Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Bandar80 ("Bandar80", "We", "Us", "Our") collects, processes, stores, shares, and protects the personal data of individuals ("You", "User", "Player") who visit, register on, or otherwise interact with the Bandar80 online casino and sports betting platform, accessible at https://bandar80.cam and any associated mobile or web-based interfaces (the "Platform").

This Policy forms an integral part of the Bandar80 Terms & Conditions and should be read alongside them. By accessing or using the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

Bandar80 is committed to handling your personal data responsibly, lawfully, and transparently. We collect only what is necessary and we protect what we hold. If you have any questions about this Policy, our data practices, or your rights, you may contact us at any time through the channels set out in Section 15.

2. Data Controller

For the purposes of this Policy, Bandar80 acts as the data controller in respect of all personal data collected through the Platform. As data controller, Bandar80 determines the purposes and means by which personal data is processed and accepts responsibility for ensuring that such processing is carried out in a lawful, fair, and transparent manner.

Bandar80 operates under applicable international gaming regulatory frameworks and complies with relevant data protection requirements applicable to its operating jurisdiction. Where Bandar80 engages third-party service providers to process data on its behalf, those providers act as data processors under Bandar80's instruction and are bound by appropriate data processing agreements.

3. Personal Data We Collect

Bandar80 collects and processes the following categories of personal data:

Identity & Contact Data

Account & Transaction Data

Technical & Usage Data

KYC Verification Data

Bandar80 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data (beyond standard selfie KYC verification), health information, or sexual orientation. Where any such information is incidentally disclosed by a Player, Bandar80 will not retain or process it for any purpose.

4. How We Collect Your Data

Bandar80 collects personal data through the following means:

• Direct Submission: Data you provide when registering an Account, completing the KYC verification process, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access and use the Platform, including through cookies, server logs, and session tracking technologies. Please refer to Section 10 for full details on our cookie practices.
• Payment Processors: Data received from payment processing partners such as FPX, DuitNow, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network confirmations when you transact on the Platform. This data is limited to what is necessary to verify and reconcile your transactions.
• Third-Party Verification Providers: Identity and fraud-check data received from external KYC and AML service providers engaged by Bandar80 to support its regulatory compliance obligations.
• Public Sources: In limited circumstances where it is necessary for fraud prevention or AML compliance, Bandar80 may supplement account information with data from publicly accessible registers or databases.

5. Purposes of Data Processing

Bandar80 processes your personal data for the following purposes:

1. Account Management: To create, maintain, and administer your Bandar80 Account, including processing deposits and withdrawals in MYR and maintaining accurate balance records.
2. Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering (AML) and responsible gambling regulatory obligations. Bandar80 is required to verify that all Account holders are aged 21 or above.
3. Transaction Processing: To process deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR, FPX, Maybank2u, CIMB Clicks, Hong Leong Connect, Public Bank PBeBank, BTC, ETH, USDT, BNB, and other supported payment methods, and to process your withdrawal requests.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account misuse, money laundering, and any other prohibited conduct as defined in our Terms & Conditions.
5. Regulatory Compliance: To fulfil Bandar80's legal and regulatory obligations under the applicable gaming regulatory framework, including record-keeping, transaction reporting, and responding to lawful requests from competent authorities.
6. Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance through Live Chat, WhatsApp, WeChat, and email channels in Bahasa Melayu, Chinese, and English.
7. Platform Improvement: To analyse aggregated usage data for the purposes of improving Platform functionality, game selection, and user experience. This analysis is conducted on anonymised or pseudonymised datasets wherever possible.
8. Responsible Gambling: To monitor account activity for indicators of problem gambling, enforce player-set deposit limits and self-exclusion requests, and fulfil Bandar80's obligations under our Responsible Gambling policy.
9. Marketing Communications: To send you promotional communications about Bandar80 bonuses, sporting events, and platform updates where you have provided consent to receive such communications. You may withdraw marketing consent at any time by contacting our support team.

6. Legal Basis for Processing

Bandar80 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and Bandar80 (as set out in the Terms & Conditions), including account registration, transaction processing, and customer support.
• Legal Obligation: Processing is necessary for Bandar80 to comply with its regulatory, AML, and KYC obligations under applicable gaming and financial regulations.
• Legitimate Interests: Processing is carried out in pursuit of Bandar80's legitimate interests in operating a secure, fraud-free, and commercially viable gaming platform — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent (for example, marketing communications or optional personalisation features), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

7. Data Sharing & Disclosure

Bandar80 does not sell, rent, or otherwise commercialise your personal data. We share data only in the following strictly necessary circumstances:

