Privacy Policy — bbclub

1. Introduction

1.1 bbclub ("bbclub", "we", "us", "our") operates the online gaming platform at bbclub.asia, providing live casino, sports betting, slot games, and 4D lottery services to players in Malaysia and other permitted jurisdictions.

1.2 As a data controller, bbclub is responsible for determining the purposes and means by which personal data relating to players and website visitors is processed. This Privacy Policy applies to all personal data processed by bbclub in connection with the operation of the bbclub platform.

1.3 This Privacy Policy should be read alongside the bbclub Terms & Conditions and the Responsible Gaming Policy.

2. Data We Collect

2.1 Registration Data. When you create a bbclub account, we collect: full legal name, date of birth, email address, phone number, residential address, and the preferred currency (MYR). Date of birth is collected for the purpose of verifying that you meet the minimum age requirement of 21 years.

2.2 Identity Verification Data. To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, bbclub may request: a copy of a government-issued identity document (such as a Malaysian MyKad or passport), proof of address (such as a utility bill or bank statement issued within the last three months), and, in certain circumstances, proof of the source of funds deposited into your account.

2.3 Financial Data. bbclub collects transaction data for all deposits and withdrawals, including: payment method type, transaction amount in MYR, transaction timestamps, and payment provider reference numbers. bbclub does not store full payment card numbers; card data is tokenised and managed by our PCI-DSS-compliant payment processors.

2.4 Gameplay and Betting Data. bbclub records all gaming and betting activity on the platform, including: games played, bet amounts, bet outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical Data. When you access the bbclub platform, we automatically collect: IP address, browser type and version, device type and operating system, referring URL, pages visited, session duration, and error logs. This data is used for security monitoring, fraud detection, and platform performance analysis.

2.6 Communications Data. When you contact bbclub via live chat or email, we retain records of those communications, including the content of messages and any attachments, for the purpose of resolving your query and maintaining a support history.

2.7 Marketing Preferences. If you have opted in to receive marketing communications from bbclub, we retain a record of your consent and your stated preferences regarding communication channels and content types.

3. How We Use Your Data

3.1 bbclub uses your personal data for the following purposes:

• Account administration: creating and managing your bbclub account, verifying your identity and age, and maintaining accurate account records;
• Service delivery: processing deposits and withdrawals, crediting bonuses, settling bets, and providing access to all gaming products available on the platform;
• Regulatory compliance: fulfilling KYC, AML, and responsible gaming obligations imposed by applicable licensing frameworks, including the preparation of regulatory reports and responses to lawful requests from competent authorities;
• Security and fraud prevention: detecting, investigating, and preventing fraudulent activity, account compromise, money laundering, and other unlawful behaviour;
• Responsible gaming: monitoring gameplay patterns to identify potential problem gambling indicators and, where appropriate, initiating responsible gaming interventions in accordance with our Responsible Gaming Policy;
• Customer support: responding to your queries, resolving disputes, and maintaining records of support interactions;
• Platform improvement: analysing aggregated and anonymised usage data to improve the performance, stability, and user experience of the bbclub platform;
• Marketing communications: sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.

4. Legal Basis for Processing

4.1 bbclub processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between you and bbclub — including account creation, deposits, withdrawals, bet settlement, and customer support;
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC verification, AML reporting, and regulatory record-keeping;
• Legitimate interests: processing carried out for bbclub's legitimate business interests where those interests are not overridden by your rights and freedoms — including fraud prevention, security monitoring, and platform analytics;
• Consent: processing based on your freely given, specific, and informed consent — specifically, the sending of direct marketing communications. You may withdraw this consent at any time.

5. Sharing Your Data

5.1 bbclub does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 bbclub shares personal data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Payment processors: to facilitate deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB FPX, Public Bank FPX, Hong Leong Bank FPX, 7-Eleven Cliqq, and USDT TRC20;
• Identity verification providers: to conduct KYC checks in compliance with applicable AML requirements;
• Game content providers: game studios and aggregators whose content is available on the bbclub platform may receive session-level data necessary for game operation and RNG certification;
• Cloud infrastructure and hosting providers: third-party providers of server infrastructure, database hosting, and content delivery on which the bbclub platform operates;
• Regulatory authorities: bbclub will disclose personal data to licensing authorities, law enforcement agencies, or financial intelligence units where required by law or by lawful order, without prior notice to the affected player where such notice is legally prohibited.

5.3 All third-party service providers engaged by bbclub are required to process personal data only on bbclub's documented instructions and to maintain appropriate technical and organisational security measures.

6. International Transfers

6.1 bbclub's primary server infrastructure is located in secure data centres. In the course of operating the platform and engaging third-party service providers, your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, bbclub implements appropriate contractual safeguards — including standard data protection clauses — to ensure that your data receives a level of protection equivalent to that afforded within Malaysia.

6.2 By using the bbclub platform, you acknowledge and consent to the transfer of your personal data as described in this section.

7. Data Retention

7.1 bbclub retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Privacy Policy, and as required by applicable law and licensing obligations.

7.2 In particular:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC verification documents are retained for a minimum of five (5) years after the end of the player relationship;
• Customer support communications are retained for two (2) years from the date of the most recent interaction;
• Marketing consent records are retained for the duration of your account and for twelve (12) months following account closure;
• Technical and log data is retained for up to twelve (12) months for security and fraud detection purposes.

7.3 Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bbclub's data destruction procedures.

8. Cookies & Tracking Technologies

8.1 bbclub uses cookies and similar technologies on the bbclub.asia website. Cookies are small text files stored on your device that help the platform function correctly and improve your experience.

8.2 bbclub uses the following categories of cookies:

• Strictly necessary cookies: required for core platform functions, including maintaining your login session, authenticating your account, and processing transactions. These cookies cannot be disabled without breaking core functionality;
• Preference cookies: used to remember your settings and preferences, such as language selection and display options;
• Analytics cookies: used to collect anonymised data on how players use the bbclub platform, including pages visited and session duration. This data is used solely to improve platform performance and user experience. bbclub does not share analytics data with advertising networks.

8.3 bbclub does not use third-party advertising cookies or behavioural tracking technologies that profile you across external websites.

8.4 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the bbclub platform, including the login function.

9. Security

9.1 bbclub implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These include:

• TLS encryption for all data transmitted between your device and bbclub servers;
• AES-256 encryption at rest for databases containing personal and financial data;
• Salted cryptographic hashing for all stored passwords — plain-text passwords are never retained;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Automated anomaly detection systems that flag unusual login patterns and transaction behaviour;
• Regular penetration testing and vulnerability assessments conducted by independent third parties.

9.2 Notwithstanding the above, no security system is impenetrable. In the event of a data breach affecting your personal data, bbclub will notify affected players and, where required, the relevant regulatory authority, in accordance with applicable notification obligations.

9.3 You are responsible for maintaining the confidentiality of your bbclub login credentials. bbclub will never ask you to provide your password via email, live chat, or any channel other than the bbclub login page itself.

10. Your Rights

10.1 Subject to applicable law and the retention obligations described in Section 7, you have the following rights in relation to the personal data bbclub holds about you:

• Right of access: you may request a copy of the personal data bbclub holds about you;
• Right of rectification: you may request correction of inaccurate or incomplete personal data;
• Right of erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restriction: you may request that bbclub restricts the processing of your personal data in certain circumstances;
• Right to data portability: you may request a machine-readable copy of the personal data you have provided to bbclub;
• Right to object: you may object to the processing of your personal data where bbclub relies on legitimate interests as the legal basis, subject to bbclub's overriding legitimate grounds;
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10.2 To exercise any of the above rights, submit a written request to [email protected]. bbclub will acknowledge your request within forty-eight (48) hours and respond substantively within thirty (30) days. bbclub may request proof of identity before processing a data subject request.

11. Children

11.1 The bbclub platform is strictly for adults aged 21 years and above. bbclub does not knowingly collect personal data from individuals under the age of 21. If bbclub becomes aware that personal data has been collected from an individual under 21, that data will be deleted immediately and the associated account will be closed.

11.2 If you are a parent or guardian and believe that a person under 21 in your care has registered a bbclub account or provided personal data to bbclub, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

12.1 bbclub may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we offer. The "Last updated" date at the top of this page indicates when the current version was published.

12.2 Where changes are material, bbclub will notify registered players via the email address associated with their account at least seven (7) days before the revised policy takes effect. Continued use of the bbclub platform following that notification constitutes acceptance of the updated Privacy Policy.

13. Contact Us

13.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bbclub handles your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 at bbclub.asia

13.2 bbclub is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with the outcome of a complaint submitted to bbclub, you may escalate your complaint to the relevant data protection authority in your jurisdiction.