BCGames Privacy Policy – Data Protection Malaysian Player Privacy

BCGames is the data controller for all personal data collected through the bcgames-jit.net platform. In this capacity, BCGames takes full responsibility for ensuring that all personal data is processed in accordance with Malaysia's Personal Data Protection Act 2010 and internationally recognised privacy principles.

This Privacy Policy applies to:

• All visitors to bcgames-jit.net, whether registered or not
• All members who have registered a BCGames account
• All individuals who contact the BCGames support team
• All parties who interact with BCGames through any communication channel

This Policy does not apply to third-party websites or services that may be linked from the BCGames platform. BCGames is not responsible for the privacy practices of those third parties.

BCGames collects various categories of personal data depending on how you interact with our platform. Below is a breakdown of the data we collect:

Personal data collected by BCGames is used solely for the following purposes. We will not use your data for any other purpose without first notifying you and obtaining your consent:

• Account management: Creating and managing your BCGames account, verifying your identity at login, and maintaining the security of your account.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow QR, GrabPay, Boost, ShopeePay, or FPX, and managing withdrawal of your winnings to your Malaysian bank account.
• KYC verification: Meeting the Know Your Customer (KYC) verification requirements mandated to prevent money laundering and financial fraud.
• Gaming services: Provides access to all BCGames games including slots, live casino, poker, EPL and Malaysia Super League Sports Betting, lottery, and e-sports, and stores your game history.
• Platform improvement: Analysing aggregated usage data (without identifying individuals) to understand how players use BCGames and make relevant improvements.
• Support communications: Responding to enquiries, resolving complaints, and providing technical assistance whenever you contact the BCGames support team.
• Marketing communications: Sending information about promotions, new bonuses, and platform updates — only where you have given consent to receive such communications.
• Responsible gambling: Monitoring play patterns to identify signs of problem gambling and, where appropriate, reaching out with relevant support resources.
• Legal compliance: Fulfilling legal obligations under Malaysia's PDPA 2010 and other applicable laws governing BCGames' operations.

BCGames processes your personal data on valid legal grounds under Malaysia's PDPA 2010. Depending on the purpose of processing, different legal bases may apply:

• Contract performance: Processing necessary to fulfil the agreement between you and BCGames — including managing your account, processing deposits and withdrawals, and providing access to games.
• Consent: Processing for direct marketing and promotional communications that requires your explicit consent. You may withdraw this consent at any time.
• Legitimate interests: Processing for the purposes of fraud detection, system security, service improvement, and responsible gambling — where BCGames' legitimate interests or the public interest in protecting players are valid and do not override your fundamental rights.
• Legal obligations: Processing required to fulfil legal obligations, including KYC and anti-money laundering requirements under Malaysian law.

BCGames does not sell, lease, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the BCGames platform, we may share your data with the following categories of third parties for limited and specific purposes:

• Payment processors: eWallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and Malaysian banks supporting FPX receive the transaction information necessary to process payments. These providers are governed by their own privacy and security policies, which they are required to uphold.
• Game providers: Companies such as PG Soft, Evolution Gaming, Pragmatic Play, and Spadegaming may receive the minimum technical data required to deliver their respective games to you through the BCGames platform.
• Identity verification services: Third parties that assist BCGames with KYC verification and fraud prevention. Data shared is limited to the minimum necessary for verification purposes only.
• Regulatory authorities: BCGames will disclose personal data to Malaysian authorities when required to do so by law, court order, or a legitimate official investigation.

BCGames invests seriously in data security infrastructure to protect your personal information. The technical and organisational measures we implement include:

• 256-bit SSL Encryption: All communications between your browser and BCGames servers are encrypted using TLS 1.3 with 256-bit key length – the same standard used by Malaysia's major banks.
• Data encryption at rest: Sensitive personal data stored in BCGames databases is encrypted using AES-256, ensuring it remains unreadable even to unauthorised BCGames staff.
• Tiered access controls: Only BCGames staff who require access to specific data to perform their duties are granted that access — strictly in line with the need-to-know principle.
• 24/7 monitoring: BCGames' security systems are continuously monitored to detect and respond to any unauthorised access attempts or suspicious activity.
• Periodic penetration testing: BCGames conducts regular security audits by independent third parties to identify and patch system vulnerabilities before they can be exploited.
• Data backups: Member data is securely backed up across multiple locations to ensure service continuity and data recovery in the event of disruption.

BCGames retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for the duration of your active membership with BCGames
• Financial transaction data: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian financial legal requirements
• KYC data (identity verification): Retained for 5 years after account closure in accordance with anti-money laundering requirements
• Game data: Retained for 2 years after your last gaming session for dispute resolution purposes
• Support communication logs: Retained for 2 years after the support ticket is closed
• Marketing data (with consent): Retained until you withdraw consent or close your account

Once the retention period expires, data is securely deleted or anonymised in accordance with BCGames' approved procedures. Anonymised data can no longer be linked to your identity and may be retained for analytical and statistical purposes.

BCGames uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse usage patterns. The following types of cookies are used:

• Essential cookies: Required for core platform functionality — login, session security, and remembering your preferences. These cookies cannot be disabled without affecting BCGames functionality.
• Performance cookies: Collecting information on how the platform is used — including most-visited pages, load times, and technical errors — to help us continuously improve the platform.
• Functional cookies: Remembering your preferences — such as language, display settings, and favourite games — to deliver a more personalised experience.
• Analytics cookies: Helping BCGames understand aggregated platform usage patterns to make data-driven improvement decisions.

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the BCGames platform. Session cookies will be deleted automatically when you close your browser.

As a data processor compliant with Malaysia's PDPA 2010, BCGames recognises and respects your rights regarding your personal data. The following rights are available to you:

BCGames is a platform exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process personal data of anyone under the age of 18.

During registration, all applicants are required to confirm that they are 18 years of age or older. BCGames conducts age verification checks as part of the KYC process before permitting any withdrawals. Should BCGames discover that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who believe their minor child has registered at BCGames are advised to contact us immediately at support@bcgames-jit.net so that action can be taken without delay.

BCGames has established a Data Privacy Officer (DPO) function responsible for ensuring compliance with PDPA 2010 across all our operations. If you have any questions, concerns, or complaints regarding how BCGames handles your personal data, you may reach us through the following channels: