BC88 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains precisely what data we collect, why we collect it, how we protect it, who we may share it with, and what rights you hold over your own information.
Effective Date: 1 January 2026 | Last Reviewed: 1 January 2026Our Privacy Principles
Before reading the full policy below, these six principles summarise the spirit in which BC88 approaches every data processing decision.
Data Minimisation Core
BC88 collects only the personal data that is strictly necessary for the purpose for which it is collected — whether account registration, payment processing, KYC verification, or fraud prevention. We do not collect data speculatively or "just in case".
Purpose Limitation Strict
Personal data collected for one stated purpose — such as processing DuitNow or FPX withdrawal — will not be repurposed for unrelated uses without obtaining your explicit consent or a new lawful basis for processing.
Security by Design 256-bit TLS
All data transmissions between your device and BC88's servers are encrypted using 256-bit TLS. Sensitive fields (passwords, payment details) are stored using one-way hashing or tokenisation. Regular penetration testing and security audits are conducted by independent third parties.
Retention Limits Time-Bound
BC88 retains personal data only for as long as is necessary for the purposes outlined in this policy, or as required by applicable law. Account closure triggers a formal data review, and non-essential data is deleted or anonymised within reasonable period thereafter.
No Data Selling Guaranteed
BC88 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Data sharing is limited to service providers essential to the operation of the platform and authorities where legally required.
Your Rights Are Real Actionable
You have substantive rights over your personal data, including the right to access a copy, correct inaccuracies, request deletion (subject to legal retention obligations), and withdraw consent for non-essential processing. We respond to all data rights requests within 30 calendar days.
Contents
Section 01
This Privacy Policy ("Policy") describes how BC88 ("BC88", "we", "us", or "our") collects, uses, stores, shares, and protects personal data in connection with your use of the online casino and sports betting platform operated atbc88.casa, including all associated pages, mobile interfaces, and related services (collectively, the "Platform").
BC88 is the data controller responsible for the personal data processed under this Policy. We take our data protection obligations seriously and are committed to handling all personal information in a manner that is transparent, fair, and consistent with internationally recognised data protection standards.
By registering an account, accessing the Platform, or otherwise providing your personal data to BC88, you acknowledge that you have read and understood this Policy. Where processing is based on your consent, your use of the Platform following acceptance of this Policy constitutes that consent. You may withdraw consent for non-essential processing at any time by contacting our support team.
Section 02
The following terms carry specific meanings throughout this Policy:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual — including name, email address, IP address, device identifiers, financial account details, and betting history. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction — whether automated or manual. |
| "Data Controller" | BC88, the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third-party service provider that processes personal data on behalf of BC88under a written data processing agreement, strictly following BC88's instructions. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| "KYC Data" | Identity and address verification documents collected as part of BC88's Know Your Customer compliance process — including government-issued IDs, utility bills, and payment method verification. |
| "Sensitive Data" | Categories of personal data warranting higher protection, such as financial information, government ID numbers, and data revealing a person's identity or location. |
Section 03
BC88 collects personal data across several distinct categories, each tied to a specific operational purpose:
3.1 Registration & Account Data
3.2 KYC & Identity Verification Data
3.3 Financial & Transaction Data
3.4 Gaming & Betting Activity
3.5 Technical & Device Data
3.6 Communications Data
Section 04
BC88 collects personal data through the following channels:
Section 05
BC88 processes personal data only where a valid lawful basis exists. The applicable bases are:
| Lawful Basis | When BC88 Relies on It |
|---|---|
| Contractual Necessity | Processing required to register your account, process deposits/withdrawals, settle bets, and provide the core platform services you have contracted for. |
| Legal Obligation | KYC/AML verification, sanctions screening, age enforcement, fraud reporting, and data retention periods mandated under applicable gaming licensing conditions. |
| Legitimate Interests | Fraud detection, platform security, abuse prevention, responsible gambling monitoring, and improving the Platform's features and performance — where these interests do not override your fundamental rights. |
| Consent | Optional marketing communications (promotional emails, SMS), non-essential analytics cookies, and any processing not otherwise covered by the above bases. Consent may be withdrawn at any time. |
Section 06
BC88 uses personal data for the following stated purposes:
Section 07
BC88 does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:
Section 08
BC88 uses cookies and similar tracking technologies to operate the Platform, maintain your session, prevent fraud, and — with your consent — improve the Platform through analytics. The categories of cookies used are:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing, and fraud detection. The Platform cannot function without these. | No — Essential |
| Functional | Remembering your language preference (Bahasa Melayu / 中文 / English), preferred currency (MYR), and UI settings between sessions. | No — Functional |
| Analytics | Aggregated usage statistics to understand how players navigate the Platform — which game categories are most popular, where players encounter errors, and how session flows are structured. | Yes — Optional |
| Marketing | Tracking whether you clicked on a promotional banner or referred a friend, to measure campaign effectiveness. No data is shared with advertising networks. | Yes — Optional |
You may manage cookie preferences through your browser settings or the cookie preference centre accessible within the Platform. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling optional cookies will not affect your core gaming experience.
