BBM88 Privacy Policy

This Privacy Policy (hereinafter "Policy") sets out the practices of BBM88 (hereinafter "BBM88", "we", "us", or "our") with respect to the collection, processing, storage, disclosure, and protection of personal data belonging to users (hereinafter "Player", "User", or "you") of the BBM88 online gaming platform, accessible at https://bbm88.cam and any associated mobile-optimised interfaces.

BBM88 operates under an international gaming licence and takes its data protection obligations seriously. This Policy is intended to be transparent, plain-language where possible, and fully informative — so that you understand exactly what data we hold, why we hold it, and what rights you have in relation to it.

By creating an account on BBM88 and using the platform's services — including placing bets, making deposits via Malaysian payment channels, participating in promotions, or contacting our support team — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can identify a natural person, either directly (e.g., full name, MyKad number) or indirectly (e.g., device ID combined with usage data).
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means BBM88, being the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of BBM88 in accordance with BBM88's instructions and this Policy (e.g., payment gateway providers).
• "KYC" means Know Your Customer — the identity verification process conducted by BBM88 to confirm player identity, age, and the ownership of payment methods used on the platform.
• "Supported Payment Methods" means the payment channels approved by BBM88 for Malaysian players, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
• "Cookie" means a small text file placed on your device by the BBM88 platform to enable certain technical and analytical functions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

BBM88 collects the following categories of personal data from players:

BBM88 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by law or our responsible gambling programme (e.g., self-exclusion records).

BBM88 collects personal data through the following mechanisms:

• Direct Provision: You provide personal data directly when you register an account, complete KYC verification, contact our support team, or participate in a promotion.
• Automated Collection: Technical and behavioural data is collected automatically when you access the platform, via server logs, session tracking, and cookies placed on your device.
• Payment Processors: When you deposit or withdraw funds via Supported Payment Methods (such as Touch 'n Go eWallet, DuitNow, or FPX), our payment processing partners may transmit limited transaction data to BBM88 to confirm the status and validity of the transaction.
• Third-Party Identity Verification Services: BBM88 may use third-party KYC service providers to cross-reference identity documents against authoritative databases for the purpose of age and identity verification. These providers operate under data processing agreements with BBM88.
• Fraud Prevention Tools: BBM88 uses automated risk assessment tools that analyse transaction patterns, login behaviour, and device fingerprints to detect and prevent fraudulent activity.

BBM88 processes your personal data for the following specific purposes:

1. Account Creation and Management: To register your account, maintain your player profile, and provide you with access to the BBM88 platform and its games.
2. Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years, to confirm your identity, and to ensure that the payment methods used on your account are registered in your name.
3. Payment Processing: To process deposits and withdrawals in MYR via Supported Payment Methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
4. Responsible Gambling: To monitor gameplay patterns for indicators of problem gambling behaviour, to administer self-exclusion requests and deposit limits, and to comply with our responsible gaming obligations under our international licence.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited activities.
6. Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
7. Legal and Regulatory Compliance: To comply with obligations imposed by our licensing authority and applicable law, including anti-money laundering requirements and data retention mandates.
8. Platform Improvement: To analyse anonymised usage data for the purpose of improving the BBM88 platform, its user interface, and the range of games and services offered.
9. Direct Communications: To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts) and, where you have provided consent, promotional communications about BBM88 offers.

BBM88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and BBM88 — i.e., operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing that is required to comply with BBM88's obligations under its international gaming licence, anti-money laundering requirements, and applicable law — including KYC verification and transaction record retention.
• Legitimate Interests: Processing for BBM88's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and anonymised analytics for product improvement.
• Consent: Where BBM88 relies on your consent for specific processing activities (such as sending promotional communications), you may withdraw that consent at any time by contacting our support team or updating your account communication preferences.

BBM88 does not sell your personal data. We share personal data only in the following limited circumstances and only to the extent necessary:

• Payment Service Providers: Transaction data is shared with the payment processors that facilitate your deposits and withdrawals — such as the technical operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX integrations. These providers operate under data processing agreements and are prohibited from using your data for any purpose beyond payment facilitation.
• KYC and Identity Verification Providers: Identity documents and verification data may be shared with third-party KYC service providers contracted by BBM88 to perform identity and age verification. These providers are bound by strict data processing agreements.
• Game Content Studios: Anonymised gameplay data (such as game session logs) may be shared with the game studios whose titles are hosted on BBM88 for the purposes of technical support and game performance monitoring. No personally identifiable information is shared with game studios.
• Licensing and Regulatory Authorities: BBM88 may be required to disclose account and transaction data to its licensing authority or to law enforcement agencies in response to a lawful order or regulatory audit.
• Anti-Fraud and Risk Management Services: Data may be shared with anti-fraud service providers to assist with the detection and prevention of financial crime and account abuse.
• Professional Advisors: Where necessary, personal data may be disclosed to legal counsel, auditors, or other professional advisors subject to applicable obligations of confidentiality.

