Official Privacy Document

Privacy Policy Bloxflip
Our Commitment to Protecting Malaysian Users' Data

Bloxflip takes your privacy very seriously. This document transparently explains how we collect, use, store, and protect your personal data as a user of our platform in Malaysia.

Updated: 1 January 2026 256-bit SSL Protected Malaysia PDPA Compliant Bahasa Melayu

Bloxflip's Six Key Privacy Commitments to You

Before reading the full policy, here is a summary of Bloxflip's core commitments to protecting your personal data as a Malaysian user.

Fully Encrypted Data
All data transmitted between your device and Bloxflip's servers is encrypted using industry-standard 256-bit SSL technology. Sensitive information such as passwords is never stored in plain text.
No Sale of Data to Third Parties
Bloxflip never sells, rents, or trades your personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not our commodity.
Malaysia PDPA Compliance
All of Bloxflip's data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We process your data only on a valid legal basis and for stated purposes.
Full Control in Your Hands
You have the right to access, correct, delete, or withdraw consent for the use of your personal data at any time. Requests will be processed within 14 working days.
Secure & Limited Data Storage
Your data is stored on servers protected by strict access controls. Bloxflip does not retain data longer than necessary — retention periods are set in accordance with legal and operational requirements.
Immediate Data Breach Notification
In the event of any data breach affecting your personal information, Bloxflip is committed to notifying you within 72 hours of the breach being identified.

Important Note: This Privacy Policy describes Bloxflip's data protection practices and applies to all users of our platform in Malaysia. By using Bloxflip's services, you consent to the processing of your personal data as described in this document.

1

Introduction

Bloxflip ("we", "the platform", or "Bloxflip") is committed to protecting the privacy of all users who register and use our services in Malaysia. This Privacy Policy clearly explains how we collect, use, store, share, and protect your personal data.

As an online sports betting and casino platform operating in Malaysia, Bloxflip subject to the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We regard compliance with data protection law not merely as a legal obligation, but as part of our commitment to our valued players.

This document applies to all personal data you provide to us during account registration, platform use, financial transaction processing (including deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX), and interactions with our support team. Bloxflip.

2

Personal Data We Collect

Bloxflip collects your personal data in various ways depending on how you interact with our platform. Below is a breakdown of the types of data collected:

Data Category Specific Examples How It Is Collected
Identity Data Full name, MyKad number, date of birth, gender Registration form, KYC
Contact Data Email, Malaysian phone number, address Account registration, profile updates
Financial Data Bank account number, TNG/GrabPay/Boost e-wallet ID, transaction records Deposit & withdrawal process
Betting Data Betting history, games played, wins/losses In-platform activity
Technical Data IP address, device type, browser, general location Automatically during use
Communication Data Live chat logs, support emails, feedback Interactions with customer support

We does not collect sensitive personal data such as medical records, political information, or religious beliefs unless specifically required by law for identity verification purposes.

Minimum Data: Bloxflip adheres to the principle of data minimisation — we only collect data that is genuinely necessary to provide the services you use. We do not collect excessive data purely for commercial purposes.

3

How We Use Your Personal Data

Bloxflip uses the personal data collected for the following purposes, all grounded in a valid legal basis under Malaysia's PDPA:

  1. Service Provision: Creating and managing your account, processing deposits and withdrawals in RM, and providing access to all Bloxflip platform features.
  2. Identity Verification (KYC): Meeting legal requirements related to anti-money laundering (AML) and financial fraud prevention.
  3. Account Security: Detecting and preventing unauthorised access, fraud, or suspicious activity on your account.
  4. Service Communications: Sending transaction notifications, important account information, and relevant service updates.
  5. Customer Support: Processing your enquiries, complaints, and technical support requests via live chat and email.
  6. Personalisation: Personalising your platform experience based on your gaming preferences — including favourite sports such as the EPL, badminton, or e-sports.
  7. Promotions (with consent): Sending information about Bloxflip bonuses, promotions, and the latest offers where you have given consent for marketing communications.
  8. Analytics & Improvement: Understanding usage patterns to improve platform performance, usability, and features.

Bloxflip not use your data for fully automated decision-making that significantly affects your rights or interests without human oversight.

4

Data Sharing with Third Parties

Bloxflip does not sell, rent, or trade your personal data to any third party. However, there are limited situations where sharing your data becomes necessary:

  • Payment Service Providers: Transaction data is shared with licensed payment providers such as DuitNow processors, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX banks (Maybank, CIMB, Public Bank, RHB) to process your deposits and withdrawals.
  • Technical Service Providers: We work with cloud service providers and technical infrastructure partners bound by strict confidentiality agreements, who are prohibited from using your data for their own purposes.
  • Regulatory Authority: Bloxflip complies with all lawful information requests from Malaysian authorities where required by law.
  • KYC Service Providers: To fulfil identity verification requirements, we may use approved third-party services to verify your identity documents.

All third parties receiving data from Bloxflip are bound by strict data processing agreements. They may only use your data for the specific purposes defined and must adhere to the applicable security standards.

