Privacy Policy

1. Introduction

This Privacy Policy ("Policy") applies to all personal data processed by bbj88 ("bbj88", "we", "us", "our") in connection with the operation of the online gaming and sports betting platform accessible at bbj88.win and any related subdomains, mobile-optimised pages, or communication channels.

bbj88 provides online gaming and sports betting services to members across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Kota Kinabalu. In delivering these services, bbj88 necessarily collects and processes personal data about its members and, to a limited extent, website visitors who have not registered an account.

This Policy should be read together with the bbj88 Terms & Conditions and Responsible Gaming Policy. By accessing bbj88.win or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

2. Data Controller

For the purposes of applicable data protection legislation, bbj88 is the data controller in respect of the personal data it collects and processes about its members and website visitors. bbj88 is responsible for ensuring that personal data is handled lawfully, fairly, and transparently.

Where bbj88 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, or platform analytics tools — those providers act as data processors under written agreements that impose data protection obligations consistent with this Policy.

3. Personal Data We Collect

bbj88 collects personal data through a variety of means, including account registration, account activity, identity verification processes, customer support interactions, and automatic technical data collection. The categories of personal data we collect include:

bbj88 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for regulatory compliance purposes.

4. How We Use Your Personal Data

bbj88 uses the personal data it collects for the following specific purposes:

• Account administration: creating and managing your bbj88 account, processing deposits and withdrawals, and delivering the platform services you have requested;
• Identity verification and fraud prevention: conducting Know Your Customer (KYC) checks, verifying your age and identity, and detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited activities;
• Regulatory compliance: meeting our obligations under applicable anti-money laundering (AML) laws, gaming authority licence conditions, and financial reporting requirements;
• Customer support: responding to your enquiries, complaints, and support requests and maintaining records of those interactions;
• Responsible gaming: monitoring gaming activity for patterns indicative of problem gambling and administering responsible gaming tools such as deposit limits, loss limits, and self-exclusion;
• Platform improvement: analysing aggregated, anonymised usage data to improve platform performance, user experience, and product offerings;
• Marketing communications: sending promotional offers, bonus notifications, and platform updates where you have provided explicit consent and have not subsequently opted out.

5. Legal Basis for Processing

bbj88 processes personal data on the following legal bases:

• Contractual necessity: processing required to perform our contract with you as a registered member — including account management, payment processing, and service delivery;
• Legal obligation: processing required to comply with applicable laws, including AML regulations, gaming authority requirements, and tax reporting obligations;
• Legitimate interests: processing for fraud prevention, platform security, internal analytics, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: processing for direct marketing communications, where you have given explicit, informed consent that can be withdrawn at any time without detriment.

6. Sharing Your Personal Data

bbj88 does not sell personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: banks, FPX network operators, Touch n Go, Boost, Visa, and Mastercard networks, solely to process financial transactions associated with your account;
• Identity verification providers: third-party KYC service providers engaged to verify identity documents and conduct age verification checks;
• Platform technology providers: game content providers, platform infrastructure operators, and cybersecurity service providers, under strict data processing agreements;
• Regulatory and law enforcement authorities: where required by applicable law, court order, or gaming authority directive — including suspicious transaction reporting under AML legislation;
• Professional advisors: lawyers, auditors, and compliance consultants, where necessary and subject to confidentiality obligations.

bbj88 requires all third-party service providers to implement appropriate technical and organisational data protection measures, and prohibits them from using personal data for any purpose other than the specified service provision.

7. Cookies and Tracking Technologies

bbj88.win uses cookies and similar tracking technologies to operate the platform, improve your browsing experience, and gather aggregated usage statistics. The categories of cookies used on bbj88.win are:

• Strictly necessary cookies: required for core platform functionality — session management, login authentication, and security. These cannot be disabled without affecting platform functionality;
• Performance and analytics cookies: used to collect anonymised data about how visitors interact with the site, helping bbj88 identify areas for improvement;
• Functionality cookies: used to remember your preferences (e.g., language settings, last-visited game category) to provide a more personalised experience;
• Marketing cookies: used with your consent to deliver relevant promotional content. These can be disabled at any time via your browser settings without affecting platform access.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling all cookies may affect the functionality of certain platform features.

8. Data Retention

bbj88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable law and regulatory obligations:

• Account and identity data: retained for a minimum of 5 years from the date of account closure, in compliance with AML record-keeping requirements;
• Financial transaction records: retained for a minimum of 7 years from the date of each transaction, for tax and regulatory reporting purposes;
• Gaming activity logs: retained for a minimum of 3 years from the date of each recorded session;
• Customer support records: retained for a minimum of 2 years from the date of the last interaction;
• Marketing consent records: retained for the duration of the consent and for 1 year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bbj88's data destruction procedures.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data bbj88 holds about you:

• Right of access: to request a copy of the personal data bbj88 holds about you;
• Right of rectification: to request correction of inaccurate or incomplete personal data;
• Right of erasure: to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations;
• Right to restrict processing: to request that bbj88 limits its use of your personal data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, machine-readable format;
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: to withdraw any previously given consent at any time, without affecting the lawfulness of processing conducted prior to withdrawal.

10. Children's Privacy

bbj88 employs age verification procedures during the registration process and may require identity document submission to confirm that members meet the minimum age requirement. Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing gambling websites.

11. Security Measures

bbj88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bbj88's servers;
• Encryption at rest for sensitive personal data stored in bbj88's databases;
• Role-based access controls limiting staff access to personal data on a strictly need-to-know basis;
• Regular security audits and penetration testing of platform infrastructure;
• Incident response procedures for detecting, reporting, and addressing any personal data breaches within applicable regulatory timeframes.

While bbj88 takes all reasonable steps to secure personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your account credentials and should notify bbj88 immediately if you suspect any unauthorised access to your account.

12. International Data Transfers

bbj88 is primarily operated for and by Malaysian users. Where personal data is transferred outside Malaysia — for example, to third-party platform technology providers or cloud infrastructure operators located in other jurisdictions — bbj88 ensures that appropriate safeguards are in place, including standard contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing an adequate level of data protection.

bbj88 does not transfer personal data to jurisdictions with inadequate data protection frameworks without implementing compensating controls designed to preserve your data rights.

13. Changes to This Privacy Policy

bbj88 reserves the right to update or amend this Privacy Policy at any time. Material changes — particularly those that affect how your personal data is used or your data rights — will be notified to registered members via the email address associated with their account and/or by a prominent notice on bbj88.win, no less than 14 days before the change takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed of how bbj88 is protecting your personal data. Your continued use of the platform after the effective date of any amendment constitutes acceptance of the revised Policy.

14. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bbj88 holds about you, please contact our support team in the first instance via Live Chat, accessible from your account dashboard 24 hours a day, 7 days a week.

For formal written data rights requests or privacy complaints, you may contact bbj88 by email at the address published in the footer of this website. bbj88 will acknowledge all written privacy enquiries within 5 business days and aims to provide a substantive response within 30 calendar days.