Bloxflip Privacy Policy — Our Commitment
Protecting the Personal Data of Malaysian Players

Bloxflip ("we", "our platform") operates as an online casino entertainment platform designed exclusively for users in Malaysia. We understand that your trust is our most valuable asset, and protecting your personal data is an absolute priority in every aspect of how we operate.

This Privacy Policy has been prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and sets out our privacy practices in full. By using the Bloxflip platform, you agree to the collection and use of information as described in this policy.

This Privacy Policy applies to all personal information collected by Bloxflip through our website at bloxflip.app, our mobile application, and any related services. It covers all your interactions with our platform, from account registration through to your day-to-day use.

The term "personal information" in this document refers to any information that can be used to identify you, directly or indirectly, including your name, email address, phone number, financial details, and platform usage data.

Bloxflip acts as data controller for any personal information you provide to us. This means we are fully accountable for how your data is collected, stored, used, and protected in accordance with applicable Malaysian law.

Bloxflip collects personal information through several means — directly from you during registration, automatically as you use the platform, and in certain cases, from legitimate third-party sources. Below is a detailed breakdown of the types of data we collect:

Every piece of information we collect is used for a specific and legitimate purpose. Bloxflip does not use your data for any purpose not stated in this policy without first obtaining your consent.

• Account Management: Creating, verifying, and managing your user account on the Bloxflip platform.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of your winnings in Malaysian Ringgit (RM).
• Identity Verification (KYC): Verifying your identity to comply with anti-money laundering (AML) legal requirements and to prevent fraud.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support.
• Platform Security: Detecting and preventing fraud, suspicious activity, account abuse, and cybersecurity threats.
• Service Improvements: Analysing usage patterns to improve your gaming experience, user interface, and overall platform performance.
• Marketing Communications: Sending information about promotions, bonuses, and exclusive offers — only if you have opted in to receive them.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA and other applicable regulations.

Bloxflip does not sell, rent, or trade your personal information to any third party for their own marketing purposes. This is our absolute commitment to all players in Malaysia.

However, under limited circumstances and with strict controls in place, we may share your information with the following parties:

• Payment Service Providers: Providers such as Touch 'n Go, GrabPay, DuitNow, and Malaysian banks (Maybank, CIMB) to process your financial transactions. They receive only the minimum information required to complete a payment.
• Technology Service Providers: Companies that help us operate the platform, including cloud computing, analytics, and cybersecurity services. All third parties are bound by strict confidentiality agreements.
• Malaysian Authorities: We will disclose information to authorities such as the police, courts, or regulatory bodies when required by Malaysian law or a valid court order.
• Business Transfers: Should Bloxflip be involved in a merger, acquisition, or asset transfer, user information may be transferred as part of those business assets, with prior notice given to users.

In all data sharing arrangements, Bloxflip ensures that recipients have adequate privacy protections in place and use the data solely for the specified purposes.

Bloxflip uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Bloxflip platform. Continued use of our platform after a cookie notice is displayed will be taken as your consent to the use of cookies as described.

Bloxflip makes serious investments in data security infrastructure to ensure your personal information is always protected. We employ a combination of technical, procedural, and organisational measures to prevent unauthorised access, data breaches, or misuse.

• 256-bit SSL/TLS Encryption: All communications between your device and Bloxflip's servers are encrypted using the highest industry-standard encryption.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial and identity information, is encrypted using AES-256.
• Two-Factor Authentication (2FA): An additional security layer is available on all user accounts to prevent unauthorised access.
• 24/7 Security Monitoring: Our cybersecurity team monitors the platform around the clock to detect and respond to any threats.
• Regular Security Audits: We conduct regular penetration testing and independent security audits.
• Internal Access Controls: Only authorised personnel who require access to carry out their duties may access user data.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal information held by Bloxflip. We fully respect and facilitate the exercise of these rights.

To exercise any of the rights above, please contact us at support@bloxflip.app with the subject line "Privacy Rights Request". We will process your request within 21 business days.

Bloxflip does not retain your personal data for longer than is necessary for the purposes outlined in this Privacy Policy or as required by Malaysian law.

• Active Account Data: Retained for as long as your account remains active on the Bloxflip platform.
• Data After Account Closure: Basic identity information and financial transaction records are retained for 7 years following account closure, to meet Malaysia's financial and tax regulatory requirements.
• Support Communication Data: Customer support conversation records are retained for 3 years for reference and service improvement purposes.
• Security Logs: System and security logs are retained for 1 year for fraud detection and security incident investigation purposes.
• Cookie Data: Depending on the type of cookie — ranging from session duration (deleted when the browser is closed) to a maximum of 2 years.

Once the retention period expires, your data will be securely deleted or anonymised from our systems.

The Bloxflip platform may contain links to third-party websites or services such as payment providers (Touch 'n Go, GrabPay, DuitNow) and gaming partners. This Privacy Policy applies solely to the Bloxflip platform and does not cover the privacy practices of any third parties.

We encourage you to read the privacy policy of each third-party service you use alongside our platform. Bloxflip is not responsible for the privacy practices or content of any third-party websites.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer:

• Email: support@bloxflip.app (subject: "Data Privacy Enquiry")
• Response time: Within 3 business days for general enquiries, 21 days for formal data rights requests

Bloxflip reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. Any material changes will be communicated to you via your registered email or a prominent notice on our website at least 14 days before the changes take effect.