01 Introduction
This Privacy Policy (hereinafter "Policy") is issued by BBWin (hereinafter "BBWin", "we", "us", or "our") and governs the collection, processing, storage, use, and disclosure of personal data relating to registered players, website visitors, and prospective users (hereinafter "you", "your", or "Data Subject") who interact with the BBWin platform accessible at bbwin.buzz.
BBWin is committed to handling your personal data in a responsible, transparent, and lawful manner, consistent with applicable data protection principles including those reflected in Malaysian data protection law and internationally recognised privacy standards. This Policy applies to all personal data collected through the BBWin website, mobile interfaces, customer support channels, payment processing systems, and any other touchpoints associated with the Platform.
By registering an Account on BBWin or by continuing to use the Platform, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform immediately.
02 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
03 Data Controller
BBWin acts as the Data Controller for all personal data collected through the Platform and its associated services. As Data Controller, BBWin determines the purposes for which personal data is collected and the manner in which it is processed, stored, and ultimately disposed of.
BBWin engages third-party Data Processors — including licensed payment service providers, identity verification specialists, cloud infrastructure providers, and customer support platforms — where necessary to deliver its services. All third-party Data Processors engaged by BBWin are subject to written data processing agreements that impose obligations consistent with applicable data protection law and prohibit the use of BBWin player data for any purpose beyond the specific service being rendered.
For all data protection enquiries, requests, or concerns, players may contact BBWin's support team at [email protected] or via the 24/7 live chat function on the Platform.
04 Personal Data We Collect
BBWin collects personal data across several categories, each serving a specific and defined purpose. The categories of data collected include, but are not limited to, the following:
Identity & Contact Data
Identity Verification (KYC) Data
- Scanned or photographed copies of valid Malaysian IC (MyKad / NRIC), passport, or driver's licence
- Proof of address documentation (utility bill, bank statement, or official correspondence not older than three months)
- Selfie verification photograph — a current photograph of the Data Subject holding their identity document
Financial & Transaction Data
- Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers
- Payment method details (e-wallet account references, bank account information, cryptocurrency wallet addresses) — held in masked or tokenised form
- Account balance history and bonus redemption records
Technical & Usage Data
- IP address and approximate geographic location derived from IP at time of login and transaction
- Device type, operating system, and browser type and version
- Session logs including login timestamps, pages visited, games played, and bet histories
- Cookies and similar tracking technologies as described in Section 8
Communications Data
- Records of live chat, email, and WhatsApp communications between the Player and BBWin's support team
- Voluntary feedback, survey responses, and promotional opt-in preferences
05 How We Collect Your Data
BBWin collects personal data through the following primary channels:
- Direct Submission: Information you provide directly when creating an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or participating in promotions.
- Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser data, and session activity logs gathered through server logs and cookies.
- Payment Processors: Transaction confirmation data returned to BBWin by integrated payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processing services.
- Identity Verification Partners: Verification outcome data returned by KYC service providers engaged by BBWin to process identity and address verification checks.
- Fraud Prevention Systems: Risk signals and device fingerprinting data from fraud detection tools used to protect player accounts and the integrity of the Platform.
06 Purposes of Processing & Legal Bases
BBWin processes personal data only where there is a legitimate legal basis for doing so. The principal purposes of processing and their corresponding legal bases are set out below:
Legal Basis: Contractual Necessity Processing your registration data, managing your account, authenticating your identity at login, maintaining account records, and communicating essential account-related information.
Legal Basis: Contractual Necessity Processing deposits and withdrawals in MYR via Touch 'n Go eWallet, DuitNow, FPX, and other supported payment methods, and maintaining accurate financial records for each account.
Legal Basis: Legal Obligation Collecting and verifying identity documentation to comply with anti-money laundering (AML), counter-terrorism financing (CTF), and age verification obligations applicable to online gaming operations.
Legal Basis: Legitimate Interest Detecting and preventing fraudulent transactions, account takeovers, bot activity, and abuse of promotional offers to protect both individual players and the broader platform community.
Legal Basis: Contractual Necessity / Legitimate Interest Responding to support queries, resolving disputes, and maintaining communication records for quality assurance and regulatory purposes.
Legal Basis: Consent Sending promotional offers, bonus notifications, and platform updates to players who have explicitly opted in to receive such communications. Opt-out is available at any time via account settings or by contacting support.
07 Data Sharing & Disclosure
BBWin does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their independent commercial purposes. Personal data may be shared only in the following defined circumstances:
- Payment Service Providers: Data necessary to process transactions is shared with licensed PSPs including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processors. Each PSP is bound by its own privacy obligations and receives only the minimum data required to execute the transaction.
- Identity Verification Partners: KYC data including identity documents and selfie images are shared with certified identity verification service providers engaged by BBWin for the sole purpose of confirming a player's identity and address.
- Cloud Infrastructure Providers: BBWin operates on secure cloud infrastructure. Server and storage providers may process data solely in their capacity as infrastructure providers under contractual data processing agreements that prohibit independent access or use.
- Regulatory and Law Enforcement Authorities: BBWin may be required to disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where legally compelled to do so. BBWin will endeavour to notify affected players of such disclosures where legally permissible.
- Fraud Prevention Networks: Anonymised or pseudonymised risk signals may be shared with industry-standard fraud prevention systems to protect the integrity of online gaming platforms broadly.
