bstar888 Privacy Policy

1.Introduction

bstar888 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all members and visitors to bstar888.co ("the Site"). This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure and protection of personal data in connection with the bstar888 platform and its services.

This Policy applies to all personal data processed by bstar888 in connection with the registration and maintenance of member accounts, the use of gaming and betting products, the processing of financial transactions, and all communications between bstar888 and its members. It should be read in conjunction with the bstar888 Terms & Conditions and Responsible Gaming Policy.

By creating a bstar888 account or continuing to use the platform following an update to this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, to the extent that such consent is required under applicable data protection law.

2.Personal Data We Collect

bstar888 collects personal data from members and visitors through several channels. The categories of data we collect are set out below.

2.1 Registration Data

When you register a bstar888 account, we collect: full legal name, date of birth, email address, mobile telephone number, preferred username and a hashed version of your chosen password. This information is mandatory — accounts cannot be created without it.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer ("KYC") and Anti-Money Laundering ("AML") obligations, we may collect and process copies of government-issued identity documents (such as Malaysian MyKad), proof-of-address documentation, and evidence of payment methods used on the platform. KYC documentation is processed securely and retained in accordance with our regulatory obligations.

2.3 Financial Data

We collect and process data relating to deposits, withdrawals, transaction history and payment methods linked to your account. We do not store full payment card numbers — where card payments are processed, they are handled by certified payment processors under Payment Card Industry Data Security Standard ("PCI DSS") compliance. For e-wallet transactions (Touch n Go, Boost) and FPX bank transfers, we retain transaction reference numbers and confirmation data.

2.4 Gaming & Betting Activity Data

We record data about your activity on the bstar888 platform, including wagers placed, games played, session durations, bet amounts, game outcomes and responsible gaming tool usage (deposit limits set, cooling-off periods activated, etc.).

2.5 Technical & Device Data

When you access bstar888, we automatically collect technical data including: IP address, device type and operating system, browser type and version, time zone, referring URL and pages visited within the platform. This data is used for security monitoring, fraud prevention and platform optimisation.

2.6 Communications Data

We retain records of communications between you and the bstar888 support team via live chat and email, including the content of those communications, timestamps and resolution notes.

3.How We Use Your Personal Data

bstar888 uses your personal data for the following purposes:

• Account management: To create, maintain and administer your bstar888 account, verify your identity and process your bstar888 Login credentials securely.
• Service delivery: To provide access to all gaming and betting products, process deposits and withdrawals, settle wagers and apply bonuses.
• Regulatory compliance: To fulfil our obligations under applicable gaming regulation, AML laws and KYC requirements, including verification of age (21+) and identity.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, money laundering, bonus abuse, account takeover and other security threats.
• Responsible gaming: To monitor gambling activity patterns and proactively identify members who may be exhibiting signs of problem gambling, in accordance with our responsible gaming obligations.
• Customer support: To respond to enquiries, resolve complaints and provide account assistance via live chat and email.
• Platform improvement: To analyse usage patterns, identify bugs, optimise performance and develop new features — using aggregated or anonymised data where possible.
• Marketing communications: To send promotional offers, bonus notifications and platform updates to members who have consented to receive such communications. You may opt out at any time via your account settings.

4.Legal Basis for Processing

bstar888 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and bstar888 — principally, account management and service delivery.
• Legal obligation: Processing required to comply with applicable gaming regulation, AML legislation, KYC requirements and tax reporting obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring and platform analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

5.Data Sharing & Third Parties

bstar888 does not sell, rent or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients where strictly necessary:

• Payment processors and e-wallet providers: To facilitate deposits and withdrawals via Touch n Go eWallet, Boost, FPX and bank transfer services. These processors operate under their own privacy policies and are bound by contractual data protection obligations with bstar888.
• Identity verification and KYC providers: Third-party services engaged to verify member identity documents and comply with AML requirements.
• Gaming content providers: Game studios and live casino operators whose products are hosted within the bstar888 platform may receive session and outcome data for technical integration purposes.
• Regulatory and law enforcement authorities: Where required by law, court order or regulatory direction, bstar888 will disclose member data to competent authorities. We will notify affected members of such disclosures to the extent permitted by law.
• Professional advisors: Legal, accounting and audit professionals engaged by bstar888, subject to professional confidentiality obligations.

6.Cookies & Tracking Technologies

bstar888 uses cookies and similar tracking technologies on the Site for the following purposes:

• Strictly necessary cookies: Essential for platform functionality — session management, bstar888 Login authentication, security tokens and load balancing. These cannot be disabled without impacting your ability to use the platform.
• Functional cookies: Remember your preferences such as language, display settings and recently played games.
• Analytics cookies: Collect anonymised or aggregated data about how members navigate and use the platform, enabling us to identify performance issues and improve the user experience.
• Security cookies: Support fraud detection and security monitoring by recording device and session fingerprinting data.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair platform functionality, including the ability to maintain a bstar888 Login session.

7.Data Retention

bstar888 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in compliance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of seven (7) years to satisfy tax reporting and financial record-keeping obligations.
• Gaming activity logs: Retained for a minimum of three (3) years for regulatory compliance and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years following the resolution of the relevant enquiry or complaint.
• Marketing opt-in records: Retained until you withdraw consent and for one (1) year thereafter as a record of that consent.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with bstar888's data deletion procedures.

8.Data Security

bstar888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bstar888 platform;
• Encryption of sensitive personal data at rest, including identity documents and payment data;
• Role-based access controls ensuring that bstar888 staff can only access member data on a strict need-to-know basis;
• Regular security assessments, penetration testing and vulnerability scanning;
• Incident response procedures for the detection, investigation and notification of personal data breaches.

9.Your Data Rights

Subject to applicable data protection law and our regulatory obligations, you have the following rights in relation to your personal data held by bstar888:

• Right of access: You may request a copy of the personal data bstar888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Many details can be updated directly via your account settings.
• Right to erasure: You may request deletion of your personal data. Note that we may be required to retain certain data for regulatory compliance purposes notwithstanding such a request.
• Right to restrict processing: You may request that we restrict processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to data portability: You may request your personal data in a structured, commonly used and machine-readable format.
• Right to object: You may object to processing of your data for direct marketing purposes at any time, effective immediately. You may also object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact the bstar888 privacy team via the support channel. We will respond to all valid requests within 30 days. In some cases, we may need to verify your identity before processing a data rights request.

10.International Data Transfers

bstar888 operates under an international gaming authority licence and may engage service providers located outside Malaysia. Where personal data is transferred to recipients in countries that do not provide a level of data protection equivalent to that applicable in Malaysia, bstar888 implements appropriate safeguards, including standard contractual clauses or binding corporate rules, to ensure that your data remains protected to a consistent standard regardless of where it is processed.

11.Children's Privacy

The bstar888 platform is strictly for adults aged 21 years and above. We do not knowingly collect, process or retain personal data from individuals under the age of 21. If we discover that a member is under 21, the account will be immediately suspended and any deposits returned. If you believe that a minor has accessed or registered on the bstar888 platform, please contact our support team immediately so that we may investigate and take appropriate action.

12.Changes to This Privacy Policy

bstar888 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify registered members via email to the address associated with their account, or via a prominent notice on the platform, at least 14 days prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page.

Your continued use of the bstar888 platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with the revised terms, you should cease using the platform and contact us to request account closure.

13.Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a data protection concern or complaint, please contact the bstar888 privacy team via:

• Live Chat: Available 24/7 directly on the bstar888 platform (no login required to access the pre-login chat widget).
• Email: [email protected] — please include "Privacy Request" in the subject line.

We aim to acknowledge all privacy enquiries within 4 business hours and to provide a substantive response within 30 calendar days. For unresolved complaints, you may escalate the matter to the relevant data protection supervisory authority under the jurisdiction of the bstar888 operating licence.