Privacy Policy — Bentley88 Platform

This Privacy Policy ("Policy") sets out the data processing practices of Bentley88 ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting platform accessible at bentley88.cam. This Policy applies to all Users ("you", "your") who access or use the Bentley88 website, mobile applications, or any associated services, including but not limited to account registration, deposit and withdrawal transactions, live casino gameplay, sports betting, and customer support interactions.

Bentley88 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect, process, and store personal information only to the extent necessary to deliver our services, comply with our legal obligations, and protect the integrity of our platform. We do not sell your personal data to third parties for marketing purposes.

This Policy should be read in conjunction with the Bentley88 Terms & Conditions, which govern your use of the Platform as a whole. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy.

The following terms carry the meanings set out below wherever they appear in this Privacy Policy:

• "Personal Data" — Any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" — Any operation performed on Personal Data, whether by automated means or otherwise, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — Bentley88, as the entity that determines the purposes and means by which Personal Data is processed.
• "Data Subject" — The natural person whose Personal Data is being processed — in this context, the registered User of the Bentley88 Platform.
• "Third Party" — Any entity other than the Data Subject and Bentley88, including payment processors, KYC verification providers, analytics vendors, and regulatory authorities.
• "KYC" — Know Your Customer: the identity and age verification process conducted to comply with anti-money laundering obligations and to confirm that players meet the minimum age requirement of 21 years.
• "Cookie" — A small data file stored on a User's device by the Platform for the purposes of session management, analytics, and personalisation.

Bentley88 collects the following categories of personal data in the course of providing its services to registered Users:

3.1 Identity & Contact Information

• Full legal name and date of birth, as provided during registration or KYC verification.
• National identification number (MyKad), passport number, or equivalent government-issued identifier submitted for age and identity verification.
• Residential address, including postcode and state — relevant for players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia.
• Email address and mobile phone number used for account registration, communication, and two-factor authentication.

3.2 Financial Information

• Bank account details, e-wallet identifiers (such as Touch 'n Go eWallet or Boost account numbers), or other payment method references used for deposits and withdrawals in MYR.
• Transaction history, including deposit amounts, withdrawal requests, processing timestamps, and payment method used (FPX, DuitNow, Maybank, CIMB, Public Bank, etc.).
• Account balance history and wagering activity records, retained for regulatory compliance and dispute resolution purposes.

3.3 Technical & Usage Data

• IP address, browser type and version, operating system, device model, and screen resolution collected automatically when you access the Platform.
• Login timestamps, session duration, pages visited, game history, bet placement records, and feature interaction data used for platform analytics and fraud detection.
• Cookie and similar tracking data as detailed in Section 8.

3.4 Communications Data

• Records of live chat conversations, email correspondence, and support ticket submissions between you and the Bentley88 customer support team.
• Feedback, complaints, and dispute records submitted through any Platform communication channel.

Bentley88 collects personal data through the following means:

• Directly from you — information you provide voluntarily during account registration, KYC submission, deposit and withdrawal requests, customer support interactions, or promotional participation.
• Automatically — technical and usage data collected through cookies, server logs, and similar tracking technologies when you browse or interact with the Platform.
• From third parties — identity verification data returned by our KYC service providers; transaction confirmation data from payment processors such as FPX network operators and e-wallet platforms; fraud signal data from security vendors.

Bentley88 processes personal data for the following specific purposes. We do not use personal data for any purpose incompatible with those listed below without obtaining additional consent where required:

Bentley88 processes personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform our obligations under the agreement formed when you register a Bentley88 account and accept the Terms & Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable anti-money laundering legislation, KYC requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing is necessary to pursue Bentley88's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided these interests are not overridden by your rights.
• Consent: For non-essential processing such as marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Bentley88 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: Financial transaction data is shared with FPX network operators, DuitNow, and e-wallet providers (including the relevant platforms behind Touch 'n Go eWallet, Boost, and GrabPay) as strictly necessary to process MYR deposits and withdrawals.
• KYC & Verification Providers: Identity documents and verification data are shared with our licensed third-party KYC service providers for the purpose of confirming age, identity, and source of funds where required.
• Fraud Prevention & Security Vendors: Technical and device data may be shared with specialist fraud detection partners to identify and mitigate platform abuse, multi-accounting, and money laundering activity.
• Regulatory & Legal Authorities: We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally obliged to do so or where disclosure is necessary to protect our legal rights.
• Service Providers & Technology Partners: Limited operational data may be shared with cloud hosting providers, analytics platforms, and customer support software vendors who process data on our behalf under strict data processing agreements.
• Corporate Transactions: In the event of a merger, acquisition, or sale of Bentley88's business or assets, personal data may be transferred to the relevant acquiring entity as part of the transaction, subject to equivalent privacy protections.

