1. Introduction
bc8 ("the Platform", "we", "us", "our") operates the online gaming and sports-betting website accessible at bc8.cam ("the Website"). In the course of providing our services to registered users ("you", "the Player", "the Data Subject"), bc8 collects and processes certain categories of personal information. We take this responsibility seriously.
This Privacy Policy issued in accordance with internationally recognised data protection principles, including those reflected in the Personal Data Protection Act 2010 of Malaysia (PDPA 2010) and other applicable frameworks governing online service providers. It describes our practices in relation to the collection, use, storage, sharing, and deletion of personal data associated with your Account and your use of the Website.
By registering an Account or continuing to use the Website, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. Where processing is based on consent, you retain the right to withdraw that consent at any time, as set out in Section 11.
This Policy should be read together with our Terms & Conditions, which govern the overall contractual relationship between bc8 and its players. Capitalised terms not defined here carry the meanings assigned in the Terms & Conditions.
2. Definitions
The following definitions apply throughout this Privacy Policy.
| Term |
Meaning |
| Personal Data |
Any information that relates to an identified or identifiable natural person, including name, contact details, financial information, and device identifiers. |
| Processing |
Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| Data Controller |
bc8, which determines the purposes and means by which Personal Data is processed in connection with the Website. |
| Data Processor |
A third party that processes Personal Data on behalf of bc8 under a contractual data-processing arrangement. |
| KYC Data |
Identity and age-verification documentation collected as part of the Know Your Customer process, including government-issued identification such as a MyKad or passport. |
| Cookie |
A small data file placed on your device by the Website or a third-party service, used to maintain session state, record preferences, or gather analytics. |
| Sensitive Data |
A subset of Personal Data that warants heightened protection, including financial account details, identity document numbers, and any data revealing health, biometric, or comparable information. |
3. Data We Collect
3.1 Account Registration Data
When you create an Account, we collect the information you provide in the registration form, which may include your chosen username, email address, mobile phone number, date of birth, and country or city of residence (for example, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam).
3.2 Identity Verification (KYC) Data
To comply with age-verification requirements and to protect the integrity of our payment processes, we collect identity documents submitted during KYC verification. These may include scans or photographs of a Malaysian Identity Card (MyKad), passport, or other government-issued documentation, alongside selfie or liveness data where required by our verification workflow.
3.3 Financial and Transaction Data
We record deposits, withdrawals, and in-platform transactions including the payment method used (such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX via Maybank / CIMB / Public Bank, or USDT TRC20), amounts in MYR or equivalent, timestamps, and transaction reference numbers. We do not store full card numbers or complete e-wallet account credentials on our servers; payment processors handle sensitive financial credentials directly.
3.4 Usage and Behavioural Data
We collect information about how you interact with the Website, including pages visited, games played, bets placed, session durations, search queries within the platform, and click-path data. This information helps us personalise your experience and identify potential responsible-gambling concerns.
3.5 Technical and Device Data
- IP address and approximate geolocation derived therefrom
- Browser type, version, and language settings
- Operating system and device model
- Referring URL and exit page
- Cookie identifiers and session tokens
3.6 Communications Data
We retain records of your communications with the bc8 support team via live chat, email ([email protected]), and any messaging channel associated with your Account. These records are used to resolve disputes, improve service quality, and meet compliance obligations.
3.7 Responsible Gambling Data
Where you voluntarily submit responsible-gambling information — such as self-imposed deposit limits, loss limits, or a self-exclusion request — we record and act upon that information. This data category receives the highest level of access restriction within our systems.
4. How We Collect Data
bc8 collects Personal Data through the following channels:
| Collection Method | Description |
|---|
| Direct Submission |
Information you enter during registration, KYC upload, payment transactions, responsible-gambling tool activation, and support interactions. |
| Automated Technical Collection |
Server logs, cookies, pixel tags, and similar technologies that record device and usage data when you access the Website. |
| Third-Party Payment Processors |
Transaction outcome data returned by payment gateways following deposit or withdrawal events. We do not receive raw financial credentials from these processors. |
| Identity Verification Providers |
Verification results and risk signals returned by KYC technology partners following document and liveness checks. Underlying document images are subject to the retention terms of those providers. |
| Fraud Prevention and Analytics Services |
Risk scoring and device-fingerprint data received from contracted fraud-prevention partners to assist in detecting and preventing prohibited account activity. |
5. Purposes of Processing & Legal Basis
bc8 processes your Personal Data only where a lawful basis exists. The primary purposes and their respective bases are set out below.
