Privacy Policy bcaa4 – Personal Data Protection for Malaysian Players

bcaa4 ("we", "platform") value the privacy of every individual who uses our online betting and casino platform. This Privacy Policy has been written to clearly and honestly explain how we manage your personal data — from the moment you create your first account through every slots session, Malaysia Super League football bet or live baccarat game you enjoy on bcaa4.

This document applies to all users of the bcaa4 who are based in Malaysia, including:

• Website visitors who have not registered an account
• Registered members actively using bcaa4 services
• Former members whose accounts have been closed or suspended
• Anyone who communicates with the bcaa4 support team

This policy is formulated in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection best practices. In the event of any conflict between a translated version of this Policy and the Bahasa Melayu version, the Bahasa Melayu version shall prevail.

bcaa4 only collects data that is strictly necessary to provide safe, legitimate and quality services to Malaysian players. The following are the categories of data we collect:

To process deposits and withdrawals, bcaa4 collects information related to your payment methods. This includes your Touch 'n Go e-wallet account number, GrabPay account number, DuitNow account details, bank account number for FPX Maybank2u or CIMB Clicks, and ShopeePay or Boost details. We do not store credit card numbers directly — all card processing is handled through PCI-DSS compliant verified payment gateways.

• Device IP address and approximate geographic location
• Web browser type and operating system
• Activity logs: login times, matches watched, bets placed
• Complete records of all deposit and withdrawal transactions
• History of slots, baccarat, jackpot, and live match gameplay

bcaa4 collects personal data through a number of different channels. It is important that you understand each of these channels so you know exactly when and how your data is collected:

The majority of data we collect is provided directly by you on a voluntary basis — for example, during the bcaa4 account registration process, when completing your profile, when making a deposit via Touch 'n Go or DuitNow, or when contacting our support team.

When you use the bcaa4 — whether you're browsing the site, playing slots, checking BWF badminton match odds or placing a live bet — our systems automatically record technical data and usage activity. This is standard procedure, necessary to maintain account security and service quality.

Website bcaa4 uses cookies and similar tracking technologies to enhance the user experience, enable auto-login functionality, and help us understand how players use the platform. For more details, please refer to Section 7 (Cookie Policy) in this document.

bcaa4 only uses your personal data for legitimate and necessary purposes. Below is a complete list of the purposes for which we use your data, along with the legal basis permitting each type of processing:

• Account Management: Creating, verifying, and managing your bcaa4 account, including the KYC process and age verification.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, ShopeePay, and Boost, as well as handling your winnings withdrawals in Malaysian Ringgit (RM).
• Provision of Gaming Services: Enabling you to access and enjoy all slots games, live baccarat, Sports Betting, progressive jackpots, and other features on the bcaa4 platform.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, multiple account usage, money laundering and other security threats.
• Service Communications: Sending important notifications about your account, transactions, policy changes, and security updates.
• Customer Support: Providing technical support and resolving complaints via Live Chat and support email.
• Legal Compliance: Meet reporting obligations under applicable Malaysian laws, including anti-money laundering requirements.
• Platform Improvements: Analysing usage patterns to improve the quality, speed, and user experience of the bcaa4 platform.

bcaa4 does not sell, rent or trade your personal data to any third party for marketing purposes. That said, in the course of operating the platform, there are limited circumstances where we may need to share certain information:

We work with third-party service providers who support the operation of our platform — including slots and casino game providers (such as Pragmatic Play, Microgaming, and Playtech), payment gateways supporting Touch 'n Go, GrabPay, and DuitNow, as well as cloud infrastructure services. All such providers are bound by strict confidentiality agreements and are only permitted to access the data necessary to carry out their specific functions.

Bcaa4 may be required to disclose your personal data to Malaysian authorities — including Bank Negara Malaysia, the Malaysian Communications and Multimedia Commission (MCMC), or law enforcement agencies — when mandated by law, court order, or in the course of investigating fraud or money laundering activities.

Due to the global nature of our gaming service providers, a limited amount of technical data may be processed outside Malaysia. In all such cases, bcaa4 ensures protection equivalent to the PDPA 2010 is applied through binding data processing agreements.

bcaa4 continuously invest in the latest security technologies and procedures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure. The key protective measures we have implemented include:

• 256-bit SSL Encryption: All communications between your device and bcaa4's servers are encrypted using TLS 1.3 — the same industry standard used by Malaysia's leading banks.
• Password Protection: Your account password is stored in hashed form using modern cryptographic algorithms. The bcaa4 team cannot view your password in plain text.
• Two-Factor Authentication (2FA): bcaa4 offers 2FA verification via SMS for an added layer of protection on your account.
• 24/7 Security Monitoring: Our automated monitoring system is always active, detecting suspicious activity and intrusion attempts around the clock.
• Internal Access Control: Only bcaa4 staff who require access to specific data in order to perform their duties are permitted to do so — in accordance with the need-to-know principle.
• Regular Security Audits: bcaa4's security infrastructure is regularly audited by independent cybersecurity experts.

Website bcaa4 uses cookies — small text files stored on your device — to enhance the user experience and enable certain features to function correctly. The following are the types of cookies we use:

You can manage or block cookies through your web browser settings. However, blocking essential cookies may prevent the login function and account security features bcaa4 from functioning properly.

As a platform user bcaa4 who are based in Malaysia have certain rights regarding your personal data under the Personal Data Protection Act 2010. bcaa4 fully respects and upholds these rights:

To submit any request relating to your privacy rights, please contact the bcaa4 privacy team by email at privacy@bcaa4.biz or via the dedicated form in your Account Settings. We will process your request within 14 working days upon receipt.

bcaa4 only retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or as required under applicable Malaysian law.

Once the prescribed retention period has elapsed and there is no legal requirement to continue retaining the data, bcaa4 will securely delete or anonymise the data in question.

Platform bcaa4 is strictly prohibited for use by individuals under the age of 18. We do not knowingly collect or store the personal data of any minors.

Should we discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete the relevant data and close the account in question. Parents or guardians who believe their minor child may have registered an account on bcaa4 can reach us at privacy@bcaa4.biz for immediate action.

Bcaa4 also fully supports the Responsible Gaming including providing resources to support families affected by problem gambling.

bcaa4 reserves the right to update or amend this Privacy Policy from time to time in response to changes in Malaysian law, technological developments, or improvements to our privacy practices. Any changes will be accompanied by a revised update date at the top of this page.

For material changes that affect the way we process your personal data, bcaa4 will notify you via the email address registered to your account or through a prominent in-platform notification at least 14 days before the changes take effect. Your continued use of the platform after such notice constitutes your acceptance of the changes.

If you have any questions, concerns or complaints regarding how bcaa4 manages your personal data, or if you wish to exercise any of your privacy rights, please contact our Data Protection Officer:

You also have the right to lodge a complaint with Department of Personal Data Protection (PDPD) Malaysia if you believe that bcaa4 has violated the Personal Data Protection Act 2010 in the processing of your data.