Privacy Policy — Bandarsbo2 Data Commitment

1. Introduction

This Privacy Policy ("Policy") describes how Bandarsbo2 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal information of users ("Player", "you", "your") who access and use the services available at bandarsbo2.cam.

Bandarsbo2 operates an online casino and sports betting platform serving adult players throughout Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles.

By registering an account, making a deposit, or otherwise using the Bandarsbo2 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or can identify a natural person directly or indirectly, including name, identification number, location data, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Bandarsbo2, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of Bandarsbo2 under a contractual arrangement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data.
• "KYC Data" means identity verification documents submitted by a Player to fulfil Know Your Customer obligations, including government-issued identity documents and proof of address.
• "Technical Data" means data collected automatically about your device, browser, and interaction with the Platform, including IP address, browser type, and session duration.

3. Personal Data We Collect

Bandarsbo2 collects personal data through several channels. The categories of data we collect are set out in the table below:

We collect only the data that is reasonably necessary for the purposes described in this Policy. We do not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by applicable law or to comply with responsible gambling obligations.

4. Lawful Basis for Processing

Bandarsbo2 processes your personal data on one or more of the following lawful bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, deposit processing, game provision, and withdrawal execution.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) legislation, KYC obligations, financial record-keeping, and fraud prevention.
• Legitimate interests: Processing necessary for our legitimate business interests, such as platform security, fraud detection, improving user experience, and analytics — where those interests are not overridden by your data protection rights.
• Consent: Where we rely on your explicit consent, such as for sending you promotional communications. You may withdraw your consent at any time by contacting us or updating your account preferences.

5. How We Use Your Personal Data

Bandarsbo2 uses your personal data for the following purposes:

Account Management & Service Delivery

• To create and maintain your player account on the Bandarsbo2 Platform.
• To verify your identity and age eligibility (21+ requirement) through KYC processes.
• To process deposits via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels.
• To process withdrawal requests to your designated payment method.
• To administer your participation in games, sports betting markets, promotions, and VIP loyalty programmes.

Security, Fraud Prevention & Compliance

• To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other prohibited activities.
• To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) regulatory requirements.
• To maintain audit logs and transaction records as required by applicable law.

Communication & Support

• To respond to your enquiries, support tickets, and live chat messages.
• To send you transactional notifications such as deposit confirmations, withdrawal status updates, and account security alerts.
• To send promotional communications, bonus offers, and platform updates — where you have provided your consent or where permitted by applicable law.

Responsible Gambling

• To monitor gambling patterns and identify players who may be exhibiting signs of problem gambling behaviour, in order to trigger responsible gambling interventions.
• To enforce self-exclusion requests and deposit limits at the player's request.

Platform Improvement & Analytics

• To analyse usage patterns and improve the performance, features, and user experience of the Bandarsbo2 Platform.
• To conduct internal research and statistical analysis using aggregated, anonymised data.

6. Data Sharing & Disclosure

Bandarsbo2 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors and financial institutions: Including DuitNow network operators, FPX participating banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency exchange services — solely to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and fraud screening services used to verify your identity documents in accordance with our legal obligations.
• IT infrastructure and hosting providers: Cloud and server infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where we are legally required to disclose information — for example, in response to a court order, regulatory investigation, or applicable AML/CTF reporting obligation.
• Professional advisers: Lawyers, auditors, and compliance consultants under obligations of professional confidentiality.

All third-party Data Processors engaged by Bandarsbo2 are required to implement appropriate technical and organisational security measures and may only process your personal data in accordance with our written instructions.

7. Payment Data

Bandarsbo2 does not store full payment card numbers on its servers. Payment transactions are handled directly by our third-party payment processors, each of which maintains its own security and data protection standards.

For bank transfers and DuitNow transactions, we retain your bank account number and account holder name for the purpose of processing withdrawals and maintaining transaction audit logs as required by applicable financial regulations. Cryptocurrency wallet addresses submitted for withdrawals are stored securely and used only for the purpose of processing your withdrawal request.

All financial transaction records are retained in accordance with the data retention periods set out in Section 9 of this Policy.

8. Cookies & Tracking Technologies

The Bandarsbo2 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session state, and collect analytical data about platform usage.

Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly, including session management, login state, and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, and to personalise your experience on the Platform.
• Analytical cookies: Used to collect anonymised data about how players use the Platform, which pages are visited most frequently, and where errors occur — enabling us to improve performance.
• Security cookies: Used to detect and prevent fraudulent access attempts, including recognition of trusted devices for login purposes.

By continuing to use the Bandarsbo2 Platform, you consent to the use of essential and security cookies. You may manage your cookie preferences through your browser settings, though disabling certain cookies may impact Platform functionality.

9. Data Retention

Bandarsbo2 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to legal hold obligations, it is restricted from further processing until deletion becomes permissible.

10. Security Measures

Bandarsbo2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform.
• Encryption at rest for all personal data stored on our servers and databases.
• Two-factor authentication (2FA) available to all players for account login.
• Role-based access controls (RBAC) ensuring that internal personnel access only the data necessary for their specific function.
• Continuous intrusion detection and monitoring to identify and respond to suspicious access attempts in real time.
• Regular security audits and penetration testing conducted by independent security professionals.
• Staff training on data protection obligations and security best practices.

11. Your Data Rights

As a player on the Bandarsbo2 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 15.

We will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

12. Minors

The Bandarsbo2 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any balances or winnings accrued by an underage user will be forfeited.

If you believe a minor has registered on our Platform using your personal information or has accessed the Platform in an unauthorised manner, please contact our support team immediately.

13. Cross-Border Data Transfers

In order to deliver our services, some of your personal data may be processed by infrastructure providers, payment processors, or technology partners whose servers are located outside Malaysia. Where such cross-border transfers occur, Bandarsbo2 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses or other recognised transfer mechanisms.

We do not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing appropriate contractual safeguards. All cross-border Data Processors are required to process personal data in accordance with this Policy and applicable data protection standards.

14. Amendments to This Policy

Bandarsbo2 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. Where changes are material, we will notify you by means of a prominent notice on the Platform and/or by email to your registered address, prior to the amended Policy taking effect.

Your continued use of the Bandarsbo2 Platform following notification of any changes constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how we protect your personal data. The current effective date is displayed at the top of this document.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which Bandarsbo2 processes your personal data, please contact our Data Support Team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Bandarsbo2 Platform. Average first response time: under 3 minutes.
• Support Email (plain text — not a link): [email protected]

When submitting a data-related enquiry, please include your registered email address and a clear description of your request so we can assist you promptly. For requests requiring identity verification, we may ask you to provide a copy of a suitable identification document before we action your request.

For information relating to responsible gambling tools, self-exclusion, or deposit limits, please visit our Responsible Gambling page. For the full scope of your contractual rights and obligations, please refer to our Terms & Conditions.

This Privacy Policy was last reviewed and updated on 1 January 2026. Bandarsbo2 operates the platform at bandarsbo2.cam for the benefit of eligible adult players across Malaysia.