Bmw2u Privacy Policy – Personal Data Protection for Malaysian Players

1. Personal Information We Collect

Bmw2u collects various categories of personal information from our members to enable us to provide safe, efficient, and high-quality services. Below are the categories of information we collect and the reasons they are required.

• Identity Information: Full name as per identity card, MyKad number or passport number, date of birth, gender and nationality. This information is required for identity verification and KYC (Know Your Customer) compliance.
• Contact Information: An active Malaysian mobile number, email address and current residential address. We use this information for account-related communications, OTP verification and important notifications.
• Financial Information: Payment method details used (such as bank account numbers for Maybank or CIMB, e-wallet numbers for Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay), deposit and withdrawal transaction records, and your win/loss history on the bmw2u platform.
• Technical Information: Your device's IP address, device type and operating system (Android or iOS), web browser type, platform usage logs, and gameplay session data. This information is used for account security and user experience improvement.
• Behavioural Information: Platform usage patterns, games played, session duration, account settings preferences, and interaction records with the bmw2u support team. This data helps us personalise your gaming experience.
• Verification Documents (KYC): A copy of your MyKad or passport, a selfie for facial verification, and any other supporting documents that may be required for identity verification prior to processing withdrawals above certain limits.

All information you provide to bmw2u is voluntary; however, failure to provide certain information may affect our ability to deliver the full range of services to you, including the processing of withdrawals.

2. How We Collect Your Information

Bmw2u collects your personal information through several different channels, all with the aim of ensuring a safe and seamless gaming experience on our platform.

• During Registration: When you register a bmw2u account, you directly provide basic personal information such as your name, phone number, and email address. The registration process takes less than three minutes and is completely secure.
• During Financial Transactions: When you make a deposit via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX, or when you submit a withdrawal request, transaction details are automatically recorded in the bmw2u system for security and financial record-keeping purposes.
• During Platform Use: Usage data is collected automatically when you use the bmw2u platform — including the games you play, session duration, and your interactions with platform features. This helps us continuously improve our services.
• Via Cookie Technology: bmw2u uses cookies and similar tracking technologies to collect information about how you use our platform. See Section 8 for more details on our Cookie Policy.
• Via Support Interactions: When you reach out to the bmw2u support team via live chat, WhatsApp, or email, all communications are recorded for service quality and dispute resolution purposes.
• From Authorised Third Parties: In certain cases involving identity verification or fraud prevention, bmw2u may receive information from authorised third-party service providers such as KYC service providers or identity verification bodies.

3. How We Use Your Information

Bmw2u uses the personal information collected for various legitimate and necessary purposes. All data usage is governed by the principle of minimum necessity — we only use data that is strictly required for the stated purpose.

• Account Management: To create, verify, manage and safeguard your bmw2u account, process registrations, handle logins and logouts, and manage your account settings and preferences.
• Transaction Processing: To securely and efficiently process all deposits — whether via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX — and withdrawals to your Malaysian bank account.
• Security & Fraud Prevention: To monitor account activity in real time, detect suspicious behaviour, and prevent fraud, money laundering, and misuse of the bmw2u platform.
• Legal Compliance: To comply with Malaysian legal requirements, including the Personal Data Protection Act 2010 (PDPA), anti-money laundering (AML) regulations and applicable know-your-customer (KYC) verification requirements.
• Service Communications: To send account-related notifications, transaction confirmations, important security information, platform updates, and responses to your customer support enquiries.
• Experience Personalisation: To understand your preferences and gaming patterns so we can offer relevant game recommendations, suitable promotions, and a more personalised experience on the bmw2u platform.
• Platform Improvements: To analyse aggregate usage patterns (not individual behaviour) in order to improve platform features, resolve technical issues and develop a better user experience.
• Responsible Gambling: To monitor gameplay patterns in order to identify early signs of problem gambling and offer appropriate support to members who may need assistance.

4. Sharing Information with Third Parties

Bmw2u maintains a strict policy regarding the sharing of our members' personal data. We do not sell, rent, or trade your personal data with any party for marketing or commercial purposes.

However, in limited and specific circumstances, bmw2u may need to share your information with the following parties:

• Payment Service Providers: Transaction information that must be shared with payment service providers such as DuitNow processors, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and Malaysian banks (Maybank, CIMB and others) in order to securely process your deposits and withdrawals.
• Technical Service Providers: Third parties that provide technical infrastructure services to bmw2u, including cloud computing, cybersecurity and system monitoring services. All such third parties are bound by strict confidentiality agreements.
• KYC Service Provider: Authorised third-party identity verification companies that assist bmw2u in verifying member identities as part of our legal compliance process.
• Malaysian Authorities: Where required by law, court order, or a lawful request from Malaysian law enforcement authorities, bmw2u will disclose the necessary information in accordance with proper legal procedures.
• Business Transfer: In rare circumstances such as a merger, acquisition or sale of bmw2u's business assets, members' personal data may be transferred to the new entity subject to equivalent or greater privacy protections.

5. Data Security Measures

Bmw2u invests heavily in security infrastructure to ensure every member's personal data is protected to the highest standard. Below are the security layers we have in place to safeguard your information.

