SUMMARY: bc55 collects your personal data to operate your account, process payments, comply with legal obligations, and improve the platform. We do not sell your personal data to third parties. You have the right to access, correct, and request deletion of your data. This policy explains everything in detail below.
1 Introduction
This Privacy Policy ("Policy") describes how bc55 ("bc55", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of users ("Player", "User", "you") of the bc55 online gaming platform accessible at bc55.one and any associated services (collectively, the "Platform").
bc55 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection laws. This Policy is intended to give you a clear and complete understanding of our data practices so that you can make informed decisions about your use of the bc55 Platform.
This Policy is incorporated by reference into bc55's Terms & Conditions. By registering an account or using the bc55 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
2 Personal Data We Collect
bc55 collects personal data in the categories set out below. The specific data collected in each category depends on how you interact with the Platform and which bc55 services you use.
| Category |
Data Collected |
| Identity Data |
Full legal name, date of birth, gender, nationality, government-issued identification number (MyKad, passport number) |
| Contact Data |
Email address, Malaysian mobile phone number, residential address |
| Financial Data |
Bank account details (account number, bank name), e-wallet identifiers (Touch n Go, Boost), transaction history, deposit and withdrawal records |
| KYC Documentation |
Copies of government-issued identity documents, proof of address, selfie or facial verification image submitted during identity verification |
| Technical Data |
IP address, device type, operating system, browser type and version, screen resolution, session duration, login timestamps |
| Usage Data |
Games played, betting history, wager amounts, win/loss records, session activity logs, feature usage patterns |
| Communications Data |
Records of support chat transcripts, emails sent to bc55, feedback submitted through the Platform |
| Marketing Preferences |
Opt-in or opt-out status for promotional communications, preferred contact channel |
Special Category Data: bc55 may collect data that could be considered sensitive in the context of responsible gaming, such as information about self-exclusion requests or problem gambling indicators, solely for the purpose of fulfilling responsible gaming obligations and protecting player welfare.
3 How We Collect Your Data
bc55 collects personal data through the following means:
- Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting bc55 support, or filling in any form on the Platform.
- Automated collection: Technical and usage data collected automatically as you interact with bc55.one, including through server logs, session tracking, and cookies (see Section 7).
- Third-party sources: Data received from payment processors (FPX, Touch n Go, Boost, DuitNow), identity verification service providers, fraud prevention partners, and analytics platforms — all of which operate under data processing agreements with bc55.
- Regulatory sources: Data received from licensing authorities, financial intelligence units, or law enforcement agencies in connection with bc55's legal and regulatory obligations.
4 Legal Basis for Processing
bc55 processes your personal data under the following legal bases:
- Contractual necessity: Processing required to provide the bc55 Platform, operate your account, process transactions, and deliver gaming services you have subscribed to.
- Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) requirements, KYC regulations, financial reporting obligations, and gaming licence conditions.
- Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming risk management, where those interests are not overridden by your privacy rights.
- Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time by updating your marketing preferences within your bc55 account settings.
5 How We Use Your Personal Data
bc55 uses the personal data we collect for the following purposes:
- To create, verify, and administer your bc55 account, including identity verification under KYC requirements.
- To process MYR deposits and withdrawals via your selected payment method and to maintain accurate financial records of all transactions.
- To operate and deliver bc55's gaming and sports betting services, including recording betting history and calculating winnings.
- To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct under bc55's Terms & Conditions.
- To comply with AML obligations, including transaction monitoring, suspicious activity reporting, and record-keeping requirements under bc55's regulatory obligations.
- To provide customer support and resolve disputes, account queries, and complaints.
- To enforce responsible gaming obligations, including monitoring for problem gambling indicators and administering self-exclusion and deposit limit tools.
- To send you transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.
- To send marketing communications where you have opted in, including information about promotions, new games, and special offers relevant to Malaysian players.
- To improve bc55's Platform through analysis of anonymised or aggregated usage data.
6 Data Sharing & Disclosure
bc55 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:
- Payment processors: FPX, Touch n Go eWallet, Boost, DuitNow, Maybank, CIMB, Public Bank, and other payment service providers, for the sole purpose of processing your transactions.
- Identity verification providers: Third-party KYC and biometric verification services that assist bc55 in confirming player identity and age as required by our licensing obligations.
- Fraud and AML partners: Service providers that assist bc55 in detecting and preventing financial crime, operating under data processing agreements and applicable privacy law.
- Regulatory and legal authorities: Gaming regulators, financial intelligence units, law enforcement, and courts, where disclosure is required or permitted by applicable law, or where bc55 has a legal obligation to report.
- Technology and infrastructure providers: Cloud hosting, content delivery, and platform infrastructure providers who process data on bc55's behalf under strict data processing agreements.
- Professional advisers: Legal, accounting, and audit firms, where necessary, subject to professional confidentiality obligations.
All third parties with whom bc55 shares personal data are contractually required to implement appropriate data security measures and to use the data only for the specific purpose for which it was shared.