Section 09
BC88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or our licensing conditions. The following indicative retention periods apply:
| Data Category | Indicative Retention Period |
|---|---|
| Account Registration Data | Duration of the account plus 5 years following account closure, to meet licensing and audit obligations. |
| KYC & Identity Documents | Minimum 5 years from the date of submission or account closure (whichever is later), consistent with standard AML record-keeping requirements. |
| Financial & Transaction Records | Minimum 5 years from the date of each transaction, to satisfy financial record-keeping standards. |
| Betting & Gaming Activity | Duration of account plus 3 years, used for dispute resolution, responsible gambling monitoring, and regulatory audit purposes. |
| Support Communications | 3 years from the date of the last communication, to facilitate the resolution of latent disputes or complaints. |
| Marketing Preferences | Until you withdraw consent or close your account, whichever is soner. Unsubscribe records are retained indefinitely to evidence opt-out status. |
Upon expiry of the applicable retention period, BC88 will securely delete, anonymise, or archive personal data in a manner that prevents re-identification.
Section 10
BC88 implements a layered security architecture designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:
Section 11
Subject to applicable law and our legal obligations (including KYC and AML retention requirements that may restrict deletion in certain cases), you hold the following rights in relation to your personal data:
Request a copy of all personal data BC88 holds about you, along with information about how it is processed.
Request correction of any inaccurate or incomplete personal data — for example, an incorrect date of birth or outdated contact email.
Request deletion of your data where it is no longer necessary, where consent has been withdrawn, or where it has been unlawfully processed — subject to our legal retention obligations.
Request that we limit processing to storage only while a dispute over accuracy or lawfulness is pending resolution.
Request a structured, machine-readable copy of data you have provided to BC88, for transfer to another data controller where technically feasible.
Withdraw consent for any processing based on consent (e.g., marketing emails) at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact BC88's support team in writing with a clear description of your request. We will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days with prior written notification.
Section 12
BC88 operates internationally and some of the third-party service providers we engage — including KYC verification, fraud prevention, and cloud infrastructure providers — may process data in jurisdictions outside Malaysia. These transfers may include countries in Europe, North America, and the Asia-Pacific region.
Wherever personal data is transferred internationally, BC88 ensures that appropriate safeguards are in place, which may include: standard contractual clauses approved by relevant data protection authorities; the recipient country having an adequate level of data protection as recognised by applicable standards; or the recipient being subject to binding corporate rules covering data protection.
By using the Platform, you acknowledge and consent to the transfer of your personal data to our service providers in other jurisdictions where this is necessary for the delivery of our services.
Section 13
BC88 strictly prohibits the use of its Platform by any person under the age of 21. The Platform is not directed at, and does not knowingly collect personal data from, individuals under 21 years of age.
If BC88 becomes aware that personal data has been collected from an individual under 21, that account will be immediately suspended, all data associated with the underage individual will be deleted, and any balance in that account will be subject to forfeiture as described in our Terms & Conditions.
If you are a parent or guardian and believe a minor under your supervision has provided personal data to BC88, please contact our support team immediately so that we may take appropriate corrective action.
Section 14
The BC88 Platform does not include outbound links to third-party websites beyond the services necessary to operate the Platform. However, payment processing services (such as your Touch 'n Go eWallet, DuitNow, or banking app) operate under their own independent privacy policies when you interact with them to complete a transaction.
BC88 has no control over, and accepts no responsibility for, the privacy practices of third-party payment providers or your device operating system. We encourage you to review the privacy policies of any third-party services you use in connection with your BC88 account.
Section 15
BC88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational procedures. Material changes — defined as changes that substantively affect how your personal data is collected, used, or shared — will be communicated to registered players via email to the address associated with their account, and/or by prominent notice on the Platform, fewer than 14 calendar days before the change takes effect.
Non-material changes (such as clarifications of existing language or correction of typographical errors) may be made without prior notice but will be reflected in the updated "Last Reviewed" date at the top of this page.
Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you have the right to close your account and request deletion of your personal data, subject to our legal retention obligations.
Section 16
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact BC88 through the following channels. All privacy-related correspondence will be treated with strict confidentiality.
Live Chat — Privacy Enquiries
Available 24/7 via the Platform. Select "Privacy & Data" as the enquiry category. Average response time: 3–5 minutes. Support in Bahasa Melayu, 中文, and English.
Email — Data Rights Requests & Formal Complaints
Data protection enquiries and formal subject access requests:[email protected] (plain text — not a link). Please include "Privacy Request" and your registered username in the subject line. Response within 5 business days on MYT (UTC+8).
Response Timeframes
Acknowledgement of data rights requests: within 5 business days. Substantive response: within 30 calendar days. Complex requests may be extended by a further 30 days with prior written notice. Operating on Malaysian Standard Time (MYT, UTC+8).
Questions about how your data is used? Our multilingual support team is available 24/7 in Bahasa Melayu, 中文, and English to help you understand and exercise your data rights.
For players aged 21 and above only. BC88 is not regulated by any Malaysian government authority. Players are responsible for compliance with their local laws.