Your privacy matters to us. This Policy explains exactly what personal data BMW88 collects from Malaysian members, how we use and protect it, and the rights you hold over your own information.
This Privacy Policy ("Policy") is published by BMW88 ("BMW88", "we", "us", "our") and applies to all individuals who access or use the BMW88 online platform at bmw88.click, register an account, or otherwise interact with BMW88's services, including sports betting, live casino games, slot machines, and related offerings available to Malaysian players.
BMW88 is committed to protecting the personal data of every Member ("you", "your", "User") in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other applicable privacy regulations. This Policy outlines the categories of personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, the duration for which it is retained, and the rights available to you as a data subject.
This Policy forms part of your agreement with BMW88 and should be read alongside our Terms & Conditions and Responsible Gambling Policy. By continuing to use the BMW88 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should discontinue use of the Platform.
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
| "Personal Data" | Any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers. |
| "Data Controller" | BMW88, in its capacity as the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | Any third-party service provider that processes personal data on behalf of BMW88 pursuant to a data processing agreement, such as payment processors and KYC verification providers. |
| "Processing" | Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion. |
| "Consent" | Freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data for a defined purpose. |
| "PDPA" | The Personal Data Protection Act 2010 of Malaysia, governing the processing of personal data in commercial transactions. |
| "KYC" | Know Your Customer — the identity verification process BMW88 is obligated to conduct to confirm player eligibility and comply with anti-money laundering obligations. |
BMW88 collects personal data through multiple channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party sources where permitted by applicable law. The categories of personal data we collect include, but are not limited to, the following:
Full legal name, date of birth, gender, NRIC number or passport number, nationality.
Email address, Malaysian mobile number, residential address including postcode and city.
Payment method details (e-wallet IDs, bank account numbers), transaction history, deposit and withdrawal records in MYR.
Betting history, game preferences, session duration, wagering amounts, promotional activity and bonus usage records.
IP address, device type, operating system, browser type and version, screen resolution, session timestamps.
Pages visited, click patterns, referral source, search queries within the Platform, cookie identifiers and preferences.
Copies of government-issued ID, proof of address documents, and payment method screenshots submitted during KYC.
Records of live chat sessions, email correspondence, support ticket contents, and survey or feedback responses.
BMW88 processes your personal data for the following specific and lawful purposes:
BMW88 processes your personal data on one or more of the following legal bases, in accordance with applicable data protection law including the Malaysian PDPA:
BMW88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with the following categories of third parties, strictly to the extent necessary and subject to appropriate data protection safeguards:
Your financial data is shared with verified Malaysian payment service providers — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners such as Maybank, CIMB, Public Bank, and Hong Leong Bank — for the sole purpose of processing deposits and withdrawals in MYR on your behalf. These processors operate under contractual obligations to safeguard your data.
BMW88 may engage third-party KYC and AML compliance service providers to assist with identity verification. These providers process your identity documents and personal data only to the extent required to fulfil their verification function and are contractually bound by strict data protection obligations.
Certain technical infrastructure supporting BMW88's platform — including cloud hosting, content delivery, and customer support software — may involve third-party technology providers. These providers operate as data processors and are prohibited from using your data for any purpose other than providing services to BMW88.
BMW88 may disclose your personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, or where such disclosure is necessary to protect the safety or legal rights of BMW88, its members, or third parties.
BMW88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, BMW88 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.
BMW88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:
Notwithstanding the above, no method of electronic transmission or storage is completely secure. BMW88 cannot guarantee absolute security of your personal data and will not be liable for breaches that occur despite implementation of reasonable security measures. In the event of a material data breach affecting your personal data, BMW88 will notify affected Members in accordance with applicable legal requirements.
BMW88 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform, remember your preferences, analyse usage patterns, and deliver relevant content. The categories of cookies we use are as follows:
These cookies are essential for the Platform to function and cannot be disabled without impairing core functionality. They are used to maintain your login session, remember your betting slip contents, and process transactions securely. No consent is required for strictly necessary cookies.
These cookies collect anonymised data about how Members use the BMW88 Platform — including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used solely to improve platform performance and user experience.
