Privacy Policy bcaa4 — Member Personal Data Protection

Bcaa4 ("we", "our platform") is the operator of an online gaming platform accessible via bcaa4.win and the official bcaa4 mobile app. We take member data protection extremely seriously and are committed to ensuring that every piece of information you share with us is handled responsibly, securely, and transparently.

This Privacy Policy applies to all users who browse the bcaa4 website, register an account, use gaming services, or interact with any feature of our platform. This includes registered members, prospective members in the process of registering, and general visitors to the website.

We encourage you to read this document carefully. If any section is unclear or you would like further clarification, please contact our data protection team using the details provided at the end of this document.

Bcaa4 collects various categories of personal information from members to enable us to provide services that are secure, legally compliant, and of the highest quality. The following are the main categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. bcaa4 does not collect excessive or irrelevant data in relation to platform operations.

Bcaa4 uses the personal information collected for the following purposes, and only for those purposes:

• Account management: Creating and maintaining your member account, including identity verification and KYC processes as required by law.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Legal compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements, KYC, and reporting to authorities when required.
• Platform security: Detecting and preventing fraud, unauthorised access, bonus abuse, and other suspicious activity.
• Service communications: Sending important notifications related to your account, transactions, system updates, and policy changes.
• Marketing (with consent): Sending promotional information, bonus offers, and the latest bcaa4 news — only with your consent.
• Platform improvement: Analysing usage patterns to improve user experience, platform performance, and the development of new features.
• Responsible gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.

Bcaa4 does not sell, rent, or trade member personal data to any third party for their own marketing purposes. However, in certain situations, we may need to share specific information with the following parties:

• Payment service providers: Financial institutions and payment processors required to facilitate your deposits and withdrawals. They receive only the information necessary to process the relevant transactions.
• Game software providers: Companies that supply games to the bcaa4 platform may receive the technical data necessary to deliver a seamless gaming experience.
• Regulatory authorities: bcaa4 will disclose information when required by Malaysian law, including to the Royal Malaysia Police, Bank Negara Malaysia, or other relevant regulatory authorities.
• Technical service providers: Companies that assist us with data hosting, cybersecurity, analytics, and system support — all subject to strict data protection agreements.

All third parties we work with are required to comply with data protection standards at least equivalent to those practised by bcaa4. We do not permit them to use your data for their own purposes.

Bcaa4 stores member personal data using server infrastructure protected by industry-standard security measures. All data stored and transmitted through the bcaa4 platform is secured with 256-bit SSL encryption, ensuring no unauthorized party can intercept or read your information.

Key security measures we practise include:

• End-to-end encryption for all sensitive data communications between your device and bcaa4 servers.
• Strict access controls — only authorised bcaa4 staff with a legitimate business need may access member personal data.
• Continuous 24/7 system monitoring to detect any intrusion attempts or suspicious activity.
• Regular security testing including penetration testing by independent third parties.
• Regular data backup procedures to ensure service continuity.

Data retention periods depend on the category of data and applicable legal requirements. Active account data is retained for as long as the account remains active. Following account closure, certain data may be retained for up to seven (7) years to fulfil legal obligations such as financial records and AML requirements.

In the event of any data security breach affecting your personal data, bcaa4 is committed to notifying you and the relevant authorities within the timeframe stipulated by law.

The bcaa4 platform uses cookies and similar tracking technologies to enhance your experience and keep essential platform functions running smoothly. Cookies are small text files stored on your device when you visit our website.

Types of cookies used by bcaa4:

• Essential Cookies: Required for core platform operations such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised data on how you use the platform to help us improve website performance and usability.
• Functional Cookies: Saving your preferences such as language, display settings, and game choices to provide a more personalised experience.
• Analytics Cookies: Helping us understand traffic patterns and platform usage for service development and improvement.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the bcaa4 platform.

As a bcaa4 member and individual whose personal data we process, you have the following rights under the Malaysian Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, please contact the bcaa4 data protection team. We will process your request within 14 business days.

The bcaa4 platform is not intended for individuals under the age of 18. We do not knowingly collect or process personal data from minors. If you believe we have inadvertently collected information from an underage individual, please contact us immediately and we will take appropriate steps to delete that information.

The bcaa4 platform may contain links or integrations with third-party services such as payment providers and game providers. This Privacy Policy applies solely to the bcaa4 platform and does not cover the privacy practices of those third parties.

Bcaa4 is not responsible for the content, privacy policies, or security practices of third-party websites or services. We encourage you to read the privacy policy of each third-party service you use separately.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact the bcaa4 Data Protection Officer (DPO) team. We are committed to responding within 14 business days of receiving your request.

Bcaa4 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant amendments will be communicated to members via their registered email or an in-platform notification before the changes take effect.