At bmw2u, your privacy is not an afterthought. This Privacy Policy explains precisely what personal data we collect from members across Malaysia, why we collect it, how we protect it, and what rights you hold over your own information.
The cards below summarise our core data protection commitments. The full legal policy follows underneath.
All data transmitted between your device and bmw2u's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Malaysian banks including Maybank and CIMB. We do not transmit sensitive data over unencrypted channels under any circumstances.
bmw2u does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data exists to operate your account and improve your experience on our platform — nothing more. This is a firm, unconditional commitment.
We collect only the personal data that is strictly necessary to deliver our services, process your transactions, verify your identity for KYC compliance, and meet our legal obligations. We do not collect data speculatively or for undisclosed purposes.
You have the right to access, correct, export, or request deletion of your personal data at any time. Our support team will assist with any data rights requests within a reasonable and legally compliant timeframe.
We do not hold your data indefinitely. Retention periods are defined by the category of data and applicable legal obligations. Once data is no longer required, it is securely deleted or anonymised in accordance with this Policy.
Where we must share data with third-party processors — such as payment providers like Touch'n Go eWallet, Boost, DuitNow, or FPX — we do so only under strict contractual data protection agreements and disclose this fully in this Policy.
This Privacy Policy ("Policy") issued by bmw2u ("we", "us", "our", "the Platform") and applies to all personal data collected from users ("you", "the Member", "the User") of the bmw2u website at https://bmw2u.cam and all associated services, features, and communications.
bmw2u is an online casino and sports betting platform serving members primarily in Malaysia, including players across Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam. Given that our services involve the processing of financial transactions, identity verification, and personal account management, we handle personal data with the care and diligence it deserves.
This Policy describes: what personal data we collect; the lawful basis on which we process it; how we use and store it; with whom we share it; how long we retain it; and what rights you have over your own information. By registering an account and using our services, you acknowledge that you have read and understood this Policy.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.
The following terms carry the meanings defined below throughout this Policy:
bmw2u collects the following categories of personal data in connection with your use of the Platform:
| Data Category | Examples | Collected At |
|---|---|---|
| Registration Data | Name, DOB, email, phone, address | Account sign-up |
| KYC Data | MyKad copy, proof of address | Verification request / withdrawal |
| Financial Data | Transaction records, payment method IDs | Each deposit / withdrawal |
| Technical Data | IP address, device type, session logs | Every Platform visit |
| Communication Data | Live chat transcripts, emails | Support interactions |
bmw2u collects personal data through the following means:
The majority of personal data we hold is provided directly by you when you register an Account, complete KYC verification, make deposits or withdrawal requests, contact our support team, or participate in promotions.
When you access the bmw2u Platform, we automatically collect certain technical data through cookies, server logs, and similar technologies. This includes your IP address, device characteristics, pages viewed, time spent on the Platform, and in-session behaviour. Please refer to Section 8 of this Policy for detailed cookie information.
We may receive certain data from our third-party service providers in the course of operating the Platform. For example, payment processors (such as DuitNow, FPX, or e-wallet providers) may return transaction status confirmations containing reference numbers and timestamps associated with your Account.
bmw2u processes your personal data on the following lawful bases:
Processing your registration data, financial transaction data, and KYC documentation is necessary to fulfil our contractual obligations to you as a registered member of the bmw2u Platform. Without this data, we cannot provide you with an Account or process your transactions.
We are required by applicable anti-money laundering regulations, financial reporting obligations, and other legal requirements to collect and retain certain categories of personal data. This includes identity verification records and transaction histories, which we are obligated to retain for defined periods regardless of Account status.
We process certain technical and behavioural data on the basis of our legitimate interests in operating a secure, functional, and fraud-free platform. This includes security monitoring, fraud detection, platform analytics, and service improvement activities. We only rely on legitimate interests where our interests are not overridden by your fundamental rights and freedoms.
Where we rely on your consent as the lawful basis for processing — for example, for optional marketing communications — we will request your explicit consent separately. You retain the right to withdraw any consent given at any time, without affecting the lawfulness of processing that occurred prior to withdrawal.
bmw2u uses your personal data for the following purposes:
bmw2u does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share your data only as described below, and only to the extent necessary:
To process your financial transactions, we share necessary data with our payment service providers. These include e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), bank transfer systems (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect via FPX), DuitNow Transfer, and cryptocurrency processors for USDT TRC20 transactions. These providers operate under their own privacy policies and are contractually bound to use your data only for transaction processing purposes.