| Purpose | Lawful Basis |
|---|
| Account creation and management |
Performance of contract — necessary to deliver the services you have requested. |
| Age and identity verification (KYC) |
Legal obligation and contractual necessity — required to enforce eligibility criteria and meet anti-moneylaundering expectations. |
| Processing deposits and withdrawals |
Performance of contract — necessary to execute the financial transactions you have initiated. |
| Customer support and dispute resolution |
Performance of contract and legitimate interest — necessary to handle complaints and resolve account issues. |
| Fraud detection and security monitoring |
Legitimate interest — to protect the Platform, its players, and the integrity of financial transactions. |
| Responsible gambling monitoring |
Legal obligation and legitimate interest — to fulfil duty-of-care obligations and give effect to voluntary self-restriction tools. |
| Platform personalisation and product improvement |
Legitimate interest — to develop relevant features and improve user experience. |
| Marketing communications (where opted in) |
Consent — only where you have actively opted in to receive promotional messages. You may withdraw consent at any time. |
Where processing is based on legitimate interest, bc8 has assessed that our interests do not override your fundamental privacy rights. If you wish to object to processing based on legitimate interest, see Section 11 (Your Rights).
6. Data Sharing & Disclosure
bc8 does not sell, rent, or otherwise trade your Personal Data with third parties for their own independent commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:
- Payment Service Providers E-wallet operators (Touch 'n Go, Boost, GrabPay), FPX banking networks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency infrastructure services receive transaction data necessary to execute and confirm payments. Each operates under its own privacy terms.
- Identity Verification Providers KYC technology partners receive identification documents and liveness data to perform age and identity checks. Results are returned to bc8; underlying documents are handled under the retention policies of those providers.
- Fraud Prevention and Compliance Services Contracted third parties that provide device-fingerprinting, IP analysis, and risk-scoring services to assist bc8 in detecting prohibited activity and protecting player accounts.
- Customer Support Infrastructure Live-chat and ticketing platform providers that facilitate our support operations. These processors operate under data-processing agreements with bc8 and may not use your data independently.
- Legal and Regulatory Authorities Where bc8 is required by a lawful order, court judgment, licensing obligation, or other applicable legal instrument to disclose Personal Data, we will comply. We will, where legally permitted, notify the affected player of such a disclosure.
- Business Successors In the event of a merger, acquisition, or transfer of bc8's business operations, Personal Data may be transferred to a successor entity, subject to the same or equivalent privacy protections.
7. International Data Transfers
bc8 operates as an internationally facing platform. Your Personal Data may therefore be stored or processed on servers located outside Malaysia, including the licensing jurisdiction of the Platform and in territories where our contracted service providers maintain infrastructure.
Where Personal Data is transferred outside Malaysia, bc8 takes reasonable steps to ensure that appropriate protections are in place, which may include contractual data-transfer clauses, standard contractual provisions, or assessments of the adequacy of data protection in the recipient country. These safeguards are intended to ensure that your data receives a level of protection consistent with the principles underlying Malaysia's Personal Data Protection Act 2010.
By creating an Account on the Website, you acknowledge and consent to the possible transfer of your Personal Data to jurisdictions outside Malaysia, subject to the protections described in this Section.
8. Data Retention
bc8 retains Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and licensing obligations. The following indicative retention periods apply:
| Data Category | Indicative Retention Period |
|---|
| Account registration and profile data |
Duration of active Account plus 5 years following permanent closure |
| KYC identity documents |
5 years from submission or as required by applicable licensing obligations, whichever is longer |
| Financial transaction records |
7 years from the date of each transaction, consistent with financial record-keeping norms |
| Customer support communications |
3 years from the date of each communication, unless required longer for dispute resolution |
| Responsible gambling records (limits, exclusions) |
Duration of Account plus a minimum of 5 years to support reactivation and re-exclusion decisions |
| Marketing consent records |
3 years from the date of the last confirmed consent or opt-out event |
| Server log and technical data |
90 days in active logs; extended retention in anonymised form for security analysis |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data may be retained indefinitely for statistical and product-improvement purposes, as it can no longer be linked to an identifiable individual.
9. Cookies & Tracking Technologies
9.1 What We Use
The Website uses cookies, web beacons, local storage, and similar tracking technologies. These serve a range of functions, from maintaining your login session to collecting aggregated analytics data that helps us understand how players use bc8.
9.2 Cookie Categories
- Essential Cookies — Required for the Website to function. They manage session authentication, security tokens, and your language preferences. These cannot be disabled without impairing Website functionality.
- Analytics Cookies — Used in aggregated, non-personally-identifiable form to understand page performance, user flows, and feature adoption. Analytics data guides product improvements.
- Functional Cookies — Remember your preferences such as display settings and previously selected options to improve your experience on return visits.
