Privacy Policy

This Privacy Policy ("Policy") is issued by BCT666 ("BCT666", "we", "us", "our") and applies to all personal data collected from individuals ("you", "User", "Player") who access or use the BCT666 online gaming platform, including the website at bct666.cam, any associated sub-domains, mobile interfaces, and all services offered through those channels (collectively, the "Platform" or "Services").

BCT666 operates as an internationally licensed online casino and sports betting platform serving the Malaysian market and other permitted jurisdictions. The responsible handling of personal data is central to BCT666's operations, and this Policy reflects our commitment to transparency, data security, and respect for the privacy rights of every User.

By registering an account, making a deposit, or continuing to use the Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. Where you do not agree with any aspect of this Policy, you should discontinue use of the Services and contact our support team to discuss account closure.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation or set of operations performed upon Personal Data, whether by automated means or otherwise, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means BCT666, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of BCT666 pursuant to BCT666's instructions and a data processing agreement.
• "KYC Data" means identity verification documentation provided by a User for the purpose of completing BCT666's Know Your Customer obligations, including but not limited to identity documents, proof of address, and selfie photographs.
• "Cookies" means small text files placed on a User's device by the Platform to collect and store information about browsing behaviour, session preferences, and usage patterns.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including financial account details, government-issued identity numbers, and any health-related information provided in the context of responsible gambling requests.

BCT666 collects the following categories of Personal Data in connection with the provision of the Services:

BCT666 does not intentionally collect Personal Data from individuals under the age of 21. If we become aware that data from an underage individual has been collected, it will be deleted promptly and the relevant account closed.

BCT666 collects Personal Data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with any feature of the Platform that requires you to provide information.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies that record your interactions with the Platform, including pages visited, time spent, bet placements, and login activity.
• From third-party payment providers — when you initiate a financial transaction through Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or other integrated payment channels, BCT666 receives transaction confirmation data sufficient to credit or debit your account.
• From identity verification services — BCT666 may use third-party KYC verification platforms to cross-reference identity documents against available databases as part of its compliance obligations. These services operate under separate data processing agreements with BCT666.
• From fraud prevention and security tools — automated risk-assessment and fraud-detection systems may collect behavioural and device fingerprinting data to identify suspicious activity patterns.

BCT666 processes Personal Data for the following specific purposes:

1. Account Management: To create, maintain, and administer your BCT666 account, including authentication, account settings, and account history.
2. Service Delivery: To facilitate deposits, process withdrawals, settle bets, credit bonuses, and deliver all gaming and sports betting products available on the Platform.
3. Identity Verification (KYC): To verify your identity and age as required under BCT666's international licensing obligations and anti-money laundering (AML) compliance programme.
4. Regulatory Compliance: To fulfil obligations under BCT666's operating licence, including record-keeping, reporting, and cooperation with licensing and regulatory authorities where required.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised access, money laundering, and other security threats to the Platform and its users.
6. Customer Support: To respond to your enquiries, complaints, and support requests, including maintaining records of communications for quality assurance and dispute resolution purposes.
7. Responsible Gambling: To administer self-exclusion requests, deposit limits, session limits, and other responsible gambling tools; and to identify and reach out to users exhibiting signs of problematic gambling behaviour.
8. Personalisation and Analytics: To personalise your Platform experience, including recommended games and relevant promotions, and to analyse aggregated usage patterns to improve the Services.
9. Marketing Communications: To send promotional offers, bonus notifications, and product updates where you have consented to receive such communications. You may withdraw marketing consent at any time by contacting support or updating your account preferences.
10. Legal Claims: To establish, exercise, or defend legal claims where necessary.

BCT666 relies on the following legal bases for processing Personal Data, consistent with internationally recognised data protection frameworks:

• Contractual Necessity: Processing necessary to perform our obligations under the Terms & Conditions you have agreed to, including account administration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable licensing conditions, anti-money laundering regulations, age verification requirements, and other regulatory obligations to which BCT666 is subject.
• Legitimate Interests: Processing carried out in pursuit of BCT666's legitimate business interests, including fraud prevention, security monitoring, and improvement of the Platform, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing undertaken on the basis of your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and, where applicable, certain cookie-based processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

BCT666 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. BCT666 may share Personal Data with the following categories of recipients under the following circumstances:

• Payment Service Providers: Entities such as Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other integrated payment channels receive transaction data necessary to process deposits and withdrawals. These providers are subject to their own privacy policies and regulatory obligations.
• KYC and Identity Verification Partners: Specialist third-party KYC providers that assist BCT666 in verifying user identities and assessing AML risk, operating under data processing agreements that restrict the use of your data to KYC purposes only.
• Technology and Infrastructure Providers: Cloud hosting providers, cybersecurity vendors, and software service providers who process data on BCT666's behalf under contractual data protection obligations.
• Fraud Prevention Networks: Industry fraud prevention and risk management databases that BCT666 contributes to and queries in the interests of protecting all platform users from account fraud and financial crime.
• Regulatory and Licensing Authorities: BCT666's licensing authority and, where legally required, competent law enforcement or government bodies, upon receipt of a lawful request or court order. BCT666 will notify you of such disclosure where legally permissible.
• Professional Advisors: Legal counsel, auditors, and financial advisors, where disclosure is necessary for the conduct of professional services, subject to applicable professional confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, or sale of all or substantially all of BCT666's assets, Personal Data may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations.

BCT666 operates as a globally accessible platform and may transfer your Personal Data to countries or jurisdictions outside Malaysia and outside the European Economic Area (EEA). Such transfers may be necessary to facilitate the services of our technology partners, payment processors, or KYC providers who operate globally.

Where Personal Data is transferred internationally, BCT666 takes reasonable steps to ensure that appropriate safeguards are in place to protect the data, including requiring contractual protections from recipient parties consistent with internationally recognised data protection standards.

By using BCT666's Services, you acknowledge and consent to the potential transfer of your Personal Data to international jurisdictions for the purposes described in this Policy.

BCT666 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or regulatory obligation.

The following general retention principles apply:

• Account and Gaming Data: Retained for the duration of your active account and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, as required under applicable AML/CFT frameworks applicable to BCT666's licensing jurisdiction.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Support and Communication Records: Retained for three (3) years from the date of the most recent communication, unless the matter is subject to ongoing legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to evidence compliance with marketing obligations.

At the end of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with BCT666's internal data destruction procedures.

BCT666 uses cookies and similar tracking technologies to enhance your experience on the Platform, ensure functionality, and gather analytical data about how the Services are used. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Essential to the operation of the Platform, including session management, authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, currency display, and last-visited game category, to personalise your experience on return visits.
• Analytical Cookies: Used to collect aggregated data about user interactions with the Platform — pages visited, time spent, navigation paths — to help BCT666 improve the Services. Data collected by analytical cookies does not identify individual users.
• Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of BCT666's marketing activities, where you have consented to receive marketing communications.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the Platform. A cookie consent tool may be presented upon your first visit to the Platform, allowing granular consent choices.

Subject to applicable law and the specific circumstances of your request, you may have the following rights in relation to your Personal Data held by BCT666:

• Right of Access: The right to request a copy of the Personal Data BCT666 holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: The right to request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies.
• Right to Restriction: The right to request that BCT666 restricts processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to Data Portability: The right to receive Personal Data you have provided to BCT666 in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: The right to object to processing of your Personal Data where BCT666 relies on legitimate interests as the legal basis, or where processing is for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact BCT666's Data Protection team at [email protected]. BCT666 will respond to verified requests within 30 days. We may require identity verification before processing your request to ensure the security of your data.

BCT666's Services are strictly intended for individuals aged 21 years and above. BCT666 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and BCT666 reserves the right to request documentary proof of age at any time.

If BCT666 becomes aware, through any means, that an account has been opened by or on behalf of an individual under the age of 21, BCT666 will immediately suspend the account, initiate a KYC review, and if underage status is confirmed, permanently close the account, void all wagers, and return any deposits in accordance with BCT666's account closure procedure.

If you believe a minor has accessed BCT666 using false information, please contact our support team immediately at [email protected] so that appropriate action can be taken.

BCT666 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the BCT666 Platform is encrypted using 256-bit Transport Layer Security (TLS). Personal Data stored on BCT666's servers is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to Personal Data within BCT666's systems is restricted on a need-to-know basis, with role-based access controls and audit logging of all data access events.
• Two-Factor Authentication: BCT666 offers and encourages the use of two-factor authentication (2FA) for user accounts to mitigate the risk of unauthorised access.
• Intrusion Detection: BCT666 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Third-Party Security Assessments: BCT666's infrastructure undergoes periodic security assessments and penetration testing by qualified third-party information security professionals.

While BCT666 takes all reasonable precautions to safeguard Personal Data, no method of electronic transmission or storage is entirely secure. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected Users, BCT666 will notify affected Users and relevant authorities as required by applicable law.

The BCT666 Platform may contain references to third-party payment providers and service partners as part of the user journey (for example, when initiating a deposit via Maybank2u or Touch 'n Go eWallet). Once you navigate to or interact with a third-party service, BCT666's Privacy Policy no longer applies — the privacy practices of the third-party provider govern that interaction.

BCT666 is not responsible for the privacy practices or content of any third-party websites, applications, or services. Users are encouraged to review the privacy policies of any third-party payment providers or services they interact with in connection with their BCT666 account.

BCT666 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, BCT666's data processing practices, or the nature of the Services offered. The "Effective Date" at the top of this Policy reflects the date of the most recent substantive revision.

Where amendments are material — meaning they significantly affect the way BCT666 processes your Personal Data or alter your rights — BCT666 will provide advance notice by email to your registered address and/or by a prominent notice displayed on the Platform, with a minimum of seven (7) days before the revised Policy takes effect.

Your continued use of the Services following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The current version of this Policy is always accessible at bct666.cam/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by BCT666, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the live chat icon displayed on every page of the Platform
• Support Hours: 24 hours a day, 7 days a week. Malaysia-based team available for fastest response from 9:00am to 12:00am MST (UTC+8)

When submitting a data protection request or complaint, please include your registered account username, a clear description of your request or concern, and any supporting information to allow BCT666 to identify your account and process your request efficiently. BCT666 will acknowledge all data protection requests within 48 hours and respond fully within 30 calendar days.