Bking888 Privacy Policy — Data Protection for Malaysian Members

Bking888 collects two main categories of information from members and visitors to our platform: information you provide directly, and information collected automatically while you use the bking888 platform.

A. Information You Provide Directly

• Full name as stated on your MyKad or Malaysian passport
• An active email address used for bking888 account communications
• A Malaysian mobile number registered in your name
• Date of birth for age verification (18 years and above)
• Bank account details or digital wallet information (Touch 'n Go, GrabPay, DuitNow) for processing deposits and withdrawals in MYR
• A copy of your identity document when requested for the KYC (Know Your Customer) process
• Additional information you voluntarily provide through bking888 support forms or customer satisfaction surveys

B. Automatically Collected Information

• IP address and network location used to access bking888
• Your device type, operating system, and web browser version
• Session log data including the date, time, and duration of your bking888 platform usage
• Pages visited, games played, and betting records within the bking888 platform
• Cookie data and related tracking technologies (see Section 6)

Every piece of information collected by bking888 has a specific and legitimate purpose. We use your personal data for the following:

Bking888 will not use your data for any purpose beyond those stated above without first obtaining your consent. If you no longer wish to receive marketing communications from bking888, you may unsubscribe at any time via the unsubscribe link in our emails or by contacting our support team.

Bking888 processes your personal data on the basis of one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract Fulfilment: Processing is necessary to fulfil bking888's obligations to you as a member, including account management, payment processing, and the provision of gaming services.
• Legal Obligation: bking888 is required to process certain data to comply with Malaysian legal obligations, including anti-money laundering (AML) requirements and Know Your Customer (KYC) identity verification.
• Legitimate Interest: Processing for security purposes, fraud detection, and service improvement at bking888 is based on our legitimate interests as a platform operator.
• Consent: For marketing activities and promotional communications from bking888, we rely on the consent you provided at registration or at a later date.

Bking888 does not sell, rent, or trade members' personal information to any third party. However, in the following limited circumstances, we may share data with specific parties:

• Payment Service Providers: Payment gateways licensed in Malaysia such as FPX, DuitNow, and digital wallet operators (Touch 'n Go, GrabPay, Boost, ShopeePay) for processing bking888 members' financial transactions in MYR.
• Technology Service Providers: Selected technology partners who assist bking888 in operating the platform, storing data, and providing infrastructure — all bound by strict confidentiality agreements.
• Legal Authorities: The Royal Malaysia Police, courts, or regulatory authorities when required by law or a valid court order.
• Audit & Compliance: Independent auditors or compliance verification parties appointed by bking888 for internal and external audit purposes.

Bking888 implements a comprehensive range of technical and organisational security measures to protect members' personal data from unauthorised access, loss, alteration, or disclosure:

• End-to-End Encryption: All data in transit is protected by TLS 1.3 protocol and 256-bit SSL encryption
• Static Data Encryption: Sensitive data stored in the bking888 database is encrypted using AES-256
• Strict Access Controls: Only authorised bking888 staff with a legitimate business need are permitted to access member data
• Continuous Monitoring: Threat detection and security monitoring systems operate 24 hours a day, 7 days a week
• Two-Factor Authentication: bking888 internal systems that access member data are protected with multi-factor authentication
• Penetration Testing: bking888 conducts regular security testing carried out by independent cybersecurity experts

While bking888 takes all reasonable steps to protect your data, no security system in the world can be guaranteed 100% secure. In the event of a data breach affecting your personal information, bking888 will notify you within 72 hours of detecting the incident.

The bking888 platform uses cookies and similar tracking technologies to enhance the user experience and ensure smooth platform functionality. The following are the types of cookies we use:

• Essential Cookies: Required for core bking888 platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps bking888 understand how members use our platform so we can make continuous improvements.
• Functional Cookies: Stores your preferences such as language, display settings, and login details for your convenience.
• Marketing Cookies: Used to display relevant bking888 promotions to you. This type of cookie requires your explicit consent.

Under Malaysia's PDPA 2010 and the bking888 Privacy Policy, you have the following rights regarding your personal data:

Bking888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are general guidelines for bking888's data retention periods:

• Active Account Data: Retained for the duration your bking888 account is active, plus an additional 6 months following account closure
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering
• Support Communication Logs: Retained for 2 years from the date of last communication
• Cookies Data: Depends on the type of cookies — from the current session up to a maximum of 12 months

When data is no longer required, bking888 will securely delete it using irreversible deletion methods. Data that has been anonymised (with all personal identifiers removed) may be retained for bking888 platform statistical analysis purposes.

The bking888 platform is strictly for individuals aged 18 and above. bking888 does not knowingly collect, store, or process any personal information from individuals under the age of 18.

Bking888 employs an age verification process during registration and reserves the right to request age verification documents at any time. Accounts confirmed to belong to minors will be closed immediately and all funds will be returned to the original payment method used.

Bking888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Malaysian legal requirements, or technological developments. When we make material changes to this Privacy Policy:

• We will update the "Updated" date at the top of this page
• Bking888 members will be notified via their registered email or in-platform notification
• Significant changes will be notified at least 14 days before taking effect
• For minor changes (such as language corrections or clarifications), the changes will take effect immediately

Your continued use of the bking888 platform after the effective date of an updated Privacy Policy will be considered your acceptance of those changes. If you do not agree with any changes, you have the right to close your bking888 account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bking888 handles your personal data, please contact the bking888 Data Protection Officer (DPO) through the following channels:

• Email: support@bking888.ws
• Live Chat: Available 24/7 on the bking888 platform
• Complaint Form: Available in the Frequently Asked Questions bking888 platform

We are committed to responding to all privacy-related enquiries within 3 business days and resolve formal requests within 21 business days as required under Malaysia's PDPA 2010.

If you feel that bking888 has not adequately addressed your privacy concerns, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia which is the PDPA regulatory authority in this country.