BD333 Privacy Policy – Our Commitment to Protecting Malaysian Members' Personal Data

1Introduction – Who We Are and Why This Policy Matters

BD333 is an online Sports Betting and casino platform that has been operating since 2010, serving hundreds of thousands of active members across Malaysia. As a platform that handles members' personal and financial information, we understand that your trust is the most valuable asset we hold. This Privacy Policy ("Policy") explains in detail how BD333 collects, uses, stores, protects, and manages your personal data.

This policy was developed with the needs and rights of Malaysian users in mind, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We do not merely meet the minimum legal requirements — we strive to exceed them, because we believe your privacy is a fundamental right that deserves full respect.

This document is written in plain, easy-to-understand language — not deliberately obscure legal text. Each section is designed to answer practical questions you may have: what data we hold, who can access it, how long we keep it, and what you can do to manage your own privacy.

2Personal Data We Collect TRANSPARENT

BD333 only collects data that is strictly necessary to provide a safe and effective service. The following are the categories of data we may collect from you:

Data You Provide Directly:

• Full name, date of birth, identification card number (MyKad), and email address upon account registration.
• Phone number for verification and security communication purposes.
• Payment account information – the account holder name of the Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX account (Maybank2u / CIMB Clicks) you use for deposits and withdrawals.
• Any information you share when contacting the BD333 support team via live chat, email, or other channels.

Data Collected Automatically During Use:

• The IP address, device type, operating system, and web browser type you are using.
• Login and logout session records, including time and date.
• Transaction history — deposits, withdrawals, and betting records (not the content of individual bets).
• Platform usage data – pages visited, time spent, and features used.
• Cookie data you have consented to be collected (see the Cookie Policy section).

3How BD333 Uses Your Data

BD333 uses collected data for limited, specific, and lawful purposes. We do not use your data for purposes unrelated to the provision of platform services without your consent. The following outlines the specific purposes for which data is used:

• Account management: Creating, managing, and maintaining your BD333 account, including login processing, identity verification, and account security.
• Payment processing: Processes all deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as all withdrawals to your account.
• Legal compliance: Meeting Malaysian legal requirements including KYC (Know Your Customer), anti-money laundering, and PDPA 2010 compliance obligations.
• Platform security: Detecting and preventing fraud, unauthorized access, multiple account usage, and activities that violate BD333's Terms & Conditions.
• Customer support: Enables the BD333 support team to assist you in resolving account issues, technical queries, and complaints effectively.
• Platform improvements: Analyzing usage patterns at an aggregate level (not individual level) to improve platform performance, enhance user experience, and develop new features.
• Service communications: Sending important notifications such as transaction confirmations, security alerts, and terms updates that require your attention.
• Marketing communications (with consent): Sending information about BD333 promotions, bonuses, and new offers only where you have given explicit consent to receive such communications.

4Third-Party Data Sharing & Disclosure

BD333 does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. Your data is shared only in limited circumstances, and strictly to the extent necessary:

• Payment processors: Required transaction information is shared with selected payment providers (Touch 'n Go, GrabPay, DuitNow, FPX) solely for the purpose of processing your deposits and withdrawals. All such providers maintain their own privacy policies and security standards.
• Technical service providers: Server infrastructure providers, security monitoring services, and technical support contractors engaged by BD333. All such providers are bound by strict confidentiality agreements and may only use data for purposes specified by BD333.
• Legal requirements: If BD333 is required by a court, law enforcement body, or competent Malaysian authority to disclose certain information, we will do so in accordance with applicable law. BD333 will endeavor to notify you of any such request where legally permitted to do so.
• Business transfers: In the event of any transfer, merger, or acquisition involving BD333's business, member data may form part of the transferred assets. In such circumstances, members will be notified in advance and given the right to close their accounts before the transfer takes effect.

Beyond the situations described above, BD333 will not disclose your data to any party without your explicit prior consent. This is an absolute, unwavering commitment.

