Privacy Policy bt50 — Personal Data Protection for Malaysia Members

1 Introduction & Scope of bt50's Privacy Policy

Bt50 — operated under the domain bt50.my — is an online gaming platform providing a range of digital entertainment services to registered members in Malaysia. In the course of delivering these services, bt50 needs to collect and process certain personal data from our members. This Privacy Policy has been prepared to ensure all members have a clear understanding of what data is collected, for what purposes, how it is protected, and what rights you hold as a data subject under Malaysian law.

Bt50 acts as a "Data Processor" as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). This means bt50 is legally responsible for ensuring that all personal data we hold is processed in a lawful, fair, transparent, and secure manner in accordance with applicable Malaysian law.

This Privacy Policy applies to all users of the bt50 platform — including registered members, website visitors, free demo mode users, and any party interacting with bt50's systems in any capacity. If you are using bt50's services on behalf of another individual, you are responsible for ensuring that person has been informed of this Privacy Policy and has given the necessary consent.

2 Types of Personal Data Collected by bt50

Bt50 collects various categories of personal data depending on the nature of your interactions with our platform. Below is a full breakdown of the types of data that may be collected:

Bt50 does not collect sensitive personal data such as health information, criminal records, or religious information unless required by law or a legitimate KYC verification process.

3 How bt50 Collects Your Personal Data

Bt50 collects your personal data through several distinct channels, all in a transparent and lawful manner:

• Instant Account Registration — When you complete the bt50 registration form with your full name, phone number, email address, and other basic information required to create your account.
• KYC Verification Process — When you submit identity verification documents such as a copy of your MyKad or passport during the Know Your Customer process, which may be requested by the bt50 compliance team prior to the withdrawal of certain amounts.
• Financial Transactions — When you make a deposit using DuitNow Transfer, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks, RHB Now, Hong Leong Connect), the relevant transaction details are automatically recorded in the bt50 system.
• Automatic Platform Usage — As you browse and use the bt50 platform, technical information such as your IP address, device type, web browser, and pages visited is automatically collected via cookie technology and server logs.
• Customer Support Interactions — When you contact the bt50 support team via live chat, email, or Telegram, records of those conversations are retained for service quality and dispute resolution purposes.
• Authorised Third Parties — In certain cases, bt50 may receive information about you from licensed payment service providers or identity verification agencies in Malaysia for the purpose of fraud prevention.

4 How bt50 Uses Your Personal Data

Bt50 uses the personal data it collects solely for the following legitimate and stated purposes:

• Creating and managing your bt50 member account, including identity verification and age eligibility checks.
• Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX, and managing withdrawal payouts to member accounts.
• Providing access to all games in the bt50 collection, including video slots, Live Casino, keno, and table games.
• Sending important account notifications — such as deposit confirmations, withdrawal approvals, password changes, and security alerts.
• Fulfilling legal and regulatory obligations applicable in Malaysia, including Anti-Money Laundering (AML) requirements and fraud prevention.
• Providing effective customer support and resolving any issues or disputes that arise.
• Analysing platform usage patterns for the continuous improvement of the bt50 user experience.
• Sending promotional information and exclusive bt50 offers to members who have consented to receive marketing communications — you may unsubscribe from marketing emails at any time.

5 Sharing & Disclosure of Data to Third Parties

Bt50 does not sell, rent, or trade members' personal data to any party for commercial purposes. However, in the course of operating the platform, bt50 may need to share your personal data with certain categories of third parties in limited and legitimate circumstances:

• Payment Service Providers — Payment gateway providers DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX receive the transaction information necessary to process your deposits and withdrawals. They are subject to their own privacy policies and Bank Negara Malaysia regulations.
• Game Software Providers — Game providers supplying slots, live casino, and other games to the bt50 platform may receive technical data necessary for smooth game operation. All such providers are bound by strict confidentiality agreements.
• Malaysian Authorities — bt50 will disclose personal data to the relevant authorities such as the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or the courts when required by law or a valid court order.
• Identity Verification Services — Licensed identity verification agencies and fraud prevention services in Malaysia may receive the information necessary for KYC verification and anti-money laundering purposes.
• Auditors & Legal Consultants — Independent audit firms and legal counsel appointed by bt50 may have access to certain data within a strictly limited scope for compliance audit and legal advisory purposes.

In all of the data-sharing scenarios above, bt50 ensures that the receiving party has adequate data protection measures in place and uses the data only for the specific authorised purpose.