We may engage accredited third-party KYC service providers to assist with identity verification processes. Such providers are contractually prohibited from using your data for any purpose other than the identity verification services they provide to us.
Our casino games and sports betting software are provided by third-party software developers. These providers may receive limited technical data (such as session identifiers) in connection with game delivery. They do not receive your name, payment details, or contact information.
We will disclose personal data to competent authorities, regulators, or law enforcement agencies where we are legally required to do so, or where such disclosure is necessary to protect the safety, security, or rights of bmw2u, its members, or the general public.
We will never share your data for targeted advertising with external marketing platforms, social media networks, or data broker networks. This is an unconditional commitment and not subject to change without your explicit prior consent.
Cookies are small text files placed on your device when you visit the bmw2u Platform. They enable the Platform to recognise your browser, maintain your session, remember your preferences, and collect anonymous usage analytics.
You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will impair or prevent you from accessing the Platform. Disabling analytics or functional cookies may affect the quality of your experience but will not prevent access to core gaming services.
bmw2u does not use cookies to serve third-party advertising or to track your behaviour across other websites. Our cookies function solely within the bmw2u Platform environment.
bmw2u implements a robust set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
Notwithstanding these measures, no data transmission over the internet can be guaranteed to be completely secure. We encourage you to protect your own account by using a strong, unique password and never sharing your login credentials with any third party. If you suspect your Account has been compromised, please contact us immediately via live chat or at [email protected].
bmw2u retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of Account + 7 years post-closure | Legal obligation / AML compliance |
| KYC Identity Documents | Duration of Account + 7 years post-closure | Regulatory requirement |
| Financial Transaction Records | 7 years from transaction date | Legal obligation / audit trail |
| Technical / Session Logs | Up to 12 months | Security and fraud detection |
| Support Communications | 3 years from last interaction | Dispute resolution / service improvement |
| Marketing Preferences | Until consent withdrawn | Consent |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. In cases where data must be retained for ongoing legal proceedings or regulatory investigations, retention will be extended until such matters are fully resolved.
As a data subject, you hold a number of rights in relation to your personal data held by bmw2u. These rights are set out below. To exercise any of these rights, please contact us via live chat or at [email protected] with the subject line "Data Rights Request".
We will respond to all substantiated data rights requests within a reasonable timeframe. Where a request is complex or we receive a high volume of requests, we may extend this period by a further reasonable duration, of which we will notify you.
The bmw2u Platform and all associated Services are strictly intended for individuals aged 21 years or above. We do not knowingly collect personal data from individuals under the age of 21.
As part of our registration and KYC procedures, we take active steps to verify the age of all Members. If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant Account, delete the associated personal data to the extent permitted by law, and report the matter to the appropriate authorities where required.
If you believe a minor has registered an Account on bmw2u, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.
bmw2u reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new purpose for which data is used — we will notify registered Members via the email address on their Account and/or by prominent notice on the Platform.
Minor amendments, such as clarifications or typographical corrections, may be made without prior notice and will take effect upon publication. The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically to remain informed of any changes to our data practices.
Your continued use of the bmw2u Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms, subject to any additional consent that may be required for materially new processing activities.
If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which bmw2u handles your personal data, please contact us using the following details:
Data Enquiries & Privacy Rights Requests:
[email protected]
(Plain text only. This address is not a clickable link. Please copy and paste into your email client. For data rights requests, please include "Data Rights Request" in the subject line.)
Live Chat Support: Available24 hours a day, 7 days a week via the bmw2u Platform. Average response time: under 2 minutes. For data rights requests via live chat, our team will direct you to the appropriate internal process.
Response Commitment: We acknowledge all data rights requests within 2 business hours and aim to resolve substantiated requests within 30 calendar days.
For matters relating to responsible gambling, self-exclusion, or problem gambling support, please visit our Responsible Gambling page.
Your privacy and security are foundational to everything we build. Experience live casino games, sports betting on Liga Super Malaysia and the EPL, jackpot slots, and exclusive Malaysian-first promotions — with the peace of mind that your data is handled responsibly. For players aged 21 and above only.
Play responsibly. Gambling can be addictive. For players aged 21 and above only.