Privacy Policy BD333 — We Protect Your Data the Way We Protect Ourselves

This Privacy Policy ("Policy") describes how BD333 ("we", "the BD333 platform") collects, processes, stores, and protects your personal information when you use the website https://bd333-win.com and all related services we provide to members in Malaysia.

By registering a BD333 account, accessing the platform, or using any BD333 services, you agree to the collection and use of your information as described in this Policy. We encourage you to read this Privacy Policy carefully before sharing any personal information with BD333.

BD333 is an online entertainment platform operating in Malaysia, offering services that include live baccarat, casino games, football (including the Malaysia Super League and EPL), poker, lottery, virtual sports, and live matches. To run these operations, BD333 needs to collect and process certain personal information from our members to ensure a smooth, secure, and responsible experience.

We take this responsibility very seriously. BD333 does not view your personal data as a business asset — rather, we see it as a trust you have placed in us, and that trust must be honoured with the utmost integrity. Every decision BD333 makes regarding the handling of your data starts with a simple question: is this in the best interest of our members?

This Policy applies to all personal information collected through the BD333 platform, including the website, mobile app (where applicable), email communications, customer support interactions, and all other BD333 digital channels.

BD333 collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect and their primary purposes:

BD333 uses the personal data collected for the following purposes, all of which are lawful and necessary for the responsible operation of the platform:

• Account Management: To create, verify, and maintain your BD333 account, including the mandatory KYC (Know Your Customer) process.
• Financial transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other Malaysian payment methods, as well as withdrawals of winnings to your account.
• Gaming service provision: To give you access to all BD333 products, including live baccarat, Malaysia Super League football, poker, lottery, and virtual sports.
• Security and fraud prevention: To identify and prevent fraudulent activity, money laundering, or any misuse of the BD333 platform.
• Legal compliance: To fulfil BD333's legal obligations under Malaysian law relating to platform operations, including reporting requirements set by the relevant authorities.
• Customer support: To assist you with technical issues, account enquiries, or gaming-related concerns on the BD333 platform.
• Responsible gaming: To monitor gameplay patterns and identify early signs of problem gambling, enabling us to offer appropriate assistance to members who may need support.
• Marketing communications (with consent): To send you BD333 promotions, bonus offers, and platform updates — only if you have given your consent to receive them.
• Platform improvement: To analyse aggregated usage patterns for the ongoing improvement of BD333's platform performance, design, and functionality.

BD333 will not process your personal data for any purpose not stated above without first obtaining your separate consent.

BD333 does not sell, rent, or trade members' personal data to any third party for marketing purposes or their commercial gain. However, in the course of operating the platform lawfully and securely, BD333 may share your data with the following categories of parties under strictly limited circumstances:

• Payment service provider: Malaysian payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX-member banks receive the transaction data necessary to process your deposits and withdrawals. They are bound by strict confidentiality agreements with BD333.
• Gaming software provider: Technology partners providing specific gaming software on the BD333 platform may receive the minimum usage data required for technical functionality — this does not include your financial information or full identity details.
• Malaysian authorities: BD333 will disclose members' personal data to Malaysian authorities when required by law — including court orders, criminal investigation requests, or anti-money laundering compliance obligations.
• Independent auditors: Third-party audit firms that verify BD333's RNG systems and security may access aggregated technical data — never the personal data of individual members.

BD333 continuously invests in robust data security infrastructure to protect the personal information of all our Malaysian members. The technical and organisational security measures we have in place include:

• Encryption in transit: All data transmitted between your device and BD333's servers is protected by TLS 1.3 protocol with 256-bit SSL encryption.
• Encryption at rest: Sensitive data stored in BD333's database is encrypted using industry-standard encryption — including passwords, which are never stored in plain text but instead protected with irreversible hashing techniques.
• Access controls: Access to BD333 members' personal data is restricted to staff with a legitimate business need only, and all access is automatically logged for audit purposes.
• 24/7 security monitoring: BD333's cybersecurity team monitors the platform around the clock to detect and respond to any security threats or unauthorised access attempts.
• Regular penetration testing: BD333 conducts regular security testing by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Incident response procedure: BD333 has a clear incident response procedure to address any data breach promptly — including notification to affected members within the timeframe prescribed by Malaysian law.

