Privacy Policy —
How bbd11 Protects Your Data

Introduction

This Privacy Policy ("Policy") is published by bbd11 ("bbd11", "we", "us", "our"), which operates the online gambling and sports betting platform accessible at https://bbd11.cam and its associated subdomains (the "Platform"). This Policy explains how bbd11 collects, processes, stores, shares, and protects the personal data of individuals who use our Platform, including players registered in Malaysia.

bbd11 is committed to processing personal data responsibly and in accordance with applicable data protection laws and the requirements of our gaming licence. We recognise that players entrust us with sensitive financial and personal information, and we treat that responsibility with the seriousness it deserves.

By registering an account with bbd11 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

Definitions

The following terms, as used in this Privacy Policy, carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person. This includes, but is not limited to, your name, email address, date of birth, residential address, national identity number (MyKad), payment method details, and transaction history.
• "Processing" — Any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" — bbd11, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — A third party that processes Personal Data on behalf of bbd11, pursuant to a written data processing agreement.
• "Sensitive Personal Data" — A subset of Personal Data that warrants a higher level of protection, including financial data, payment method details, and identity document information.
• "Cookies" — Small text files placed on your device when you visit the bbd11 Platform, used to remember your preferences and monitor Platform usage patterns.
• "KYC Documents" — Identity verification documents submitted by a Player, including government-issued photo identification (MyKad, passport), proof of address, and proof of payment method ownership.

Personal Data We Collect

bbd11 collects personal data through a number of channels, including direct submission by the player during registration and account use, and automatically through your interaction with the Platform. The categories of data we collect are set out below.

Data collected directly from you:

• Registration Data: Full legal name, date of birth, email address, residential address (including city, postcode, and state in Malaysia), and chosen username and password.
• Identity Verification Data: Government-issued photo identification (MyKad number or passport number), selfie photograph, and proof of address documentation as required for KYC compliance.
• Financial Data: Payment method details used for deposits and withdrawals — including e-wallet identifiers (GrabPay, Touch 'n Go, Boost), bank account details (for Maybank, CIMB, Public Bank, Hong Leong, RHB, or other FPX/DuitNow-linked accounts), and cryptocurrency wallet addresses.
• Communication Data: Messages sent to bbd11 via live chat, email ([email protected]), or any support ticketing system, including the content of your enquiries and our responses.

Data collected automatically:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and the referring URL from which you arrived at the bbd11 Platform.
• Usage Data: Pages visited, session duration, games played, bets placed, odds viewed, and in-platform navigation patterns.
• Transaction Data: Records of all deposits, withdrawals, bet placements, wager outcomes, and bonus credits processed through your bbd11 Account.
• Cookie & Tracking Data: Information gathered through cookies and similar tracking technologies as described in Section 7 of this Policy.

How We Use Your Personal Data

bbd11 uses the personal data it collects for the specific purposes described in the table below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected.

Legal Basis for Processing

bbd11 processes personal data only where a lawful basis exists to do so. The primary legal bases we rely upon are as follows:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you — including operating your account, processing deposits and withdrawals, and delivering the gambling services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, responsible gambling regulations, and reporting duties imposed by our gaming licence.
• Legitimate Interest: Processing carried out to pursue bbd11's legitimate business interests, including fraud prevention, platform security, and analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional promotional communications. You may withdraw your consent for these communications at any time by contacting our support team.

Data Sharing & Third Parties

bbd11 does not sell or commercially share your personal data with third parties for their own marketing purposes. We may, however, share your data with the following categories of third parties where necessary and in accordance with this Policy:

• Payment Processors: Malaysian payment partners including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX network banks, and cryptocurrency transaction processors — to the extent necessary to process your deposits and withdrawals. Each processor is subject to their own data protection obligations.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify player identities, screen against sanctions lists, and support our regulatory compliance obligations.
• IT Infrastructure Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf pursuant to written data processing agreements containing appropriate security requirements.
• Gaming Software Providers: Licensed game studios and sports data providers who power certain games and betting markets on the bbd11 Platform, to the limited extent required to deliver their services.
• Regulatory and Law Enforcement Authorities: Where bbd11 is legally required to disclose data by applicable law, court order, or the direction of a competent regulatory authority, including financial intelligence units and gaming regulators.
• Fraud Prevention Services: Third-party fraud detection and device fingerprinting services used to identify and prevent unauthorised account access and fraudulent transaction patterns.

