Privacy Policy bcaa44 – User Personal Data Protection

bcaa44 understands that user trust is our most valuable asset. This Privacy Policy details how we manage the personal data you provide when registering, using the platform, or interacting with our customer support team.

This policy covers all platforms and services operated by bcaa44, including the official website at bcaa44.app, the mobile app for Android and iOS, and any official communication channels we use to interact with users.

We are committed to operating in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management. Every decision involving users' personal data is made with the interests and safety of our users as the top priority.

Bcaa44 collects various types of information for specific purposes stated in this policy. We only collect information that is genuinely necessary to provide you with a quality service.

Bcaa44 does not collect sensitive information such as biometric data, medical records, or religious beliefs unless required by law. We also do not collect information beyond what is needed for the stated purposes.

bcaa44 uses your personal data solely for lawful and stated purposes. We will never use your data for any other purpose without first obtaining your consent.

• Account Management: Creating and maintaining user accounts, including the KYC identity verification process, which is a standard compliance requirement.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and efficiently.
• Platform Security: Detecting and preventing fraudulent activity and unauthorised access, while protecting the overall integrity of the platform.
• Customer Support: Providing effective technical assistance and customer service when you contact our team.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offering appropriate assistance.
• Service Communications: Sending important notifications related to your account, policy updates, or relevant security information.
• Marketing (with consent): Delivering promotional offers and new product information exclusively to users who have consented to receive marketing communications.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.

bcaa44 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share information with certain parties to ensure the platform operates smoothly and securely.

Data sharing only takes place under the following circumstances and with strict safeguards in place:

• Trusted Payment Processors: Transaction information is shared with licensed payment processors that assist us in handling deposits and withdrawals. All such processors are bound by strict data protection agreements.
• KYC Verification Provider: Identity documents are shared with licensed and registered KYC service providers for verification purposes only.
• Legal Authority: bcaa44 will disclose required information when mandated by a valid court order, anti-money laundering investigation, or official request from a relevant authority.
• Technical Service Provider: Cloud and technical infrastructure providers that assist us in running the platform may have limited access to data necessary to perform their services, subject to strict confidentiality agreements.

User data security is the absolute top priority for bcaa44. We continuously invest in the latest security infrastructure to ensure your information is always protected against cyber threats and unauthorized access.

The technical and organisational security measures we implement include:

• End-to-End Encryption (E2E): All data in transit is encrypted using the latest TLS 1.3 protocol. Stored data is encrypted using AES-256.
• Two-Factor Authentication (2FA): 2FA is available and strongly encouraged for all user accounts as an added layer of security.
• 24/7 Security Monitoring: The bcaa44 cybersecurity team monitors platform activity around the clock to detect any threats or anomalies.
• Regular Penetration Testing: Security audits and penetration testing are conducted regularly by accredited independent security firms.
• Internal Access Control: bcaa44 staff are only granted access to user data on a strict need-to-know basis.
• Incident Response Plan: bcaa44 has established security incident response procedures. In the event of a data breach, affected users will be notified within 72 hours.

bcaa44 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns on an aggregate basis.

There are three categories of cookies used by bcaa44:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are essential for the platform to operate.
• Functional Cookies: Saving user preferences such as language, display settings, and personal preferences to provide a more personalised experience.
• Analytics Cookies: Collecting anonymised usage data to help us understand how users interact with the platform and improve our services.

You can control and manage cookie settings through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the bcaa44 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have various rights regarding your personal data held by bcaa44. We fully respect and facilitate the exercise of these rights.

bcaa44 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. Retention periods vary according to data type and legal requirements.

• Active Account Data: Retained for as long as your account is active or our services are required.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's tax and AML legal requirements.
• KYC Data: Retained for 5 years after account closure in accordance with compliance requirements.
• Support Communication Logs: Retained for 3 years for reference and service improvement purposes.
• Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data will be securely deleted using non-recoverable deletion methods or fully anonymised for aggregate analytics purposes only.

bcaa44 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from any individual under the age of 18.

If we discover that we have collected data from a minor without valid parental consent, we will immediately take the following steps:

• Suspending the account in question immediately while an investigation is conducted.
• Deleting all related personal data within 48 hours of verification.
• Reporting the case to the relevant authorities as required by law.
• Conducting a review of the age verification process to prevent similar incidents from occurring.

Parents or guardians who suspect their child has registered an account on the bcaa44 platform are urged to contact our support team immediately via email at [email protected].

bcaa44 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be announced to users via in-platform notifications or email to the registered address.

The latest version of this Privacy Policy is always available on this page, with the last updated date clearly displayed at the top. We encourage you to review this page regularly, at least once every three months.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bcaa44 handles your personal data, our team is ready to assist.

You may contact the bcaa44 Data Protection Officer (DPO) through the following channels:

• Official Email: [email protected]
• Response Time: Within 14 business days from the date the request is received
• Supported Languages: Bahasa Malaysia and English

We are committed to resolving all privacy-related inquiries transparently and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.