While BD333 takes all reasonable steps to protect your data, no security system can be guaranteed to be one hundred percent foolproof. You also play an important role in your account's security — use a strong password, enable two-factor authentication, and never share your BD333 login credentials with anyone.

BD333 retains your personal data only for as long as necessary for the purposes outlined in this Policy, or as required by Malaysian law. The general data retention guidelines for BD333 are as follows:

• Active account data: Retained for the duration that your BD333 account remains active and open.
• Data after account closure: Identity information and financial transaction records are retained for a minimum of 7 years after account closure to meet Malaysia's anti-money laundering compliance requirements and tax legislation.
• Customer support logs: Retained for 3 years to allow historical reference and dispute resolution.
• Technical data and access logs: Retained for 12 months for security diagnostics and incident investigation purposes.
• Marketing data: Deleted within 30 days of you withdrawing consent to receive BD333 marketing communications.

The BD333 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below are the types of cookies used by BD333:

• Essential Cookies: Required for core BD333 platform functions such as maintaining login sessions and form security. Cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helps BD333 understand how members use the platform — the most frequently visited pages, time spent, and navigation paths. This data is collected in aggregate and does not identify individuals.
• Preference Cookies: Remembers your settings and preferences — such as your preferred language and display layout — to ensure a more personalised experience each time you log in to BD333.
• Security Cookies: Used by BD333's security systems to detect suspicious behaviour and protect your account from unauthorised access.

You can manage cookie settings through your internet browser. However, disabling essential cookies will affect the functionality of the BD333 platform and may prevent you from accessing certain sections.

As a BD333 member residing in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act (PDPA) 2010 and the international best practices adopted by BD333:

The BD333 platform is intended for individuals aged 18 and above only. BD333 does not knowingly collect or process personal data from anyone under the age of 18. If you believe that a person under 18 has registered a BD333 account or provided us with their personal information without your knowledge, please contact us immediately at support@bd333-win.com.

BD333 will investigate such reports promptly and take appropriate action — including deleting all related data and closing any accounts involved. Protecting young people is BD333's highest priority in terms of platform privacy and safety.

In certain operational circumstances, your personal data may be processed or stored on servers located outside Malaysia. BD333 ensures that any such data transfers are safeguarded by protections equivalent to or exceeding those required under Malaysian data protection law.

All of BD333's technology partners outside Malaysia who may process member data are bound by:

• Strict data processing agreements that require full compliance with the data protection standards set by BD333.
• Confidentiality and security obligations equivalent to international industry standards.
• An absolute prohibition on processing BD333 member data for their own purposes or sharing it with any other party.

If you have any concerns about international data transfers relating to your BD333 account, please contact us for more information about the safeguards in place.

BD333 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, applicable Malaysian legal requirements, or new features introduced on the BD333 platform. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending members notifications via their registered email or in-platform notices at least 14 days before changes take effect (for significant changes).
• In the event of significant changes that materially affect your privacy rights, BD333 may request your renewed consent before processing your data under the updated policy.

Your continued use of the BD333 platform after the effective date of any changes to this Policy will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

BD333 has a dedicated team responsible for ensuring privacy policy compliance across the platform. If you have any questions, concerns, or complaints regarding how BD333 handles your personal data, please do not hesitate to reach out to us:

• Email: support@bd333-win.com (use the subject line "Privacy Enquiry")
• Live Chat: Available within the BD333 platform, 24 hours a day, 7 days a week
• Language of Service: Bahasa Melayu and English

BD333 is committed to addressing every privacy enquiry seriously and within a reasonable timeframe. If you are not satisfied with BD333's response, you have the right to lodge a complaint with the Department of Personal Data Protection under the Ministry of Communications Malaysia, in accordance with the procedures set out under PDPA 2010.