- Professional Advisers: Lawyers, auditors, and compliance consultants engaged by BBWin may access personal data on a confidential, need-to-know basis in connection with specific advisory engagements.
08 Cookies & Tracking Technologies
BBWin uses cookies and similar tracking technologies to operate the Platform effectively, enhance user experience, maintain session security, and analyse usage patterns. By using the Platform, you consent to the use of cookies in accordance with this section.
Types of Cookies Used
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform, including the ability to log in, deposit, or withdraw. Analytical and functional cookies may be declined without materially affecting core Platform access.
09 Data Retention
BBWin retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following retention principles apply:
- Active Account Data: Retained for the duration of the active account relationship plus a post-closure period as required by applicable law — typically five (5) to seven (7) years to satisfy anti-money laundering record-keeping obligations.
- KYC Documentation: Retained for the duration of the account relationship and for a minimum period post-closure as required by applicable AML and regulatory frameworks. KYC documents are stored in encrypted form.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
- Support Communications: Live chat transcripts and email correspondence are retained for a period of two (2) years from the date of the interaction, after which they are deleted or anonymised.
- Voluntarily Closed Accounts: Following voluntary account closure, BBWin will retain a minimal anonymised record sufficient to honour any future self-exclusion or dispute resolution requests, but will delete identifiable personal data in accordance with the timelines above.
Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual.
10 Data Security
BBWin implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security measures include, but are not limited to:
- 256-bit TLS/SSL encryption for all data in transit between user devices and BBWin servers
- AES-256 encryption for personal data and financial information stored at rest
- Strict role-based access control — staff access to personal data is limited to those with a defined operational need
- Multi-factor authentication required for all administrative access to systems holding personal data
- Regular penetration testing and vulnerability assessments conducted by qualified external security professionals
- Intrusion detection systems and real-time security monitoring across all platform infrastructure
- Documented incident response plan — in the event of a data breach affecting player personal data, BBWin will notify affected players and relevant authorities within the timeframes required by applicable law
11 International Data Transfers
In the course of providing its services, BBWin may transfer personal data to service providers and infrastructure partners operating in jurisdictions outside Malaysia. Such transfers may include cloud storage, identity verification processing, or payment gateway operations conducted from servers located in other countries.
Where personal data is transferred internationally, BBWin ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding Malaysian data protection principles. Safeguards include contractual data processing agreements containing standard data protection clauses, adequacy assessments of the destination jurisdiction's data protection framework, and technical security measures applied to data in transit and at rest.
BBWin does not transfer personal data to jurisdictions that do not meet appropriate data protection standards without implementing supplementary protective measures to compensate for any identified deficiencies.
12 Your Data Rights
As a Data Subject whose personal data is processed by BBWin, you hold the following rights, which BBWin will honour upon receipt of a valid written request submitted to [email protected]:
Right of Access
You have the right to request a copy of the personal data BBWin holds about you, along with information about how it is processed, for what purposes, and with whom it is shared.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data held by BBWin. For account data, many fields can be updated directly from your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations such as AML record-keeping requirements.
Right to Restriction
You may request that BBWin restrict processing of your data in defined circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over erasure.
Right to Data Portability
Where data is processed on the basis of your consent or for contractual performance, you may request your data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
You may object at any time to the processing of your data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to BBWin demonstrating overriding grounds for continued processing.
BBWin will acknowledge data rights requests within five (5) business days of receipt and will respond substantively within thirty (30) calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further thirty (30) days, and the player will be notified accordingly. Exercise of these rights is free of charge unless requests are manifestly unfounded or excessive.
13 Children & Minors
The BBWin platform is strictly intended for persons aged 21 years and above. BBWin does not knowingly collect, process, or store personal data relating to individuals under the age of 21.
Age verification is a mandatory component of BBWin's KYC process. Where BBWin identifies or reasonably suspects that an Account has been registered by a person under the age of 21, the Account will be suspended immediately, all transactions will be reversed where possible, and any winnings will be voided. The personal data of the underage individual will be deleted upon confirmation of the underage status, except where retention is required for regulatory reporting purposes.
Parents and guardians who believe their child may have accessed or registered on the BBWin platform are encouraged to contact BBWin's support team immediately at [email protected]. BBWin will investigate and take appropriate action without delay.
14 Amendments to This Policy
BBWin reserves the right to amend, update, or replace this Privacy Policy at any time. The most current version of this Policy, along with its Effective Date, will always be accessible on this page. Changes to the Policy may be necessitated by updates to applicable law, changes to BBWin's data processing practices, new service features, or operational restructuring.
Where BBWin makes material changes to this Policy — particularly changes that affect the legal basis for processing, the categories of data collected, or your data rights — registered players will be notified via in-platform notification and/or email to the registered account address, where reasonably practicable, no less than seven (7) days before the change takes effect.
Your continued use of the BBWin platform following the publication of any amended Privacy Policy constitutes your acceptance of those changes. If you do not accept the amended Policy, you must cease using the Platform and may request voluntary account closure.
15 Contact Us
For all privacy-related enquiries, data rights requests, or concerns about how BBWin handles your personal data, please contact us through the following channels. BBWin's support team is available 24 hours a day, 7 days a week in English, Bahasa Melayu, and Mandarin Chinese.
Available 24/7 via the chat widget on every platform page. Average response time: 3–5 minutes for general privacy queries.
Data rights requests acknowledged within 5 business days. Full responses provided within 30 calendar days of receipt.