- Marketing Cookies — Only set where you have consented to receive personalised communications or targeted promotions. These may involve third-party advertising infrastructure.
9.3 Managing Cookies
You may manage or disable cookies that are not strictly essential through your browser settings. Note that disabling certain cookies may affect the availability or performance of some Website features. Browser-level controls are the primary mechanism for cookie management; where applicable, we will also present a consent management interface for non-essential cookies.
10. Security Measures
bc8 implements a layered approach to information security, combining technical controls, operational procedures, and access governance to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction.
- Encryption in Transit — All data exchanged between your browser and bc8 servers is transmitted over TLS-encrypted connections (HTTPS). Outdated or insecure cipher suites are disabled.
- Encryption at Rest — Sensitive Personal Data stored in our databases — including KYC records and financial information — is encrypted at the storage layer.
- Access Controls — Internal access to Personal Data is restricted on a role-based, need-to-know basis. Administrative access requires multi-factor authentication and is subject to audit logging.
- Penetration Testing & Audits — We conduct periodic security assessments to identify and remediate vulnerabilities in the Website and its infrastructure.
- Incident Response — A documented incident-response plan is maintained. In the event of a Personal Data breach that is likely to result in a risk to your rights, we will notify affected players and, where required, relevant authorities within the timeframes prescribed by applicable law.
No transmission over the internet or method of electronic storage is completely secure. While bc8 applies strong technical and organisational safeguards, we cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your Account password and for notifying us immediately if you suspect any unauthorised access.
11. Your Rights as a Data Subject
Subject to applicable law and verification of your identity, you hold the following rights in relation to your Personal Data held by bc8. Requests may be submitted via live chat or by email to [email protected].
Right of Access
Request a copy of the Personal Data we hold about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data associated with your Account.
Right to Erasure
Request deletion of your Personal Data where the legal basis for processing no longer applies, subject to overiding retention obligations.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances, such as while an accuracy dispute is resolved.
Right to Object
Object to processing based on legitimate interest grounds, including profiling and direct marketing.
Right to Data Portability
Receive a structured, machine-readable copy of data you have provided to us where processing is based on consent or contract.
Right to Withdraw Consent
Withdraw any consent you have given for optional processing (such as marketing) at any time, without affecting prior processing.
We will respond to data subject requests within a reasonable period and in any event within the timeframe required by applicable law. Requests may be subject to identity verification. Where we are unable to fulfil a request, we will explain the reason in writing.
12. Children & Minors
The Website is strictly intended for individuals aged 21 years and above. bc8 does not knowingly collect Personal Data from anyone under the age of 21. Age verification is a mandatory step in the Account creation and withdrawal process.
If bc8 becomes aware that Personal Data has been collected from an individual who is under 21, that Account will be suspended immediately, all funds will be returned to the payment source (subject to verification), and all Personal Data associated with the Account will be deleted to the extent permitted by applicable retention obligations.
If you have reason to believe that a minor has created an Account on bc8, please contact our support team immediately via live chat or at [email protected] (plain text — not a clickable link).
13. Third-Party Links & Services
The Website may reference third-party services — including payment processors and analytics providers — some of which operate their own websites or platforms. bc8 does not control the privacy practices of third-party sites and is not responsible for the content or data-handling practices of any external party.
When you interact with a third-party payment provider (such as accessing your Touch 'n Go eWallet or Maybank FPX gateway), that interaction is governed by the privacy policy of the respective provider. bc8 recommends that you review the privacy policies of any third-party service before submitting personal information to it.
14. Amendments to This Policy
bc8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we provide. All amendments will be published on this page with an updated Effective Date. Where changes are material — for example, where a new category of data is collected or a new processing purpose is introduced — we will make reasonable efforts to notify registered players via email or an in-platform notification.
Continued use of the Website after the updated Policy's Effective Date constitutes acceptance of the revised terms. If you do not agree with a material amendment, you may request Account closure and deletion of your data (subject to applicable retention obligations) by contacting our support team.
15. Contact Us
If you have questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how bc8 handles your Personal Data, please contact us through one of the following channels.
-
Live Chat
Available24 hours a day, 7 days a week, directly on the Website. Our support team can handle initial data queries and escalate formal requests to the relevant internal team. Average first-response time: 3–5 minutes.
-
Email — Plain Text (not a link)
[email protected] — For formal data subject access requests, erasure requests, or privacy complaints, please mark your email subject line clearly (e.g., "Data Access Request" or "Privacy Complaint"). We will acknowledge receipt within two (2) business days.
All data subject requests are handled confidentially. Your request will not affect the standard operation of your Account or the services you receive, except where account closure or data deletion is the specific action requested.