Bstar88 Privacy Policy – Protection of Your Personal Data

This Privacy Policy ("Policy") is published by bstar88 ("we", "our platform") and applies to all users and members who access or use the bstar88 platform via the official website at https://bstar88.best, our Android and iOS mobile applications, or any other interface operated by bstar88.

This document clearly outlines the types of personal information bstar88 collects from you, the purposes for which it is collected and used, the parties who may receive your information under limited circumstances, the security measures we take to protect your data, and your rights regarding the personal data bstar88 holds about you.

By registering an account with bstar88, making a deposit, playing games, or simply browsing our platform, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact us before using the bstar88 platform so we can address your concerns.

Bstar88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The latest version of this policy is always available on this page. For material changes, bstar88 will endeavour to notify members via in-platform notifications or their registered email address.

Bstar88 collects the following categories of information from members and users of our platform. This collection takes place through the registration process, platform usage, and interactions with our services:

Bstar88 does not store your full bank account number, credit/debit card number, or e-wallet password on our servers. All sensitive payment information is handled directly by certified third-party payment gateways. bstar88 only receives a transaction success or failure confirmation from those gateways.

Bstar88 uses the personal information collected for the following purposes only. We do not use your data for any other purpose without your explicit consent:

• Account Management: To create, verify and maintain your bstar88 account, including secure login and identity verification processes.
• Transaction Processing: To process deposits made via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay or FPX, and to process your winnings withdrawals to a local Malaysian bank account.
• Service Delivery: To allow you to access and enjoy all games on bstar88, including Live Casino, Slots, Poker, Sports Betting, Badminton, and E-Sports.
• Platform Security: To detect and prevent fraud, money laundering, bot usage, duplicate accounts, and any activity that violates bstar88's Terms & Conditions.
• Customer Support: To allow the bstar88 support team to identify and assist you whenever you contact us with a question or complaint.
• Platform Improvements: To analyse usage patterns in aggregate (without identifying individuals) for the purpose of improving user experience, platform performance, and game selection.
• Service Communications: To send you important account-related notifications such as deposit confirmations, security alerts, and policy changes that require your attention.
• Marketing (with consent): To send you information about bstar88's latest promotions, bonuses, and offers — only if you have given your consent to receive marketing communications. You may withdraw this consent at any time.
• Legal Compliance: To fulfil applicable legal obligations, including anti-money laundering (AML) requirements and Know Your Customer (KYC) procedures.

Bstar88 processes your personal data on valid legal grounds. Depending on the purpose of processing, the legal bases we rely on are:

• Contract Performance: Processing necessary to fulfil the agreement you enter into with bstar88 when registering as a member — including account management and financial transaction processing.
• Legitimate Interest: Processing that is necessary for bstar88's legitimate interests — such as fraud detection, platform security, and anti-money laundering prevention — provided those interests do not override your fundamental privacy rights.
• Legal Compliance: Processing required to comply with legal obligations binding on bstar88, including KYC requirements and reporting obligations set by the relevant authorities.
• Consent: For marketing communications, bstar88 relies on consent that you have explicitly provided. You may withdraw this consent at any time with no negative impact on the services you receive.

Bstar88 does not sell, rent, or disclose members' personal information to third parties for their own marketing purposes. However, in the course of legitimate business operations, bstar88 may share necessary information with the following categories of third parties on a limited basis and for specific purposes:

• Game Providers: The minimum information required to operate your game session is shared with game providers such as Evolution Gaming, Pragmatic Play, and others — strictly for the technical purpose of delivering the games. These providers do not receive your full name, phone number, or payment details.
• Payment Gateway: Required transaction information is shared with payment gateway providers (such as Touch 'n Go, GrabPay, DuitNow, and FPX processors) to facilitate deposits and withdrawals. All payment gateways used by bstar88 are PCI-DSS certified or equivalent.
• IT Service Providers: Companies that provide technical services to bstar88 — such as server hosting, platform analytics, and cybersecurity services — may have limited access to data for operational purposes only. They are bound by strict confidentiality agreements.
• Legal Authorities: bstar88 may disclose information to legal authorities, government agencies or regulatory bodies when required by law, court order or valid legal process. bstar88 will only disclose the minimum information necessary in such circumstances.

Bstar88 uses cookies and similar tracking technologies to enhance your experience on our platform, secure your login session, and understand how members use the platform in aggregate. The following are the types of cookies we use:

• Essential Cookies (Non-Dismissible): These cookies are required for the core functionality of the bstar88 platform, including login session authentication, security management, and transaction processing. Without them, the platform will not function properly. Examples include session tokens that keep you logged in while using the platform.
• Preference Cookies: These cookies store your preferences — such as display language and other platform settings — so you do not need to reconfigure them each time you access bstar88.
• Analytics Cookies: bstar88 uses aggregated analytics data to understand overall platform usage patterns — such as the most visited pages and most popular games. This data is analysed in aggregate form without identifying any specific individual.
• Security Cookies: These cookies help us detect suspicious activity, prevent unauthorised access and protect your account from illegitimate login attempts.

