Personal Data Protection

Bm68 Privacy Policy – Personal Data Protection for Malaysian Players

Bm68 is committed to protecting the privacy and security of every player's personal data. This document transparently explains how we collect, use, store, and protect your information.

Effective: January 2026
SSL256-bit encryption
0Sale of Data to Third Parties
KYCSecure Verification
24/7Security Monitoring
PDPAData Compliance

01 Introduction & Scope of This Policy

This Privacy Policy is published by bm68 ("we", "Platform", "Company") and applies to all users who access or use bm68 services, including the website, mobile app, and any other digital channels operated by us.

Bm68 takes player privacy extremely seriously. We understand that when you register and use our platform, you are entrusting us with your personal information. We safeguard that trust diligently through robust technical measures and operational policies.

This document details the types of data we collect, why we need it, how it is used, how long it is retained, and your rights as the data owner. If you have any questions after reading this document, our team is available via 24/7 live chat.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy bm68 for a comprehensive understanding of how our platform operates.

02 Personal Data We Collect

Bm68 only collects data that is genuinely necessary to operate our services safely and effectively. No excessive or irrelevant data is collected solely for third-party commercial purposes.

Data Provided Directly by You

Data CategoryExample InformationPrimary Purpose
IdentityFull name, date of birth, MyKad / passport numberAccount registration & KYC
RelationshipPhone number, email addressCommunication & verification
FinanceBank account number, bank nameDeposits & Withdrawals
AddressCurrent residential addressKYC identity verification
SecurityPassword (encrypted), security questionsAccount protection

Automatically Collected Data

  • IP address and general location data (country/region)
  • Device type, operating system, and web browser used
  • Session data: pages visited, time spent, buttons clicked
  • Gaming data: betting history, games played, and results
  • Transaction data: deposit history, withdrawals, and account balance

Your password is never stored in plain text. It is processed through a one-way encryption algorithm before being saved, meaning no one — including the bm68 technical team — can ever view your actual password.

03 Purpose of Using Your Personal Data

Every piece of data we collect has a clear purpose. bm68 does not use your data for unrelated purposes or in ways you would not expect.

Platform Operations Purpose

  • Creating and managing your player account
  • Conducting KYC and identity verification processes
  • Processing deposits and withdrawals securely
  • Providing customer support services
  • Detecting and preventing fraud and money laundering
  • Ensuring compliance with responsible gaming regulations

Service Improvement Purpose

  • Analyzing usage patterns to improve the platform experience
  • Sending account and transaction notifications
  • Informing you of relevant promotions and offers (with your consent)
  • Resolving disputes and enforcing terms of service

04 Data Sharing with Third Parties

Bm68 does not sell, rent, or trade your personal data to any external party for marketing purposes. This is a principle we have never compromised.

Situations Where Data May Be Shared

However, there are limited situations where data sharing is necessary for platform operations:

  • Payment processors: Transaction information is shared with approved payment gateways to enable deposits and withdrawals to be processed securely.
  • Technical service providers: Infrastructure and security providers who have signed strict confidentiality agreements with bm68.
  • Legal Authority: When required by Malaysian law or a valid court order.
  • Fraud prevention: Limited sharing of required information with relevant parties to detect illegal activity.

All third parties contracted by bm68 are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for purposes specified in those contracts and may not share your data with any other party.

05 Data Storage & Retention Period

Bm68 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

Bm68 Data Retention Policy

Data TypeRetention PeriodReason
Active account dataThroughout the active account periodOperational requirements
Transaction records7 years after transactionFinancial regulatory compliance
KYC Documents5 years after account closureAnti-money laundering requirements
Activity log2 yearsSecurity & dispute resolution
Communication data3 yearsCustomer service records

Once the retention period expires, data will be securely deleted or anonymised in accordance with established procedures. Anonymised data can no longer be linked to your identity.

06 bm68 Data Security Measures

Bm68 implements multiple layers of technical and organisational security to ensure your data is always protected against unauthorised access, breaches, or misuse.

Technical Security

  • 256-bit SSL/TLS encryption for all data communications between your browser and our servers
  • Encryption of sensitive data stored in databases using AES-256
  • Two-factor authentication (2FA) is available for all player accounts
  • Intrusion detection system (IDS) operating 24/7
  • Regular independent security vulnerability scanning
  • Multi-layered firewall to protect server infrastructure

Organizational Security

  • Access to players' personal data is restricted to authorised staff only
  • All staff with data access are bound by confidentiality agreements
  • Regular privacy awareness and data security training for all staff
  • Clearly defined security incident response procedures

Security Tips for Players: While bm68 implements comprehensive security measures, you can also help protect your account by using a strong and unique password, enabling 2FA, and never sharing your login credentials with anyone.

