Privacy Policy

1 Introduction

This Privacy Policy (hereinafter "the Policy") sets out the practices of BWG688 (hereinafter "BWG688", "we", "us", or "the Platform") with respect to the collection, use, storage, disclosure, and protection of personal data belonging to users of the BWG688 website accessible at https://bwg688.cam and all associated services.

BWG688 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection legislation. This Policy is designed to give you a clear understanding of what information we hold, why we hold it, and what you can do about it.

This Policy applies to all individuals who interact with the BWG688 Platform, including registered account holders, prospective users who browse the site without registering, and individuals who contact our customer support team. It applies regardless of your location, including users accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations in Malaysia.

By accessing, browsing, or creating an account on the BWG688 Platform, you acknowledge that you have read and understood this Policy. If you do not accept the terms of this Policy, you should discontinue use of the Platform immediately.

2 Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person.
• "Processing" means any operation or set of operations performed on personal data, including but not limited to collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. BWG688 acts as the Data Controller in respect of personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller pursuant to a written agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of their personal data.
• "KYC" means Know Your Customer — identity and document verification procedures required under applicable anti-money laundering frameworks.
• "Cookies" means small text files placed on your device by the Platform that facilitate session management, preference recall, analytics, and related functions.

3 Data Controller

BWG688 is the Data Controller responsible for the personal data collected through this Platform. As Data Controller, BWG688 determines the purposes for which your personal data is processed and bears responsibility for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have questions or concerns about how BWG688 processes your personal data, or if you wish to exercise any of the rights described in Section 12, you may contact our data protection point of contact using the details provided in Section 16 of this Policy.

Where BWG688 engages third-party service providers to process personal data on its behalf, such providers act as Data Processors under written agreements that require them to process data only as directed by BWG688 and to apply appropriate security measures. BWG688 remains the Data Controller in all such arrangements.

4 Personal Data We Collect

BWG688 collects personal data from you directly, from your devices and browser, and in some cases from third-party verification providers. The categories of data we collect are described below.

4.1 Registration & Account Data

When you create a BWG688 account, we collect the information you provide, including:

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification — all players must be aged 21 or above)
• Registered email address
• Mobile phone number
• Residential address, including city, postcode, and country
• Username and encrypted password credential
• Preferred currency (Malaysian Ringgit / MYR by default)

4.2 Identity Verification (KYC) Data

To comply with our legal obligations and protect against fraud and money laundering, we collect the following verification documents:

• Copies of government-issued photo identification (Malaysian MyKad, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within three months)
• Proof of payment method ownership (for example, a screenshot of your Touch 'n Go eWallet, Boost, or Maybank account showing your registered name)
• Facial verification photographs or selfie-with-document images, where required by our compliance team

4.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR, timestamps, and transaction reference numbers
• Payment method details — wallet identifiers for Touch 'n Go eWallet, GrabPay, Boost; bank account or FPX reference details for Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow; and wallet address for USDT TRC20
• Bonus claim and wagering activity records

4.4 Gaming & Betting Activity Data

• Game session records, including game titles played, wager amounts, results, and session duration
• Sports betting history, including market selections, stake amounts, and settlement outcomes for events such as Liga Super Malaysia, EPL, Champions League, and UFC
• Account balance history and real-time balance snapshots

4.5 Device & Technical Data

When you access the Platform, we automatically collect technical data about your device and session, including:

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser type and version
• Session start and end times, pages visited, and interaction patterns
• Referral URL (the page from which you arrived at BWG688, if applicable)

4.6 Communication Data

• Content of live chat conversations with BWG688 support agents
• Email correspondence sent to or received from BWG688
• Complaint and dispute records

BWG688 does not collect special categories of sensitive personal data — such as health, biometric, or racial/ethnic origin data — except where a player voluntarily discloses health-related information in the context of a responsible gambling self-exclusion request, in which case such disclosure is handled with heightened sensitivity and is used solely for the purpose of giving effect to the player's request.

5 Legal Basis for Processing

BWG688 processes your personal data only where a valid legal basis exists for doing so. The applicable legal bases are as follows:

• Performance of a Contract: Processing that is necessary to fulfil our contractual obligations to you as an account holder — including account management, payment processing, and delivery of gaming services — is undertaken on the basis of contractual necessity.
• Legal Obligation: Certain processing activities are required by applicable law, including KYC identity verification under anti-money laundering regulations, transaction record retention under financial services legislation, and reporting obligations to regulatory or law enforcement authorities.
• Legitimate Interests: BWG688 processes certain data where we have a legitimate business interest in doing so and that interest is not overridden by your privacy rights. This includes fraud prevention, security monitoring, responsible gambling controls, platform analytics, and quality assurance of support interactions.
• Consent: Where processing is not covered by the above bases — in particular, processing for direct marketing communications or for the use of non-essential analytics cookies — BWG688 will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Purposes of Data Processing

