Byd 180 Privacy Policy — Malaysian Player Data Protection

Byd 180 collects various types of personal information from our players through different methods — directly during registration, automatically during platform use, and through identity verification processes. The main categories of data we collect are as follows:

A. Information You Provide Directly

• During registration: Full name, Malaysian phone number, email address, date of birth, and chosen account password.
• During KYC verification: A valid copy of your MyKad or Malaysian passport, a verification selfie if requested, and proof of residential address.
• During deposits and withdrawals: The account holder name for your eWallet (Touch 'n Go, GrabPay, Boost, ShopeePay), your bank account number or DuitNow account, and a record of every financial transaction carried out through byd 180.
• During support interactions: The content of live chat conversations, emails, or WhatsApp exchanges with the byd 180 support team.

B. Automatically Collected Information

• Your device's IP address and IP-based geographical location (state/city within Malaysia).
• Device type, operating system, and web browser version used to access byd 180.
• Session data: login and logout times, pages visited, in-platform actions, and session duration.
• Complete records of all betting activity, including badminton matches, slots, baccarat, blackjack, live casino games, and more.
• Cookie data and similar tracking technologies as described in Section 5.

Byd 180 uses players' personal data for legitimate and limited purposes only. We do not use your data for any purpose not stated in this policy without your prior consent.

• Account management: Creating and maintaining your byd 180 account, processing logins, and protecting your account against unauthorized access.
• Transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as processing withdrawal of winnings to your account.
• Identity verification (KYC): Fulfilling legal requirements related to anti-money laundering (AML) and verifying players' age eligibility.
• Customer support: Processing complaints, responding to enquiries, and resolving disputes related to gameplay, payments, or accounts.
• Security and fraud prevention: Detecting and preventing duplicate accounts, bonus abuse, bot usage, and other fraudulent or unlawful activity on the byd 180 platform.
• Responsible gambling: Monitoring gameplay patterns to identify players who may benefit from responsible gambling tools or support, in line with byd 180's commitment to player wellbeing.
• Platform improvements: Analysing usage data on an aggregated basis (not at an individual level) to improve the interface, platform speed, and overall experience for byd 180 players.
• Promotional communications (with consent): Sending information about new bonuses, promotions, and platform updates to players who have consented to receive such communications.

Byd 180 does not sell or disclose players' personal information to third parties for marketing or commercial purposes. However, there are limited situations where we need to share data with specific parties to keep the platform running:

• Technology service providers: Server hosting providers, transactional email service providers, and gaming platform providers (such as Evolution Gaming, Pragmatic Play) that require minimal data to deliver their services. All these parties are bound by strict data protection agreements.
• Payment processors: Payment gateways that process eWallet transactions (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX. Only the data required to complete a transaction is shared — no gaming data or any other additional information.
• Legal requirements: byd 180 may disclose information to Malaysian government authorities where required by law, court order, or in cooperation with investigations into financial crime, money laundering, or fraud.
• Business transfers: If byd 180 undergoes any corporate restructuring, merger, or acquisition, player data may be transferred to the new entity, subject to notice being given to players and the continuation of equivalent protections.

Byd 180 continually invests in technical and organisational security measures to protect players' personal data from unauthorised access, loss, or destruction. Among the security measures we have implemented:

• Encryption in transit: All communications between your device and byd 180's servers are protected by TLS 1.3 / 256-bit SSL encryption. This covers login sessions, financial transactions via Touch 'n Go or FPX, and all activity within the platform.
• Stored data encryption: Sensitive data such as passwords is stored using a strong hashing algorithm (bcrypt). Actual passwords are never stored in our system — not even by byd 180 administrators.
• Two-factor authentication (2FA): byd 180 players can enable 2FA via SMS OTP for an added layer of protection during login and financial withdrawals.
• Internal access controls: Player data is only accessible to byd 180 staff who require it to carry out their responsibilities. All access is logged, monitored, and reviewed on a regular basis.
• 24/7 security monitoring: An intrusion detection system (IDS) and anomaly monitoring run around the clock to detect and respond to security threats promptly.
• Data backups: Player data is securely backed up on a regular basis to ensure recovery in the event of an unexpected system incident.