• 256-bit SSL Encryption: All communications between your device and bmw2u's servers are encrypted using 256-bit SSL (Secure Sockets Layer) standards — the same level of encryption used by leading Malaysian banking and financial institutions such as Maybank and CIMB.
• Two-Factor Authentication (2FA): An OTP verification system via SMS to your registered Malaysian mobile number is used during login and sensitive transactions to ensure only you can access your bmw2u account.
• Real-Time Security Monitoring: Our automated monitoring system operates 24 hours a day, 7 days a week to detect suspicious activity, unauthorised login attempts, and unusual transaction patterns.
• IP Blocking & Access Control: A multi-layered security system that blocks unauthorised access, limits failed login attempts, and temporarily locks accounts when suspicious activity is detected.
• Regular Security Audits: bmw2u's technical infrastructure undergoes regular security audits by independent cybersecurity experts to identify and address any potential vulnerabilities.
• Encrypted Data Storage: All sensitive data stored in bmw2u's databases — including financial information and KYC documents — is held in encrypted form. Even if an unauthorised party were to gain access to the database, the data would be unreadable without the appropriate decryption key.

6. Data Retention Period

Bmw2u retains your personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal requirements in Malaysia.

• Active Account Data: For as long as your bmw2u account remains active, we retain all information associated with your account to enable us to provide you with the full range of services.
• Financial Records Data: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven (7) years from the date of each transaction, in accordance with Malaysia's accounting and tax legislation.
• KYC Verification Data: Identity verification documents are retained for a minimum of five (5) years after the business relationship with a member ends, in line with Malaysia's anti-money laundering legal requirements.
• Security Log Data: Security logs and account activity records are retained for twelve (12) months for security and dispute resolution purposes.
• Post-Account Closure Data: When you close your bmw2u account, we will delete or anonymise your personal data within 90 days, except for records that must be retained to meet legal requirements as outlined above.

Once the retention period has expired and there is no legal obligation to keep the data, bmw2u will securely delete or anonymise your personal data using industry-approved methods.

7. Your Personal Data Rights

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal information that bmw2u holds and processes. bmw2u fully respects these rights.

• Right of Access: You have the right to request a copy of the personal information bmw2u holds about you. We will process such requests within 14 business days.
• Right to Rectification: If any personal information we hold about you is inaccurate or incomplete, you have the right to request a correction. You may also update basic information directly through your bmw2u account settings.
• Right to Erasure: Under certain circumstances, you have the right to request that bmw2u delete your personal data. However, this right is not absolute and may not apply where we are required to retain data in order to meet legal obligations.
• Right to Restrict Processing: You have the right to request that bmw2u restrict how we process your personal data under certain circumstances, such as when you dispute the accuracy of the data or question the legitimacy of the processing.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. Upon receiving your objection, bmw2u will immediately cease processing your data for that purpose.
• Right to Data Portability: You have the right to receive a copy of your personal data in a machine-readable format (such as JSON or CSV) so that you may transfer it to another service should you wish to do so.
• Right to Withdraw Consent: Where bmw2u processes your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.

We will process all privacy rights requests within a reasonable timeframe and provide you with a response. In cases where we are unable to fulfil your request, we will clearly explain the reasons why.

8. Cookie Policy

Bmw2u uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use and their purposes.

9. Children's Privacy & Age Restrictions

Bmw2u is a platform accessible only to individuals aged 18 and above. We take the protection of minors extremely seriously and maintain a strict zero-tolerance policy against underage access to our platform.

• Bmw2u does not intentionally collect, store or process personal information from individuals under the age of 18.
• Should we discover that a minor's information has been collected without parental knowledge or consent, we will delete that information immediately and close the associated account.
• Age verification is conducted during registration and may be further enhanced through identity document checks if there is any doubt about a member's age.
• If you have reason to believe that someone under the age of 18 is using the bmw2u platform, please contact us immediately at [email protected] so that appropriate action can be taken.

10. Privacy Policy Amendments

Bmw2u reserves the right to amend, update, or modify this Privacy Policy at any time to reflect changes in business operations, new legal requirements, or current industry best practices.

• Any amendments to this Privacy Policy will be published on this page with a new update date and will take effect immediately upon publication.
• For significant amendments that affect how we use your personal data, bmw2u will endeavour to notify you via email or an in-platform notification with reasonable notice before the changes take effect.
• Your continued use of the bmw2u platform after any amendments are published constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account.
• We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information.

11. Contact Us for Privacy Enquiries

If you have any questions, concerns or complaints regarding this Privacy Policy or how bmw2u handles your personal information, please do not hesitate to contact us. The bmw2u support team is available to assist you.

• Privacy Email: [email protected] – please include "Privacy Enquiry" in the subject line of your email.
• Live Chat: Available 24 hours a day, 7 days a week directly on the bmw2u platform for immediate enquiries.
• Response Time: Our team will respond to all privacy-related enquiries within 48 business hours.

Bmw2u takes every privacy complaint seriously and will conduct a thorough investigation into each complaint received. You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your privacy rights have been violated.