• Payment Processors: Your payment and transaction data is shared with the applicable payment service providers — including FPX operators, DuitNow network participants, Maybank, CIMB, Hong Leong, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency processors — solely to facilitate the processing of your deposits and withdrawals.
• KYC & AML Service Providers: Identity documents and verification data are shared with licensed third-party KYC and fraud-detection service providers engaged by Bandar80 to fulfil its regulatory verification obligations.
• Game Content Providers: Limited technical identifiers (not full personal profiles) may be shared with the studios and platforms that supply casino game content to Bandar80, solely for the purpose of game session management and RNG integrity auditing.
• Regulatory Authorities: Bandar80 will disclose personal data to competent regulatory, law enforcement, or government authorities where required by law, court order, or regulation, or where Bandar80 reasonably believes such disclosure is necessary to protect the rights, safety, or property of Bandar80 or third parties.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of all or substantially all of Bandar80's assets, your personal data may be transferred to the successor entity, subject to appropriate safeguards and prior notice to affected Players.

All third parties with whom Bandar80 shares personal data are required to implement appropriate technical and organisational measures to protect that data and to process it only for the specified purposes under Bandar80's instruction.

8. Data Retention

Bandar80 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your Account's active status plus a minimum period of five (5) years following Account closure, in order to meet AML, tax, and regulatory record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or Account closure (whichever is later), consistent with standard AML compliance retention obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for up to three (3) years from the date of the most recent interaction, for quality assurance and dispute resolution purposes.
• Technical Logs: Server and session logs are generally retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or pseudonymised in accordance with Bandar80's data disposal procedures.

9. Security Measures

Bandar80 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Bandar80 Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal data — including KYC documents, payment details, and account credentials — is encrypted at rest on Bandar80's secure servers.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their Bandar80 Account. 2FA adds a second layer of authentication that significantly reduces the risk of unauthorised account access.
• Segregated Fund Storage: Player funds are held in accounts fully segregated from Bandar80's operational capital, providing protection in the event of any financial difficulty.
• Access Controls: Access to personal data within Bandar80's systems is restricted on a strict need-to-know basis, with role-based permissions and audit logging in place.
• Regular Security Audits: Bandar80 undertakes regular internal and third-party security reviews of its Platform infrastructure to identify and remediate vulnerabilities promptly.

10. Cookies & Tracking Technologies

Bandar80 uses cookies, pixel tags, local storage, and similar technologies to operate the Platform, maintain your login session, and enhance your experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without preventing core Platform functionality.
• Functional Cookies: Remember your preferences such as language selection, currency display, and session timeout settings to provide a more personalised experience.
• Analytics Cookies: Collect anonymised data on how Players interact with the Platform — such as which pages are visited most frequently and where errors occur — to help Bandar80 improve the service.
• Security Cookies: Used to detect and prevent fraudulent activity, account takeover attempts, and bot access.

Bandar80 does not deploy third-party cross-site advertising cookies or social media tracking pixels. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the Platform. Continued use of the Platform following your first access constitutes consent to the use of cookies as described in this section.

11. Minors & Age Verification

The Bandar80 Platform is strictly intended for individuals who are aged 21 years or above. Bandar80 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

As part of our KYC process, all Players are required to submit a valid government-issued identity document confirming their date of birth before withdrawals are processed. Where Bandar80 identifies or has reasonable grounds to suspect that a Player is under 21, the Account will be suspended immediately pending age verification. Any winnings accumulated during underage play are not payable and may be forfeited.

If you become aware that a minor has accessed or registered on the Bandar80 Platform, please notify us immediately at [email protected] so that we can take appropriate action without delay.

12. Your Rights

Subject to applicable law and the regulatory retention obligations described in Section 8, you have the following rights in respect of the personal data Bandar80 holds about you:

To exercise any of the above rights, please submit a written request to our support team via Live Chat or by email to [email protected]. Bandar80 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. We may request verification of your identity before processing certain requests.

13. International Data Transfers

Bandar80 may transfer your personal data to, and store it on, servers located outside of Malaysia or your country of residence, including in jurisdictions where Bandar80's operational or technology infrastructure is based. Such jurisdictions may have data protection laws that differ from those in Malaysia.

Where personal data is transferred internationally, Bandar80 ensures that appropriate safeguards are in place — including contractual data processing agreements with receiving parties that impose data protection standards consistent with the principles of this Policy. By using the Platform, you consent to such international transfers as described herein.

14. Amendments to This Policy

Bandar80 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will provide reasonable notice to Players by displaying a notification on the Platform or by sending an email to the address registered on your Account.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following any amendment constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically to remain informed of how we are protecting your data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or Bandar80's data processing practices, please contact us through any of the following channels: