B200 Privacy Policy – Personal Data Protection for Malaysian Players

1 Introduction & Scope of This Policy

This Privacy Policy applies to all users who register, browse, or use any services provided by b200 in Malaysia. This covers use of the main website, mobile application (where applicable), customer service, and all related communications between you and b200.

We take your privacy very seriously. In today's digital world, trust between a platform and its users is built not only through a great gaming experience, but also through transparency in how personal data is handled. That is why we have drafted this policy in detail and written it in Bahasa Melayu so that every member b200 in Malaysia.

2 Types of Personal Data We Collect

b200 collects various categories of personal data depending on how you interact with our platform. Below is a summary of the data that may be collected:

We do not collect sensitive data such as medical information, political views, or religious beliefs. Financial data relating to Malaysian local payment methods — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX — is handled to the highest security standards.

3 How We Collect Your Data

b200 collects your personal data through the following channels:

• Account registration: Information you provide during registration, such as your name, email address, and phone number.
• Use of services: Gaming activity, deposit and withdrawal transactions, and interactions with platform features.
• Identity verification: Documents you submit, such as a copy of your MyKad, for KYC (Know Your Customer) purposes to meet regulatory requirements.
• Customer support interactions: Information you provide when contacting our support team b200 via live chat or email.
• Automated technologies: Cookies, tracking pixels, and server logs collected automatically as you browse the platform.
• Trusted third parties: Information verified through payment providers such as FPX or local eWallets to authenticate your financial transactions.

Each of these data collection methods has a valid legal basis under Malaysia's PDPA, and we ensure that only data that is genuinely necessary is collected at every stage.

4 How We Use Your Personal Data

b200 uses the personal data collected for the following purposes:

• Service delivery: Creating and managing your account, processing deposits and withdrawals in MYR (RM), and enabling access to all games including slots, live casino, and card games.
• Identity verification: Fulfils the KYC and Anti-Money Laundering (AML) requirements mandated under Malaysian law.
• Security and fraud prevention: Detecting and preventing unauthorised activity, fraud, or misuse of the platform.
• Service communications: Sending important notifications relating to your account, transactions, Privacy Policy updates, or Terms & Conditions.
• Customer support: Helps resolve any queries or complaints you raise with the support team b200.
• Platform improvements: Analysing usage data to improve service quality and the gaming experience at b200.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offering appropriate support to members who may need it.
• Legal compliance: Fulfils reporting obligations to Malaysian authorities when required by law.

5 Sharing Data with Third Parties

b200 does not sell your personal data. However, in certain circumstances, we may share your data with the following parties on legitimate grounds:

• Local payment providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks offering FPX services such as Maybank2u and CIMB Clicks — used solely to process your financial transactions.
• Gaming software providers: Technology partners who develop and maintain the games available on the platform b200, subject to strict confidentiality agreements.
• Cloud and hosting service providers: The technical infrastructure used to operate the platform b200 securely and reliably.
• Malaysian authorities: Law enforcement agencies, courts, or regulatory bodies when required by Malaysian law or a valid court order.
• Professional consultants: Lawyers, accountants, or auditors bound by professional confidentiality obligations.

Any data sharing with third parties is governed by agreements that ensure those parties comply with data protection standards equivalent to or exceeding Malaysia's PDPA requirements. Your information will not be transferred across international borders without adequate safeguards in place.

6 Cookies & Tracking Technologies

Platform b200 uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collects information about how visitors use the platform (e.g. the most frequently visited pages) to help us enhance the gaming experience.
• Functional Cookies: Remembering your preferences — such as your chosen language, display settings, and game preferences — so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Helps us understand aggregate (not individual) usage patterns to improve the platform b200.

You can manage cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of the platform b200 and your overall gaming experience.

7 Data Security & Protection Measures

b200 continuously invests in cybersecurity infrastructure to keep your personal data protected at all times. Key security measures we employ include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers b200.
• Encryption at rest for all sensitive records stored in our databases.
• Role-Based Access Control to ensure that only authorised personnel can access members' personal data.
• Round-the-clock security monitoring with automated intrusion detection systems.
• Regular security testing and vulnerability assessments conducted by independent third parties.
• Regular data backup procedures to ensure continuity of service.

That said, no system can guarantee absolute security in the digital world. Should a serious data security incident occur, b200 is committed to notifying affected members within the timeframe prescribed by applicable Malaysian law.

8 Data Retention & Deletion

b200 will retain your personal data for as long as your account remains active or as long as necessary to provide services to you. Once your account is closed, we will retain your data for the minimum period required under applicable Malaysian law — typically between five and seven years — before it is securely deleted or anonymised.

Data retention periods vary by category:

• Financial transaction records: Minimum 7 years from the transaction date, in line with Malaysian financial regulatory requirements.
• Identity verification (KYC) records: Minimum 5 years after account termination.
• Customer support communication records: 2 years from the date of last interaction.
• Log and analytics data: Anonymised after 12 months for analytical purposes.

When a retention period expires or you submit a data deletion request, b200 will delete or anonymise your data in a secure and irreversible manner, subject to any legal obligations that remain in force.

9 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by b200:

• Right of access: You have the right to obtain a copy of the personal data we hold about you.
• Right to rectification: You have the right to request that we correct any data that is inaccurate or out of date.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data (subject to legal obligations).
• Right to restrict processing: You have the right to request that we restrict how we process your data under certain circumstances.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team b200 via live chat or email at [email protected]. We will process your request within 14 business days. For more complex cases, this period may be extended to up to 30 days, and we will notify you of any such delay.

10 Contact Us & Policy Updates

If you have any questions, concerns, or complaints regarding how b200 handles your personal data, please contact us through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform b200
• Target response time: Within 2 business days for email; immediately for live chat

b200 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. Any material amendments will be communicated to you via your registered email or an in-platform notification at least 14 days before taking effect.

Continued use of the platform b200 after the effective date of any amendment indicates that you have read and accepted the updated Privacy Policy. We encourage you to review this page periodically so you always know how we protect your information.