5Data Security – How We Protect Your Information CRITICAL

BD333 takes data security seriously. The following layers of protection are in place to safeguard your information:

• Data encryption in transit: All communications between your browser and BD333's servers are protected by TLS 1.3 and 256-bit SSL encryption. This means that data transmitted – including login credentials and payment details – cannot be read by anyone attempting to intercept the communication.
• Stored data encryption: Sensitive data such as passwords is stored using one-way, irreversible hash functions. Sensitive financial information is stored in encrypted form within segmented, access-restricted databases.
• Two-factor authentication (2FA): BD333 offers 2FA on all accounts as an added layer of security. We encourage all members to enable this feature in their account security settings.
• Internal access controls: BD333 staff access to member data is strictly controlled on a need-to-know basis. Full audit logs are maintained for all access to sensitive data.
• 24/7 threat monitoring: Automated monitoring systems are active at all times to detect intrusion attempts, brute force attacks, and other suspicious activity patterns.
• Regular security testing: BD333 conducts regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident response plan: BD333 has a clear incident response procedure in place. In the event of a data breach affecting your information, we will notify you within 72 hours of the incident being confirmed.

6Data Retention Period

BD333 retains your personal data only for as long as necessary for the stated purposes, or as required under applicable Malaysian law. The following is a general guide to retention periods:

• Active account data: Retained for the duration your account remains active with BD333, plus any additional period required after account closure for audit and compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian legal requirements relating to financial records and anti-money laundering prevention.
• Security and audit logs: Retained for a minimum of 2 years to support investigation of any security incidents that may arise.
• Support communication records: Retained for 3 years after the last interaction for reference and service improvement purposes.
• Marketing data (where applicable): Deleted within 30 days after you withdraw consent for marketing communications.

Once the applicable retention period has elapsed, data is securely deleted using methods that ensure it cannot be recovered. If you would like to know the specific retention period for a particular data category, contact us at support@bd333-bangla.com.

7Your Rights as a BD333 Member

Under Malaysia's Personal Data Protection Act 2010 and BD333's policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the BD333 team at support@bd333-bangla.com by stating the right you wish to exercise and providing sufficient identifying information for us to verify your identity before processing your request.

8BD333 Cookie Policy

The BD333 platform uses cookies and similar tracking technologies to enhance user experience and maintain platform security. The following are the types of cookies we use:

You can manage cookies through your web browser settings. However, disabling mandatory cookies may affect your ability to log in and use the BD333 platform properly. For optional cookies, you may grant or withdraw consent through the cookie settings panel available within the platform.

9Financial Data & Payment Privacy IMPORTANT

As BD333 processes financial transactions involving Malaysian Ringgit (MYR) across a range of local payment methods, we pay particular attention to the protection of financial data:

• E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, and FPX account details (Maybank2u / CIMB Clicks) used for deposits and withdrawals are stored in a segmented, encrypted system separate from general user profile data.
• BD333 does not store your payment account PIN or password. All payment transactions are processed directly through the secure interface of the respective payment provider — we never see or store your payment account login credentials.
• Your complete transaction history on BD333 – including all deposits and withdrawals – is available for you to review at any time under the Transaction History section of your BD333 account.
• Financial transaction records are retained in accordance with Malaysian legal requirements relating to financial records and anti-money laundering (AML). These records cannot be deleted upon individual request if they are still within the legally required retention period.
• If you suspect any unauthorised transactions on your BD333 account, contact our support team immediately — we will freeze the account and investigate within 24 hours.

10Policy Amendments & How to Contact Us

BD333 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to our data protection measures. When a material amendment is made, we will:

• Displaying a clear notice on the BD333 platform at least 14 days before any amendments take effect.
• Sending email notifications to all active members to inform them of material changes for significant amendments.
• Updating the "Updated" date at the top of this document.

Continued use of the BD333 platform after the amendment's effective date constitutes your acceptance of the revised policy. If you do not agree with any amendment, you have the right to close your account and withdraw any eligible balance before the amendment takes effect.

For any questions, concerns, or requests relating to this BD333 Privacy Policy, please reach us through:

• Email: support@bd333-bangla.com
• Live Chat: Available 24 hours within the BD333 platform
• FAQ Page: BD333 FAQs
• Terms of Use: BD333 Terms & Conditions