1 Introduction
bbo303 is an English-language casino and sports entertainment information platform directed at adult users in Malaysia. We respect the privacy of every person who visits or interacts with our website. This Privacy Policy describes how we may collect, process and protect personal information and what choices are available to users who wish to exercise control over their data.
The policy covers bbo303's own data handling practices. It does not extend to third-party payment providers, game studios, sports data suppliers or any other external service that may be referenced or linked within bbo303. Users should consult the applicable third-party privacy documentation for those services directly.
2 Definitions
- Personal Data means any information that identifies or can reasonably identify a living individual, either alone or in combination with other information.
- Processing means any operation performed on personal data, including collection, storage, use, retrieval, disclosure, erasure or destruction.
- Data Controller means the entity that determines the purposes and manner of processing personal data — in this context, bbo303.
- User means any person who accesses bbo303, whether or not they hold a registered account.
- KYC means Know Your Customer procedures designed to verify identity, age, address and payment ownership.
- Cookies means small text files stored on a device to recognise returning users and support website functionality.
3 Data We Collect
bbo303 may collect personal data through direct input, automated technical means, or both, depending on how a user interacts with the website. The categories below describe what may be collected and in what circumstances.
| Category |
Examples |
Collection Context |
| Identity Data |
Full name, date of birth, nationality |
Registration, KYC verification |
| Contact Data |
Email address, phone number, city |
Account setup, support contact |
| Document Data |
Identity card, passport, proof of address |
KYC completion, withdrawal verification |
| Financial Data |
Bank name, e-wallet account, transaction history |
Deposits, withdrawals, MYR account management |
| Usage Data |
Pages visited, session duration, game activity |
Automated on website access |
| Technical Data |
IP address, device type, browser, operating system |
Automated on website access |
| Communication Data |
Support chat transcripts, email correspondence |
User-initiated contact with bbo303 |
4 How We Use Your Data
bbo303 uses personal data only for clear and legitimate purposes, including:
- verifying the identity, age and address of account holders for KYC compliance;
- processing MYR deposit and withdrawal transactions via supported methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong;
- delivering customer support and responding to account, payment or technical queries;
- maintaining account security, detecting suspicious access and investigating apparent fraud;
- administering loyalty programmes, VIP tiers and promotional benefits under applicable conditions;
- monitoring and enforcing responsible gambling controls, including deposit limits, session reminders and self-exclusion;
- improving website performance, navigation structure and content relevance based on aggregated usage patterns; and
- fulfilling any applicable legal, regulatory or audit obligation where disclosure or retention is required.
bbo303 does not sell, rent or trade personal data for commercial gain to unrelated third parties.
5 Legal Basis for Processing
bbo303 processes personal data on one or more of the following bases, depending on the category and purpose of use:
- Contract performance: processing necessary to operate an account, settle a transaction or provide a requested service.
- Legal obligation: processing necessary to comply with identity verification, anti-money-laundering, age-restriction or audit requirements.
- Legitimate interest: processing for fraud prevention, platform security, responsible gambling monitoring and service improvement, where such use does not override user rights.
- Consent: where bbo303 seeks a user's specific agreement before processing, such as optional marketing communication, that consent may be withdrawn at any time without affecting prior lawful processing.
6 Data Sharing and Disclosure
bbo303 may share personal data with selected third parties only where there is a clear, proportionate reason and appropriate safeguards are in place. Potential recipients include:
- Payment processors: Malaysian banking institutions, FPX network participants, e-wallet operators and other payment service providers necessary to complete a deposit or withdrawal transaction.
- Identity and fraud verification services: providers engaged to validate KYC documents, confirm address details or assess account risk.
- Technology and infrastructure providers: hosting, content delivery, security monitoring and analytics vendors who process data only under bbo303's instruction and applicable confidentiality obligations.
- Legal and regulatory authorities: courts, regulators, law enforcement agencies or other bodies where disclosure is required by applicable law or a lawful order.
bbo303 does not disclose personal data to unrelated advertising networks, data brokers or businesses whose activity is unconnected to the provision of bbo303 services.
7 Cookies and Tracking Technologies
bbo303 may use cookies and similar technologies to support essential website functions, recognise returning devices, retain session state and collect aggregated usage statistics. Categories of cookies that may be deployed include:
- Essential cookies: required for basic navigation, login session maintenance and security. These cannot be disabled without disrupting core functionality.