Functional cookies enable the Platform to remember choices you have made, such as your preferred language, currency display settings, and game filters, providing a more personalised experience.
You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a notification when new cookies are set. Please note that disabling cookies may affect the functionality of certain features on the BMW88 Platform.
As a data subject under the Malaysian Personal Data Protection Act 2010 and applicable data protection principles, you hold the following rights in respect of your personal data held by BMW88:
Request a copy of the personal data BMW88 holds about you and information on how it is being processed.
Request correction of inaccurate or incomplete personal data held in your BMW88 account.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Request that BMW88 restrict processing of your data in certain circumstances, such as during a dispute about data accuracy.
Request your personal data in a structured, commonly used, and machine-readable format where technically feasible.
Object to processing based on legitimate interests, including direct marketing communications, at any time.
Where processing is based on your consent, withdraw that consent at any time without affecting prior lawful processing.
Lodge a complaint with the relevant supervisory authority if you believe your data rights have been infringed.
To exercise any of the above rights, please submit a written request to BMW88 Customer Support at [email protected]. BMW88 will acknowledge your request within 5 business days and respond substantively within 30 days. We may request proof of identity before processing certain requests to protect the security of your account.
BMW88 employs mandatory age verification procedures during the registration and KYC process. Any account found to belong to an individual below the minimum age threshold of 21 will be immediately closed and all associated personal data will be deleted, except to the extent that retention is required to comply with applicable legal obligations or to prevent future attempted registrations by the same individual.
If you have reason to believe that an individual under the age of 21 has registered an account with BMW88, please notify us immediately at [email protected] and we will investigate and act promptly.
BMW88 primarily processes and stores personal data within systems accessible from Malaysia. However, certain third-party service providers — such as cloud infrastructure providers and technical support partners — may process data in jurisdictions outside Malaysia. In such cases, BMW88 ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to that required under Malaysian law, including through contractual data processing agreements with all relevant third parties.
BMW88 will not transfer personal data to countries or territories that do not provide an adequate level of data protection without implementing appropriate protective measures, including standard contractual clauses or equivalent safeguards recognised under applicable law.
BMW88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where amendments are material, BMW88 will provide reasonable advance notice by posting a prominent notice on the Platform and, where appropriate, by notifying affected Members via their registered email address.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the BMW88 Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to remain informed of how BMW88 handles your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy, wish to exercise any of your data subject rights, or wish to report a suspected data protection issue, please contact the BMW88 Data Privacy team through the following channels:
BMW88 is committed to handling all privacy-related queries transparently and in compliance with applicable data protection law. We will process formal data subject requests within 30 days of receipt, and within 5 business days for urgent matters involving suspected data security incidents.
Six concrete ways BMW88 puts Malaysian player data protection into practice — beyond the policy language.
All data exchanged between your device and BMW88 — including your login credentials, payment details, and account activity — is protected by industry-standard SSL/TLS encryption, regardless of whether you access the Platform from Kuala Lumpur, Penang, or anywhere else in Malaysia.
BMW88 does not sell, rent, or trade your personal data to advertising networks, data brokers, or any third party for commercial purposes. Your personal information is used solely to operate your account and improve your experience on the BMW88 Platform.
BMW88's data processing practices are aligned with the Malaysian Personal Data Protection Act 2010 (PDPA). We process your data on clear, lawful bases and maintain transparent records of all data processing activities conducted on behalf of Malaysian members.
You hold the right to access, correct, delete, restrict, or port your personal data held by BMW88. You may also object to marketing processing or withdraw consent at any time. All requests are handled within 30 days and are free of charge.
BMW88 does not store full payment card numbers or e-wallet PINs on its systems. Payment transactions via Touch 'n Go, Boost, GrabPay, Maybank, CIMB, DuitNow, and FPX are handled through tokenised or redirected connections with the respective payment processors.
If you do not wish to receive promotional communications from BMW88 — including bonus offers, new game alerts, or loyalty programme updates — you can opt out at any time by contacting [email protected]. Your opt-out will be actioned within 5 business days.
Transparent data practices, verified MYR payments, and a platform that respects your rights — BMW88 is built for Malaysian players who expect accountability alongside entertainment.