7 Cookies & Tracking Technologies
bc55 uses cookies and similar tracking technologies on bc55.one to operate the Platform, maintain your session, and improve your experience. The categories of cookies used by bc55 are as follows:
- Strictly necessary cookies: Essential for the operation of bc55.one, including session management, login state maintenance, and security functions. These cannot be disabled as they are required for the Platform to function.
- Functional cookies: Used to remember your preferences, such as language settings, and to provide a more personalised experience on bc55.
- Analytics cookies: Used to collect anonymised data about how players interact with bc55.one, allowing us to identify areas for improvement and measure the effectiveness of Platform changes. Data collected is aggregated and does not identify individual players.
- Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.
You may manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of bc55.one and may prevent you from logging in or accessing your account.
8 Data Retention
bc55 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:
- Account and KYC records: Retained for the duration of the account and for a minimum of five (5) years following account closure, as required by AML and gaming regulatory obligations.
- Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction.
- Responsible gaming records (including self-exclusion records): Retained for the duration of any exclusion period plus a minimum of five (5) years to prevent re-registration during active exclusion periods.
- Support and communication records: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute resolution or regulatory compliance.
- Marketing preference records: Retained until you withdraw consent, at which point marketing activities cease promptly. Suppression records are maintained to prevent inadvertent re-contact.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bc55's data lifecycle management procedures.
9 Security Measures
bc55 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption: All data transmitted between your device and bc55.one is encrypted using TLS 1.3 with 256-bit SSL encryption. Data stored on bc55's systems is encrypted at rest using industry-standard encryption algorithms.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. bc55 staff with access to player data are subject to background checks, confidentiality agreements, and regular security training.
- Authentication: bc55's internal systems require multi-factor authentication for staff access. Player accounts support SMS OTP two-factor authentication as an additional layer of account security.
- Monitoring: bc55 operates continuous security monitoring to detect and respond to potential breaches, intrusion attempts, and anomalous access patterns.
- Vendor assessment: Third-party service providers with access to personal data are subject to security due diligence before engagement and ongoing compliance monitoring.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bc55 will notify you and applicable regulatory authorities in accordance with applicable data protection law.
10 Your Data Rights
Subject to applicable law and certain limitations, you have the following rights in relation to the personal data bc55 holds about you:
- Right of access: You may request a copy of the personal data bc55 holds about you, together with information about how it is used and with whom it is shared.
- Right to rectification: You may request correction of any inaccurate or incomplete personal data. Many data fields can be updated directly within your bc55 account settings.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bc55's legal retention obligations (see Section 8).
- Right to restriction: You may request that bc55 restricts the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
- Right to data portability: You may request that bc55 provides your personal data in a structured, commonly used, machine-readable format.
- Right to object: You may object to the processing of your personal data where bc55 relies on legitimate interests as the legal basis, subject to bc55's ability to demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of the above rights, please contact bc55's data team at [email protected] with the subject line "Data Rights Request". bc55 will respond to all valid requests within 30 calendar days. Complex requests may require an additional 30-day extension, in which case you will be notified.
11 International Data Transfers
bc55 operates internationally and your personal data may be transferred to, stored in, or processed in countries outside Malaysia. Where such transfers occur, bc55 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by applicable Malaysian data protection law.
Safeguards used for international transfers may include: standard contractual clauses approved by competent regulatory authorities; transfers to countries with an adequate level of data protection as determined by relevant supervisory authorities; or other approved transfer mechanisms.
Note: Payment processing partners such as Maybank, CIMB, and Public Bank operate primarily within Malaysia and are subject to Bank Negara Malaysia's data protection and financial sector regulations. Data shared with Malaysian-based partners remains within Malaysian jurisdiction.
12 Children's Privacy & Age Restriction
bc55 is strictly an adults-only platform. The minimum age for registration and use of bc55 is 21 years. bc55 does not knowingly collect personal data from individuals under the age of 21.
Age verification is conducted as part of bc55's KYC process. Where bc55 determines or has reason to believe that an account is held by a person under 21, the account will be suspended immediately, all personal data associated with that account will be reviewed, and the matter will be handled in accordance with bc55's underage gambling prevention procedures.
If you are a parent or guardian and believe that a minor has provided personal data to bc55 or has created an account on bc55, please contact bc55 support immediately at [email protected].
13 Updates to This Privacy Policy
bc55 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. The date at the top of this Policy reflects the date it was last revised.
Where changes are material — meaning they affect how bc55 uses your data in a way that may be unexpected or unfavourable to you — bc55 will notify you via the email address associated with your bc55 account and/or via a prominent notice on the Platform prior to the changes taking effect. Continued use of bc55 following the effective date of revised Terms constitutes your acceptance of the updated Policy.
14 Contact & Data Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or bc55's data practices, please contact our data team using the following details:
Email: [email protected] (subject line: "Privacy Enquiry")
Response time: We aim to respond to all privacy-related enquiries within 5 business days and all formal data rights requests within 30 calendar days.
If you are not satisfied with bc55's response to your privacy enquiry, you have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction.