Privacy Policy bz4x – Malaysia Player Personal Data Protection

This Privacy Policy is published by bz4x and applies to all users of the bz4x online casino platform accessible via bz4x.my. This document clearly and transparently explains how bz4x collecting, processing, using, storing, and safeguarding your personal data as a registered Malaysian player.

We at bz4x understands that privacy is a fundamental right. In today's digital world, a player's trust in how a platform handles their data is just as important as their trust in the fairness of the games themselves. bz4x has therefore built this privacy policy not merely to fulfil a legal obligation, but because we genuinely value and respect the privacy of every player who entrusts their data to us.

This Privacy Policy should be read together with the Terms & Conditions bz4x, which constitutes the primary agreement between you and our platform. By registering an account or using any bz4x service, you agree to the terms set out in this Privacy Policy in full. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

bz4x collects several categories of personal data depending on how you interact with our platform. Below is a complete list of the types of data we collect:

Identity Data:

• Full name as stated on your identification document
• National identity card number (MyKad) or passport number
• Date of birth for age verification
• An active email address
• Registered Malaysian mobile phone number
• Current residential address

Financial & Transaction Data:

• Records of all deposit and withdrawal transactions made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• E-wallet or bank account details used for transactions
• Betting history and gaming activity on the bz4x platform
• Bonus claim history and usage

Technical & Usage Data:

• Your device's IP address
• Type and version of web browser used
• Device type (mobile, tablet, or personal computer)
• Device operating system
• Login records including date, time, and approximate location
• Cookies and session data as further described in Section 9

bz4x does not collect special category data such as biometric data, health information, political affiliations, or religious beliefs. We only collect data that is necessary to operate the platform lawfully and effectively.

bz4x collects your personal data through several different methods, depending on how you interact with the platform:

• During Account Registration: You provide your identification details directly when completing the bz4x account registration form. This includes your name, email address, phone number, and password.
• During KYC Verification: When you submit identity verification documents such as a copy of your MyKad as part of the mandatory Know Your Customer (KYC) process.
• During Financial Transactions: Each time you make a deposit via Touch 'n Go, GrabPay, DuitNow, FPX, or any other supported payment method, your transaction details are recorded automatically.
• While Using the Platform: Technical and usage data is collected automatically via cookies, server logs, and tracking technologies as described in Section 9.
• When Contacting Support: When you interact with the bz4x customer support team via live chat or email, the content of those communications is recorded for quality control and service record purposes.
• From Third-Party Sources: In certain circumstances, bz4x may receive information about you from our payment processors or third-party identity verification service providers operating in Malaysia, solely for verification and compliance purposes.

bz4x does not purchase data lists or collect personal data from sources unrelated to platform operations. Every instance of data collection has a clear legal basis — whether grounded in your consent, contractual necessity, or applicable legal obligations.

bz4x use your personal data for purposes that are specific, lawful, and not excessive. Below is a full explanation of each purpose for which your data is used:

1. Account Management: To create, verify, and manage your player account on bz4x, including processing logins, updating profile information, and ensuring the security of your account at all times.
2. Payment Processing: To process your financial deposits and withdrawals via your chosen Malaysian payment method, verify ownership of the payment method, and prevent fraudulent transactions.
3. Legal Compliance (KYC/AML): To comply with legal requirements relating to customer identity verification (Know Your Customer) and anti-money laundering (Anti-Money Laundering) obligations as mandated by bz4x's regulatory authorities.
4. Service Delivery: To enable you to access and play all games on the bz4x platform, including slots, live casino, and all other platform features.
5. Service Communications: To send you important account-related notifications, security alerts, terms updates, and relevant information about bz4x services.
6. Customer Support: To efficiently and effectively manage and resolve enquiries, complaints, and requests you submit to the bz4x support team.
7. Security & Fraud Detection: To detect, investigate, and prevent fraudulent activity, account misuse, or any unlawful activity involving the bz4x platform.
8. Service Improvement: To analyse platform usage patterns on an aggregate (not individual) basis for the purpose of improving service quality, user interface, and the overall playing experience on bz4x.

bz4x does not sell, rent, or commercialise your personal data to any third party. However, in the course of operating the platform, there are limited circumstances in which bz4x may need to share your personal data with certain parties:

• Payment Processors: bz4x shares the necessary transaction details with approved payment processors — such as Touch 'n Go, GrabPay, DuitNow, and FPX service providers — solely to facilitate the processing of your deposits and withdrawals. Data shared is kept to a minimum, limited only to what is required to complete the transaction.
• Identity Verification Service Providers: To fulfil KYC requirements, bz4x may engage third-party service providers operating in Malaysia to verify the authenticity of the identity documents you submit.
• Game Software Providers: Game software providers that supply slots and live casino content to the bz4x platform may receive the technical data required to ensure games function correctly. The data shared does not include any financial or identification information that could be used to directly identify you.
• Regulatory Bodies & Legal Authorities: bz4x will disclose your personal data to the regulatory body that issues bz4x's licence, law enforcement agencies, courts, or tribunals where required by law or a valid court order.

Every third party that receives players' personal data bz4x are subject to strict data processing agreements and must comply with security and privacy standards equal to or higher than those of bz4x itself. bz4x is not responsible for the privacy practices of third parties operating outside our direct control.

bz4x implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, use, disclosure, modification, or destruction:

• Continuous Encryption: All data transmitted between your device and bz4x servers is protected by 256-bit SSL/TLS encryption. Data stored in our databases is also encrypted using industry-standard encryption algorithms.
• Multi-Layered Access Control: Access to players' personal data within bz4x's systems is strictly controlled using the principle of least privilege — each staff member only has access to the data necessary to carry out their specific role.
• Two-Factor Authentication: All bz4x internal systems containing player data are protected by two-factor authentication (2FA) to prevent unauthorised access even in the event that a staff member's password is compromised.
• 24/7 Security Monitoring: An intrusion detection system and anomaly monitoring operate continuously to identify any suspicious activity involving player data in real time.
• Regular Security Audits: bz4x conducts regular internal security audits and independent penetration testing to identify and address any potential security vulnerabilities.
• Staff Training: All bz4x staff with access to players' personal data undergo comprehensive privacy and data security training on a regular basis.

Although bz4x implement the best security measures available, no system can be guaranteed 100% secure against the ever-evolving landscape of cyber threats. Players therefore play an important role in keeping their accounts safe — particularly by keeping passwords confidential and never sharing login credentials with anyone.

bz4x retaining your personal data for as long as necessary to fulfil the purposes of collection outlined in Section 4, and to comply with applicable legal obligations.

In general, bz4x data retention periods are as follows:

• Active Account Data: For as long as your account remains active on the bz4x platform, or until you request account closure.
• Financial Transaction Data: A minimum of seven (7) years from the transaction date, in order to comply with applicable financial and audit legal requirements.
• KYC & Identity Verification Data: A minimum of five (5) years after the business relationship with the player ends, in accordance with anti-money laundering legal requirements.
• Support Communication Records: Three (3) years after the last support interaction, for dispute resolution and quality control purposes.
• Technical Log Data: Up to twelve (12) months for security and fraud detection purposes.

Once the stipulated retention period has expired, bz4x will securely delete or anonymise the relevant personal data. Anonymised data may be retained for a longer period for statistical analysis and service improvement purposes, but in a form that cannot be linked to any specific individual.

As a player bz4x as a registered user, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA) with respect to your personal data:

To submit any request relating to the rights outlined above, please contact bz4x by emailing [email protected], clearly stating the type of request you are making along with sufficient information for us to verify your identity. bz4x will process your request within the timeframe prescribed by the PDPA and will not charge any fee for the first request made within any twelve-month period.

If you are of the view that bz4x failed to uphold your privacy rights, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the designated official channels. bz4x is committed to cooperating fully with any investigation carried out by the relevant authorities.

bz4x uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the bz4x website.

The types of cookies used by bz4x are:

• Essential Cookies: Required for the core functionality of the bz4x platform, including login, session management, and security. These cookies cannot be disabled without directly affecting platform functionality.
• Performance Cookies: Collects information on how you use the bz4x platform — such as the most frequently visited pages and any error messages encountered — to help us improve platform performance.
• Functionality Cookies: Enables the bz4x platform to remember your preferences, such as display language and personal settings, to provide a more tailored experience.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect the functionality of the platform. bz4x that you use. For instructions on managing cookies in popular browsers such as Chrome, Safari, or Firefox, please refer to the help section of the respective browser.

bz4x reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or updates to the services we offer. Any amendments made will be published on this page with a revised update date.

For material and significant amendments — that is, changes that may substantially affect a player's privacy rights — bz4x will notify players via their registered email or in-platform notification at least seven (7) days before any amendments take effect. This gives players sufficient time to read and understand the upcoming changes.

Continued use of the platform bz4x after the effective date of the amendment will be considered as your acceptance of the revised Privacy Policy. If you do not agree with any of the changes, you have the right to close your account and discontinue use of the bz4x platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bz4x manage your personal data, our team is ready to assist you through the following channels:

• Privacy Email: [email protected] (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the bz4x platform
• Response Time: Privacy enquiries submitted via email will be responded to within three (3) business days

All privacy-related inquiries are handled by bz4x staff who are specially trained in data protection matters. bz4x takes every privacy-related enquiry and complaint seriously, and is committed to providing a thorough and helpful response to every player who reaches out to us.

This Privacy Policy should be read together with the Terms & Conditions bz4x. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding privacy matters, this Privacy Policy shall take precedence.