Privacy Policy bila2 – Data Protection Malaysian Members That We Protect

This Privacy Policy ("Policy") is issued by bila2 ("we", "Company", "platform") and applies to all registered members, website visitors, and any individual who interacts with the bila2 platform via bila2.click or the bila2 mobile application that may be available from time to time.

This policy sets out in detail how bila2 collects, processes, uses, stores, shares, and protects your personal information. It also explains your rights regarding your personal data and how to exercise those rights.

By registering a bila2 account, making your first deposit, or simply using this platform to browse content, you are deemed to have read and agreed to this Privacy Policy in its entirety. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Bila2 only collects data that is necessary to provide a secure, functional, and responsible service. Below are the categories of data we collect along with their specific purposes:

Data We Do Not Collect

Bila2 does not directly collect credit or debit card numbers — all payments are processed through certified third-party payment providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX). We also do not collect sensitive data such as health information, political views, or religious beliefs unless directly relevant to responsible gambling requirements and with your explicit consent.

Data collected by bila2 is used exclusively for the following purposes. We do not use your data for any other purpose without prior notice and your consent:

• Account Management: Creating, verifying, and securely maintaining your bila2 account. This includes the KYC process to ensure only eligible individuals (aged 18 and above) use the platform.
• Transaction Processing: Processing deposits and withdrawals via your preferred Malaysian payment method — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u or CIMB Clicks.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering, and other illegal activities. Technical data such as IP addresses and access logs are used for this purpose.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support when needed. Your gaming history allows bila2 to offer suitable limit recommendations.
• Customer Support: Providing relevant and effective assistance whenever you contact the bila2 support team via Live Chat or email at support@bila2.click.
• Service Communications: Sending important account-related notifications — including deposit confirmations, withdrawal alerts, security warnings, and significant policy updates.
• Legal Compliance: Fulfilling legal obligations under Malaysia's Personal Data Protection Act 2010, Anti-Money Laundering laws, and any other applicable regulatory requirements.
• Platform Improvements: Using anonymised analytics data to understand usage patterns and improve the user experience. This data cannot be linked back to any individual's identity.

Bila2 does not sell member personal data to anyone. However, there are limited circumstances in which data may be shared with trusted third parties for legitimate and necessary reasons. All data sharing is subject to strict confidentiality agreements.

Authorised Service Providers

Bila2 uses authorised third-party service providers to support platform operations. They are only permitted to use data for the specific purposes related to the services they provide to bila2:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers to process financial transactions. Financial data shared is limited to the minimum required for transaction processing.
• Game Providers: Game companies such as Pragmatic Play, Microgaming, NetEnt, and other providers receive only the minimum data necessary to deliver a functional and audited gaming experience.
• KYC Services: Third-party identity verification providers that assist with the Know Your Customer (KYC) process to ensure legal compliance.
• Server Infrastructure & Security: Cloud and cybersecurity service providers that support bila2's technical platform operations.

Legally Required Disclosure

Bila2 may be required to disclose members' personal data when mandated by law or by a directive from a lawful authority — for example, to the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or a court with relevant jurisdiction. In such situations, bila2 will provide only the minimum data necessary and will notify the affected member where permitted by law.

Bila2 invests seriously in member data security. Our security infrastructure comprises multiple layers of protection designed to prevent unauthorised access and safeguard data integrity:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and bila2's servers are fully encrypted. No personal or financial data is transmitted in plain text.
• Stored Data Encryption: Sensitive data stored in bila2's database is encrypted using industry-standard encryption algorithms. Even in the highly unlikely event of a server breach, stolen data cannot be read without the encryption key.
• Multi-Layer Firewall: bila2's server infrastructure is protected by multi-layered firewalls and an intrusion detection & prevention system (IDS/IPS) operating 24/7.
• Strict Access Controls: Access to member data within bila2's internal systems is restricted to personnel with a genuine business need, based on the principle of least privilege. All access is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): bila2's internal systems require multi-factor authentication for all administrative access. Members are also encouraged to enable 2FA on their accounts for an added layer of security.
• Regular Security Testing: bila2 conducts regular security assessments and penetration testing to identify and patch vulnerabilities before they can be exploited.

Member Security Responsibilities

While bila2 does its best to protect your data on our end, the security of your account also depends on your own actions. We recommend using a strong and unique password, not sharing your login credentials with anyone, enabling 2FA, and ensuring your device is free from malware. bila2 will never ask for your password via email, Live Chat, or any other communication channel.

Bila2 does not retain members' personal data for longer than is necessary for the purposes stated in this policy or as required by applicable law.

• Active Account Data: For as long as your account remains active on bila2, your personal data and game history are retained so we can continue delivering our services properly.
• After Account Closure: When an account is closed at a member's request, bila2 will delete or anonymise personal data within 90 days, except for records that must be retained for legal compliance, audit purposes, or unresolved dispute resolution.
• Financial Records: Financial transaction records may be retained for up to 7 years in accordance with Malaysian legal requirements relating to anti-money laundering and taxation.
• Security Data: Access logs and security records are retained for 12 months for the purpose of investigating security incidents if required.
• Responsible Gaming Data: Records of self-imposed limits and self-exclusion history are retained for a period determined by responsible gaming requirements, typically 5 years, to ensure continued protection.

When data is no longer needed and there is no legal obligation to retain it, bila2 will securely delete it using industry-standard erasure methods.

Bila2 uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit the bila2 website. We use four categories of cookies:

• Essential Cookies (Required): Cookies required for core platform functionality — including login sessions, security, and language preferences. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
• Performance Cookies (Analytics): Cookies that collect anonymous information about how visitors use the platform — including the most frequently visited pages, time spent, and navigation paths. This information is used to improve the platform. This data cannot be linked to any individual's identity.
• Functional Cookies: Cookies that remember your preferences such as display settings, game configurations, and preferred language to deliver a more personalised experience when you return to the platform.
• Marketing Cookies (Optional): Cookies used to deliver more relevant advertisements based on your interests. You may decline this category of cookies without affecting the core functionality of the platform.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect your ability to log in and use the platform properly.

To deliver high-quality services to members in Malaysia, some data may be processed or stored by service providers operating outside Malaysia — for example, international game providers such as Microgaming, NetEnt, or Pragmatic Play, whose servers may be located in other countries.

Bila2 ensures that all cross-border data transfers comply with data protection principles equivalent to Malaysia's standards:

• Legally binding data processing agreements are signed with all service providers that receive bila2 member data.
• Service providers are only permitted to process data for the specific purposes stated in the agreement.
• Bila2 conducts regular security audits on all third-party service providers that handle member data.

In all circumstances, the protection of your data remains a priority regardless of where it is physically processed.

As a bila2 member, you have the following full rights over your personal data. All requests relating to these rights can be submitted via the platform's Live Chat or by emailing support@bila2.click. bila2 will process requests within 14 business days.

Bila2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, applicable legal changes, or improvements to the services we offer. When there are material changes, we will:

• Displaying a clear notice on the bila2.click homepage for at least 30 days.
• Sending email notifications to all registered members outlining the key changes.
• Updating the "Last Updated" date at the top of this document.

Continued use of the bila2 platform after an update constitutes acceptance of the revised policy. If you do not agree with any changes, you have the right to close your account.

How to Reach Us for Privacy Inquiries

Our team understands how important privacy is and will handle every personal data enquiry with care and accountability. No question is too small or too technical for us to help clarify.