- Analytical cookies: used to understand page performance, user journey patterns and feature engagement. Data is aggregated and not used to identify individuals directly.
- Preference cookies: used to remember user display choices, language settings or session preferences across visits.
Users may manage or restrict non-essential cookies through their browser settings. Disabling certain cookies may affect aspects of the bbo303 experience. A first visit to bbo303 may present a cookie notice where applicable settings can be reviewed.
8 Data Retention
Personal data held by bbo303 is retained only as long as it is necessary for the purpose for which it was collected, or as required to meet a legal or audit obligation. Retention periods will typically reflect the following:
- Account and identity records may be retained for the duration of an account's existence and for a defined period after closure, reflecting applicable anti-money-laundering and record-keeping requirements.
- Transaction records, including MYR deposit and withdrawal history, may be retained to support account reconciliation, dispute resolution and financial reporting obligations.
- Support communications may be retained long enough to resolve the related query and any resulting follow-up, and thereafter as needed for training or quality assurance purposes.
- Technical and usage data may be retained in aggregate or anonymised form for operational analysis after the relevant individual-level retention period has expired.
When personal data is no longer required, bbo303 will take reasonable steps to delete or anonymise it securely.
9 Security Measures
bbo303 applies technical and organisational measures to reduce the risk of unauthorised access, loss, alteration or disclosure of personal data. These measures may include SSL encryption for data in transit, access controls that limit internal data visibility on a need-to-know basis, session timeout procedures and security monitoring intended to detect anomalous activity.
No internet transmission or electronic storage system is entirely secure. Users can strengthen personal data security by choosing a strong unique password, not sharing credentials with others, logging out on shared devices and notifying bbo303 support promptly if suspicious account activity is suspected.
Never share your bbo303 password, banking PIN or one-time verification code with anyone, including persons claiming to represent bbo303 support. bbo303 personnel will not request these details through any channel.
10 User Rights
Subject to applicable law, bbo303 users may hold the following rights in respect of their personal data:
- Right of access: to request confirmation of whether bbo303 holds personal data about you and, where so, to receive a description of that data and its use.
- Right to rectification: to request correction of inaccurate or incomplete personal data held by bbo303.
- Right to erasure: to request deletion of personal data where it is no longer necessary, consent has been withdrawn or another lawful ground applies, subject to any overriding legal retention obligation.
- Right to restrict processing: to request a temporary suspension of certain processing activity while an accuracy dispute or objection is assessed.
- Right to object: to object to processing based on legitimate interest, including profiling, where your particular situation justifies the objection.
- Right to data portability: where technically feasible and legally applicable, to receive personal data in a structured, commonly used format.
- Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact bbo303 using the support email listed in Section 14. Identity verification may be required before a request is processed. bbo303 will endeavour to respond within a reasonable timeframe.
11 Children and Age Restriction
bbo303 casino-style entertainment is intended exclusively for persons aged 21 and above. bbo303 does not knowingly collect personal data from persons under 21 years of age. If bbo303 becomes aware that data from an underage individual has been submitted, that data will be deleted and the associated account will be closed.
Parents and guardians who believe a minor has submitted personal information to bbo303 should contact support immediately. Include a clear description of the concern so that the matter can be addressed promptly.
12 Third-Party Links and Services
bbo303 may refer to third-party payment providers, game studios, sports data sources and support platforms. These external services operate under their own independent privacy policies. bbo303 is not responsible for the data practices of any third party and cannot guarantee their compliance with applicable privacy requirements.
Users transacting through Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay or any other supported payment method should review the relevant provider's data terms before completing a transaction.
13 Changes to This Privacy Policy
bbo303 may update this Privacy Policy when services change, new data categories are introduced, legal requirements are revised or operational practices evolve. The current version will always appear on this page together with its effective date.
Continued use of bbo303 after a policy update indicates acceptance of the revised terms where applicable. Where a change is material and concerns how user data is processed in a manner that affects existing rights, bbo303 will take reasonable steps to bring the update to users' attention.
14 Contact Us
For questions about this Privacy Policy, to submit a data rights request, or to report a suspected data security concern, please contact bbo303 using the details below. Include a concise description of your request or concern together with any relevant account or transaction reference.
Website email:
[email protected]
The email address above is displayed as plain text and is not a clickable link. Please do not include passwords, banking PINs or one-time security codes in any correspondence.