Bilabilawin Privacy Policy – Malaysia Member Personal Data Protection

1 What Data Do We Collect?

Bilabilawin collects several categories of information from members for the purposes stated in this policy. The following are the types of data we collect:

We do not collect sensitive information such as medical data, political views, or religious beliefs in the context of using the bilabilawin platform.

2 How Do We Use Your Data?

Data collected by bilabilawin is used solely for legitimate purposes directly related to providing services to members. The primary purposes for data use are as follows:

• Account management: Creating, verifying, and maintaining your bilabilawin account.
• Transaction processing: Processing deposits, withdrawals, and all other financial transactions securely.
• Identity verification (KYC): Meeting legal compliance requirements and ensuring platform security.
• Platform security: Detecting and preventing fraud, hacking, and suspicious activity.
• Customer support: Helping members resolve account, technical, and financial issues more effectively.
• Service communications: Sending important notifications about accounts, transactions, and policy changes.
• Platform improvement: Analysing usage patterns to improve the overall user experience.
• Responsible gaming: Monitoring gaming activity to identify early signs of problem gambling.

3 Data Sharing with Third Parties

Bilabilawin takes seriously its responsibility not to disclose members' personal data to third parties without clear and legitimate justification. However, there are limited situations where data sharing may be necessary:

• Payment service providers: Minimum required transaction data is shared with licensed payment gateway providers to process your deposits and withdrawals.
• Identity verification service providers: KYC documents may be submitted to licensed third-party identity verification platforms that comply with international data security standards.
• Relevant authorities: bilabilawin complies with court orders or lawful requests from law enforcement agencies when required by law.
• Security audit: Independent security audit firms may access system data (not individual personal data) as part of the periodic audit process.

All third parties working with bilabilawin must sign strict data protection agreements and operate in accordance with the security standards we set. We take full responsibility for how our partners handle bilabilawin member data.

4 Security & Data Protection

The security of members' personal data is bilabilawin's top priority. We invest in the latest security infrastructure to ensure your data remains protected at all times:

• All communications between your device and bilabilawin servers are protected by 256-bit SSL encryption that cannot be broken.
• Member passwords are never stored in plain text — all passwords are stored using a secure, irreversible hashing algorithm.
• A real-time security monitoring system operates around the clock to detect suspicious activity.
• Access to members' personal data within bilabilawin is restricted solely to staff who require it to carry out their job duties.
• All bilabilawin staff undergo rigorous data protection training and sign confidentiality agreements.
• Regular security audits are conducted to identify and patch any system vulnerabilities before they can be exploited.

5 Use of Cookies

The bilabilawin website and app use cookies to enhance the user experience and ensure the platform runs smoothly. Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, gaming sessions, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how members use the platform to help us improve our services. All data is anonymised.
• Functional Cookies: Remembering user preferences such as language, display settings, and game preferences for members' convenience.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect certain features within the bilabilawin platform.

6 Data Retention Period

Bilabilawin retains members' personal data for as long as the account remains active and for a defined period following account closure, in accordance with applicable legal requirements:

• Active account data is retained for as long as your bilabilawin account remains active.
• Financial transaction records are retained for a minimum of seven (7) years in line with Malaysia's financial legal requirements.
• KYC records and identity verification documents are retained for a minimum of five (5) years after account closure.
• Technical system logs are retained for twelve (12) months for security and fraud detection purposes.

Once the retention period expires, your personal data will be securely deleted from all bilabilawin systems in accordance with established data disposal procedures.

7 Your Rights as a Member

As a bilabilawin member residing in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: You may request that we delete your data, subject to applicable legal requirements.
• Right to Restriction: You may request that we restrict the processing of your data under certain circumstances.
• Right to Object: You may object to the processing of your data for direct marketing purposes.

To exercise any of the above rights, please contact the bilabilawin customer support team via 24/7 live chat. We will process your request within 30 business days from the date of receipt.

8 Privacy Policy Amendments

Bilabilawin reserves the right to amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or service improvements. When a material amendment occurs:

• The "Updated" date at the top of this document will be revised accordingly.
• Members will be notified via in-platform notifications or their registered email.
• Continued use of the bilabilawin platform after amendments are published will be considered acceptance of the revised policy.