BWG688 processes your personal data for the following specific purposes:

• Account Registration and Management: To create, authenticate, and maintain your BWG688 account, including updating your profile information, managing session authentication, and delivering account-related notifications.
• Identity Verification and Age Confirmation: To verify that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your account details are accurate and not fraudulent.
• Payment Processing: To facilitate your deposits and withdrawal requests via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20, and to maintain accurate records of all financial transactions.
• Delivery of Gaming and Betting Services: To provide access to live casino games, slots, fishing games, sports betting markets (including Liga Super Malaysia, EPL, UFC, and others), and all associated platform features.
• Anti-Money Laundering (AML) and Fraud Prevention: To monitor transaction patterns for suspicious activity, comply with AML reporting obligations, and protect our platform and player community from fraud.
• Responsible Gambling Monitoring: To identify behavioural patterns that may indicate gambling-related harm and, where appropriate, to intervene with responsible gambling tools including deposit limits, session timers, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality and efficiency of support services.
• Security and Technical Operations: To detect, investigate, and respond to security incidents, cyberattacks, and unauthorised account access, and to maintain the technical integrity and performance of the Platform.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities or law enforcement, and establish, exercise, or defend legal claims.
• Promotional Communications (with Consent): To send you information about BWG688 promotions, bonuses, and platform updates via email or SMS, where you have opted in to receive such communications. You may unsubscribe at any time.

BWG688 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, seeking your consent.

7 Data Sharing & Disclosure

BWG688 does not sell, rent, or trade your personal data to any third party for commercial purposes. We disclose personal data only in the following circumstances:

• Payment Service Providers: We share transaction data with the payment processors and financial institutions that facilitate your deposits and withdrawals, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank). Such providers process data strictly for payment fulfilment purposes.
• KYC and Identity Verification Partners: We engage accredited identity verification service providers to perform automated and manual KYC checks on submitted identity documents. These providers process your documents solely for the purpose of verifying your identity on BWG688's behalf.
• Technology and Platform Infrastructure Providers: BWG688 uses cloud hosting, database, and software infrastructure providers who may process personal data as part of delivering the underlying technical services. All such providers operate under data processing agreements that restrict their use of your data.
• Game Content Providers: Where live casino games or slot titles are provided by third-party game studios, limited technical session data may be transmitted to those studios as part of the game delivery process. Game providers do not receive personally identifiable account information beyond what is technically necessary for game session management.
• Regulatory and Law Enforcement Authorities: BWG688 may disclose personal data to competent authorities, regulators, courts, or law enforcement bodies where required to do so by applicable law, court order, or lawful request. We will endeavour to notify you of such disclosures where legally permissible to do so.
• Professional Advisers: BWG688 may share personal data with legal counsel, auditors, or other professional advisers where necessary for the purpose of obtaining professional advice or in connection with legal proceedings.

8 International Data Transfers

In the course of operating a global platform and engaging international service providers, BWG688 may transfer personal data to jurisdictions outside of Malaysia. Such transfers may occur in connection with cloud hosting services, payment processing infrastructure, KYC verification partners, and game content providers located in various countries.

Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that afforded under Malaysian law, BWG688 will implement appropriate safeguards to ensure your data remains adequately protected. These safeguards may include:

• Standard contractual clauses or data processing agreements with the receiving party that impose equivalent data protection obligations
• Transfers to parties certified under internationally recognised privacy frameworks where applicable
• Transfer only where necessary to fulfil the contract between you and BWG688, or for the establishment, exercise, or defence of legal claims

You may request information about the specific safeguards in place for particular international transfers by contacting us using the details in Section 16.

9 Data Retention

BWG688 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. The following general retention periods apply:

• Active Account Data: Personal data associated with an active BWG688 account is retained for the duration of the account's existence and for a period of up to five years following account closure, to meet legal and regulatory record-keeping requirements.
• KYC and Identity Verification Documents: Identity documents and verification records are retained for a minimum of five years from the date of collection or, where required by AML legislation, for any longer minimum period prescribed by applicable law.
• Financial Transaction Records: Deposit, withdrawal, and wager transaction records are retained for a minimum of five years from the date of the transaction in accordance with standard financial record-keeping obligations.
• Customer Support Records: Live chat transcripts and email correspondence are retained for up to three years following the resolution of the relevant support interaction, unless the matter involves a legal dispute, in which case records are retained until the dispute is fully resolved.
• Technical and Session Logs: Device and session log data is retained for up to 12 months from the date of collection, except where longer retention is required for active fraud investigations or legal proceedings.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for as long as you hold an account with BWG688, and for two years following account closure.

When personal data reaches the end of its applicable retention period, BWG688 will securely delete or irreversibly anonymise that data in accordance with established data disposal procedures. Anonymised data — from which all identifying information has been irreversibly removed — may be retained indefinitely for statistical and analytical purposes.

