bc55 Privacy Policy — How We Handle Your Personal Data

bc55 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at bc55.win and is committed to protecting the privacy and personal data of all Members and visitors. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal data in connection with your use of bc55's services.

This Privacy Policy is incorporated by reference into bc55's Terms & Conditions. By registering a bc55 account or using any bc55 service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

bc55 processes personal data in a manner consistent with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable data protection frameworks. Where bc55 processes the personal data of individuals in other jurisdictions, we apply equivalent or higher standards of data protection.

bc55 collects the following categories of personal data from Members and, where applicable, from visitors to the bc55 platform:

2.1 Identity Data:

• Full legal name as it appears on a government-issued identification document
• Date of birth (for age verification — all Members must be 21 years or older)
• Nationality and country of residence
• Malaysian IC number, passport number, or equivalent government-issued identifier
• Copies of identity documents submitted during the KYC process
• Selfie or biometric verification data where required by the KYC process

2.2 Contact Data:

• Email address registered to the bc55 account
• Malaysian mobile telephone number (used for 2FA and SMS communications)
• Residential address where required for KYC or payment verification

2.3 Financial Data:

• Payment instrument details (e-wallet identifiers, bank account numbers, FPX reference data) as required to process deposits and withdrawals
• Transaction history including deposit amounts, withdrawal requests, bet amounts, and bonus credits
• Source-of-funds documentation where required under AML obligations

2.4 Technical & Usage Data:

• IP address, device type, browser type and version, operating system
• Login session timestamps, session duration, and device identifiers
• Pages visited, features accessed, game history, and navigation patterns within the platform
• Geolocation data (country/region level) derived from IP address

2.5 Communications Data:

• Live chat and support ticket transcripts
• Email correspondence with bc55's support team
• Feedback, survey responses, and complaint records

2.6 Responsible Gaming Data:

• Self-imposed limits, cooling-off requests, and self-exclusion records
• Indicators of problem gambling behaviour identified through responsible gaming monitoring processes

bc55 collects personal data through the following channels and mechanisms:

3.1 Directly from You: The majority of personal data we process is provided directly by Members during registration, KYC verification, payment transactions, customer support interactions, and when completing forms or surveys on the platform.

3.2 Automatically: When you access bc55.win, our systems automatically collect technical data including your IP address, device identifiers, browser information, and usage patterns through server logs, cookies, and similar tracking technologies. See Section 7 for our full Cookies policy.

3.3 From Third Parties: bc55 may receive personal data about Members from third parties in the following circumstances:

• Identity verification service providers used to conduct KYC checks
• Payment processors and financial institutions involved in processing your transactions
• Fraud detection and anti-money laundering screening services
• Regulatory or law enforcement bodies where we are required by law to receive or provide information

bc55 processes personal data for the following specific purposes:

• Account registration and management: Creating and maintaining your bc55 Member account, verifying your identity, and providing you with access to platform services.
• Age verification: Confirming that all Members are 21 years of age or older before granting access to gaming services.
• Payment processing: Facilitating deposits and withdrawals via Touch 'n Go eWallet, DuitNow, Boost, GrabPay, FPX, and other supported Malaysian payment channels.
• Service delivery: Operating the sportsbook, live casino, and slots products you access through your bc55 account, including bet settlement and game result recording.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining a record of support interactions.
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, and other prohibited conduct as defined in bc55's Terms & Conditions.
• Anti-money laundering (AML) compliance: Monitoring transactions for patterns consistent with money laundering or terrorist financing and fulfilling mandatory reporting obligations where required by law.
• Responsible gaming: Monitoring for indicators of problem gambling behaviour, enforcing self-imposed limits and exclusions, and fulfilling our duty of care obligations to Members.
• Platform improvement: Analysing usage data in aggregate to improve platform performance, identify technical issues, and inform product development decisions.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to marketing communications. Members may opt out at any time via account settings or by contacting support.
• Legal compliance: Fulfilling obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.

bc55 processes personal data on the following legal bases:

5.1 Contractual Necessity. Processing is necessary to perform the contract between bc55 and the Member — that is, to provide the gaming services, process payments, and operate the Member account. Without this processing, bc55 cannot deliver its services to you.

5.2 Legal Obligation. bc55 is subject to legal obligations relating to anti-money laundering, know-your-customer verification, age verification, and regulatory reporting. Processing for these purposes is mandatory and cannot be opted out of as a condition of using bc55's services.

5.3 Legitimate Interests. bc55 processes certain data on the basis of legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate usage analytics. Where we rely on legitimate interests, we have assessed that these interests are not overridden by Members' privacy rights.

5.4 Consent. Where bc55 relies on consent as the legal basis for processing — primarily for marketing communications and non-essential cookies — we will obtain your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bc55 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

6.1 Service Providers. bc55 engages third-party service providers to support platform operations, including KYC and identity verification providers, payment processors (including operators of Touch 'n Go eWallet, DuitNow, Boost, GrabPay, and FPX gateways), fraud detection services, cloud infrastructure providers, and customer support software providers. These providers process personal data on bc55's behalf under data processing agreements that impose equivalent data protection obligations.

6.2 Game Content Providers. bc55 partners with licensed game studios to deliver casino and slot content. Where technically necessary, game session data (excluding payment and identity information) may be processed by the game provider's systems to deliver the game experience. All game provider partners are contractually bound to handle member data only for the purpose of service delivery.