6 bt50 Data Security Measures

The security of members' personal data is a core operational priority at bt50. We implement multiple layers of technical and organisational safeguards to protect your data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL Encryption — All data transmitted between your web browser and bt50's servers is encrypted using TLS 1.3 protocol with AES-256-bit encryption. This covers login credentials, transaction details, and all communications within the platform.
• Two-Factor Authentication (2FA) — bt50 offers two-factor authentication as an additional security layer recommended for all members — particularly those who conduct frequent financial transactions.
• 24/7 Security Monitoring — bt50's cybersecurity team monitors our systems around the clock, 24/7, to promptly detect and respond to any threats or suspicious activity.
• Strict Access Controls — Only bt50 staff who are explicitly authorised and require data access to perform their duties may access members' personal data — and all such access is logged and audited on a regular basis.
• Regular Security Testing — The bt50 platform undergoes regular penetration testing and security audits conducted by independent third parties to identify and remediate any vulnerabilities before they can be exploited.
• Secure Data Backup — bt50 member data is stored across multiple secure data centres with regular backup procedures to ensure no data loss occurs, even in the most severe system failure scenarios.

7 Personal Data Retention Period

Bt50 will not retain your personal data longer than is necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations. bt50's standard retention periods are as follows:

• Active account data — Retained for the duration your account remains active and for 7 years following account closure for legal compliance purposes.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysian financial legislation, including the Anti-Money Laundering Act 2001.
• Customer support communication records — Retained for 3 years from the date of the last interaction for the purposes of resolving any disputes that may arise.
• Technical data and server logs — Retained for a maximum of 12 months for service analysis and improvement purposes.
• KYC verification data — Retained for 5 years from the date of the last verification or account closure, whichever is later.

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised using procedures that ensure the information cannot be recovered or re-identified.

8 Your Rights as a bt50 Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding the personal data bt50 holds about you:

To exercise any of the rights above, please submit a written request to the bt50 privacy team via email at [email protected] by stating the specific right you wish to exercise along with your account information for identity verification purposes. bt50 is committed to processing all requests thoroughly and responding within the timeframe prescribed by law.

9 bt50 Cookie & Tracking Technology Policy

Bt50 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates smoothly. Cookies are small text files stored in your web browser when you visit bt50.my. The following are the types of cookies bt50 uses:

• Essential Cookies — Required for core bt50 platform functions such as login session authentication, form security, and language preferences. These cookies cannot be disabled as they are essential to the website's operation.
• Performance Cookies — Collects anonymous information on how members use the bt50 platform — including the most visited pages, time spent, and errors encountered — to help us continuously improve the overall user experience.
• Functionality Cookies — Allows bt50 to remember your preferences such as text size, preferred layout, and other personal settings so you don't have to reconfigure them each time you visit bt50.my.

Bt50 does not use third-party cookies for advertising purposes or sell tracking data to external advertising networks. You can manage your cookie settings through the "Settings" or "Preferences" section of your web browser (Chrome, Safari, Firefox, Edge, or others). Please note that disabling certain cookies may affect the functionality of some bt50 platform features.

10 Children's Privacy Protection

The bt50 platform is strictly for individuals aged 21 and above. bt50 does not knowingly collect personal data from anyone under the age of 21. If you believe we have inadvertently collected personal data from someone below this age, please contact bt50 immediately at [email protected] so that the appropriate data deletion action can be taken without delay.

Bt50 implements technical measures to prevent registration by underage individuals, including mandatory date-of-birth verification at registration and a KYC process that confirms members' ages. Should any account be found to belong to an underage individual, the account will be closed immediately and all remaining balances returned to their legal guardian upon verification.

11 Amendments to bt50's Privacy Policy

Bt50 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to bt50's services. Any amendments will take effect immediately upon publication of the updated Privacy Policy at bt50.my.

For material amendments — meaning significant changes that affect how your data is used — bt50 will endeavour to notify active members via email or in-account notice at least 14 days before the changes take effect. The "Updated" date displayed at the top of this Privacy Policy will always reflect the date of the most current version of this document.

Your continued use of the bt50 platform following the publication of any amendments to this Privacy Policy will be deemed as your acceptance of the revised terms. If you do not agree with the changes made, you have the right to close your bt50 account by contacting our support team.

12 Contact bt50's Privacy Officer

If you have any questions, concerns, or complaints regarding bt50's Privacy Policy or how we handle your personal data, please reach out to our privacy team through the following channels:

• Privacy Email: [email protected] — include the subject line "Privacy Enquiry" for faster handling
• bt50 Live Chat: Available 24/7 directly at bt50.my — the fastest option for general enquiries
• Official Telegram: @bt50official — for announcements and general enquiries

Bt50 is committed to responding to all privacy-related enquiries within 3 business days. For more complex requests — such as data access or data deletion applications — the response period is up to 21 business days in accordance with Malaysia's PDPA 2010. If you are dissatisfied with bt50's response, you have the right to escalate your complaint to the Personal Data Protection Commissioner of Malaysia for further consideration.