All third parties with whom Bentley88 shares personal data are contractually required to process such data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection requirements.

Bentley88 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to operate the Platform, maintain logged-in sessions, analyse usage patterns, and improve user experience. The following categories of cookies may be deployed on the Platform:

• Strictly Necessary Cookies: Essential for core Platform functionality, including authentication, session management, and security. These cannot be disabled without materially affecting your ability to use the Platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform — including pages visited, session length, and feature usage — to help us improve the service.
• Functionality Cookies: Enable the Platform to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and suspicious login patterns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impair the functionality of the Platform. Bentley88 does not deploy third-party advertising or cross-site tracking cookies.

Bentley88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following general retention guidelines apply:

• Account Data: Retained for the duration of the active account relationship and for a minimum period of five (5) years following account closure, in compliance with applicable anti-money laundering and financial record-keeping obligations.
• Transaction Records: All financial transaction records, including MYR deposit and withdrawal history, are retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Identity verification documents are retained for the duration of the account and for a minimum of five (5) years after account closure, or longer if required by applicable law.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction, or longer where the matter relates to an unresolved dispute.
• Technical & Usage Logs: Server logs and usage data are typically retained for ninety (90) days for security and debugging purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data deletion procedures.

Bentley88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive personal and financial data at rest, using industry-standard encryption protocols.
• Two-factor authentication (2FA) available for all registered accounts to prevent unauthorised login.
• Role-based access controls ensuring that only authorised Bentley88 personnel with a documented need can access personal data.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Real-time fraud monitoring and anomaly detection systems to identify and respond to security incidents promptly.

While Bentley88 takes all reasonable steps to protect personal data, no internet transmission or electronic storage system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected Users without undue delay and take immediate steps to mitigate the impact.

As a Data Subject whose personal information is processed by Bentley88, you hold the following rights in relation to your personal data. These rights may be subject to certain limitations where processing is required to fulfil a legal obligation or to protect our legitimate interests:

To exercise any of these rights, please contact Bentley88's support team as set out in Section 15. We will endeavour to respond to all data rights requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

The Bentley88 Platform is strictly restricted to individuals who are aged 21 years or older. Bentley88 does not knowingly collect or process personal data relating to any individual below the minimum age of 21. This restriction is enforced through mandatory age verification at registration and ongoing KYC procedures.

If Bentley88 becomes aware that personal data has been collected from a person below the age of 21, we will take immediate steps to close the relevant account, delete the associated personal data from our systems, and return or void any funds held in that account in accordance with applicable law.

If you believe that a person below the minimum age has registered a Bentley88 account, please contact us immediately at the email address set out in Section 15 so that we may investigate and take appropriate action.

Bentley88 operates infrastructure across multiple international jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. These countries may have data protection laws that differ from those in Malaysia.

Where personal data is transferred internationally, Bentley88 ensures that appropriate safeguards are in place to protect the data in a manner consistent with the standards described in this Policy. Such safeguards may include contractual clauses between Bentley88 and the relevant data recipients, or reliance on the recipient's certification under a recognised international data protection framework.

By using the Bentley88 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data outside Malaysia where necessary to provide our services, subject to the protections described above.

Bentley88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. The "Last updated" date displayed at the top of this page will be revised each time a material change is made.

Where changes are material — meaning they significantly affect how we handle your personal data or the rights available to you — we will provide advance notice through a prominent on-Platform notification and, where reasonably practicable, by email to the address associated with your account.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms. We recommend that you review this page periodically, particularly before making significant financial transactions on the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Bentley88, please contact us through one of the following channels:

• Live Chat: Available via the Platform from 8:00 AM to 2:00 AM MYT. Our support agents, fluent in English, Bahasa Melayu, and Mandarin Chinese, can assist with privacy enquiries and help you initiate a data rights request. Average response time is under five minutes.
• Email: Please direct written privacy enquiries to the following address (plain text — not a clickable link): [email protected]. Include your registered username and a clear description of your enquiry. We aim to respond to email enquiries within 4 to 12 hours on business days.

For data rights requests — including access, rectification, erasure, or portability — please contact us via email with the subject line "Data Rights Request" and include your registered account username, the specific right you wish to exercise, and any relevant supporting information. We will acknowledge receipt of your request within five (5) business days and provide a full response within thirty (30) calendar days.