You can manage cookie settings through your web browser preferences. However, blocking essential cookies may affect the functionality of the bstar88 platform and could prevent you from logging in or making transactions. For the mobile platform, cookie settings are managed through the privacy settings on your device.

The security of your personal data is bstar88's top priority. We implement a range of technical and organisational security measures to protect your information from unauthorised access, loss, destruction, or accidental disclosure:

• Encryption of Data in Transit: All communications between your device and bstar88 servers are secured using the latest TLS/SSL protocols with 256-bit encryption. This ensures that data transmitted during login, transactions, and gameplay cannot be intercepted by third parties.
• Stored Data Encryption: Sensitive data stored in bstar88's databases — including passwords (stored as hashes, never in plain text) and KYC information — is encrypted using strong encryption algorithms.
• Internal Access Controls: Access to member data within the bstar88 organisation is governed by a strict need-to-know basis. Only staff who require access to carry out their specific duties are granted permission, and all access is logged and monitored.
• Two-Factor Authentication (2FA): bstar88 supports and encourages the use of two-factor authentication for member account access. Our 2FA system adds an extra layer of security that prevents unauthorised access even if your password is compromised.
• 24/7 Security Monitoring: bstar88's security systems are monitored around the clock, 24 hours a day, by our cybersecurity team to detect and respond to any threats or suspicious activity in real time.
• Regular Security Audits: bstar88 conducts regular internal and external security audits to identify and address any vulnerabilities in our systems before they can be exploited.
• Incident Response Plan: bstar88 has a clear incident response plan in place to manage any data security breaches that may occur. Should an incident arise that affects your data, bstar88 will notify you within a reasonable timeframe.

Although bstar88 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role in keeping your account secure — by using a strong password, never sharing your login credentials with anyone, and promptly reporting any suspicious activity to bstar88 customer support.

As a bstar88 member, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact us at support@bstar88.best with the details of your request:

To exercise any of the rights above, submit a written request to support@bstar88.best with the subject line "Privacy Rights Request", along with your full name and bstar88 account number. bstar88 will respond within 30 business days of receiving your request. No fee is charged for reasonable requests.

Bstar88 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law. Retention periods vary by data type:

• Active Account Data: For the duration your account remains active with bstar88, plus a period of 7 years following account closure, for record-keeping and legal compliance purposes.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in accordance with applicable anti-money laundering and tax legislation.
• KYC Documents: For the full duration of your active membership, plus 5 years after account closure, in line with legal compliance requirements.
• Technical & Security Logs: Between 90 days and 1 year, depending on the type of log and operational requirements.
• Support Communication Records: 3 years from the date of last communication, for quality management and dispute resolution purposes.
• Marketing Data (consent-based): Until you withdraw your consent. Withdrawal of consent does not affect the validity of any processing carried out prior to withdrawal.

Once the relevant retention period has ended, bstar88 will securely delete or anonymise your personal data using approved data disposal procedures. Anonymised data (i.e. data that can no longer be linked to you as an individual) may be retained for analytical purposes indefinitely.

If you have any questions, concerns or requests regarding this Privacy Policy or how bstar88 handles your personal data, please reach out to us through the following channels. Our Bahasa Malaysia-speaking team is ready to assist you:

Bstar88 takes every privacy enquiry seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority. However, we encourage you to contact us first so we can attempt to resolve any issues directly.

Understanding Data Privacy at bstar88 – A Plain-Language Summary

We understand that privacy documents can feel dense and technical. So allow us to summarise what matters most for you as a bstar88 member, in plain language.

First, bstar88 collects your information solely to operate the platform securely and deliver the best experience to you. Your name and phone number are required to identify you as a verified member. Transaction information is needed to process deposits via Touch 'n Go or DuitNow and withdrawals to your bank account. Game data is used to ensure smooth gameplay and to detect any misuse. That is all — there are no hidden purposes.

Second, your data is secure at bstar88. We use the same 256-bit SSL encryption as Malaysian banks for all data transmissions. Our servers are protected by a multi-layered security system and monitored 24 hours a day. We cannot view your password because it is stored as an irreversible hash — inaccessible even to our own staff.

Third, you are in control. You can request to view the data we hold about you, ask for corrections if anything is inaccurate, or in certain circumstances request its deletion. All of this can be done by contacting bstar88 customer support — at no charge and without unnecessary hassle.

Fourth, bstar88 does not sell your data. We share only the minimum necessary information with game providers and payment gateways solely to deliver the services you use. Your name, phone number, and financial data are never shared with advertisers or third parties for their own marketing purposes.

This is the foundation of trust between bstar88 and our 500,000+ members across Malaysia — trust we genuinely value and uphold in every decision we make.