Introduction
This Privacy Policy ("Policy") describes how bp8 ("bp8", "we", "us", "our"), the operator of the online entertainment platform available at https://bp8.cam, collects, uses, processes, stores and discloses personal data relating to individuals ("Member", "User", "you", "your") who access or use the bp8 website, mobile-optimised pages and associated Services.
bp8 is committed to respecting and protecting the privacy of all members, with particular regard to the data handling expectations of users based in Malaysia. This Policy should be read alongside the bp8 Terms & Conditions, which govern the overall use of the platform.
By registering an account, depositing funds or otherwise using the bp8 Services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not access or continue using the bp8 platform.
Note: This Policy may be updated periodically to reflect changes in data practices, legal requirements or platform features. The most current version is always available at https://bp8.cam/privacy-policy. Continued use of bp8 after any revision constitutes acceptance of the updated Policy.
Definitions
For the purposes of this Policy, the following terms carry the meanings set out below:
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, payment data and online identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, transmission and deletion.
- "Data Subject" means any individual whose Personal Data is processed by bp8, including registered members and unregistered visitors.
- "Controller" means bp8 in its capacity as the entity that determines the purposes and means of processing Personal Data.
- "Third Party" means any individual or organisation other than bp8 and the Data Subject, including payment processors, analytics providers and technology partners.
- "KYC" means Know Your Customer — the identity and payment-ownership verification process required for account management and withdrawal processing.
- "Cookies" means small data files placed on a user's device by the bp8 website to enable session management, preference storage and usage analytics.
- "Services" means the full range of casino games, live dealer tables, sports betting markets, payment processing, loyalty programmes and related features operated by bp8.
Data We Collect
bp8 collects Personal Data through several channels including account registration, identity verification, payment transactions, platform usage activity and communications with the support team. The categories of data collected are described below.
3.1 Registration and identity data
When you register a bp8 account, we collect: full legal name, date of birth (to confirm the minimum age requirement of 21 years), email address, contact number, preferred currency, and account login credentials. During KYC verification, we may additionally collect: copies of a valid identity document (such as a Malaysian MyKad or passport), proof of address, and evidence of payment method ownership.
3.2 Financial and transaction data
bp8 records details of all deposits and withdrawals processed through the platform, including: transaction amounts in MYR or MYR-equivalent cryptocurrency values, payment method type (for example DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, Bitcoin, Ethereum, Tether or Litecoin), transaction timestamps, and confirmation references. bp8 does not store full payment card numbers.
3.3 Usage and behavioural data
We collect information about how you use the bp8 platform, including: game sessions and wager history, sports betting activity, pages visited, session duration, device type, browser type and operating system, IP address and approximate geographic location, and referral source.
3.4 Communications data
When you contact bp8 support via live chat, email or other channels, the content of those communications may be recorded for quality assurance, compliance documentation and dispute resolution purposes.
3.5 Technical data
bp8 automatically collects certain technical data to maintain platform security and performance, including: device identifiers, log files, error reports, session tokens and security event records.
Data Processing
bp8 processes Personal Data for the following purposes:
| Purpose | Description |
|---|---|
| Account management | Creating, maintaining and securing registered bp8 member accounts, including login, password recovery and session management. |
| Identity verification (KYC) | Confirming member age (21+), identity and payment method ownership as required by responsible gambling and fraud prevention obligations. |
| Payment processing | Facilitating deposits and withdrawals via supported Malaysian fiat and cryptocurrency channels and maintaining accurate financial records. |
| Platform delivery | Providing access to casino games, live dealer tables, sports betting markets, loyalty programme features and all associated bp8 Services. |
| Responsible gambling | Monitoring account activity to identify risk indicators, applying member-requested limits, and managing self-exclusion requests. |
| Security and fraud prevention | Detecting and preventing unauthorised access, account fraud, money laundering, bonus abuse and other prohibited activities. |
| Customer support | Responding to account enquiries, payment questions, technical issues and formal complaints. |
| Platform improvement | Analysing aggregated usage data to improve bp8 performance, content relevance, navigation and member experience. |
| Marketing communications | Sending eligible promotional notifications and updates to members who have provided consent, subject to applicable opt-out rights. |
Legal Basis for Processing
bp8 processes Personal Data on the following legal bases:
- Contractual necessity: Processing required to deliver the bp8 Services to registered members, including account management and payment processing.
- Legal obligation: Processing required to comply with applicable identity verification, anti-money laundering, responsible gambling and record-keeping obligations.
- Legitimate interests: Processing necessary for fraud prevention, platform security, service quality improvement and the protection of bp8's operational integrity, where these interests are not overridden by the interests or rights of the Data Subject.
- Consent: Processing carried out with the explicit prior consent of the member, including marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Where processing is based on consent, you retain the right to withdraw that consent at any time by contacting bp8 support at [email protected]. Withdrawal of consent does not affect processing already carried out on a different legal basis.
Data Sharing and Disclosure
bp8 does not sell Personal Data to third parties. bp8 may share Personal Data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.
6.1 Payment service providers
To process deposits and withdrawals through Malaysian fiat channels (including DuitNow, FPX, Maybank, CIMB, Public Bank and supported e-wallets) and cryptocurrency networks, bp8 shares relevant transaction and identity data with authorised payment processors. These providers are contractually required to handle such data securely and solely for payment purposes.
6.2 Identity verification providers
Where automated or third-party assisted KYC verification is used, relevant identity documents and personal details may be shared with specialist verification service providers. These providers are bound by strict data handling obligations.
