Privacy Policy bila2 – Our Commitment to Malaysian Players

Welcome to bila2's Privacy Policy. This document forms part of our ongoing commitment to handling your personal information with full transparency, integrity, and responsibility.

Bila2 understands that trust is the foundation of every relationship we build with Malaysian players. When you register a bila2 account, you are entrusting us with your personal information — and we take that trust seriously. Every decision we make about how we collect, process, store, and protect your data always comes back to one simple question: "Is this what our players would want us to do with their information?"

This Privacy Policy applies to all users of the bila2 platform at bila2.asia — including registered players, website visitors, and any individual who interacts with bila2's services in any capacity. This policy should be read together with Terms & Conditions bila2, which together form the complete agreement between you and bila2.

By using the bila2 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the bila2 platform and contact us to close your account.

Bila2 only collects data that is genuinely necessary to provide platform services safely and effectively. This data minimisation principle means we do not collect information beyond what is needed for legitimate operational purposes.

Below are the categories of data we collect and their sources:

Bila2 collects and processes your personal data only for legitimate purposes that have been clearly stated. We do not use your data for any purpose other than those set out below:

• Account Management: To create, verify, and manage your playing account on the bila2 platform. This includes the identity verification (KYC) process, which ensures that only eligible players are able to use the platform.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks, and others), as well as withdrawals of winnings to your Malaysian bank account or e-wallet.
• Gaming Services Provision: To allow you to access and play all games on bila2 — slots, Baccarat, Roulette, Live Casino, jackpots, live matches, and more — with a seamless, personalized experience.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized access, and platform abuse that could compromise player safety or bila2's integrity.
• Customer Support: To provide effective assistance to players who contact bila2's 24/7 Malay-language support team — including resolving disputes, addressing technical queries, and handling account-related issues.
• Service Communications: To send important notifications regarding your account, transactions, changes to terms, and security updates. These are essential service communications that cannot be opted out of.
• Legal Compliance: To comply with relevant legal and regulatory requirements, including those under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• Platform Improvements: To analyze usage patterns on an aggregate (not individual) basis for the purpose of improving the performance, stability, and user experience of the bila2 platform.

Bila2 processes your personal data on a clear legal basis for each processing purpose. These bases ensure that every instance of data processing we carry out is lawful and accountable:

• Performance of Contract: The majority of bila2's data processing is necessary to perform the service contract between you and bila2 — that is, to provide the online casino platform services you signed up for. Without this data, we are unable to deliver our services to you.
• Legal Obligations: Some data processing is mandatory to comply with applicable Malaysian law, including anti-money laundering (AML) requirements, identity verification (KYC), and reporting to relevant authorities when required.
• Legitimate Interests: For purposes such as fraud detection, network security, and service improvement, bila2 processes data on the basis of legitimate interests — interests that do not override your fundamental rights and interests as a user.
• Consent: For marketing communications and non-essential cookie use, bila2 requires your explicit consent. This consent can be withdrawn at any time without affecting any processing carried out prior to withdrawal.

Bila2 does not sell, rent, or trade player personal data to third parties for their own marketing purposes. This is our absolute commitment to the privacy of Malaysian players.

There are, however, certain situations where bila2 needs to share data with third parties in order to keep the platform running safely and effectively:

• Payment Service Providers: Payment gateways handling deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive the transaction information necessary to process payments. These providers are bound by strict confidentiality agreements and PCI DSS standards.
• Game Providers: Game software providers that supply slots, Live Casino, Baccarat, and other games on the bila2 platform may process game session data for technical purposes. These providers do not have access to your full identity or financial information.
• Identity Verification Services: For KYC purposes, bila2 uses a third-party identity verification service that processes copies of your identification documents in a secure, regulated environment.
• Legal Authorities: bila2 will disclose data to the relevant Malaysian authorities — including the Royal Malaysia Police, Bank Negara Malaysia, or other regulatory bodies — when required by law, court order, or valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of bila2's assets, user data may be transferred to the receiving entity. Players will be notified in advance, and a privacy policy of at least equivalent standard will apply.

Protecting player personal data is bila2's highest technical and operational priority. We continually invest in security infrastructure to ensure your data remains safe from cyber threats and unauthorised access.

