BBClub Privacy Policy

Section 01

1. Introduction

This Privacy Policy ("Policy") is issued by BBClub ("Platform", "Operator", "we", "us", "our"), the operator of the online casino and sports betting services available at bbclub.cam. BBClub is committed to handling personal data lawfully, transparently, and with respect for the individuals whose information we hold.

This Policy applies to all registered members, prospective members who interact with the BBClub website, and any individual whose personal data is processed in connection with the operation of the platform. It should be read alongside BBClub's Terms & Conditions.

By registering an account, depositing funds, or continuing to use BBClub services, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must cease using the platform and may request account closure through customer support.

Section 02

2. Definitions

The following terms carry specific meanings throughout this Policy:

Section 03

3. Data We Collect

BBClub collects personal data through the registration process, ongoing account activity, identity verification, payment transactions, and routine platform interactions. The categories of data we collect are set out below.

BBClub does not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification and regulatory compliance. Where KYC documents contain categories of sensitive data (for example, biometric identifiers on government identity cards), those documents are processed solely for verification purposes and retained only for the minimum period required.

Section 04

4. Data Processing & Legal Basis

BBClub processes personal data only when there is a lawful basis for doing so. The primary legal grounds on which BBClub relies are as follows:

• Contractual Necessity: Processing is required to establish and perform the member account agreement — including registration, payment processing, game delivery, and account management.
• Legal Obligation: Processing is required to comply with applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, tax reporting obligations, and lawful requests from competent authorities.
• Legitimate Interests: BBClub may process data to detect fraud, prevent money laundering, analyse platform performance, and improve service quality, provided those interests are not overridden by your rights and freedoms.
• Consent: Where BBClub relies on consent as a legal basis — for example, for optional marketing communications — members are free to withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of prior processing.

Section 05

5. How We Use Your Data

BBClub uses personal data to provide, maintain, and improve the services available to members across Malaysia. The following sets out the principal purposes for which data is used:

• Account Provision: Creating and managing your BBClub account, authenticating logins, processing deposits and withdrawals in MYR, and recording transaction history.
• Identity Verification: Conducting KYC checks to confirm age (21+), identity, and residential information. Documents may be shared with third-party identity verification service providers acting as Data Processors under contract.
• Payment Processing: Facilitating transactions through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels. Financial data is transmitted via encrypted channels.
• Fraud Prevention and Security: Monitoring activity to detect irregular betting patterns, multiple-account creation, unauthorised access, chargeback fraud, and money laundering indicators.
• Responsible Gambling: Tracking deposit limits, monitoring activity for indicators of problem gambling, processing self-exclusion requests, and maintaining cooling-off restrictions in accordance with member instructions.
• Customer Support: Reviewing support communications, escalating account queries, and resolving disputes relating to payments, game outcomes, or account access.
• Legal Compliance: Retaining records as required by applicable anti-money laundering legislation, tax authorities, and lawful requests from regulatory bodies or law enforcement.
• Platform Improvement: Analysing anonymised or aggregated behavioural and technical data to improve website performance, game selection, and the overall member experience.

Section 06

6. Data Sharing & Disclosure

BBClub does not sell, rent, or trade personal data. We may share data with the following categories of recipient only to the extent necessary and under appropriate safeguards:

• KYC and Identity Verification Providers: Third-party platforms contracted to verify identity documents, conduct liveness checks, and screen against sanctions or politically exposed person (PEP) lists.
• Payment Service Providers: Banks, e-wallet operators, and cryptocurrency payment gateways through which deposits and withdrawals are processed. These entities receive only the data required to execute the transaction.
• IT and Infrastructure Providers: Cloud hosting, cybersecurity, and platform maintenance providers operating under data processing agreements that restrict them from using data for any independent purpose.
• Regulatory and Legal Authorities: Government agencies, regulators, courts, or law enforcement bodies when disclosure is required by applicable law, court order, or legitimate regulatory enquiry.
• Fraud Prevention Services: Shared fraud detection networks or data intelligence providers used to identify and prevent fraudulent account activity across the gaming industry.

Section 07

7. Cookies & Tracking Technologies

BBClub uses cookies and similar tracking technologies on its website and member platform. These technologies help the site function correctly, enable secure login sessions, and allow BBClub to understand how members interact with the platform.

• Strictly Necessary Cookies: Required for the platform to operate. These include session authentication tokens, security tokens, and load-balancing cookies. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Store user preferences such as language settings, display options, and last-accessed game categories to improve your session experience.
• Analytics Cookies: Collect anonymised or aggregated data about page visits, session duration, and navigation paths. This data informs performance improvements. Analytics providers receive only non-personally identifiable data.
• Security Cookies: Used to detect and prevent fraudulent access, including device fingerprinting for multi-account detection and abnormal login pattern identification.

You may configure your browser to reject or delete cookies. Please be aware that disabling necessary cookies will prevent account login and normal platform use. Cookie preference controls, where available, are accessible within your account settings.

Section 08

8. Data Retention

BBClub retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with legal, regulatory, and operational obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the member relationship and for a further period after account closure as required by applicable legislation. Anti-money laundering regulations commonly require transaction records to be retained for a minimum of five years from the date of the transaction or account closure.
• KYC Documents: Retained for the period mandated by the relevant regulatory framework applicable to the Operator's licensing jurisdiction, typically a minimum of five years from account closure.
• Support Communications: Retained for a reasonable period to enable query resolution, dispute management, and internal quality reviews — generally up to three years unless a longer retention period is required by law.
• Technical and Log Data: Typically retained for 12 to 24 months for security monitoring, fraud investigation, and platform diagnostics, after which it is deleted or irreversibly anonymised.
• Marketing Data: Retained only while consent remains active. Upon withdrawal of marketing consent, your contact details are removed from active marketing lists within a reasonable operational period.

Section 09

9. Data Security

BBClub applies a combination of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. The following controls form part of BBClub's security posture:

• Encryption in Transit: All data transmitted between your device and BBClub's servers is protected using Transport Layer Security (TLS). Members should verify that a secure connection (HTTPS) is active before logging in or entering payment information.
• Encryption at Rest: Sensitive data stored on BBClub's systems — including identity document images and financial records — is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to BBClub personnel and contracted processors with a demonstrable need to access that data. Role-based access controls and audit logs are maintained.
• Fraud Monitoring: Real-time transaction monitoring systems flag suspicious account activity for human review. Unusual login patterns, irregular payment requests, and behavioural anomalies trigger automated alerts.
• Incident Response: In the event of a data security incident that creates a risk to members, BBClub will take prompt containment action and notify affected members in accordance with applicable notification obligations.

Section 10

10. Your Rights

As a BBClub member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact BBClub via live chat or by email at the address in Section 13. BBClub will acknowledge your request promptly and respond within a reasonable period, typically no longer than 30 calendar days from receipt.

• Right of Access: You may request a copy of the personal data BBClub holds about you. We will provide this in a structured, commonly used format, subject to identity verification and any applicable exemptions.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Some data changes may require supporting documentation.
• Right to Erasure: In certain circumstances, you may request that BBClub delete personal data it holds about you. This right is subject to override where BBClub is required to retain data under legal or regulatory obligations — particularly AML and KYC record-keeping requirements.
• Right to Restriction: You may request that BBClub restricts processing of your data in specific circumstances — for example, while a disputed accuracy claim is being investigated.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that your data be transferred to you or to another controller in a structured electronic format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. On receipt of a valid objection to marketing, BBClub will cease processing your contact details for that purpose without delay.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

Section 11

11. Minors

BBClub's services are strictly available to adults aged 21 years and above only. BBClub does not knowingly collect or process personal data from individuals under the age of 21. Registration requires affirmative confirmation of age eligibility, and KYC procedures verify this before a member may deposit or withdraw funds.

If BBClub becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, the data will be deleted in line with applicable obligations, and any funds will be returned to their source where operationally possible.

Section 12

12. Policy Amendments

BBClub reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform services, or data processing practices. The updated Policy will be published on this page with a revised effective date.

Where an amendment materially affects how BBClub processes member data or reduces member rights, BBClub will provide reasonable advance notice through an in-platform notification or registered email address. Continued use of the platform after an amendment's effective date constitutes acceptance of the revised Policy.

Members are encouraged to review this Policy periodically. The effective date at the top of the page indicates when the most recent version was published.

Section 13

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by BBClub, please contact us using the details below. Our support team is available 24 hours a day.

Support Email (plain text — not a clickable link):
[email protected]

When submitting a data rights request, please include your registered account username and a clear description of your request. BBClub will acknowledge receipt within two business days and provide a substantive response within 30 calendar days, extendable where the complexity of the request requires it.

For urgent data security concerns — such as suspected unauthorised access to your account — please contact live chat support directly for an immediate response.