Privacy Policy BD303 – Data Protection & Your Information

BD303 ("we", "Platform", or "Company") is fully committed to protecting the privacy and security of the personal information of all members and users of our platform. This Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal data when you use the official BD303 website, mobile app, and all related services.

This document is prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and applicable legislation to ensure your privacy rights are always protected. We encourage you to read this Privacy Policy carefully and contact us should you have any questions.

This Privacy Policy covers all information collected through:

• Bd303's official website at bd303.win
• BD303 mobile app for Android and iOS
• Any written or electronic communication between you and the BD303 team
• Registration process, KYC verification, and financial transactions

BD303 only collects information that is truly necessary to provide you with a safe, efficient, and responsible service. The following are the categories of information we collect:

We do not collect sensitive information such as biometric data, health information, or political views unless specifically required by law.

Information collected is used solely for lawful and transparent purposes. bd303 uses your data for the following:

• Account Management: Creating, maintaining, and managing your member account, including secure registration and login processes.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions promptly and accurately.
• Identity Verification: Carrying out the KYC process to ensure compliance with legal requirements and to prevent fraud and money laundering.
• Platform Security: Detecting and preventing suspicious activity, unauthorised access, and any security threats to your account.
• Service Enhancement: Analysing usage patterns to improve platform features, user interface, and overall experience.
• Customer Support: Processing and responding to member inquiries, complaints, and requests for assistance.
• Marketing Communications: Sending promotional information, bonuses, and platform updates — only to members who have given their consent.
• Responsible Gaming: Monitoring wagering patterns to identify members who may need assistance and support related to responsible gaming.

BD303 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers: To process deposit and withdrawal transactions, necessary financial information may be shared with certified payment processors bound by strict confidentiality agreements.
• KYC Verification Partner: Registered and approved third-party identity verification service providers to ensure compliance with anti-money laundering (AML) requirements.
• Authorities and Regulatory Bodies: BD303 will disclose required information to legal authorities, regulatory bodies, or enforcement agencies when required by law or court order.
• Technical Service Providers: Companies that help us manage IT infrastructure, cybersecurity, and platform maintenance — all bound by strict data protection agreements.

The bd303 platform uses cookies and similar tracking technologies to enhance user experience and ensure platform security. Below are the types of cookies we use:

• Essential Cookies: Required for basic platform functions such as login session verification and account security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve website functionality and speed.
• Preference Cookies: Remembering your settings and preferences, such as preferred language and display preferences, to deliver a more personalised experience.
• Analytics Cookies: Helping us understand aggregated and anonymised usage patterns for platform improvement purposes.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of some BD303 platform features.

BD303 invests seriously in cybersecurity infrastructure to ensure your data is always protected. The security measures we employ include:

• 256-bit SSL/TLS Encryption on all data communications between your device and our servers.
• Two-Factor Authentication (2FA) available for all member accounts as an additional security layer.
• 24/7 Monitoring by our cybersecurity team to detect and respond to any threats in real time.
• Regular security audits by independent third parties to verify the integrity of our data protection systems.
• Strict internal access controls — only authorised personnel may access member personal data, and all access is recorded.
• Encrypted data backups stored in a separate, secure location to ensure continuity of service.

While we take all reasonable precautions, no security system can guarantee 100% absolute protection. You also play an important role by keeping your account password confidential and not sharing it with anyone.

As a data subject, you have rights protected under Malaysia's data protection laws. BD303 respects and facilitates the exercise of the following rights:

To exercise any of the above rights, please contact our privacy team through the available support channels. We will process your request within 30 working days from the date of receipt.

BD303 only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy or as required by law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and in use.
• Financial transaction records: Retained for a minimum of 7 years after transactions occur to comply with financial and tax legal requirements.
• KYC documents: Retained for a minimum of 5 years after the account termination or closure date.
• Support communication logs: Retained for 3 years for reference and resolution of any disputes that may arise.
• Technical data and system logs: Retained for 12 months for security and audit purposes.

Once the specified retention period has ended, data will be securely deleted or anonymised so it can no longer be linked to your identity.

BD303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data management practices, new legal requirements, or service improvements. When significant changes are made, we will notify you via:

• A prominent notice on the bd303 platform's home page
• Notification emails sent to your registered email address
• An in-account notice upon your next login

The "Last Updated" date at the top of this document indicates when this Privacy Policy was most recently reviewed. Continued use of the BD303 platform after changes take effect constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data, the BD303 privacy team is ready to assist you. You can reach us through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
• FAQ Section: Visit FAQ page for answers to common privacy-related questions

We are committed to responding to all privacy-related inquiries within 3 working days. For official requests related to data rights, the processing period is up to 30 working days depending on the complexity of the request.

If you are not satisfied with our response, you have the right to file a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory body.