While byd 180 implements all reasonable security measures, no system is entirely immune to cyber threats. You also play an important role in protecting your account — use a strong password, do not share your login credentials, and enable 2FA. If you suspect unauthorised access to your byd 180 account, contact us immediately at support@byd180.best.

Byd 180 uses cookies and similar tracking technologies to keep the platform running smoothly, improve the user experience, and understand how players interact with our platform. The types of cookies we use are as follows:

You can manage or delete cookies at any time through your web browser settings. Keep in mind that removing essential cookies may log you out of byd 180 and cause some of your personal preferences to be lost. For guidance on managing cookies in popular browsers (Chrome, Safari, Firefox), please refer to each browser's official support documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and byd 180's privacy policy, you have the following rights regarding the personal data we hold about you:

• Right to access: You have the right to request a copy of the personal data we hold about you. This request will be processed within 14 business days and provided in a readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic updates such as your phone number and email address can be made directly from your byd 180 account settings.
• Right to erasure: You may request the deletion of your personal data in certain situations — for example, if the data is no longer needed for the purpose it was collected. Such requests are subject to mandatory data retention requirements, such as financial records kept for AML compliance.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time. This objection will be fully honoured with no impact on the byd 180 services you receive.
• Right to restrict processing: Under certain circumstances, you may request that we restrict how we process your data while a dispute or review is in progress.
• Right to data portability: You may request the data you have provided to us in a structured, machine-readable format, where technically feasible.

To exercise any of the above rights, send a written request to privacy@byd180.best with the subject line "Data Subject Rights Request" along with proof of your identity. We will respond within 14 business days.

The byd 180 platform is exclusively for individuals aged 18 and above. byd 180 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we find that an account has been registered by someone under the age of 18, the account will be closed immediately and all associated data will be deleted in accordance with applicable legal requirements. Any deposits made through such an account will be refunded to the original payment method (Touch 'n Go, GrabPay, FPX, etc.) once the investigation is complete.

Parents or guardians who suspect their child may have registered a byd 180 account can contact us immediately at support@byd180.best for prompt investigation and action.

In operating the byd 180 platform, players' personal data may be processed or stored on servers located outside Malaysia — particularly in the context of cloud technology service providers and international gaming providers operating in other jurisdictions across Asia.

Any such cross-border data transfer is only carried out once an adequate level of data protection has been ensured through:

• Legally binding data processing agreements with data recipients.
• An assessment that the recipient jurisdiction maintains data protection laws of a comparable standard.
• Additional technical measures such as data encryption prior to transfer.

Byd 180 does not transfer players' personal data to jurisdictions with inadequate data protection without the player's explicit consent or a clear legal basis.

Byd 180 does not retain personal data longer than necessary for the purpose it was collected, subject to applicable legal and regulatory requirements. The main retention periods are as follows:

• Financial and transaction records: Minimum 7 years from the transaction date, in line with the requirements of Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• KYC and identity records: Minimum 5 years after account closure to meet AML compliance requirements.
• Game records: 5 years after account closure to facilitate dispute resolution and audits.
• Support communication logs: 2 years from the date of last communication.
• Technical data and system logs: 90 days for detailed logs; aggregated data with no personal identifiers may be retained longer for analytics purposes.

Once the applicable retention period has expired, data will be securely deleted or fully anonymized so that it can no longer be linked to any individual.

Byd 180 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or service improvements. Players will be notified of any material changes via email at least 14 days before the changes take effect.

The latest version of this Privacy Policy is always available on this page with a clearly marked update date. Continued use of the byd 180 platform after the effective date of any changes constitutes acceptance of the updated terms. It is the player's responsibility to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how byd 180 handles your personal data, please contact our Data Privacy Officer through any of the following methods:

We are committed to responding to all privacy-related enquiries within 14 business days. For more urgent matters involving account security or suspected unauthorised access, please use our live chat, available 24/7, for an immediate response.