Privacy Policy bmi123

01 Introduction

Bmi123 ("we", "platform", "bmi123.net") is committed to protecting the privacy and security of every member's personal data. This Privacy Policy has been drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This document outlines in detail the types of personal data we collect from you, the purposes for which it is collected, how we use and protect that data, and the rights you hold as a data subject under Malaysian law. We encourage you to read this Privacy Policy in full so you can make informed decisions about your use of the bmi123 platform.

This Privacy Policy applies to all information we collect through the bmi123.net website, the bmi123 mobile app (where applicable), and all interactions with our customer support team via live chat, email, or any other communication channels we provide.

02 Personal Data We Collect

Bmi123 collects various types of information from you when you register and use our platform. The following are the categories of data we collect, along with the purposes for collection:

We only collect data that is strictly necessary for the stated purposes. bmi123 does not collect sensitive data such as health information, religious beliefs, or political affiliations unless required by law.

03 How We Use Your Data

The personal data we collect is used solely for the following legitimate and stated purposes. bmi123 does not use your data for any other purpose without first obtaining your consent:

• Account management: To create, verify, and manage your bmi123 account, including the KYC process required to ensure legal compliance.
• Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks, and other local payment methods we support, as well as withdrawals to your account.
• Service communications: To send important notifications relating to your account, transactions, policy changes, and security updates via email or SMS.
• Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse through automated data pattern analysis.
• Responsible gaming: Monitoring betting patterns to identify members who may need responsible gambling support and proactively reaching out to them.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, usability, and content of the bmi123 platform.
• Marketing (with consent): Sending you promotional information, bonuses, and exclusive offers if you have agreed to receive marketing communications at the time of registration.
• Legal compliance: To fulfil the legal and regulatory obligations imposed on bmi123, including reporting suspicious activity to the relevant authorities.

04 Legal Basis for Data Processing

Bmi123 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). These grounds are as follows:

• Consent: You have given explicit consent for us to process your data during the bmi123 account registration process.
• Contract performance: Processing is necessary to perform the service agreement between you and bmi123, including account management and payment processing.
• Legitimate interests: Processing is necessary for the legitimate interests of bmi123, such as fraud prevention and platform security, provided it does not override your fundamental rights.
• Legal obligation: Processing is necessary to comply with legal obligations applicable to bmi123 in Malaysia.

05 Data Sharing with Third Parties

Bmi123 does not sell or rent your personal data to any third party for marketing purposes. However, we may share your data with the following categories of third parties in limited and controlled circumstances:

• Payment service providers: E-wallet and banking providers such as Touch 'n Go, GrabPay, and FPX member banks, for the secure processing of your financial transactions.
• Game software providers: Casino and slots game developers that supply game content to the bmi123 platform, bound by strict confidentiality agreements.
• Identity verification service providers: Technology companies that assist us with KYC identity verification to prevent fraud and ensure legal compliance.
• Law enforcement authorities: bmi123 will disclose required data to the police, courts, or Malaysian government agencies when mandated by a court order or applicable law.
• Analytics tools: Anonymous analytics services that help us understand platform usage patterns for improvement purposes, without revealing your individual identity.

All third parties with whom we share data are bound by strict data protection agreements and are only permitted to use that data for the specified purposes.

06 Data Security

Bmi123 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure:

• Data encryption in transit using 256-bit TLS/SSL protocols
• Sensitive data stored in our databases is encrypted using AES-256 encryption.
• Strict role-based access control (RBAC) for bmi123 internal staff
• Round-the-clock security system monitoring, 24 hours a day, 7 days a week
• Regular penetration testing conducted by independent third-party security experts
• Two-factor authentication (2FA) for staff access to systems storing user data
• Regular cybersecurity training for all bmi123 staff who handle user data

07 Data Retention Period

Bmi123 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law:

• Active account data: Retained for the duration your account remains active and used for the ongoing management of your account.
• Financial transaction records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's anti-money laundering legal requirements.
• Identity verification data (KYC): Retained for a minimum of 5 years following account closure, or longer if required by applicable law.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Marketing data (with consent): Retained until you withdraw your consent or request data deletion.

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised in accordance with bmi123's internal procedures.

08 Cookies & Tracking Technologies

The bmi123 platform uses cookies and similar tracking technologies to enhance your experience and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting aggregated and anonymised information on how visitors use our platform for the purpose of service improvement.
• Functional Cookies: Remembering your preferences such as language selection and personal settings to deliver a better experience.
• Analytics Cookies: Help us understand which pages are most popular and how users navigate our platform, enabling continuous improvement.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your experience on the bmi123 platform.

09 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to the personal data we hold about you:

To exercise any of the rights above, please contact us at support@bmi123.net clearly stating the right you wish to exercise. bmi123 will process your request within 30 working days.

10 Protection of Children's Data

The bmi123 platform is intended solely for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that we have unknowingly collected personal data from a minor, we will take immediate steps to delete that data and close the relevant account. If you believe your child has registered a bmi123 account, please contact us immediately at support@bmi123.net.

11 Third-Party Links

The bmi123 platform may contain links to third-party websites or services that have their own privacy policies. bmi123 is not responsible for the privacy practices or content of any third-party websites. We encourage you to read the privacy policy of every website you visit outside the bmi123 platform.

12 Privacy Policy Amendments

Bmi123 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or technological developments. You will be notified of any material amendments through:

• Notification to your registered email address at least 14 days before any changes take effect
• A clear notice on the bmi123 platform homepage
• Update the "Last Updated" date at the top of this document

Your continued use of the bmi123 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

13 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bmi123 handles your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe that bmi123 has violated your data protection rights under the PDPA 2010.