6.3 Technology and infrastructure partners
bp8 may use third-party cloud hosting, analytics, security monitoring and content delivery services. These providers process data on bp8's behalf under data processing agreements that restrict use to the specified purposes.
6.4 Legal and regulatory disclosure
bp8 may disclose Personal Data where required to do so by applicable law, court order, regulatory authority directive or where bp8 believes in good faith that disclosure is necessary to prevent fraud, protect the rights of other users or protect bp8's legal interests.
Wherever Personal Data is shared with third-party processors or service providers, bp8 requires that appropriate contractual safeguards are in place to protect the data and restrict its use to agreed purposes.
Cookies & Tracking Technologies
The bp8 website uses cookies and similar tracking technologies to support platform functionality, maintain secure sessions, store user preferences and collect aggregate usage analytics.
7.1 Types of cookies used
- Essential cookies: Necessary for core platform functions including login sessions, account security and navigation. These cannot be disabled without affecting platform usability.
- Functional cookies: Store preferences such as language settings and previously selected payment methods to improve your bp8 experience.
- Analytics cookies: Collect anonymised or aggregated data about how visitors use the bp8 website, used to identify areas for improvement.
- Security cookies: Help detect and prevent fraudulent sessions, bot activity and other security threats.
7.2 Managing cookies
Most modern browsers allow you to view, manage and delete cookies through the browser settings menu. Disabling essential or security cookies may impair your ability to access certain bp8 Services or maintain a secure session. bp8 does not use cookies to collect sensitive financial data independently of the payment transaction flow.
Data Retention
bp8 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations.
- Active account data: Retained for the duration of the account and for a defined period following voluntary closure or termination.
- KYC and identity documents: Retained for the period required by applicable anti-money laundering and identity verification obligations, which may extend beyond account closure.
- Financial transaction records: Retained to meet accounting, audit and legal record-keeping requirements, typically for a minimum of several years following the transaction date.
- Support communications: Retained for quality assurance and dispute resolution purposes for a defined period following case closure.
- Marketing consent records: Retained until consent is withdrawn and for a period thereafter as evidence of the consent.
When Personal Data is no longer required, bp8 will securely delete or anonymise it in accordance with its internal data lifecycle procedures.
Data Security
bp8 implements technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration and destruction. These measures include encrypted data transmission (SSL/TLS), access controls, session authentication, regular security assessments and staff handling procedures.
While bp8 takes data security seriously, no system can guarantee absolute security. Members are responsible for maintaining the confidentiality of their own login credentials. bp8 will never ask you for your full password via live chat, email or any other communication channel.
Security tip for bp8 members: Use a unique, strong password for your bp8 account. Enable any available two-factor authentication. If you suspect unauthorised access to your account, contact bp8 support immediately at [email protected].
User Rights
Subject to applicable law and verification requirements, bp8 members have the following rights in relation to their Personal Data. Requests may be submitted to bp8 support at [email protected] with sufficient detail to allow bp8 to identify the account and the nature of the request.
Right of access
Request a copy of the Personal Data bp8 holds about you and information on how it is used.
Right to rectification
Request correction of inaccurate or incomplete Personal Data held in your bp8 account profile.
Right to erasure
Request deletion of your Personal Data where bp8 no longer has a legitimate basis to retain it, subject to legal obligations.
Right to restrict processing
Request that bp8 limits how it uses your Personal Data in certain circumstances, such as while a data accuracy dispute is resolved.
Right to data portability
Request a copy of data you have provided to bp8 in a structured, commonly used format, where technically feasible.
Right to object
Object to the processing of your Personal Data for direct marketing purposes or where processing is based on legitimate interests.
bp8 will respond to verified requests within a reasonable period. In some cases, bp8 may be required to retain certain data for legal, regulatory or fraud prevention purposes even where a deletion or restriction request is made.
Minors
The bp8 platform is strictly intended for adults aged 21 years and above. bp8 does not knowingly collect, process or retain Personal Data from any person below the age of 21. Age verification is a mandatory step in the bp8 registration and KYC process.
If bp8 becomes aware that Personal Data has been collected from a person under the age of 21, the relevant account will be closed immediately, all data will be handled in accordance with applicable law, and any deposited funds will be returned to the verified source where possible.
If you are a parent or guardian and believe that a minor has accessed or registered a bp8 account, please contact the support team at [email protected] immediately.
Third-Party Services
The bp8 platform may integrate with or link to third-party services, including payment gateways, game content providers and infrastructure services. bp8 is not responsible for the privacy practices of these third-party services. Their data handling is governed by their own privacy policies.
Members are encouraged to review the privacy policies of any third-party services they interact with in connection with their bp8 account, particularly payment providers such as those supporting DuitNow, FPX, Touch 'n Go eWallet and cryptocurrency network services.
Policy Changes
bp8 reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered members through a prominent notice on the platform, an email notification to the registered address, or both.
The effective date of the most recent version of this Policy is displayed at the top of the page. Continued use of the bp8 Services after the effective date of any update constitutes acceptance of the revised Policy. Members who do not agree with a material change are entitled to request account closure in accordance with the bp8 Terms & Conditions.
Contact Us
For any questions, requests or concerns relating to this Privacy Policy or bp8's data handling practices, please contact the bp8 support team through the details below. Please reference "Privacy" or "Data Request" in the subject line of your message so the team can direct your enquiry appropriately.
Support email: [email protected]
Support availability: 24 hours a day, 7 days a week
Platform address: https://bp8.cam
bp8 aims to acknowledge privacy-related requests within a reasonable period and to provide a substantive response or resolution as promptly as practicable. For urgent security concerns such as suspected unauthorised account access, contact support immediately and reference "Account Security" in your message.