07 Cookies, Tracking Technology & Analytics

Bm68 uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and ensure security functions operate correctly.

Types of Cookies Used

  • Essential Cookies: Required for core platform functionality – login, session management, and security. Cannot be disabled.
  • Functional Cookies: Saving your preferences such as language and display settings for a better experience.
  • Analytics Cookies: Helping us understand how players use the platform so we can improve it. This data is collected in aggregate and does not identify individuals.
  • Security Cookies: Helping detect and prevent fraudulent activity and ensuring the security of your session.

Managing Your Cookie Preferences

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the bm68 platform. Analytics and functional cookies can be turned off without affecting your ability to play.

08 Your Rights as a Data Subject

As a bm68 player, you have certain rights regarding your personal data. bm68 respects and facilitates the exercise of these rights.

Right of Access

You have the right to know what personal data we hold about you and to request a copy of it.

Right to Rectification

You have the right to request a correction if any data in your account is inaccurate or outdated.

Right to Erasure

You may request the deletion of your data, subject to applicable legal retention requirements.

Right to Object

You may object to the processing of your data for marketing purposes at any time.

Right to Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

In certain circumstances, you may ask us to temporarily restrict the processing of your data.

To exercise any of the above rights, contact the bm68 customer support team via live chat or email at [email protected]. We will process your request within 30 business days.

09 Children's Data Protection

The bm68 platform is strictly for adult users aged 18 and above. We do not intentionally collect or store any personal data from individuals under the age of 18.

If we discover or suspect that data from an underage individual has been collected without consent, we will take immediate action to delete that data and close the associated account. Parents or guardians who find that their child has registered an account with bm68 are urged to contact us immediately.

Registration by minors is a serious violation of bm68's Terms and Conditions. All accounts suspected of being owned by minors will be investigated and closed without delay.

10 Amendments to This Privacy Policy

Bm68 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we provide.

How We Notify You of Changes

  • In-platform notices on bm68 will be displayed when material changes are made
  • A notification email will be sent to your registered address for significant changes
  • The "Effective" date at the top of this document will be updated
  • Previous versions of the Privacy Policy are available upon request via customer support

Continued use of the bm68 platform after amendments take effect will be considered your acceptance of the revised policy. If you do not agree with any changes, you have the right to close your account.

11 Contact Us About Data Privacy

If you have any questions, concerns, or complaints regarding how bm68 handles your personal data, we encourage you to contact us directly.

Contact Channels

  • Live Chat: Available 24/7 directly from the bm68 platform – the fastest way to get a response
  • Email: [email protected] – for enquiries that require documentation or written reference

Our team is committed to responding to every privacy-related inquiry within 5 business days. For more complex matters such as data access or deletion requests, the process may take up to 30 business days.

We believe in open communication. Every privacy concern you raise will be taken seriously, and you will receive a clear, honest response from our team.

bm68's Privacy Commitment to You

Six key pillars that ensure the protection of bm68 players' personal data

🔐
Banking-Level Encryption

256-bit SSL encryption protects all data transmitted between your device and our servers — the same standard used by major Malaysian banks to secure financial transactions.

🚫
No Data Sales

Bm68 has never and will never sell your personal data to any party for marketing or commercial purposes. Your data belongs to you — not a commodity for us.

🔍
Full Transparency

Our Privacy Policy is written in clear, easy-to-understand language. No terms are deliberately obscured – you have the right to know exactly how your data is handled.

🛡️
24/7 Monitoring

Our security systems operate around the clock to detect any suspicious activity. Any security threats are addressed immediately by our technical team.

✅
PDPA Compliance

Bm68 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) and relevant international standards to ensure responsible data handling.

🤝
Player Rights Respected

You may access, correct, or request the deletion of your data at any time. Your rights as a data subject are something bm68 takes seriously and respects fully.

🔒 🤝

Play with Peace of Mind – Your Data is Safe with bm68

Bm68 builds trust through action, not just promises. Register today and enjoy a platform that fully respects your privacy.

Aged 18 and above. Play responsibly.

Bahasa Melayu