5

Data Security Measures

Bloxflip continuously invests in security infrastructure to protect your personal data. The security measures we have in place include:

  • Data Encryption in Transit: All communications between your device and Bloxflip's servers are encrypted using TLS 1.3 and 256-bit SSL certificates.
  • Data Encryption at Rest: Sensitive data stored in our databases is encrypted using AES-256.
  • Strict Access Controls: Access to user data within the company is governed by a strict need-to-know principle. Only authorised personnel may access personal data, and all access is logged.
  • Two-Factor Authentication (2FA): Bloxflip's internal systems require 2FA for all staff access to user databases.
  • Regular Security Audits: We conduct regular penetration testing and security audits carried out by qualified third parties.
  • 24/7 Monitoring: A real-time threat detection system monitors our platform around the clock for suspicious activity.

If Your Account Is Compromised: If you suspect your Bloxflip account has been accessed without authorisation, contact our support team immediately via live chat. We will freeze your account within 15 minutes to prevent any further loss.

6

Cookies & Tracking Technologies

Bloxflip uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some platform features. Bloxflip.

7

Your Personal Data Rights

Under Malaysia's PDPA and Bloxflip's policy, you have the following rights regarding your personal data:

👁️
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide a full report within 14 working days.
✏️
Right to Rectification
If your personal data is inaccurate or out of date, you have the right to request a correction. Updates can be made directly through your account settings or by contacting support.
🗑️
Right to Erasure
You may request the deletion of your personal data, subject to legal retention requirements. Closed accounts will be deleted within 90 days.
🚫
Right to Object
You have the right to object to the use of your data for direct marketing purposes. You may unsubscribe via the link in any promotional email.
📦
Data Portability
You may request your personal data in a machine-readable format (JSON or CSV) for use elsewhere.
⏸️
Right to Restrict Processing
In certain circumstances, you have the right to request that we restrict the processing of your data while a dispute is being resolved or a review is underway.

How to Submit a Request: To exercise any of the rights above, email privacy@bloxflip.ws with the subject line "Personal Data Rights Request", and include your account number along with details of your request. We will verify your identity before processing it.

8

Child Data Protection

Bloxflip do not accept registration or use of our services by individuals under the age of 18. Our platform is strictly prohibited for children and underage minors.

If we discover that personal data of a child under 18 has been collected without our knowledge, we will take immediate steps to delete that data and terminate the associated account.

Parents or guardians who suspect their child may have registered a Bloxflip account can contact us at privacy@bloxflip.ws to request an immediate investigation and data deletion.

9

International Data Transfers

Parts of Bloxflip's technical infrastructure may involve storing or processing data outside Malaysia — for example, the use of international cloud services for data backup and performance optimization.

In all such cases, Bloxflip ensures that:

  • Data transfers only take place to countries or entities that provide a level of data protection equivalent to or higher than Malaysia's PDPA.
  • Comprehensive data processing agreements are signed with all data recipients outside Malaysia.
  • Data is encrypted both in transit and when stored outside Malaysia.

Sensitive financial data such as your bank account information and MYR transaction records are processed and stored within Malaysia in compliance with local regulatory requirements.

10

Data Retention Period

Bloxflip retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet legal requirements. General data retention periods are as follows:

Data Type Retention Period Reason
Active Account Data Throughout the active account period Operational service requirements
Data After Account Closure 7 years AML/financial legal requirements
Financial Transaction Records 7 years Malaysia Tax Act & AML Requirements
Support Communication Logs 3 years Dispute resolution & quality
Login & Session Data 90 days Security & Fraud Detection
Marketing Data (with consent) Until consent is withdrawn Based on user consent

Once the retention period ends, your data will be securely deleted or anonymised so it can no longer be linked back to your identity.

11

Amendments to This Privacy Policy

Bloxflip reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements.

When material amendments are made — particularly changes that affect how your data is used or your rights — we will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending notifications via email or in-platform alerts at least 14 days prior to material changes taking effect.
  • Archiving previous versions of the Privacy Policy, available to you upon request.

Continued use of the Bloxflip platform after the effective date of any amendment constitutes acceptance of the updated policy.

12

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Bloxflip handles your personal data, please reach out to us through the following channels:

  • Privacy Email: privacy@bloxflip.ws (dedicated to data protection matters)
  • General Support Email: support@bloxflip.ws
  • Live Chat: Available 24/7 on the Bloxflip platform (in Bahasa Melayu)

We are committed to responding to all privacy-related enquiries within 14 working days. For complaints requiring a more thorough investigation, we will provide status updates within the same timeframe and resolve the matter within 30 business days.

Complaints to Authorities: If you are not satisfied with how we have handled your privacy complaint, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.

🛡️

Your Data Is Safe with Bloxflip

We understand that trust is earned, not bought. With your privacy protected and a secure platform behind you, register today and enjoy Malaysia's most trusted betting experience.

256-bit SSL Protected Malaysia PDPA Compliance No Data Sales Your Data, Your Control

18+ only. Responsible Gaming | Terms & Conditions

Bahasa Melayu