🔏 bbwin Privacy Policy

1. Introduction

bbwin ("bbwin", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the bbwin Platform, whether as registered players, prospective users, or website visitors. This Privacy Policy ("Policy") describes in detail what personal data we collect, why we collect it, how we use and protect it, with whom we share it, how long we retain it, and what rights you have in relation to your data.

This Policy applies to all personal data processed by bbwin in connection with the operation of the online gaming platform accessible at bbwin.vu, including all associated pages, services, live chat functions, and communication channels. This Policy should be read together with bbwin's Terms and Conditions, which govern the contractual relationship between bbwin and registered players.

2. Data Controller

For the purposes of applicable data protection legislation, bbwin acts as the data controller in respect of the personal data it processes about registered players and Platform users. As data controller, bbwin determines the purposes and means of processing personal data collected through the Platform. bbwin operates under a licence issued by an internationally recognised gaming regulatory authority, which imposes mandatory data protection and anti-money laundering obligations that inform and govern certain aspects of our data processing activities.

All data-related queries, requests, and complaints may be directed to bbwin's designated data protection contact at [email protected].

3. Personal Data We Collect

3.1 Registration and Identity Data

When you register a bbwin account, we collect: full legal name as stated on your government-issued identification; date of birth; nationality; residential address; email address; Malaysian mobile phone number; and your chosen username. This information is used to create and administer your account, verify your identity, and comply with regulatory Know Your Customer (KYC) obligations.

3.2 Verification Documents

For KYC and regulatory compliance purposes, bbwin may request copies of: your MyKad or valid passport; proof of residential address (utility bill or bank statement dated within three months); and documentation confirming ownership of the payment methods linked to your account. These documents are processed strictly for identity and fraud prevention purposes.

3.3 Financial and Transaction Data

bbwin collects details of all financial transactions conducted through your account, including: deposit amounts, dates, and payment methods; withdrawal requests and processing records; bet placement and settlement records; bonus crediting and wagering records; and account balance history. This data is necessary for the operation of your account and for regulatory compliance and audit purposes.

3.4 Technical and Usage Data

bbwin automatically collects certain technical data when you access the Platform, including: IP address and approximate geolocation; device type, operating system, and browser type and version; session duration and page interaction data; login timestamps and session history; and referral source if you accessed the Platform through a link. This data is used for security monitoring, fraud prevention, Platform optimisation, and regulatory compliance.

3.5 Communication Data

If you contact bbwin through any channel — live chat, email, or complaint submission — we retain records of those communications, including the content of messages, timestamps, and the resolution outcome. This data is retained for quality assurance, dispute resolution, and regulatory audit purposes.

3.6 Responsible Gambling Data

Where you interact with bbwin's responsible gambling tools — including deposit limit settings, self-exclusion requests, and cool-off activations — we record those interactions. This data is used to enforce the limits and exclusions you have set, and to monitor compliance with our responsible gambling obligations under our regulatory licence.

4. How We Collect Your Data

bbwin collects personal data through the following means:

• Directly from you — through registration forms, KYC document submission, deposit and withdrawal requests, bet placement, customer support interactions, and responsible gambling tool settings.
• Automatically — through cookies, session tracking, device fingerprinting, and server logs when you access or use the Platform.
• From third-party payment providers — when you initiate a deposit or withdrawal through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency channels, the payment provider shares transaction confirmation data with bbwin for accounting and reconciliation purposes.
• From identity verification services — bbwin may use third-party KYC verification services to cross-reference the identity documents you submit. These services provide a verification outcome to bbwin; they do not share your raw document data beyond what is necessary for the verification process.
• From fraud prevention and security partners — bbwin works with specialised fraud detection services that analyse transaction and behavioural data to identify suspicious patterns. Data shared with these partners is limited to what is necessary for fraud detection purposes.

5. How We Use Your Personal Data

bbwin uses the personal data we collect for the following purposes:

• Creating, verifying, and administering your bbwin account.
• Processing deposits, bets, and withdrawals in Malaysian Ringgit.
• Complying with regulatory KYC, anti-money laundering (AML), and counter-terrorism financing (CTF) obligations imposed by our gaming licence.
• Detecting, investigating, and preventing fraud, cheating, and other prohibited activities on the Platform.
• Administering the bbwin Rewards Programme and processing bonus credits and cashback payments.
• Providing customer support and resolving disputes.
• Sending transactional communications — including deposit confirmations, withdrawal notifications, and security alerts — to your registered email or mobile number.
• Sending promotional and marketing communications where you have provided consent or where permitted under applicable law.
• Enforcing responsible gambling limits, cool-off periods, and self-exclusion settings you have activated.
• Improving the Platform through analysis of usage patterns and player behaviour data in anonymised or aggregated form.
• Meeting our regulatory reporting obligations to our licensing authority.