All third parties to whom bbd11 discloses personal data are required to handle such data in accordance with applicable data protection standards. Where we engage Data Processors, we ensure that appropriate contractual safeguards are in place.

Cookies & Tracking Technologies

bbd11 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and gather analytics data. By continuing to use the bbd11 Platform, you consent to our use of cookies as described in this section.

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, login authentication, and security tokens. These cannot be disabled without impacting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, default stake amounts, and favourite sports or game categories.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform — informing improvements to layout, features, and performance.
• Fraud Prevention Cookies: Used in conjunction with our fraud detection systems to identify unusual session patterns, bot activity, or attempts to access the Platform from prohibited jurisdictions.

Data Retention

bbd11 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or our gaming licence obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your registered account relationship with bbd11, plus a minimum of 5 years following account closure — consistent with AML regulatory requirements applicable to online gaming operators.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later.
• Customer Support Communications: Records of support interactions are retained for 2 years from the date of each interaction unless a longer retention period is required by an ongoing dispute or investigation.
• Analytics Data: Anonymised usage and analytics data may be retained indefinitely for Platform improvement purposes. Such data cannot be used to identify individual players.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Requests for early deletion of personal data are addressed in Section 10 of this Policy.

International Data Transfers

bbd11 operates in an international gaming environment and, as a result, your personal data may be transferred to and processed in countries other than Malaysia. This may occur when we use IT infrastructure providers, payment processors, or KYC service providers located outside Malaysia.

Where personal data is transferred internationally, bbd11 takes appropriate steps to ensure that such transfers are carried out in accordance with applicable data protection standards. These steps include, where applicable, the use of contractual clauses approved under relevant data protection frameworks, and verification that recipient entities maintain adequate security and privacy standards.

Your Data Rights

As a bbd11 player, you hold a number of rights in relation to your personal data. bbd11 is committed to respecting and facilitating the exercise of these rights. All requests are handled within 30 days of receipt.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We may require verification of your identity before processing any data rights request to protect against unauthorised access to account information.

Children's Privacy

The bbd11 Platform is strictly intended for adults aged 21 years and above. bbd11 does not knowingly collect personal data from any person under the age of 21. Registration is blocked for individuals who declare a date of birth indicating they are under 21 at the time of registration.

If bbd11 discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, it will immediately suspend the relevant account, delete the associated personal data to the extent not prohibited by law, and notify the relevant authorities where appropriate.

Security Measures

bbd11 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bbd11 Platform is encrypted in transit using industry-standard TLS protocols, the same standard applied by licensed Malaysian financial institutions.
• Encrypted Data Storage: Personal and financial data stored on bbd11 servers is encrypted at rest. Database access is subject to multi-layer authentication and role-based access controls.
• Access Controls: Access to personal data is restricted to authorised bbd11 personnel who require it to perform their job functions. All access is logged and subject to regular audit review.
• Intrusion Detection: bbd11's infrastructure is monitored continuously for suspicious access patterns, potential breaches, and anomalous system activity.
• Staff Training: All bbd11 employees and contractors who handle personal data are trained in data protection obligations and confidentiality requirements.
• Incident Response: bbd11 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

Amendments to This Policy

bbd11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will provide reasonable advance notice to registered players — typically by email notification or a prominent notice on the Platform — with a minimum of 14 days before the updated Policy takes effect.

Your continued use of the bbd11 Platform after an updated Privacy Policy has taken effect constitutes your acceptance of the revised terms. We recommend that you review this Policy periodically to stay informed of any changes.

The date at the top of this Policy reflects the date it was last reviewed and updated. Previous versions of this Privacy Policy may be requested by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bbd11's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the bbd11 Platform. Best for urgent account-related queries or time-sensitive data requests.
• Email: [email protected] — please include your registered username, the nature of your request, and any relevant supporting details. We aim to respond within 2 business days for general enquiries and within 30 calendar days for formal data rights requests.

bbd11 takes all privacy enquiries seriously and will make every reasonable effort to resolve your concern promptly and transparently. If you are not satisfied with our response to a data protection complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.