Privacy Policy

01 Introduction

bstar88 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at bstar88.cam ("the Platform"). This Privacy Policy ("Policy") sets out how bstar88 collects, processes, stores, and protects the personal data of individuals who access or use the Platform ("you", "your", "the Player", "the User").

This Policy applies to all personal data collected through the Platform — including data submitted during account registration, depositing and withdrawing funds, using our gaming and betting services, contacting customer support, and visiting our website. It applies to all players regardless of their location, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other parts of Malaysia.

By registering an account on bstar88 or continuing to use the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

02 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that can be used to identify you directly or indirectly, including your name, email address, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" means bstar88, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party engaged by bstar88 to process personal data on our behalf (e.g., payment service providers, KYC verification services).
• "KYC" means Know Your Customer — the identity and document verification process required before withdrawals may be processed.
• "Cookies" means small text files placed on your device by the Platform to store preference and session information.
• "AML" means Anti-Money Laundering — regulatory obligations requiring the Platform to monitor and report suspicious financial activity.

03 Personal Data We Collect

bstar88 collects the following categories of personal data:

04 How We Collect Your Data

bstar88 collects personal data through the following channels:

• Direct submission — information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting support;
• Automated collection — technical and usage data collected automatically through cookies, web beacons, and server logs when you visit or interact with the Platform;
• Third-party sources — identity and fraud-screening data received from KYC verification service providers, payment processors, and AML screening databases where required;
• Device and browser data — information your browser or device transmits automatically, such as IP address, screen resolution, and language settings.

05 Data Processing Purposes

bstar88 processes your personal data for the following specific and lawful purposes:

• Account creation and management — to register, verify, and maintain your player account, including your VIP tier status and responsible gambling settings;
• Service delivery — to provide access to casino games, sports betting markets, live dealer tables, and all other features of the bstar88 Platform;
• Payment processing — to process deposits and withdrawals via your chosen Malaysian payment method (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, etc.);
• Identity and age verification (KYC) — to verify that you are who you claim to be and that you meet the minimum age requirement of 21 years;
• Regulatory and AML compliance — to meet our obligations under applicable anti-money laundering, counter-terrorism financing, and financial crime prevention requirements;
• Fraud prevention and security — to detect, investigate, and prevent fraud, collusion, bonus abuse, and other prohibited conduct;
• Customer support — to respond to your enquiries, complaints, and requests via live chat or email;
• Responsible gambling — to monitor for signs of problem gambling behaviour and to administer deposit limits, cooling-off periods, and self-exclusion arrangements;
• Platform improvement — to analyse aggregate usage data and improve the performance, features, and user experience of the Platform;
• Direct communications — to send you account-related notifications, promotional offers (where consented), and policy updates.

06 Legal Basis for Processing

bstar88 processes personal data on the basis of one or more of the following lawful grounds:

• Contractual necessity — processing required to fulfil our obligations under the contract between bstar88 and you as a registered player (e.g., account management, payment processing);
• Legal obligation — processing required to comply with applicable laws and regulations, including AML/KYC requirements and financial reporting obligations;
• Legitimate interests — processing necessary for bstar88's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights;
• Consent — processing based on your freely given, specific, and informed consent, such as for marketing communications or optional analytics. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

07 Third-Party Data Sharing

7.1 Authorised Processors

bstar88 engages carefully selected third-party data processors to assist in delivering our services. These processors are contractually bound to process your data only on our instructions, to maintain appropriate security measures, and not to use your data for their own purposes. Categories of processors include:

• Payment service providers and financial institutions (including those facilitating DuitNow, FPX, Touch 'n Go eWallet, and bank transfer processing);
• KYC and identity verification service providers;
• Anti-fraud and AML screening platforms;
• Cloud hosting and infrastructure providers;
• Customer support software providers;
• Analytics and performance monitoring services (using aggregated, non-identifiable data only).

7.2 Regulatory Disclosures

bstar88 may disclose personal data to competent regulatory authorities, law enforcement agencies, or financial intelligence units where required to do so by applicable law, court order, or legitimate regulatory request. Such disclosures are made on the basis of legal obligation and are not voluntary disclosures.

08 Cookies & Tracking Technologies

bstar88 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. Cookies are small text files stored on your device. We use the following categories of cookies:

• Strictly necessary cookies — essential for the Platform to function, including session authentication and security tokens. These cannot be disabled without affecting Platform functionality;
• Functional cookies — used to remember your preferences, language settings, and login state between sessions;
• Analytics cookies — used to collect aggregated data about how players use the Platform (pages visited, session duration, device type). This data does not identify you individually;
• Performance cookies — used to monitor Platform performance and identify technical errors affecting the player experience.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may impact the functionality of the Platform. We do not use third-party advertising or cross-site tracking cookies.

09 Data Security Measures

bstar88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Multi-factor authentication options for player accounts;
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis;
• Regular security assessments, vulnerability scans, and penetration testing;
• Documented incident response procedures for managing potential data security events.

10 Data Retention

bstar88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our retention guidelines are as follows:

• Account data — retained for the duration of your account and for a period of five (5) years following account closure, as required for AML and financial record-keeping purposes;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, in line with standard AML regulatory requirements;
• KYC documents — retained for five (5) years following the end of the business relationship or the completion of the transaction to which they relate;
• Support communications — retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes;
• Technical and usage data — retained for a maximum of thirteen (13) months from collection, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised in accordance with our internal data destruction procedures.

11 Your Data Rights

As a player on the bstar88 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable data protection requirements.

12 Children & Minors

The bstar88 Platform is strictly for adults. No person under the age of 21 years may register an account or use any services on the Platform. bstar88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by an underage individual, we will immediately delete that data, close the associated account, and take appropriate action in accordance with our underage gambling policy.

If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] with relevant details so that we can investigate and act promptly.

13 Changes to This Privacy Policy

bstar88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable laws and regulations. Material changes — meaning changes that significantly affect your privacy rights or how we use your data — will be communicated to registered players via the Platform or by email to your registered address, with a minimum of fourteen (14) days' notice prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We recommend reviewing this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy.

14 Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or the way bstar88 handles your personal data, please contact our Data Privacy team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the Platform interface
• Response Time: We aim to respond to privacy-related enquiries within 5 business days
• Languages: English, Bahasa Melayu, Mandarin

We are committed to resolving privacy concerns promptly and fairly. If you remain dissatisfied after contacting us, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.