.
• Relevant authorities: We will disclose information to law enforcement agencies, regulatory bodies, or courts when required to do so under applicable Malaysian law.
• Fraud prevention: We may share information with fraud detection service providers to protect the platform and all members from suspicious activity.
• Business transfers: In the event of a merger, acquisition, or asset transfer, user data may be transferred as part of those business assets, subject to appropriate notice being given to you.

05 Data Security

We invest seriously in security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption: All communications between your device and bbclub servers are encrypted using the latest SSL/TLS protocols, ensuring no third party can intercept or read the data transmitted.
• Stored data encryption: Sensitive information such as financial details and identity documents is stored in encrypted form using AES-256 standards in a protected database.
• Two-factor authentication (2FA): 2FA is available for all member accounts, adding an extra layer of protection against unauthorised login attempts.
• Continuous threat monitoring: Our automated monitoring system operates 24 hours a day to detect and respond to any suspicious activity in real time.
• Regular security audits: The bbclub platform undergoes periodic penetration testing and security audits by independent third parties.
• Internal access control: Only employees who genuinely require access to specific data to perform their duties are permitted to do so, in accordance with the principle of least privilege.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be 100% perfect. In the event of a data breach affecting your information, we will notify you and the relevant authorities within the timeframe required by law.

06 Cookies & Tracking Technologies

The bbclub platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Helps us understand how users interact with the platform — which pages are visited most frequently, where technical issues occur, and more. This data is used in aggregate form without identifying individuals.
• Functionality cookies: Saves your preferences such as language, display settings, and other choices so you do not need to reconfigure them every time you log in.
• Analytical cookies: Helps us analyse usage patterns to continuously improve the bbclub platform.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the bbclub platform.

07 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, contact the bbclub privacy team via in-app live chat. We will process your request within 14 business days. For complex cases, this period may be extended up to 30 business days with prior notice.

08 Data Retention & Deletion

We retain your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account is active and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in accordance with AML requirements.
• Support communication logs: Retained for 2 years for reference and service quality improvement purposes.
• Analytics data: Aggregated and anonymised usage data is retained indefinitely for platform improvement purposes.

When your data is no longer needed and there is no legal obligation to retain it, we will securely delete it using non-recoverable methods.

09 Privacy Policy Changes

BBClub may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. All changes will be posted on this page along with the latest update date.

For material changes — meaning changes that significantly affect how we use your personal data — we will notify you via your registered email or a prominent notice within the bbclub app at least 14 days before those changes take effect.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live chat: Available 24 hours a day, 7 days a week directly in the bbclub mobile app or website.
• Privacy email: [email protected] (response within 1–2 business days).
• General support: [email protected]

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) or the relevant regulatory authority.