Bila2win Privacy Policy – Malaysian Member Data Protection

This Privacy Policy is published by bila2win ("Platform", "We") and applies to all users who access or use the bila2win.best website, the bila2win mobile app, and all related services ("Services"). It describes our practices regarding the collection, processing, storage, protection, and disclosure of our members' personal data.

Bila2win is an online Sports Betting and casino platform serving users in Malaysia. In the course of our daily operations, we collect and process certain personal data necessary to provide a secure, fair, and legally compliant service. We take our privacy obligations seriously and are committed to handling your data responsibly.

By registering an account and using bila2win's Services, you consent to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our Services.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Guide bila2win, which together form the complete agreement between you and our platform.

Bila2win collects various types of personal data depending on how you interact with our platform. Generally, the data we collect falls into three main categories:

Information you provide directly during registration and use:

• Full name as stated in your official identity document (MyKad or Passport).
• Date of birth (for age verification).
• An active Malaysian phone number.
• A valid email address.
• Malaysian bank account or e-wallet details (account number, account holder name) for deposit and withdrawal purposes.
• Identity verification (KYC) documents such as a copy of your MyKad or Passport, when required for withdrawals or account verification.
• Additional profile information you choose to update in your account.

Data collected automatically during your use of the platform:

• Your device's IP address.
• Browser type and device operating system.
• Login session data including time, date, and duration.
• Betting and gaming records — games played, bet amounts, wins and losses.
• Financial transaction records — deposits, withdrawals, and bonuses claimed.
• Cookie and web tracking data (see Section 8 for more details).
• Approximate location data based on IP address (state or city, not GPS coordinates).

Data from third-party sources:

• Payment verification information from e-wallet and banking providers such as Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay.
• Information from third-party identity verification services that we use for KYC purposes.
• Aggregated analytics data from gaming service providers for platform improvement purposes.

Bila2win only uses your personal data for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

• Account management – to create, verify, and manage your member account, including a secure login process.
• Transaction processing – to process deposits and withdrawals accurately and securely through your chosen Malaysian payment method.
• Identity verification (KYC) – to verify that you meet the age eligibility requirements and to prevent identity fraud and money laundering.
• Gaming services provision – allowing you to access and enjoy all games and betting markets available on bila2win.
• Bonus and promotion administration – processes bonus claims, monitors rollover requirements, and ensures promotions are applied correctly.
• Customer Support – handles enquiries, complaints, and support requests that you submit to our support team.
• Platform security – to detect and prevent fraud, unauthorised access, and activities that violate our terms of use.
• Legal compliance – to fulfil our obligations under applicable Malaysian law, including PDPA and financial compliance requirements.
• Platform improvement – analysing aggregated usage patterns to improve the user experience, add in-demand games, and optimise platform performance.
• Marketing communications – sends information about promotions, new bonuses, and the latest bila2win news — only where you have given consent to receive such communications.

Bila2win does not sell, rent, or trade our members' personal data. However, there are limited situations where we need to share your data with certain parties to ensure the platform operates properly and lawfully:

• Payment Providers – the transaction information required is shared with e-wallet and banking providers such as Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay solely for the purpose of processing your deposits and withdrawals.
• Game providers – usernames and required session data are shared with licensed game providers such as Evolution Gaming and Pragmatic Play to allow you to play in a secure and legitimate environment.
• Technical service providers – infrastructure and cloud service providers that help us operate the platform may have limited access to data for strictly technical purposes, and are bound by strict confidentiality agreements with bila2win.
• Statutory authorities – bila2win will disclose personal data to Malaysian authorities such as the Royal Malaysia Police, Bank Negara Malaysia, or the courts where required to do so by law or a valid court order.
• Fraud prevention – in cases suspected to involve fraud, money laundering, or other unlawful activity, we reserve the right to share relevant information with the appropriate authorities.

In all of the data-sharing situations described above, bila2win ensures that recipients are bound by adequate confidentiality agreements and may only use the data for the stated purposes. We never share your data with marketing companies or commercial third parties for advertising or sales purposes.

Bila2win implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or unauthorised disclosure.