The key technical security measures employed by bila2 are as follows:

• Encryption in Transit: All communications between your device and bila2 servers are protected by TLS 1.3 encryption with 256-bit SSL certificates. This ensures that data in transit cannot be intercepted or read by any third party.
• Encryption at Rest: Sensitive data stored on bila2's servers — including passwords (in hashed form) and authentication information — is encrypted using industry-standard AES-256 encryption.
• Strict Access Controls: Access to player data within the bila2 organisation operates on a need-to-know basis. Only staff who require access to carry out their specific duties may access relevant data, and all access is logged and monitored.
• Two-Factor Authentication: All bila2 internal systems containing user data are protected by mandatory two-factor authentication for all staff. Players are also encouraged to enable 2FA via SMS OTP for their accounts.
• Continuous Threat Monitoring: bila2's security system operates around the clock to detect any suspicious access attempts, cyberattacks, or anomalies in data access patterns.
• Regular Penetration Testing: bila2 conducts regular security testing and technical audits by independent security experts to identify and remediate vulnerabilities before they can be exploited.

Bila2 does not retain personal data for longer than is necessary for the purposes outlined in this policy or as required by applicable Malaysian law.

Bila2's general data retention policy is as follows:

• Active Account Data: For as long as your account remains active on the bila2 platform, we retain the data necessary to manage your account and provide services to you.
• Data After Account Closure: After an account is closed, bila2 retains transaction records and account data for a minimum of 7 years as required under Malaysia's anti-money laundering legislation and financial reporting obligations.
• Support Communication Records: Chat and email records with the support team are retained for 3 years for dispute resolution and service improvement purposes.
• Technical Log Data: Access logs and technical operational data are retained for 12 months for security purposes and technical troubleshooting.
• Live Casino Video Records: Video recordings of Live Casino sessions are retained for 30 days for game dispute resolution purposes.

Once the defined retention period has elapsed, or upon your request for data deletion (subject to mandatory legal retention requirements), bila2 will securely delete or destroy the data using methods that ensure it cannot be recovered.

The bila2 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand aggregate platform usage patterns.

Types of cookies used by bila2:

• Essential Cookies (Required): These cookies are essential for the basic functioning of the bila2 platform — including maintaining your login session, ensuring transaction security, and enabling games to operate correctly. They cannot be disabled without seriously affecting platform functionality.
• Performance Cookies: Used to gather information on how players use the bila2 platform — the most frequently visited pages, time spent in each section, and any errors that may occur. This information is used in aggregate form and does not identify any individual personally.
• Functional Cookies: Enables the bila2 platform to remember your preferences such as language, interface settings, and gaming preferences, delivering a more personalized experience on every visit.
• Security Cookies: Used for authentication purposes and to prevent fraudulent activity — including identifying suspicious sessions and ensuring every transaction is processed within a legitimate session.

As a bila2 player and data subject, you have certain rights regarding your personal data. bila2 is committed to respecting and facilitating the exercise of these rights:

The bila2 platform is not intended for individuals under the age of 21. bila2 maintains a strict zero-tolerance policy against registration or use of the platform by minors.

Bila2 does not knowingly collect personal data from individuals under the age of 21. The bila2 account registration process requires age verification through date of birth information, and any KYC process that may be requested will further confirm the player's age status.

Should bila2 discover that data has been collected from an individual under the age of 21 without our knowledge, the account in question will be terminated immediately and the relevant data deleted within a reasonable period, subject to any applicable legal retention requirements.

Bila2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable legal requirements, or improvements to platform operations.

For material changes — that is, changes that significantly alter the way we collect, use, or share your personal data — bila2 will:

• Sending notifications to all registered players via email or in-platform notifications on bila2.
• Providing at least 7 days before the changes take effect.
• Updating the "Last Updated" date at the top of this document.
• In cases of significant changes, we may request your renewed consent before continuing to process your data.

We encourage you to review this Privacy Policy periodically to stay informed about how bila2 handles your personal data. Continued use of the bila2 platform after any amendments take effect will be considered acceptance of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bila2 handles your personal data, our Malay-speaking team is available to assist 24 hours a day.

For privacy-specific enquiries — including data access requests, corrections, deletions, or complaints regarding data processing — please use the following channels:

Bila2 is committed to responding to all privacy-related requests or complaints within 30 days of receipt. For more complex cases requiring in-depth investigation, we will keep you informed of progress within that timeframe.