6. Legal Basis for Processing

bbwin processes your personal data on the following legal grounds:

• Contractual necessity — processing required to fulfil our obligations under the Terms and Conditions you entered into at registration, including account administration, transaction processing, and dispute resolution.
• Legal obligation — processing required to comply with our regulatory obligations under our gaming licence, including KYC verification, AML reporting, and data retention requirements mandated by our licensing authority.
• Legitimate interests — processing undertaken in pursuit of bbwin's legitimate business interests, including fraud prevention, security monitoring, Platform improvement, and responsible gambling enforcement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for marketing communications and non-essential cookies where you have provided explicit, informed consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

bbwin does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following circumstances:

7.1 Service Providers

bbwin engages third-party service providers who process personal data on our behalf as data processors. These include: payment processing partners (Touch 'n Go, Boost, GrabPay, FPX bank partners, USDT processing services); KYC and identity verification providers; fraud detection and cybersecurity services; game content providers (who may receive anonymised session data for game performance purposes); and cloud hosting and infrastructure providers. All service providers are contractually bound to process personal data only as instructed by bbwin and to maintain appropriate security standards.

7.2 Regulatory and Legal Disclosure

bbwin may disclose personal data to: its gaming regulatory licensing authority as required under the terms of its licence; law enforcement agencies, courts, or government bodies where required by applicable law or valid legal process; or fraud prevention and financial crime databases where required by AML legislation.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bbwin's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments being maintained.

8. International Data Transfers

bbwin's operations and those of some of its service providers may involve the processing of personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, bbwin ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that which applies within Malaysia. These safeguards include contractual data transfer clauses binding recipients to data protection standards consistent with bbwin's obligations. If you have questions about international data transfers affecting your personal data, contact us at [email protected].

9. Data Retention

bbwin retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. In practice:

• Account data and transaction records are retained for a minimum of five (5) years from the date of account closure, as required by AML regulations applicable under bbwin's gaming licence.
• KYC verification documents are retained for the duration of the account and for five (5) years after account closure.
• Customer support communications are retained for two (2) years from the date of the last communication in a thread.
• Technical and usage data (server logs, IP records) are retained for twelve (12) months unless required for an ongoing investigation or legal proceeding.
• Marketing consent records are retained for the duration of your account and for three (3) years thereafter.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.

10. Cookies & Tracking Technologies

bbwin uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit bbwin.vu. The categories of cookies used by bbwin are:

• Strictly necessary cookies — required for the Platform to function, including session authentication, security tokens, and load balancing. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies — used to remember your preferences, such as language settings and account display options. These improve your experience but are not essential to Platform operation.
• Analytical cookies — used to collect anonymised data about how users interact with the Platform, including page visit frequency, navigation paths, and feature usage, to support Platform improvement.
• Security cookies — used to detect and prevent fraudulent login attempts, suspicious session behaviour, and bot activity.

You can manage your cookie preferences through your browser settings. Disabling cookies beyond strictly necessary ones may affect your ability to use certain Platform features. bbwin does not use advertising or cross-site tracking cookies.

11. Your Privacy Rights

As a data subject, you have the following rights in relation to the personal data bbwin holds about you:

• Right of access — you may request a copy of the personal data bbwin holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our regulatory retention obligations which may require us to retain certain data notwithstanding such a request.
• Right to restriction — you may request that processing of your personal data be restricted in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to data portability — where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used machine-readable format.
• Right to object — you may object to processing of your personal data carried out on the basis of legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected]. bbwin will respond within 30 days. We may request additional information to verify your identity before processing a rights request.

12. Data Security

bbwin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmissions between your browser and the bbwin Platform.
• Encryption of sensitive data fields — including passwords, payment details, and identity document data — in storage using industry-standard encryption algorithms.
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Two-factor authentication for all internal system access by bbwin staff.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Automated anomaly detection and real-time alerting for unusual access patterns or potential data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bbwin will notify the relevant supervisory authority and, where required, affected individuals without undue delay and in accordance with applicable regulatory requirements.

13. Children's Privacy

The bbwin Platform is strictly intended for individuals aged 21 years and over. bbwin does not knowingly collect or process personal data from persons under the age of 21. Where bbwin discovers that personal data has been collected from a person under the minimum age, the associated account will be immediately closed and all personal data deleted except where retention is required for regulatory compliance purposes related to the investigation of the underage access. If you believe a minor has registered an account or provided personal data to bbwin, please contact us immediately at [email protected].

14. Marketing Communications

bbwin may send you promotional communications about bonuses, new game releases, Rewards programme updates, and special events by email or SMS, where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time by: updating your communication preferences in your account settings; clicking the unsubscribe link included in any marketing email; or contacting support at [email protected]. Withdrawal of marketing consent does not affect transactional communications (deposit confirmations, withdrawal notifications, security alerts) which will continue to be sent as necessary for account operation.

15. Changes to This Privacy Policy

bbwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via email to the registered address or through a prominent notice on the Platform, with a minimum of 14 days' notice before the changes take effect. The "Last Updated" date at the top of this page reflects when the most recent changes were made. We encourage you to review this Policy periodically to stay informed about how bbwin protects your personal data.

16. Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or bbwin's processing of your personal data, please contact our data protection team through the following channel:

If you are not satisfied with bbwin's handling of a privacy complaint, you may escalate the complaint to the relevant data protection supervisory authority or to the dispute resolution mechanism associated with bbwin's gaming regulatory licence.