6.3 Regulatory & Law Enforcement Authorities. bc55 may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. Where permitted by law, bc55 will notify affected Members of such disclosure.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of bc55's business, personal data may be transferred as part of the transaction. bc55 will notify affected Members of any such transfer and the identity of the acquiring entity before it takes effect.

bc55 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files placed on your device when you visit bc55.win. We use the following categories of cookies:

7.1 Strictly Necessary Cookies. These cookies are essential for the platform to function and cannot be disabled. They include session management cookies that maintain your login state, security cookies that support authentication and fraud prevention, and load balancing cookies. No consent is required for strictly necessary cookies.

7.2 Functional Cookies. These cookies remember your preferences (such as language settings, preferred deposit method, or display preferences) to provide a more personalised experience. You can disable these cookies via your browser settings, but doing so may affect platform functionality.

7.3 Analytics Cookies. bc55 uses first-party analytics to understand how Members navigate the platform, which features are most used, and where technical issues occur. This data is processed in aggregate and is not used to identify individual Members. Analytics cookies require your consent where applicable.

7.4 Managing Cookies. You can control and manage cookies through your browser settings. Instructions for managing cookies in major browsers are available from the browser developer's support documentation. Disabling certain cookies may affect your ability to use bc55 services, particularly those related to session management and security.

bc55 does not use third-party advertising or retargeting cookies that track your browsing activity across other websites.

bc55 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following retention periods apply:

• Account and identity data: Retained for the duration of the Member relationship and for a minimum of 7 years following account closure, in compliance with AML and KYC regulatory requirements.
• Transaction records: Retained for a minimum of 7 years following each transaction, in compliance with financial record-keeping obligations.
• Support communications: Retained for 3 years following the close of the relevant support case, to support dispute resolution and regulatory enquiries.
• Technical and usage logs: Retained for up to 12 months, after which they are deleted or anonymised.
• Responsible gaming records: Self-exclusion records are retained for the duration of the exclusion period and for 7 years thereafter, to prevent circumvention of self-exclusion commitments.
• Marketing consent records: Retained for as long as marketing communications are sent and for 3 years following opt-out, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, bc55 will securely delete or anonymise the relevant personal data in accordance with our data disposal procedures.

bc55 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and bc55's servers is encrypted using TLS 1.3 with 256-bit AES encryption. No personal or financial data is transmitted in plain text.
• Encryption at rest: Sensitive personal data fields — including identity document data, payment instrument details, and password hashes — are encrypted at rest in bc55's database systems.
• Access controls: Access to personal data within bc55's organisation is restricted to personnel who require it to perform their role. Access is governed by role-based access controls, and all access to sensitive data is logged and audited.
• Password hashing: Member passwords are stored as salted cryptographic hashes. bc55 does not store passwords in a form that can be reversed to plain text.
• Two-factor authentication: bc55 offers 2FA for all Member accounts, and requires it for staff access to systems containing personal data.
• Penetration testing: bc55 commissions periodic independent security assessments of its platform infrastructure and data handling systems.

While bc55 takes all reasonable steps to protect your personal data, no system is entirely immune from security risk. If you believe your bc55 account has been compromised, contact our support team immediately.

Subject to applicable law, bc55 Members have the following rights with respect to their personal data:

• Right of access: You may request a copy of the personal data bc55 holds about you. We will respond to access requests within 21 days of receiving a verified request.
• Right to rectification: If personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Many data fields can be updated directly via your account settings; others require verification before amendment.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bc55's legal obligations to retain certain data categories (see Section 8). We cannot delete data that we are legally required to retain.
• Right to restrict processing: You may request that bc55 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing on the basis of legitimate interests pending bc55's assessment.
• Right to data portability: Where processing is based on your consent or contract performance, you may request that bc55 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on bc55's legitimate interests. Where you object, bc55 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact bc55's support team at [email protected] from your registered email address. We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law.

bc55's services are strictly intended for individuals aged 21 years and older. bc55 does not knowingly collect personal data from individuals under the age of 21. The KYC process is specifically designed to verify that all registering Members meet the minimum age requirement.

If bc55 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete or return the data, and where applicable refer the matter to relevant authorities. Parents or guardians who believe a minor has registered on bc55 should contact our support team immediately.

bc55 primarily processes personal data within its operating jurisdiction. Where it is necessary to transfer personal data to third-party service providers located in other jurisdictions — for example, cloud infrastructure providers or KYC processing services — bc55 takes steps to ensure that appropriate data protection safeguards are in place.

Such safeguards may include contractual clauses that impose data protection obligations on the receiving entity, transfers to jurisdictions recognised as providing an adequate level of data protection, or other mechanisms as required by applicable law.

By using bc55's services, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Malaysia where bc55's service providers operate, subject to the safeguards described in this section.

bc55 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform operations. Where changes are material — meaning they significantly affect Members' rights or the way we process personal data — bc55 will provide at least 14 days' notice via the registered Member email address before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates the date of the most recent revision. We encourage Members to review this Privacy Policy periodically. Continued use of bc55's services after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or bc55's handling of your personal data, please contact our support team:

• Email: [email protected] — send privacy-related queries from your registered email address to assist with identity verification.
• Live Chat: Available 24/7 from the bc55 member dashboard. Average response time: 3–5 minutes.

For formal data subject rights requests (access, erasure, rectification, portability), please email [email protected] with "Data Rights Request" in the subject line and include your full registered name and the email address associated with your bc55 account. bc55 will acknowledge your request within 2 business days and respond fully within the timeframes required by applicable law.