10 Cookies & Tracking Technologies

BWG688 uses cookies and similar tracking technologies to provide and improve Platform functionality. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your authenticated session, maintain security tokens, remember your language preference, and preserve your account state during navigation. These cookies cannot be disabled without significantly impairing Platform functionality.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymous data about how users interact with the Platform — such as which pages are visited most frequently and whether users encounter error messages. This data helps us improve Platform performance and user experience. These cookies are only set where you have consented.
• Functional Cookies: These cookies allow the Platform to remember choices you make — such as preferred deposit method or display settings — to provide a more personalised experience. These cookies are set only where you have consented.

BWG688 does not use third-party advertising or targeting cookies. We do not participate in behavioural advertising networks or allow third parties to track your activity across external websites via cookies placed through the BWG688 Platform.

You may manage your cookie preferences through your browser settings. Most browsers allow you to view, delete, and block cookies. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features including account login. Detailed guidance on managing cookies in popular browsers is available in each browser's help documentation.

11 Security Measures

BWG688 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Encryption in Transit: All data transmitted between your device and BWG688 servers is encrypted using 256-bit SSL/TLS technology. Our domain operates exclusively over HTTPS.
• Encryption at Rest: Sensitive data stored on BWG688 infrastructure — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard symmetric encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. BWG688 employees and contractors are granted access only to the data necessary for their specific role. All access is logged and audited.
• Credential Security: Passwords are stored in hashed form using a cryptographic hashing algorithm designed for secure password storage. BWG688 does not store plaintext passwords at any point.
• Fraud and Anomaly Detection: BWG688 employs automated systems to detect unusual account activity, suspicious transaction patterns, and potential security incidents in real time.
• Incident Response: BWG688 maintains a documented security incident response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, BWG688 will notify affected users and, where required, the relevant supervisory authority, within the timeframes prescribed by applicable law.

12 Your Rights

Subject to applicable law, you hold the following rights in respect of your personal data held by BWG688:

• Right of Access: You have the right to request a copy of the personal data that BWG688 holds about you, together with information about how that data is being processed.
• Right to Rectification: You have the right to request that BWG688 correct any inaccurate personal data or complete any incomplete personal data held about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where you have successfully objected to processing. This right is subject to applicable legal obligations that require BWG688 to retain certain data for a minimum period.
• Right to Restrict Processing: You may request that BWG688 restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing pending verification of BWG688's legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive the personal data you have provided to BWG688 in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on BWG688's legitimate interests. BWG688 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing undertaken prior to withdrawal.

To exercise any of the above rights, please submit a written request to BWG688 using the contact details provided in Section 16. BWG688 will respond to your request within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days; we will inform you of any extension within the initial 30-day period.

We may need to verify your identity before processing a rights request, to ensure that personal data is not disclosed to or amended by an unauthorised party.

You will not be charged a fee for exercising your rights in standard circumstances. BWG688 reserves the right to charge a reasonable administrative fee or refuse to act on a request that is manifestly unfounded or excessive.

13 Minors & Age Restriction

BWG688 does not knowingly collect personal data from any person under the age of 21. The BWG688 Platform is intended exclusively for adults aged 21 and above. Registration requires affirmative confirmation that the registrant meets this age requirement, and KYC verification is used to confirm age for all accounts prior to withdrawal.

14 Third-Party Links & Services

The BWG688 Platform does not contain links to third-party websites or services unrelated to BWG688's own operations. All navigation links within the Platform remain within the BWG688 domain.

Where third-party services are integrated into the Platform — such as live game studio streaming, payment gateway interfaces, or identity verification tools — those third parties operate under their own privacy practices in addition to the data processing agreements they hold with BWG688. BWG688 exercises due diligence in selecting third-party partners and contractually requires them to maintain appropriate data protection standards.

BWG688 does not accept responsibility for the privacy practices, data handling, or content of any external parties, even where BWG688 has a commercial relationship with that party.

15 Amendments to This Policy

BWG688 reserves the right to update, revise, or replace this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is used or your rights in respect of that data — BWG688 will provide advance notice via the Platform, by email to your registered address, or by prominent notice on the homepage.

The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Minor amendments — such as clarifications that do not alter the substance of the Policy — may be made without formal advance notice.

Your continued use of the BWG688 Platform following the effective date of any updated Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept an amended Policy, you must cease using the Platform and request account closure before the amended Policy takes effect.

BWG688 recommends that you review this Privacy Policy periodically to stay informed of how we handle your personal data and any changes to your rights.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which BWG688 processes your personal data, please contact us through the following channel:

BWG688 will acknowledge receipt of your privacy-related request within 2 business days and aims to provide a substantive response within 30 calendar days. For complex rights requests, we may extend this period by up to a further 60 days, in which case we will inform you of the extension and the reasons for it within the initial 30-day period.

If you are not satisfied with BWG688's response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For users in Malaysia, the relevant authority for personal data protection matters is the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi) under the Personal Data Protection Act 2010.