BNG Games Privacy Policy – Malaysia Member Data Protection

Privacy Policy Introduction & Scope

This Privacy Policy ("Policy") describes how bng games ("we", "Platform") collects, uses, discloses, and protects your personal information when you use the bng games website, mobile app, and all related services.

This Policy applies to all users of the bng games platform, including website visitors, registration applicants, and active members. By accessing or using the bng games platform, you acknowledge that you have read and understood this Privacy Policy.

Bng games takes our responsibilities under the Malaysia Personal Data Protection Act 2010 (PDPA) seriously. We set high standards in personal data management and continuously strive to exceed the minimum requirements prescribed by law.

Personal Data We Collect

Bng games only collects data that is strictly necessary to provide a safe, efficient and responsible service. Below are the categories of data we collect:

We may also collect data from legitimate third-party sources such as identity verification agencies and payment service providers, solely for compliance and verification purposes.

How We Use Your Personal Data

The data we collect is used exclusively for the following purposes. bng games will not use your data for any other purpose without notifying you in advance:

• Account management — Creates and maintains your account, processes registration and verifies identity through the required KYC process.
• Transaction processing — Processes deposits, withdrawals and all financial transactions securely using supported payment methods including DuitNow, FPX and Malaysia e-wallets.
• Security & fraud prevention — Detects and prevents unauthorised access, fraudulent activity and money laundering through continuous monitoring.
• Legal compliance — Fulfils our obligations under PDPA 2010 and financial reporting requirements set by the relevant authorities.
• Responsible wagering — Monitors usage patterns to identify members who may require support under the bng games responsible wagering programme.
• Service communications — Sends important notifications related to your account, security, terms changes and relevant technical information.
• Platform improvements — Analyses aggregate and anonymised usage data to improve the performance, interface and user experience of the bng games platform.

Data Sharing & Disclosure

Bng games does not sell or rent your personal data to third parties. However, there are limited situations where we need to share data to enable our services to operate properly:

• Payment service providers — Minimum transaction data required is shared with DuitNow, FPX, TnG eWallet, GrabPay and Boost providers solely to process your payments.
• Game software providers — Game session information is shared with licensed software providers to enable a seamless gaming experience and game fairness certification.
• Identity verification agencies — Minimum KYC information is shared with approved third-party verification providers to meet legal compliance requirements.
• Legal authorities — bng games will disclose data when required by court order, authority investigation or legitimate legal requirement.

All bng games third-party partners are bound by strict confidentiality agreements and are only permitted to use shared data for the specified purposes. We ensure every third party upholds data protection standards equivalent to our own.

Data Security Measures

The security of your personal data is bng games' highest priority. We implement multiple layers of technical and organisational protection to ensure your data remains safe at all times:

• 256-bit SSL encryption applied to all data in transit between your device and bng games servers.
• Encryption of sensitive data in databases using industry-recognised cryptographic algorithms.
• Role-based access controls ensuring that only authorised staff may access member personal data.
• Two-factor authentication (2FA) is available for all bng games member accounts as an added layer of security.
• Round-the-clock security monitoring and periodic penetration testing by independent security experts to identify and address vulnerabilities.
• Mandatory data security training for all bng games staff who handle personal data.

Cookies & Tracking Technologies

Bng games uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies used by bng games:

• Essential cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance cookies — Collects anonymous information about how you use the platform to help us identify and resolve technical issues.
• Functional cookies — Remembers your preferences such as language, display settings and game preferences to deliver a more personalised experience.
• Analytics cookies — Helps us understand aggregate usage patterns for platform improvements. Analytics data is processed anonymously.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality of some parts of the bng games platform.

Your Rights Regarding Personal Data

Under Malaysia's PDPA 2010 and the bng games policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the bng games privacy team through the available support channels. We will process your request within the timeframe required by law.

Data Retention Period

Bng games retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law. The following are general data retention guidelines:

• Active account data — Retained for the duration your account is active plus any additional period required by law following account closure.
• Financial transaction records — Retained for a minimum of seven years after a transaction occurs, in line with Malaysia's financial reporting legal requirements.
• KYC Documents — Retained for the period required under applicable anti-money laundering legislation.
• Support communication logs — Retained for three years for dispute resolution and service improvement purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or permanently anonymised in accordance with approved data disposal procedures.

Child Protection

The bng games platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

• bng games does not accept registrations or permit platform use by individuals under 18 years of age.
• If we determine that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.
• Parents or guardians who suspect their child has registered on the bng games platform are requested to contact us immediately through the available support channels.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how bng games handles your personal data, our team is ready to assist:

• Live Chat 24/7 — The fastest way to get an immediate response. Available directly in the bng games app and website.
• Email: [email protected] — For requests related to data rights, privacy complaints or enquiries requiring documentation.
• For complaints that cannot be resolved internally, you have the right to refer the matter to the Malaysia Personal Data Protection Department.

Bng games is committed to responding to all privacy-related enquiries within a reasonable timeframe. We value your trust and continually strive to ensure your personal data is handled in the most responsible manner.