Privacy Policy BD303 – Your Data Protection

Welcome to the BD303 Privacy Policy page. This document is an official agreement that describes how the BD303 platform, accessible via bd303.onl, collecting, using, processing, and protecting your personal data as a user.

BD303 takes our responsibility to protect the privacy of every player who trusts our platform seriously. We operate on a principle of full transparency — meaning we clearly explain what data we collect and why it is needed, with no hidden agenda.

This Privacy Policy applies to all users accessing the BD303 platform, including the main website, mobile app, and all related services. By using any part of our platform, you agree to the terms set out in this document.

BD303 only collects data that is strictly necessary to provide a safe, fair, and legally compliant service. The following are the types of data we collect and the purposes for doing so:

2.1 Account Registration Data

When you register a BD303 account, we collect basic information required to verify your identity and establish a valid account:

• Full name as shown on your MyKad or passport
• Date of birth (for 18+ age limit verification)
• Active and valid email address
• Mobile phone number registered in your name
• Your chosen username and password

2.2 KYC Verification Data

To meet legal compliance and anti-money laundering requirements, we may request additional documents at certain stages:

• A valid copy of your MyKad or passport
• Proof of current residential address (utility bill or bank statement)
• Bank account or e-wallet details for transaction processing purposes

2.3 Financial Transaction Data

Every deposit and withdrawal transaction made through the BD303 platform is automatically recorded for security and compliance purposes:

• Deposit/withdrawal transaction details and history
• Payment method used (DuitNow, FPX, e-wallet)
• Amount and time of each transaction

2.4 Platform Usage Data

We also automatically collect technical data to enhance the user experience and detect any suspicious activity:

• IP address and approximate location data
• Device type, operating system, and web browser
• Gaming session history and platform activity
• Cookie data and similar tracking technologies

The personal data we collect is used solely for the purposes stated below. BD303 does not use your data for any other purpose without notifying you in advance or obtaining your explicit consent.

3.1 Account Management & Verification

Your registration data is used to create and manage your BD303 account, verify your identity and age during registration and the KYC process, and ensure account security through two-factor authentication and login activity monitoring.

3.2 Financial Transaction Processing

Your financial information is required to process all deposits and withdrawals accurately and securely. This data is also used to detect suspicious transactions and prevent money laundering in compliance with Malaysia's legal requirements.

3.3 Customer Support

When you contact the BD303 support team, we use your account data to verify your identity and provide accurate, efficient assistance. Communication records are retained for quality control and support team training purposes.

3.4 Platform Improvement

Platform usage data collected in aggregate (without identifying individuals) is used to understand usage patterns, identify areas for improvement, and develop better new features for all BD303 players.

3.5 Marketing Communications

With your consent, we may send information about promotions, bonuses, and exclusive offers via email or in-platform notifications. You may opt out of marketing communications at any time through your account settings or by contacting our support team.

BD303 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, in certain limited situations, we may need to share your data with the following parties:

4.1 Trusted Service Providers

We work with selected third-party service providers to operate the platform, including payment processing providers (such as DuitNow and FPX), secure cloud service providers, and licensed game providers such as Evolution Gaming and Pragmatic Play. All such providers are subject to strict data confidentiality agreements.

4.2 Legal Requirements & Authorities

BD303 may be required to disclose your personal data to government authorities or law enforcement bodies when required to do so by applicable Malaysian law, court order, or in efforts to investigate and prevent fraud and financial crime.

4.3 Third-Party Contract Protection

All third parties that receive BD303 players' personal data are bound by strict contractual terms, including data protection obligations that are equivalent to or stricter than our own policy. We do not permit our third-party providers to use your data for their own purposes beyond the scope of services they provide to BD303.

The security of your personal data is bd303's highest priority. We implement multiple layers of technical and operational security to ensure your data is always protected against unauthorized access, misuse, or breaches.

5.1 Technical Security

• 256-bit SSL encryption for all data communications between your device and our servers
• Encryption of sensitive data in databases using the latest encryption algorithms
• Multi-layer firewall and intrusion detection system (IDS)
• Two-factor authentication (2FA) for staff access to internal systems
• Regular security audits by independent third-party security experts

5.2 Operational Security

• Role-based access control — only staff who need to may access specific data
• Mandatory data security awareness training for all bd303 staff
• Clear incident response procedures that are regularly tested
• 24/7 system monitoring to detect any abnormal activity

5.3 Data Breach Notification Procedures

In the event of any data breach affecting your personal information, BD303 is committed to notifying impacted players and the relevant authorities within the timeframe required by law, and to taking immediate action to mitigate the effects of the breach.

BD303 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous data on how users interact with the platform for improvement purposes.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences for convenience.
• Analytics Cookies: Helping us understand platform traffic and usage patterns in aggregate.

6.2 Cookie Management

You can manage or disable non-essential cookies through your web browser settings at any time. However, disabling essential cookies may affect the core functionality of the BD303 platform and your overall gaming experience.

As a bd303 user, you have certain rights regarding your personal data that we fully respect. These rights are granted under Malaysia's Personal Data Protection Act 2010 (PDPA) and bd303's internal policies.

BD303 only retains your personal data for as long as it is needed for the purposes stated in this policy, or as required by applicable law. The following are our data retention period guidelines:

Once the designated retention period has expired, your personal data will be securely deleted or anonymised in accordance with the data deletion procedures established by BD303.

In the course of its operations, BD303 may transfer your personal data to servers or service providers operating outside Malaysia. This includes cloud service providers and international game providers integrated within our platform.

However, any such data transfer is carried out with adequate protection safeguards in place, including:

• Data processing agreements compliant with international standards (such as Standard Contractual Clauses)
• Ensuring the recipient country maintains an equivalent or higher level of data protection
• Comprehensive security assessment before any data transfer is permitted
• Ongoing monitoring of data protection compliance by all data recipients

BD303 is an online gambling platform designed exclusively for adults aged 18 and above. We do not knowingly collect any personal data from individuals under 18 years of age.

All registration processes are designed with strict age controls, and we conduct thorough age verification during the KYC process. Should we discover that a child's personal data has been collected without the knowledge and consent of a parent or legal guardian, we will take immediate action to:

• Immediately closing the account in question
• Permanently deleting all personal data of the minor from our systems
• Returning any relevant fund balances to the rightful owner
• Reporting the case to the relevant authorities where necessary

If you believe a minor has registered an account at BD303, please contact our support team immediately at [email protected] so that immediate action can be taken.

BD303 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, current legal requirements, or new technologies we adopt.

When significant changes are made, we will notify you through one or more of the following methods:

• A clear notice displayed on the bd303 website homepage
• A notification email will be sent to your registered email address
• In-platform notifications when you log in to your account

The "Updated" date at the top of this document will always reflect the date of the most recent amendment. We encourage you to review this page periodically to stay informed about how we protect your privacy. Continued use of the BD303 platform after changes are published constitutes acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how BD303 handles your personal data, please contact us. Our data protection team is available to assist you 24 hours a day, 7 days a week.