Privacy Policy mybwt – User Personal Data Protection

01Privacy Policy Introduction and Scope

This Privacy Policy is issued by mybwt and applies to all users who access or use the mybwt platform through mybwt.com, the mobile app for Android and iOS, and any related services we offer.

When you register a mybwt account, use any of our games or services, or simply browse our website, you acknowledge that you have read and understood this privacy policy. If you do not agree with any part of this policy, please stop using our platform.

02Types of Personal Data We Collect

Mybwt collects various categories of personal data depending on how you interact with our platform. Below is a detailed explanation of the data we collect and why:

2.1 Data You Provide Directly to Us

• Registration Information: Full name, email address, phone number, and password when you create a mybwt account.
• Identity Verification (KYC) Information: Identification number, MyKad copy, proof of address, and a selfie for age and identity verification as required by regulations.
• Financial Information: Bank account details and digital wallet information for processing deposits and withdrawals. Credit or debit card numbers are not stored directly by mybwt.
• Communications with Us: Records of your inquiries, complaints, and communications with the mybwt support team via live chat.

2.2 Data Collected Automatically

• Log Data: IP address, browser type, device operating system, access date and time, and pages visited.
• Game Data: Records of wagering activity, wins, losses, game types played, and session duration.
• Technical Data: Device identifier, app version, language settings, and time zone.
• Cookies and Similar Technologies: Browsing data and user preferences stored via session and persistent cookies.

03How We Use Your Data

Mybwt uses the personal data collected for legitimate and necessary purposes to operate the platform effectively. We do not use your data for purposes outside the scope stated here without obtaining your prior consent.

• Account Management: Creating and managing your mybwt account, including processing deposits, withdrawals, and bonus management.
• Verification & Security: Verifying your identity during login, detecting suspicious activity, and preventing fraud and money laundering.
• Legal Compliance: Meeting compliance obligations set out under Malaysian law, including financial reporting and KYC requirements.
• Service Improvement: Analysing platform usage patterns to improve the user experience, fix bugs, and develop relevant new features.
• Service Communications: Sending important notifications related to your account, terms updates, security alerts, and promotional information you have subscribed to.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate support.

04Data Sharing with Third Parties

Mybwt does not sell or rent your personal data to any third party. However, in operating our platform, there are limited situations where data may need to be shared with certain parties:

• Payment Providers: Transaction information that must be shared with payment processors such as the FPX gateway, Touch 'n Go, GrabPay, and Boost to process your deposits and withdrawals.
• Game Providers: Game session data required by game software providers to ensure games function correctly and fairly.
• KYC Services: Identity verification data that must be shared with authorised third-party KYC service providers for verification purposes.
• Legal Requirements: Data required by a competent authority or tribunal based on a court order or legal requirement.
• Cloud Services: Data stored on secure, certified cloud platforms used by mybwt to operate its platform infrastructure.

All third parties working with mybwt are bound by strict confidentiality agreements and are required to meet data protection standards equal to or higher than our own privacy policy.

05Data Safety and Protection

The security of your data is a responsibility we take extremely seriously. mybwt implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

• 256-bit SSL encryption for all data transmitted between your device and the mybwt platform servers
• Encryption at rest for all sensitive information stored on our systems
• Two-factor authentication (2FA) for additional account protection
• 24/7 threat monitoring system that detects and responds to suspicious activity in real time
• Data segregation with strict role-based access controls

5.2 Organisational Security Measures

• Mandatory data protection training for all mybwt staff
• Regular security audits and penetration testing conducted on an ongoing basis
• Clear and tested security incident response procedures
• Least-privilege access principle — only staff who require data to perform their assigned duties are granted access

06Data Retention Period

Mybwt does not retain your personal data longer than necessary for the purpose it was collected. Retention periods vary according to data type and applicable legal requirements:

• Active Account Data: Retained for as long as your account is active and for a reasonable period thereafter for support purposes.
• Financial Transaction Records: Retained for seven years in line with Malaysia legal requirements relating to financial records.
• KYC Data: Retained for five years from the date of the last verification or account closure, whichever is later.
• Security Logs: Retained for twelve months for security incident investigation purposes if required.
• Communication Records: Retained for three years to allow reference in the event of a dispute.

Upon expiry of the retention period, your personal data will be permanently deleted or anonymized so that it can no longer be linked to you personally.

07Cookies and Tracking Technologies

Mybwt uses cookies and similar technologies to ensure the platform functions properly, enhance the user experience, and gather analytical information that helps us understand how users interact with our platform.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session authentication and security preferences. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, time zone, and display settings to enhance your browsing experience.
• Analytics Cookies: Collecting information on how you use our platform, the pages most frequently visited, and time spent, to help us improve our services.

You can manage cookie settings through your browser. However, disabling essential cookies may affect the functionality of the mybwt platform.

08Your Rights Under the PDPA

As a mybwt user based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). mybwt fully respects and supports these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to correct inaccurate or outdated data at any time via your account settings or by contacting us.
• Right to Erasure: You can request deletion of your personal data subject to applicable legal retention requirements.
• Right to Restrict Processing: You can request that we restrict how we use your data under certain circumstances.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact the mybwt privacy team. Your request will be acknowledged within three business days and resolved within 14 business days.

09Children's Privacy

The mybwt platform is strictly for individuals aged 18 and above. We do not knowingly collect or store personal data from minors. If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered a mybwt account, please contact our support team immediately so that appropriate action can be taken without delay.

10Privacy Policy Changes and Contact Us

Mybwt reserves the right to update this privacy policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any significant changes will be communicated to you through a clear notice on the platform or via the email address you registered with.

We encourage you to review this page regularly to stay up to date with the latest mybwt privacy policy. The most recent update date is always displayed at the top of this document.

If you have any questions, concerns, or wish to exercise your personal data rights, you can reach the mybwt privacy team via live chat on the platform or through our support email. Our team is available to assist you 24 hours a day, 7 days a week.