Privacy Policy bcaa44 —
Our Commitment to Protecting Your Data

1 Introduction & Scope of This Policy

Welcome to the Privacy Policy bcaa44. This document explains in detail how we — bcaa44, Malaysia's leading online betting platform — collect, use, store, process and protect your personal data when you use our website and services.

This Privacy Policy applies to all users who access the bcaa44 website, including unregistered visitors, registered members and bcaa44 mobile app users. By browsing our website, registering an account or using any of our services, you acknowledge that you have read and understood this Privacy Policy.

Bcaa44 acts as the data controller (data controller) for all personal information collected through our platform. We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations.

2 Types of Personal Data We Collect

Bcaa44 only collects personal data that is strictly necessary to provide our services safely and efficiently. The data we collect can be categorised into several key categories:

We not collect sensitive information such as biometric data, health records, religious beliefs, or political views unless required by law. All data collection is carried out directly from you or automatically through our website technology.

3 Purpose of Data Collection and Processing

Bcaa44 uses your personal data only for legitimate, pre-defined purposes. The following are the primary purposes for which we process your information:

• Account management — creating, verifying, and managing your player account on the bcaa44 platform.
• Transaction processing — processing deposits, withdrawals, and other financial activities securely and accurately.
• Identity verification (KYC) — meeting legal compliance requirements and preventing fraud, money laundering, and terrorist financing.
• Customer service — responding to enquiries, resolving complaints, and providing technical support to players.
• Platform Security — detecting and preventing unauthorised access, fraud, and other unlawful activities.
• Service improvement — analysing usage patterns to improve platform quality, games, and the overall user experience.
• Marketing communications — sending information about promotions, bonuses, and the latest offers, subject to your communication preferences.
• Legal compliance — fulfilling reporting and compliance obligations set by the relevant authorities.

4 Data Sharing with Third Parties

Bcaa44 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating our platform, we may share your data with a limited number of third-party categories as follows:

• Payment service providers — such as FPX processors, DuitNow, and digital wallet providers to enable your financial transactions to be processed securely.
• Game software providers — to verify player eligibility and ensure game integrity in accordance with licensed agreements.
• Cloud services and IT infrastructure — for secure data storage and reliable server operations.
• Identity verification agencies — to assist with the KYC process and verify the authenticity of documents submitted.
• Law enforcement authorities — when required to do so by a valid court order, warrant, or statutory provision.

All third-party service providers we engage are required to comply with data protection standards equivalent to or higher than those of bcaa44. We do not permit them to use your data for any purpose other than what is specified in our mutual service agreements.

5 Data Security Measures

Bcaa44 implements a comprehensive range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Data encryption in transit — all communications between your device and bcaa44's servers are protected by TLS 1.3 protocol with AES-256 encryption.
• Data encryption at rest — sensitive data such as financial information and KYC documents are stored in encrypted format on our servers.
• Two-factor authentication (2FA) — bcaa44 supports and encourages the use of 2FA on all player accounts to add an extra layer of security.
• Continuous security monitoring — an automated monitoring system operates 24/7 to detect any suspicious activity or intrusion attempts.
• Regular security audits — internal and external security assessments are conducted on a routine basis to identify and address system vulnerabilities.
• Staff training — all staff handling personal data receive ongoing privacy and data security training.

While bcaa44 takes all reasonable precautions, no security system can guarantee one hundred percent absolute protection. In the event of a data security breach that affects you, bcaa44 will notify you within the timeframe required by law and take immediate remedial action.

6 Cookies & Tracking Technologies

Bcaa44 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how players interact with our website. The following are the types of cookies we use:

• Essential cookies — required for core website operations, including login session authentication and security. These cookies cannot be disabled.
• Performance cookies — gathering information on how visitors use our website to help us improve its functionality and content.
• Functional cookies — allows the website to remember your preferences such as language, region, and display settings to provide a more personalised experience.
• Analytics cookies — used to understand website traffic patterns and usage for internal service improvement purposes.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the bcaa44 website. We do not use third-party advertising cookies that track your activity across other websites.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by bcaa44:

To exercise any of the above rights, please contact the bcaa44 data protection team via email or live chat. We will process your request within 30 days working days from the date of receipt.

8 Data Retention Period

Bcaa44 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our core principle is data minimisation — we do not retain data for longer than is strictly necessary.

• Active account data — retained for the duration your account is active and for a specified period after account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years after the transaction date, in line with Malaysia's accounting and tax legal requirements.
• KYC Documents — retained for the period required by applicable anti-money laundering legislation.
• Support communication logs — retained for 3 years for reference and dispute resolution purposes.
• Analytics and technical log data — retained for no more than 13 months, after which they are anonymised or deleted.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised in a manner that it can no longer be personally linked to you.

9 Cross-Border Data Transfers

In the course of its operations, bcaa44 may transfer or store your personal data on servers located outside Malaysia. This may occur in the context of using cloud infrastructure services or international game software providers.

Whenever your personal data is transferred outside Malaysia, bcaa44 ensures that:

• The recipient country or region has an adequate level of data protection; or
• Appropriate contractual agreements are in place with the data recipient to ensure equivalent data protection standards are upheld; or
• Such transfers are carried out under permitted exceptions as provided under Malaysia's PDPA 2010.

10 Children's Privacy

Bcaa44 services are exclusively for users aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without proper age verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who find that their child has registered at bcaa44 are requested to contact our support team immediately.

11 Amendments to This Privacy Policy

Bcaa44 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or relevant technological developments.

When significant amendments are made, we will:

• Displaying a clear notice on the bcaa44 homepage regarding the changes to be made;
• Sending email notifications to all registered members at least 14 days before the amendment takes effect;
• Updating the "Last Updated" date at the top of this document; and
• Maintaining an archive of previous versions of this Privacy Policy, which may be requested from our team.

Your continued use of bcaa44 services after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account and discontinue use of our services.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bcaa44 handles your personal data, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint with Malaysia's Department of Personal Data Protection if you believe your rights under PDPA 2010 have been violated. However, we encourage you to contact bcaa44 first so we can resolve any issues directly and promptly.