Privacy Policy mybwt – Our Commitment to Your Data Security

Introduction: This Privacy Policy ("Policy") describes mybwt's practices and commitments in handling players' personal data. It applies to all users of the mybwt platform — the website, mobile app, and any other service channels we operate. By using the mybwt platform, you agree to the terms of data collection and use as set out in this Policy.

Mybwt collects several categories of personal data required to provide a safe, responsible, and quality service. Below is a comprehensive overview of the data we collect:

We do not collect sensitive data such as medical information, religious beliefs, political views or biometric data beyond what is required for the KYC process as prescribed by law.

Mybwt collects personal data through several different channels:

• Directly from you – during the account registration process, profile updates, KYC process, deposits and withdrawals, and communications with our customer support team.
• Automatically during use – technical data such as IP address, device type, and usage patterns are collected automatically when you access the mybwt platform.
• Via cookies and tracking technologies – mybwt uses session cookies and preference cookies to enhance the user experience. Further information about cookies is explained in Clause 8.
• From authorised third parties – for identity verification, mybwt may obtain verification from approved third-party identity verification service providers who are bound by confidentiality agreements.

Mybwt uses collected personal data only for legitimate and necessary purposes. We do not use your data for any purpose not stated in this Policy without your consent. Key purposes include:

• Account management: Creating and maintaining your player account, processing registration and login.
• Transaction processing: Processing deposits, withdrawals and all financial transactions securely and accurately.
• Identity verification (KYC): Ensuring compliance with anti-money laundering and player protection legal requirements.
• Fraud prevention: Identifying, investigating and preventing fraudulent activity, money laundering or other illegal activities.
• Customer support: Providing technical support and resolving complaints efficiently.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
• Service communications: Sending important notifications about your account, transactions and terms updates.
• Platform improvement: Analysing usage data to improve the overall user experience.

Mybwt does not sell players' personal data to any third party for commercial purposes. However, in certain limited circumstances, we may need to share data with the following parties:

• Payment service provider: To process deposits and withdrawals, required information is shared with legitimate payment service providers such as banks and digital wallet providers. These providers are bound by strict confidentiality agreements.
• Game software provider: Minimum technical data required for games to function may be shared with providers such as slot and casino development companies. This does not include financial or full identity information.
• Legal authority: When required by law or court order, mybwt will disclose data to the relevant authorities.
• IT service provider: Parties providing technical infrastructure, server hosting, and cybersecurity services may have limited access to data necessary to carry out their functions.

Mybwt implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Encryption in transit: All data moving between your device and mybwt servers uses the TLS (Transport Layer Security) protocol with 256-bit encryption.
• Data encryption inactive: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms.
• Strict access controls: Access to systems containing player data is restricted to staff who require it for their duties, with multi-factor authentication controls in place.
• Continuous security monitoring: Our systems are monitored 24/7 to detect any unusual activity or intrusion attempts.
• Regular security audits: Penetration testing and security audits are conducted periodically by qualified independent third parties.
• Incident response plan: mybwt has clear procedures in place for handling any personal data security breach and will notify affected players within the timeframe required by law.

Mybwt does not retain your personal data longer than necessary for the purposes stated in this Policy or as required by law.

• Active account data: Retained for as long as your account is active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Technical logs: Retained for 90 days for security purposes and technical issue detection.
• Support communication data: Retained for 2 years so we can provide the right context if you contact us again about the same issue.

When the retention period expires and there is no legal requirement to keep the data longer, it will be securely deleted or anonymised so it can no longer be linked to any individual.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the mybwt Privacy Policy, you have the following rights regarding your personal data:

• Right to access data: You can request a copy of the personal data we hold about you.
• Right to correct data: If you find that the data we hold is inaccurate or outdated, you may request a correction.
• Right to restrict processing: In certain circumstances, you can request that we restrict how we use your data.
• Right to withdraw consent: For processing based on your consent, you may withdraw that consent at any time.
• Right to object: You can object to the processing of your data for direct marketing purposes.

The mybwt platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly.

Types of cookies we use:

• Required session cookies: These cookies are essential for the platform's core functionality — such as keeping your login session active. Without them, the platform will not work properly. They cannot be disabled.
• Preference cookies: Saving your preferences such as language selection and display settings for a more personalised experience.
• Analytics cookies: Helping us understand how players use the platform so we can continue to improve it. This data is collected in aggregate and cannot be used to identify individuals.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the mybwt platform.

The mybwt platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under 18. If we discover that data belonging to an individual under 18 has been collected, we will take immediate steps to delete that data and close the account in question.

If you have any questions, concerns or complaints about how mybwt handles your personal data, or if you wish to exercise any of the rights granted to you under this Policy, you may contact us via:

• Live Chat: The fastest way — available 24/7 directly within the mybwt platform.
• Email: [email protected] – we will respond within 24–48 business hours.

Mybwt takes every privacy complaint seriously. Each complaint received will be thoroughly investigated and we will provide a written response outlining our findings and the actions taken or planned.