Content
At biji88, your privacy is more than a legal obligation — it is our responsibility to every member who trusts this platform. From the moment you register through every gaming session you enjoy, we ensure your personal information is protected using the latest security technology and responsible data management practices.
This Privacy Policy is drafted in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia, and clearly explains what information we collect, why we need it, how we store it, and what your rights are as the owner of that data. We encourage you to read this document carefully so you fully understand how biji88 handles your data.
Why Your Privacy Is Safe with biji88
256-bit SSL Encryption
All data transmitted between your device and biji88 servers is protected by 256-bit SSL encryption — the same level of security used by major banks in Malaysia.
No Data Sales
Biji88 has never and will never sell, rent, or trade your personal data to any advertiser or commercial third party for marketing purposes.
You Are in Control
You may view, update, or request deletion of your personal data at any time via your account settings or by contacting our support team.
Malaysia PDPA Compliance
All data management operations at biji88 comply with Malaysia's Personal Data Protection Act 2010 — you are protected by applicable local law.
Restricted & Controlled Access
Only specifically authorised biji88 staff may access members' personal data, and every access is recorded in an audit log monitored on a regular basis.
Breach Notification
In the event of any security incident involving your data, biji88 will notify you within 72 hours in accordance with industry best practices.
1Information We Collect
To enable biji88 to provide a safe, personalised, and legally compliant service, we need to collect certain categories of information from you. Below is a full explanation of the data we collect and the reasons for doing so:
1.1 Information You Provide Directly
- Registration information: Full name, date of birth, identification card number (MyKad), email address, mobile number, and the password you set when registering your account.
- KYC (Know Your Customer) Documents: Copies of identity documents, bank statements, utility bills, or other documents required to verify your identity for anti-money laundering (AML) compliance purposes.
- Payment information: Bank account number, account holder name, and bank name you registered for deposits and withdrawals. We do not store your full credit or debit card number.
- Communications with us: Records of live chat conversations, emails, or any feedback you have submitted to the biji88 support team.
1.2 Information Collected Automatically
- Technical data: IP address, device type, operating system, web browser version, and screen resolution used when accessing the biji88 platform.
- Gaming activity data: Game records, total wagering amounts, wins, losses, and session durations for audit and responsible gaming monitoring purposes.
- Transaction data: Complete history of deposits, withdrawals, and bonus usage in your account.
- Location data: General location information based on your IP address to verify that you are accessing the platform from a permitted region.
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity | Name, MyKad, date of birth | Account Verification & KYC |
| Contact | Email, phone number | Account communication & security |
| Finance | Bank account number | Deposit & withdrawal processing |
| Technical | IP address, device type | Security & fraud prevention |
| Games | Betting history, active sessions | Responsible gaming & audit |
2How We Use Your Data
Biji88 uses the information collected solely for legitimate and necessary purposes. We do not use your data for any purpose not stated in this policy:
- Account Management: Creating, verifying, and maintaining your member account so you can log in, play, and manage your funds securely.
- Financial transaction processing: Processing deposits and withdrawals accurately and promptly to the bank account or e-wallet you have registered.
- Fraud prevention & security: Identifying and blocking suspicious activity such as multiple account registrations, intrusion attempts, or the use of illicit funds.
- Legal compliance: Fulfilling obligations under the Personal Data Protection Act 2010 (PDPA), anti-money laundering laws (AMLA), and directives from relevant authorities.
- Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and reaching out to you when necessary, for your well-being.
- Service improvement: Analysing usage data in aggregate (without identifying individuals) to improve the platform's interface, speed, and overall experience.
- Service communications: Sending important notifications related to your account, transactions, promotions you have opted into, and required policy updates.
3Data Storage & Security
3.1 Security Infrastructure
All personal data of biji88 members is stored on servers protected by multiple layers of security. Our infrastructure includes:
- Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
- Data encryption at rest using AES-256.
- A web application firewall (WAF) that monitors and blocks malicious traffic in real time.
- Intrusion detection systems (IDS/IPS) operating 24 hours a day, 7 days a week.
- Daily automatic data backups stored at geographically separate locations.
- Periodic penetration testing by independent security auditors.
3.2 Access Controls
Access to members' personal data within biji88's internal systems is subject to strict controls based on the principle of least privilege. Each staff member may only access data required to carry out their duties, and every access is logged in an audit trail reviewed regularly by our internal security team.
4Information Sharing with Third Parties
Biji88 respects your privacy and will not share your personal information with third parties except in the following legitimate and necessary circumstances:
- Payment service providers: Required transaction information is shared with licensed payment gateways such as FPX, Touch 'n Go, and GrabPay solely for the purpose of processing your deposits and withdrawals.
- Technology service providers: Cloud and security infrastructure providers that have signed strict confidentiality agreements with biji88 and are not permitted to use your data for their own purposes.
- Legal authorities: When required by Malaysian law, court order, investigation by a law enforcement agency, or a regulatory body with valid jurisdiction.
- Fraud prevention bodies: Required information may be shared with recognised industry fraud prevention organisations to protect the online gaming ecosystem from shared threats.
5Cookies & Tracking Technologies
Biji88 uses cookies and similar tracking technologies to enhance your user experience and ensure session security. The following are the types of cookies we use:
5.1 Mandatory Cookies
These cookies are required for core platform functions such as maintaining your login session, remembering language settings, and securing every request. Without them, the platform will not function properly. These cookies cannot be disabled.
5.2 Performance Cookies
These cookies help us understand how members interact with the platform — which pages are visited most often, how long they spend on each, and where technical issues occur. This information is used in aggregate and without identifying individuals to improve platform performance.
5.3 Functional Cookies
These cookies remember your preferences such as your preferred language, favourite game types, and display settings so you do not need to reconfigure them every time you log in. You may opt out of these cookies, though some platform features may not function fully as a result.
6Your Privacy Rights
As a biji88 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:
To exercise any of the above rights, contact our Data Privacy Officer at [email protected]. We will process your request within 14 working days and notify you of the action taken. Certain requests, such as data deletion, may require additional identity verification before they are processed.
7Children's Data
The biji88 platform is strictly restricted to individuals aged 18 years and above. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.
Should we find that personal data of an individual under the age of 18 has been inadvertently collected through fraudulent registration, we will take immediate action to delete all such data and close the relevant account. Parents or guardians who discover that their minor child has registered on the biji88 platform are requested to contact us immediately at [email protected].
8Cross-Border Data Transfers
In operating the biji88 platform, some personal data may be processed or stored on servers located outside Malaysia, particularly for data backup and cloud infrastructure purposes. In every instance of cross-border data transfer, biji88 ensures:
- The destination country or region has data protection laws equivalent to or stricter than those of Malaysia.
- Legally binding data transfer agreements have been signed with all service providers outside Malaysia.
- Appropriate technical measures, including end-to-end encryption, are applied whenever cross-border data transfers occur.
- You will be notified if any significant changes occur to the location where your data is stored.
9Data Retention Period
Biji88 does not retain your personal data longer than necessary for the purposes stated in this policy. The following is a general guide to our data retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | Throughout the active account period | Ongoing service management |
| KYC Records | 7 years after account closure | AMLA & PDPA Compliance |
| Financial transaction records | 7 years | Financial legal requirements |
| Support communication logs | 3 years | Service reference & disputes |
| Non-mandatory cookie data | Up to 12 months | Platform performance analytics |
| Game activity logs | 5 years | Audit & responsible gaming |
Once the retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.
10Changes to This Privacy Policy
Biji88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in law, technology, or the way we operate our services. When significant changes are made, we will:
- Displaying a clear notice on the biji88 platform homepage at least 14 days before changes take effect.
- Sending email notifications to all registered members with an active email address in our system.
- Updating the "Last Updated" date shown at the top of this document.
- Maintaining an archive of previous versions of this Privacy Policy for at least 12 months for your reference.
Your continued use of the biji88 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your data before the changes take effect.