The technical security measures we have in place:

• 256-bit SSL/TLS encryption – all communications between your browser or app and bila2win's servers are encrypted to the highest industry standards, the same as those used by Malaysia's leading banks.
• Stored data encryption – sensitive data such as bank account information is encrypted within our database — meaning even if an unauthorised party were to gain access to our servers, the data would remain unreadable.
• 24/7 security monitoring – automated monitoring systems continuously detect and alert on any suspicious activity or unauthorised access attempts.
• Two-factor authentication (2FA) – members can enable 2FA for an additional layer of protection on their account.
• Internal access controls – only bila2win staff who require access to specific data in order to perform their duties are permitted to do so, and all access is logged.
• Regular Security Testing – the bila2win platform undergoes regular security testing and audits to identify and address vulnerabilities before they can be exploited.

Bila2win retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to any longer legal retention requirements that may apply.

General data retention guidelines:

• Active account data – retained for the duration of your active account and for a reasonable period following account closure.
• Financial transaction records – retained for a minimum of 7 years in accordance with Malaysian accounting and financial legal requirements.
• Identity verification (KYC) documents – retained for a minimum of 5 years after account closure in accordance with anti-money laundering requirements.
• Customer support communication logs – retained for 2 years for service quality and dispute resolution purposes.
• Activity log data – technical and platform activity logs are retained for 12 months for security and troubleshooting purposes.

Once the relevant retention period has expired, personal data will be deleted or converted into an anonymised format that can no longer be linked back to you. You may request early deletion of your data by contacting the bila2win support team, subject to any applicable legal retention obligations.

As a Malaysian resident, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). bila2win is committed to respecting and facilitating the exercise of these rights:

Bila2win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies – required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled as they are essential for the platform to function.
• Performance Cookies – collects information on how visitors use the platform (pages visited, time spent, errors encountered) in a format that does not directly identify individuals. This helps us improve the user experience.
• Functional Cookies – remembering your preferences and settings such as language preference, display preferences, and account configuration to make repeat visits more convenient.
• Analytics Cookies – we use analytics services that collect aggregated usage data without identifying individual users, to help us understand platform usage patterns.

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect platform functionality. For more information on managing cookies in your browser, refer to your browser's help documentation.

In the course of operating the bila2win platform, some of your personal data may be transferred, stored, or processed outside Malaysia — particularly in the context of using international gaming provider services or cloud infrastructure.

Bila2win ensures that any such international data transfers are carried out with adequate safeguards through:

• Comprehensive data transfer agreements with all third-party providers that receive data.
• Ensuring that the recipient country or provider in question maintains data protection standards equivalent to or higher than Malaysia's PDPA.
• Data encryption both in transit and at rest, across all storage locations.

In all cases, cross-border data transfers are carried out only where necessary to deliver the services you have requested, and with appropriate safeguards in place. Data is not transferred to countries or entities that lack adequate privacy protections.

The bila2win platform is for individuals aged 18 and above only. We do not knowingly collect, process, or store the personal data of any individual under the age of 18.

If we discover that personal data belonging to an underage individual has been collected in a bila2win account, we will take the following steps immediately:

• Closing the account in question immediately.
• Deleting all associated personal data from our systems.
• Reporting the matter to the relevant authorities in Malaysia where necessary.

Bila2win reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, legal developments, or changes in how we operate. All amendments will be posted on this page with a new "Last Updated" date.

For material amendments — meaning changes that significantly affect how we use or protect your data — we will endeavour to notify you proactively via in-platform notifications or an email to the address registered on your account.

Your continued use of the bila2win platform following the publication of any amendments to this Privacy Policy will be considered as your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the bila2win privacy team is here to help:

• Privacy Email: support@bila2win.best — please use the subject line "Privacy Enquiry" or "Privacy Rights Request" for faster handling.
• Live Chat: Available 24 hours a day, 7 days a week via the bila2win platform — for general enquiries that require an immediate response.
• Response Time: Written privacy enquiries will be responded to within 14 business days of receipt.

All privacy enquiries are handled in both Bahasa Malaysia and English. bila2win is committed to addressing every privacy enquiry and request with seriousness, professionalism, and within a reasonable timeframe. Your trust is an asset we value deeply.