Privacy Policy bila2win – Malaysian Member Data Protection

Bila2win values the privacy of every member who trusts our platform. This Privacy Policy ("Policy") explains in detail how we, as the data controller, collect, use, disclose, transfer, and store your personal information when you use the website, mobile app, and all services offered by bila2win.

This policy is drawn up in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and all its related implementing regulations. As an online Sports Betting platform operating in Malaysia, we are committed to ensuring that every piece of personal data we hold is handled to the highest standards of security and confidentiality.

This Privacy Policy applies to all users who access or use bila2win's services, including registered members, website visitors, and anyone who interacts with our platform through any channel — whether via the website, smartphone app, or communications with our customer support team.

Bila2win collects your personal data through various methods depending on how you interact with our platform. Below are the categories of data we collect and how they are collected:

A. Data You Provide Directly:

• Registration Information: Full name as per MyKad or passport, date of birth, identity card number (MyKad/Passport), gender, mobile phone number, and email address.
• Account Information: Your chosen username, password (stored in encrypted form – we do not store passwords in plain text), and security questions.
• Financial Information: Malaysian bank account numbers registered in your name, e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), DuitNow information, and deposit and withdrawal transaction records.
• Identity Verification (KYC): Copies of official identity documents, proof of address, and any other verification documents requested during the KYC process.
• Communications: The content of messages you send to our customer support team via Live Chat, email, or WhatsApp.

B. Automatically Collected Data:

• Platform Usage Data: Betting history, types of bets placed, sports teams or events of interest, bet values, and betting outcomes.
• Technical Data: IP address, browser type and version, device type and operating system, screen resolution, and language settings.
• Session Data: Login and logout times, pages visited within the platform, time spent on each page, and user navigation flow.
• Location Data: General location information based on IP address for the purpose of verifying permitted geographic regions. We do not collect precise GPS coordinates.

The personal data we collect is used solely for legitimate purposes that have been communicated to you. The following are the primary purposes for which bila2win uses your data:

We will not use your data for any purposes beyond those stated above without first obtaining your consent. If you do not wish to receive marketing communications from bila2win, you may unsubscribe at any time via the link provided in every marketing email, or by contacting support@bila2win.onl.

Bila2win does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is a non-negotiable principle. That said, in the course of running our business operations, we may need to share your data with the following parties under limited and controlled circumstances:

Payment Service Providers: We share the necessary transaction information with the Malaysian payment service providers we work with — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX processors — solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements and may only use your data for payment processing purposes.

Technology Service Providers: We work with trusted third-party providers for services such as cloud hosting, platform analytics, and cybersecurity tools. All such providers are bound by data processing agreements that ensure your data is protected to the same or higher standard that we apply ourselves.

Legal Authorities: bila2win will disclose personal data to Malaysian authorities when required to do so by law, court order, or direction from a competent authority. This includes authorities concerned with anti-money laundering, financial crime investigations, or other regulatory requirements.

We continuously invest in security infrastructure to protect the personal and financial data of all bila2win members. The following are the key security measures we have in place:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and bila2win's servers are encrypted using 256-bit SSL/TLS protocol — the same level of encryption used by major Malaysian banking institutions such as Maybank and CIMB.
• Encryption at Rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using industry-recognised encryption algorithms.
• Strict Access Controls: Only bila2win staff with a legitimate business need are granted access to members' personal data. This access is monitored, logged, and reviewed on a regular basis.
• Two-Factor Authentication (2FA): bila2win's internal systems require two-factor authentication for all administrative access to prevent unauthorised entry.
• Member Fund Segregation: Member deposit funds are held in a bank account separate from the company's operational funds — ensuring your money remains safe even under exceptional circumstances.
• 24/7 Security Monitoring: Intrusion detection systems and anomaly monitoring operate around the clock to detect and respond to any security threats promptly.
• Regular Security Testing: We conduct regular penetration testing and independent third-party security audits to identify and address any system vulnerabilities.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. We encourage you to play your part in protecting your account by using a strong password, not sharing your login details with anyone, and contacting us immediately if you suspect any suspicious activity on your account.

The bila2win website uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform's core functions — such as maintaining your login session, remembering language preferences, and ensuring security features work correctly. Disabling this type of cookie will affect the platform's basic functionality.
• Performance Cookies: Used to collect statistical data on how users interact with our platform — including the most frequently visited pages, time spent on each page, and errors encountered. This data helps us continuously improve the platform. Information is collected in aggregate and anonymised form.
• Functional Cookies: Allows the platform to remember your preferences such as selected odds settings, favourite sports, and display settings, helping to personalise your experience.

You can manage your cookie preferences through your browser settings. Please note that disabling all cookies may affect the functionality and user experience of the bila2win platform. For more information on how to manage cookies in your browser, refer to your browser's documentation.

Under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data held by bila2win:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Data access requests can be made by emailing support@bila2win.onl, and we will process your request within 21 business days.
• Right to Rectification: If the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. You can update certain basic profile information directly through your account settings.
• Right to Object to Processing: You have the right to object to the use of your data for certain purposes, particularly for marketing communications. You may object via the unsubscribe option in our emails or by contacting us directly.
• Right to Withdraw Consent: Where we process your data based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the validity of any processing carried out prior to the withdrawal.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that we may be required to retain certain data for periods prescribed by Malaysian law, particularly data relating to financial transactions and identity verification.

Bila2win retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: For as long as your account remains active, we will retain all relevant profile information and account history.
• Financial Transaction Data: Deposit, withdrawal, and betting history records are retained for a minimum of 7 years after the transaction date, in accordance with Malaysia's Income Tax Act requirements and anti-money laundering regulations.
• KYC Documents: Copies of identity verification documents are retained for a minimum of 5 years after account closure.
• Communication Data: Communication records with customer support are retained for 3 years for reference and dispute resolution purposes.
• After Account Closure: When your account is closed, data that is no longer required for legal or compliance purposes will be deleted or anonymised within 90 days.

Data that is no longer needed will be securely deleted using methods that ensure it cannot be recovered. For data stored on physical media, a verified destruction process will be applied.

Bila2win is a betting platform intended solely for individuals aged 18 years of age and above. We do not knowingly collect or process the personal data of any individual under the age of 18.

We have strict age verification procedures in place during the registration process. Should we confirm that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to:

• Closing the account in question immediately.
• Deleting all personal data of that individual from our systems.
• Refunding any funds that may have been deposited.
• Reporting the incident to the relevant authorities if necessary.

If you are a parent or guardian and suspect that your child under the age of 18 has registered for or used the bila2win platform, please contact us immediately at support@bila2win.onl. We will take appropriate action without delay.

Bila2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. All amendments take effect as soon as the updated version is published on our website.

When we make significant changes to this Privacy Policy, we will provide notice through:

• A prominent notice displayed on the bila2win homepage at least 14 days before the amendment takes effect.
• Notification emails to the email address registered to your account.
• In-app notifications on bila2win for logged-in users.

Your continued use of bila2win's services after any amendments to this Privacy Policy take effect will be considered your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data as described in Section 7 above.

The "Last Updated" date shown at the top of this document reflects the date of the most recent amendment to this Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, please don't hesitate to get in touch. Our Malay-speaking team is ready to provide clear guidance and assist you.

How to contact bila2win's Privacy Officer:

• Email: support@bila2win.onl (with the subject line: "Privacy Policy Enquiry")
• Live Chat: Available on the bila2win website, 24 hours a day, 7 days a week
• Response time: We are committed to responding to all privacy enquiries within 3 business days

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, under the Ministry of Digital. We do, however, encourage you to contact us first so that we have the opportunity to address any issues directly and promptly.