Privacy Policy – biru44

1. Data Controller

biru44 (referred to in this Privacy Policy as "biru44", "we", "us", or "our") is the data controller responsible for the personal data of Players who access or use the biru44 Platform at biru44.asia. As data controller, biru44 determines the purposes and means by which your personal data is processed in connection with the provision of online gaming and sports betting services to Players in Malaysia and other permitted jurisdictions.

This Privacy Policy applies to all personal data collected through the biru44 Platform, including the website, mobile-optimised site, live chat support interactions, and any other communication channels operated by biru44. It should be read together with our Terms & Conditions.

2. Personal Data We Collect

2.1 Registration Data

When you create a biru44 Account, we collect the following information: full legal name, date of birth, residential address, email address, and mobile telephone number. This information is required to establish your Account and to verify your eligibility to use the biru44 Platform.

2.2 Identity Verification (KYC) Data

To comply with our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) regulations, biru44 may collect copies of government-issued identity documents (such as a Malaysian MyKad or passport), proof of address documentation, and evidence of payment method ownership. These documents are processed and stored in accordance with applicable data protection requirements.

2.3 Financial Data

We collect transaction data including deposit amounts, withdrawal requests, payment method identifiers (such as account numbers associated with Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, or other payment instruments), and bet and wager history. Full card or account numbers are not stored by biru44; payment processing is handled by certified third-party payment service providers.

2.4 Technical & Usage Data

When you access the biru44 Platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, time and duration of visits, and clickstream data. This data is collected through server logs, cookies, and similar technologies as described in Section 5 of this Privacy Policy.

2.5 Communications Data

If you contact biru44's support team via live chat, email, or any other channel, we retain records of that correspondence including the content of messages and any attachments provided. This information is used to resolve your query and to improve our support services.

2.6 Responsible Gaming Data

If you activate responsible gaming tools on biru44 — such as deposit limits, loss limits, session timers, or self-exclusion — we record the settings you apply and any changes you make. This data is used to enforce your chosen restrictions and, where required by our licensing obligations, to share with relevant gaming authorities.

3. How We Use Your Personal Data

biru44 processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your biru44 Account, including processing deposits and withdrawals, applying bonuses, and providing access to games and betting markets.
• Identity verification and KYC compliance: To verify your identity, confirm your eligibility to use the Platform, and comply with applicable AML and KYC obligations.
• Service delivery and improvement: To operate, maintain, and improve the biru44 Platform, diagnose technical issues, and develop new features and game content.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance relating to your biru44 Account.
• Marketing communications: To send you promotional offers, bonus notifications, and other marketing communications where you have consented to receive them or where we have a legitimate interest in informing you of relevant offers. You may opt out at any time via your Account settings.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the biru44 Platform.
• Legal and regulatory compliance: To fulfil our obligations under applicable gaming licensing conditions, AML regulations, tax reporting requirements, and any other applicable law.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling, enforce self-imposed limits, and comply with responsible gaming obligations imposed by our licensing authority.

4. Legal Basis for Processing

biru44 processes your personal data on the following legal bases, as applicable:

• Contractual necessity: Processing necessary for the performance of your contract with biru44 — including Account registration, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and gaming licensing requirements.
• Legitimate interests: Processing carried out in pursuit of biru44's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Cookies & Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device when you access the biru44 Platform. They enable the Platform to recognise your device and remember certain information about your visit, such as language preferences and login status.

5.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function correctly, including session management, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to improve your experience on biru44.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players use the biru44 Platform — including pages visited, time on site, and technical errors — to help us improve the service.
• Marketing cookies: Used to deliver relevant promotional content to you based on your interests and Platform usage. These are only applied where you have provided appropriate consent.

5.3 Managing Cookies

You may manage or disable non-essential cookies via your browser settings or through biru44's cookie preference centre. Please note that disabling certain cookies may affect the functionality of the Platform.

6. Sharing of Personal Data

biru44 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes set out in this Privacy Policy:

• Payment service providers: Third-party processors handling deposits and withdrawals, including providers supporting Touch n Go eWallet, Boost, DuitNow QR, Maybank, CIMB, Public Bank, Visa, Mastercard, and USDT transactions. These providers are bound by their own data protection obligations.
• Identity verification providers: Third-party KYC and AML screening services used to verify Player identities and screen against sanctions lists.
• Game software providers: Third-party studios whose games are hosted on the biru44 Platform may receive limited technical data necessary for game operation and audit purposes.
• Regulatory authorities: Gaming licensing authorities, financial intelligence units, and other regulatory bodies where disclosure is required by law or by the conditions of our operating licence.
• IT and security service providers: Companies providing cloud infrastructure, cybersecurity, fraud detection, and platform maintenance services to biru44, subject to appropriate data processing agreements.
• Legal and professional advisors: Lawyers, auditors, and compliance consultants where required for the exercise or defence of legal claims.

7. International Data Transfers

biru44 operates and stores data on servers that may be located outside Malaysia. Where personal data is transferred to jurisdictions that do not provide a level of data protection equivalent to that available in Malaysia, biru44 will implement appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to ensure your data remains adequately protected in accordance with applicable data protection standards.

8. Data Retention

biru44 retains your personal data for as long as your Account remains active and for such additional period as is required or permitted by law. Specifically:

• Account and transaction data is typically retained for a minimum of five (5) years following Account closure, in accordance with AML and gaming regulatory requirements.
• KYC documentation is retained for the period specified by our licensing authority, which is generally five (5) years from the date of last transaction.
• Support correspondence is retained for a period of two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and analytics data is retained in anonymised or aggregated form for as long as necessary for the purposes for which it was collected.

Upon expiry of the applicable retention period, biru44 will securely delete or anonymise your personal data.

9. Your Data Protection Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by biru44:

• Right of access: The right to request a copy of the personal data biru44 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to biru44's legal retention obligations.
• Right to restrict processing: The right to request that biru44 restricts the processing of your personal data in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the biru44 Data Protection team at [email protected]. biru44 will respond to all valid requests within thirty (30) days. We may require you to verify your identity before processing your request.

10. Security Measures

biru44 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the biru44 Platform.
• Encrypted storage of sensitive data at rest, including KYC documentation and financial records.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third parties.
• Two-factor authentication available to all biru44 Account holders to protect their login credentials.

Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, biru44 will notify you and the relevant authorities as required by applicable law.

11. Children's Privacy

The biru44 Platform is strictly intended for persons aged 21 and above. biru44 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual below the minimum age requirement, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the biru44 Platform, please contact us immediately at [email protected].

12. Third-Party Links

The biru44 Platform may contain links to third-party websites or services. This Privacy Policy applies only to the biru44 Platform. biru44 is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policies of any third-party site you visit.

13. Amendments to This Policy

biru44 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where changes are material, we will notify you via the biru44 Platform or by email to your registered address. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The "Last Updated" date at the top of this policy will be updated accordingly.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or biru44's handling of your personal data, please contact the biru44 Data Protection team:

• Email: [email protected] — marked for the attention of the Data Protection Team
• Live Chat: Available 24/7 on the biru44 Platform

biru44 will acknowledge your query within five (5) business days and endeavour to resolve all data protection matters promptly and in accordance with applicable law.