BM 69 Privacy Policy – Personal Data Protection for Malaysian Players

BM 69 (bm69.click) is fully committed to protecting the privacy and personal data of every member who uses our platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, and protection of your personal information.

This Policy applies to all users of the BM 69 platform, including website visitors, registered members, and anyone who interacts with our customer support services. By using the BM 69 platform, you agree to the terms set out in this Privacy Policy.

BM 69 is an online Sports Betting and casino platform operating under a valid international licence. We understand that member trust is our most valuable asset, and protecting personal data is central to our commitment to that trust.

This Privacy Policy explains:

• The types of personal data we collect from you during registration and use of the platform.
• The purposes and legal basis for processing your personal data.
• Parties that may receive or access your personal data in specific circumstances.
• The security measures we take to protect your data from unauthorised access.
• Your rights regarding your personal data and how to exercise them.

BM 69 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards for user privacy protection.

BM 69 only collects personal data that is strictly necessary to provide members with a quality and secure service. The following are the categories of data we collect:

Personal data collected by BM 69 is used solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and maintaining your member account, including the mandatory KYC (Know Your Customer) process.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, and ShopeePay, and manages withdrawals to your Malaysian bank account.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and platform abuse.
• Legal Compliance: To fulfil BM 69's obligations under applicable anti-money laundering (AML) laws, data protection legislation, and gambling regulations.
• Customer Service: Responding to enquiries, resolving complaints, and providing technical assistance to members.
• Platform Enhancements: Analysing usage data in aggregate (without individual identification) to improve the user experience and develop new features.
• Marketing Communications: Sending relevant promotional information, bonuses, and special offers — only where you have given your consent to receive such communications.
• Responsible Gambling: Monitoring betting patterns to identify members who may need responsible gambling support.

BM 69 will not use your personal data for any other purpose without obtaining your consent first, except where required by law.

BM 69 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in certain limited circumstances, your data may be shared with the following parties:

• Payment Service Providers: Required financial information is shared with approved payment processors such as FPX providers, eWallet gateways, and Malaysian partner banks to process your transactions.
• Game Software Provider: Minimum required technical data is shared with software providers for slots, Live Casino, and Sports Betting to ensure a seamless gaming experience.
• Regulatory Authority: BM 69 is required to disclose data to the relevant authorities if ordered to do so by a court, regulatory body, or legitimate law enforcement agency.
• Identity Verification Services: During the KYC process, your identity data may be transmitted to accredited third-party identity verification service providers.
• Auditors & Consultants: Legal advisors, accountants, or auditors bound by strict professional confidentiality obligations.

BM 69 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or unlawful disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your web browser and BM 69's servers is protected with bank-grade encryption using the latest TLS 1.3 protocol.
• Secure Password Storage: Member passwords are never stored in plain text. We use strong hashing algorithms with a unique salt for each account.
• Two-Factor Authentication (2FA): BM 69 supports and encourages the use of 2FA on all accounts for an added layer of protection.
• 24/7 Monitoring: Intrusion detection systems and security monitoring operate around the clock to identify and respond to security threats.
• Internal Access Controls: Access to members' personal data is strictly limited to BM 69 staff with a legitimate business need, based on the principle of least privilege.
• Regular Security Audits: BM 69 conducts regular penetration testing and security audits carried out by independent security experts.
• Incident Response Plan: In the event of a data breach, BM 69 has a clear incident response procedure in place and will notify affected members within 72 hours.

BM 69 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations — including login sessions, account security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting statistical information on how you use the platform (e.g. most visited pages, time spent) to help us improve our services. This data is collected anonymously.
• Functional Cookies: Remembering your preferences such as language, display layout, and account settings to deliver a more personalised experience.
• Marketing Cookies: Used to display relevant ads and promotions based on your interests. These cookies are only activated if you give your consent.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of some features on the BM 69 platform.

As a data subject, you hold the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA). BM 69 is committed to facilitating the exercise of these rights:

BM 69 does not retain your personal data longer than necessary for the stated purpose or as required by law. The following outlines our data retention guidelines:

• Active Account Data: Retained for the duration of your active account plus 5 years after account closure, to meet audit and legal compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legal requirements.
• Support Communication Logs: Retained for 3 years for customer service reference and dispute resolution.
• Cookie Data: Session cookies are deleted automatically when you close your browser. Persistent cookies have an expiry period ranging from 30 days to 2 years, depending on the type.
• KYC Documents: Retained for 5 years after the business relationship ends, in accordance with PDPA requirements and AML regulations.

Once the retention period expires, your personal data will be securely deleted or anonymised using industry-standard methods.

BM 69 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When significant changes occur, we will:

• Updates the "Last Updated" date at the top of this page.
• Sending email notifications to all registered members with an active email address.
• A notice will be displayed in your account during the first login session after the changes are published.

Your continued use of the BM 69 platform after any amendments to the Privacy Policy are published will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the BM 69 Privacy Officer through the following channels:

• Email: support@bm69.click (subject: "Privacy Enquiry / Privacy Policy")
• Live Chat: Available 24/7 within your BM 69 account — select the "Privacy & Data" category
• Response Time: We are committed to responding to all privacy-related enquiries within 5 working days.