Given the financial nature of the BBM88 platform, payment data and KYC documentation are subject to additional handling standards:

Payment Method Data: BBM88 records the name, type, and identifier (e.g., registered mobile number or account name) of the payment methods you use to deposit and withdraw funds in MYR. This information is used solely to verify that your payment method matches your registered name, to process transactions, and to comply with anti-money laundering obligations. BBM88 does not store full bank account numbers, card numbers, or e-wallet PINs.

KYC Documents: Identity documents submitted for KYC verification (such as a copy of your MyKad or passport) are stored securely in encrypted form. Documents are reviewed by authorised BBM88 compliance team members or contracted KYC providers. KYC documents are retained for the duration of your account relationship with BBM88 and for a minimum of five (5) years following account closure, as required by our licensing obligations.

Transaction Records: All deposit and withdrawal transactions in MYR are logged, including the date, amount, payment method used, and processing outcome. These records are retained for compliance purposes and are available to you upon request within the limits of your account transaction history.

BBM88 uses cookies and similar tracking technologies on the platform. The following types of cookies are used:

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active gaming session. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences, such as language settings and display configurations. Disabling these cookies may affect your user experience.
• Analytics Cookies: Used to collect anonymised data about how users interact with the BBM88 platform — for example, which games are most frequently visited or which pages have the highest exit rate. This data is used to improve the platform. No personally identifiable information is collected via analytics cookies.
• Security Cookies: Used to detect and prevent fraudulent account activity, including device fingerprinting and anomalous login detection.

BBM88 does not use third-party advertising cookies, tracking pixels for ad retargeting, or cross-site cookies that follow your activity on other websites.

You may manage cookie settings through your browser preferences. Disabling essential or security cookies may prevent you from accessing certain platform features.

BBM88 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account Data and KYC Documents: Retained for the duration of the account relationship and for a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering and licensing retention requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Live chat transcripts and email correspondence retained for two (2) years from the date of the interaction.
• Gameplay Logs: Retained for two (2) years in full detail; summary records (total wager, wins/losses by period) may be retained for longer periods for responsible gambling monitoring purposes.
• Self-Exclusion Records: Retained for the duration of the self-exclusion period and for five (5) years thereafter to prevent re-registration during an active exclusion period.

When personal data is no longer required for any of the purposes described in this Policy or required by law, BBM88 will securely delete or anonymise that data.

BBM88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and BBM88's servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting access to personal data to authorised personnel on a need-to-know basis.
• Regular penetration testing and security audits of BBM88's infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Automated anomaly detection systems monitoring for unusual login patterns, access attempts, or transaction behaviour.

While BBM88 takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been accessed without your authorisation, you should notify BBM88 support immediately.

As a BBM88 account holder, you have the following rights in relation to your personal data. Requests to exercise any of these rights may be submitted to BBM88 support and will be responded to within 30 calendar days:

BBM88 is strictly an adult platform. The minimum age requirement for all BBM88 accounts is 21 years. BBM88 does not knowingly collect personal data from individuals under the age of 21, and actively verifies the age of all account holders through the KYC process prior to approving withdrawal requests.

If BBM88 discovers or is notified that an account has been registered by a person under the age of 21, the account will be immediately closed, any deposits will be returned to the originating payment method, and all personal data associated with the underage account will be deleted in accordance with our data retention obligations — except where retention is required for legal or regulatory purposes related to the incident.

Parents or guardians who believe that a minor has registered an account on BBM88 should contact our support team immediately at [email protected]. BBM88 will investigate all such reports promptly and take appropriate action.

BBM88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, the purposes for which data is used, or the rights available to players — BBM88 will provide notice through one or more of the following channels:

• A prominent notice displayed on the BBM88 platform upon your next login following the amendment.
• A direct communication to the email address registered to your account.
• An announcement posted on the BBM88 platform's homepage or legal documentation section.

The date of the most recent revision to this Policy is indicated at the top of this page. Continued use of the BBM88 platform following notice of material changes to this Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease use of the platform and request account closure in accordance with the Terms & Conditions.

If you wish to exercise any of your data rights, have questions about how BBM88 processes your personal data, or wish to raise a concern about a possible data breach or privacy violation, please contact our Data Protection team through the following channels: