Updated: January 2026

Big 2 Privacy Policy – How We Protect the Personal Data of Malaysian Players

Your privacy is our priority. The big 2 Privacy Policy clearly explains what data we collect, how we use it, who can access it, and your rights as a user. We are required to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), and we take that responsibility seriously.

Data Collection Data Usage Data Sharing Cookie Policy User Rights Data Security
Summary of Our Privacy Commitments
Your data not sold to third parties
Encryption SSL 256-bit for all data
Compliance with Malaysia PDPA 2010
You may request deletion of your data
Cookie controls is in your hands

Big 2's Six Privacy Commitments to You

The key commitments we make in protecting your personal data

Bank-Grade Encryption

All your personal data and transaction information is encrypted using 256-bit SSL — the same technology used by Malaysia's major banks such as Maybank and CIMB to protect their customers' data.

Data Never Sold

Big 2 has never sold, rented, or commercialised user personal data to any third party for marketing purposes or for any purpose unrelated to the operation of the big 2 platform, and never will.

Malaysia PDPA Compliance

Big 2 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means the collection, processing, and storage of your data is governed by valid Malaysian law.

Control Is in Your Hands

You have the right to access, correct, update, or request deletion of your personal data at any time. Such requests can be submitted through your account settings or by contacting the big 2 support team.

Secure Data Storage

Your data is stored on servers protected by multiple layers of security, including firewalls, intrusion detection, and strict access controls. Only authorised personnel may access user data, and all such access is fully logged.

Full Notification Controls

You can choose which types of marketing communications you wish to receive from big 2 — or opt out of all promotional communications entirely. These preferences can be updated at any time from within your account.

1
Personal Information We Collect

Big 2 collects your personal information only when necessary for legitimate purposes in the operation of the platform. We do not collect irrelevant or unnecessary data. The following are the categories of information we collect and the reasons for doing so:

Data Type Example Purpose of Collection
Identity Data Name, phone number, date of birth Account registration, age verification, communications
Financial Data Payment methods (TNG, DuitNow, FPX), transaction history Processing deposits and withdrawals, fraud prevention
Technical Data IP address, device type, browser, operating system Account security, fraud detection, platform optimisation
Usage Data Betting history, games played, session duration Platform improvements, responsible gaming, account reporting
Communication Data Live chat records, support emails, feedback Complaint resolution, customer support improvement
Cookie Data Session cookies, preference cookies, analytics cookies Enhanced user experience, platform traffic analytics

In certain situations, big 2 may be required to collect identity verification documents such as a copy of your MyKad or passport. This occurs when a more thorough account verification is needed, typically in connection with high-value withdrawals or requests flagged as unusual activity by our security system. These documents are stored with additional protection and deleted once the purpose of collection has been fulfilled.

Important Note: We do not store your full credit or debit card numbers, banking PINs, or online banking passwords. All financial transactions are processed through certified third-party payment gateways, and big 2 only receives transaction confirmation — not your full financial details.

2
How Big 2 Uses Your Personal Data

The personal data we collect is used for specific, legitimate, and proportionate purposes. big 2 operates on a "use only what is necessary" principle — we do not process your data for purposes unrelated to the services you use. The purposes for data use are as follows:

  • Service Hours: To operate and maintain your big 2 account, process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and the FPX network, and ensure all platform functions run smoothly.
  • Identity Verification: To ensure that only legitimate users who meet the minimum age requirement of 18 years may access the big 2 platform, in line with our responsible business obligations.
  • Security & Fraud Prevention: To detect and prevent unauthorised access, multiple account ownership, money laundering, bonus abuse, and any fraudulent activity that could compromise the integrity of the platform or the safety of other users.
  • Customer Support: To provide accurate and effective responses to your enquiries, complaints, and requests. Communication records are retained to ensure service continuity if you contact us more than once regarding the same issue.
  • Platform Improvements: To analyse aggregated usage patterns (not individual data) for the purpose of improving platform design, user experience, and technical performance. This data is used in anonymised, statistical form only.
  • Responsible Gaming: To monitor betting patterns for responsible gambling risk management purposes, including identifying users who may need support regarding concerning betting behaviour.
  • Marketing Communications: To send information about promotions, bonuses, and the latest offers to users who have given consent to receive such communications. You may withdraw this consent at any time.
  • Legal Compliance: To comply with any legal obligations, regulations, or court orders applicable to the operation of the big 2 platform in Malaysia.

big 2 does not use your personal data to make automated decisions that affect your rights without human involvement, except for basic security purposes such as detecting suspicious login activity, which is subject to subsequent manual review.

3
Information Sharing with Third Parties

Big 2 does not sell, rent, or disclose users' personal data to third parties for their own marketing or commercial purposes. However, in the course of normal platform operations, there are certain situations where your data may need to be shared with specific parties:

  • Payment Service Providers: Minimal transaction information necessary to be shared with payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and the FPX network to process your deposits and withdrawals. These providers are bound by strict data protection agreements.
  • Game Providers: Minimal technical data (such as session IDs) is shared with game providers including Pragmatic Play, Evolution Gaming, and Habanero for game verification and technical dispute resolution. This does not include your financial information or full identity details.
  • Authorities & Law Enforcement: big 2 will disclose required data if mandated by valid Malaysian law, a court order, or an official request from a law enforcement agency. In such cases, we will endeavour to notify you unless prohibited from doing so by law.
  • Professional Advisors: Lawyers, accountants, or auditors involved in big 2's operations may access data required to carry out their professional services. They are bound by professional confidentiality obligations.
  • Business Restructuring: In the event of a merger, acquisition, or sale of big 2's business assets, user data may be transferred to the successor entity. Users will be notified in advance and given the option to close their account if they do not agree.

All third parties who receive big 2 user data are bound by data processing agreements that require them to protect that data to a standard consistent with this Privacy Policy. big 2 only works with providers that have a recognised and reputable data security track record.

Our Commitment: Even in any of the data sharing situations described above, big 2 shares only the minimum information strictly necessary for that purpose. We do not share more than is required.

4
Security & Data Retention

Big 2 invests seriously in data security infrastructure. Data protection is not an add-on feature — it is core to how our platform operates. The security measures we have in place include:

Technical Safeguards
  • Data encryption in transit: SSL/TLS 256-bit
  • Encryption of data at rest (at-rest encryption)
  • Multi-layer firewall
  • Intrusion detection & prevention system (IDS/IPS)
  • 24/7 security monitoring
  • Regular penetration testing
Organisational Controls
  • Role-based access control (RBAC)
  • Audit log of all access to user data
  • Privacy and security training for all staff
  • Confidentiality agreements for all staff
  • Clear data breach incident response procedures
  • Regular internal security audits

Data Retention Period: Big 2 retains your personal data for as long as your account is active or as long as necessary to provide services to you. After an account is closed, the retention periods are as follows:

  • Financial and transaction record data: Retained for 7 years after account closure to comply with Malaysian legal requirements governing financial records.
  • User identity data: Retained for 3 years after account closure for fraud prevention purposes and to fulfil any legal requests that may arise.
  • Customer support communication data: Retained for 2 years after resolution of the related case.
  • Analytics data and technical logs: Retained for 1 year in detailed log form, then deleted or anonymised in aggregated format.

While big 2 takes all reasonable steps to protect your data, no security system is 100% impenetrable. In the event of a data breach that materially affects your personal information, we are committed to notifying you within 72 hours of discovering the incident.

5
Cookie Policy

Big 2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the big 2 platform. The following are the types of cookies we use:

  • Essential Cookies: These cookies are essential for the basic functionality of the big 2 platform and cannot be disabled. They include login session cookies, CSRF security token cookies, and language preference cookies. Without these cookies, the platform will not function properly.
  • Performance Cookies: Analytics cookies that help us understand how users interact with the big 2 platform — which pages are visited most, where users encounter difficulties, and how long they spend in each section. This data is used in aggregated, anonymised form.
  • Functional Cookies: Cookies that remember your preferences — such as display settings, limits you have set in responsible gaming tools, and communication preferences. These cookies make your experience more personalised and consistent.
  • Marketing Cookies: Used to deliver more relevant promotional content to you based on your interests and activity on the platform. You can disable these cookies without affecting the platform's core functionality.

How to Manage Cookies: You can manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies. Please note that disabling essential cookies may affect your ability to use certain features of the big 2 platform. For browser-specific guidance, refer to the help section of your respective browser.

Third-Party Cookies: Some of our service providers, such as analytics tools and game providers, may also set their own cookies on your device while you use the big 2 platform. These third-party cookies are subject to the respective provider's privacy policy, not big 2's.

6
Your Rights as a Big 2 User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and data privacy best practices, you as a big 2 user have the following rights regarding your personal data:

Access Rights
You have the right to request and receive a copy of the personal data big 2 holds about you. Such requests can be submitted through your account settings or by contacting support. We will process requests within 21 business days.
Right to Rectification
You have the right to correct any personal data that is inaccurate, incomplete, or out of date. Some details such as your name and phone number can be updated directly in your account settings, while other changes may require verification through our support team.
Right to Erasure
You may request deletion of your personal data upon closing your account. However, certain data may need to be retained for a specified period to fulfil legal obligations — such as financial records required to be kept for seven years under Malaysian law.
Right to Withdraw Consent
Where our processing of your data is based on your consent, you have the right to withdraw that consent at any time. This includes consent to receive marketing communications. Withdrawing your consent does not affect the validity of any processing that took place prior to the withdrawal.
Right to Object
You have the right to object to the processing of your personal data for specific purposes such as direct marketing. When you object to processing for marketing, we will cease that processing immediately.
Data Portability Rights
You have the right to request your personal data in a machine-readable format (such as CSV or JSON) for transfer to another platform. This request can be submitted to the big 2 support team and will be processed within 30 days.

To exercise any of the above rights, you may contact big 2 via live chat within the platform or by sending an email to privacy@big2.site. Please include the phone number registered to your account for verification purposes. Big 2 will not charge a fee for reasonable requests and will endeavour to process all requests within the stipulated timeframe.

7
Children's Data Protection

The big 2 platform is designed exclusively for adults aged 18 and above. Big 2 does not knowingly collect or process personal data of children under the age of 18.

If big 2 discovers that personal data of a child under the age of 18 has been collected without parental or guardian knowledge and consent, we will take immediate steps to delete that data and close the relevant account. If you believe a child has registered an account on big 2, please contact us immediately at privacy@big2.site or via our platform's live chat.

Parents and guardians are reminded to monitor their children's online activity and ensure they do not access platforms unsuitable for their age. Big 2 takes the protection of minors seriously and conducts regular age verification checks.

8
Links to Third-Party Services

The big 2 platform may contain links to or integrations with third-party services, including payment providers (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks) and game providers (Pragmatic Play, Evolution Gaming, and others).

When you use these third-party services, you enter a space governed by their own privacy policies, not big 2's. Big 2 is not responsible for the privacy practices of these third parties. We recommend reading the privacy policy of any third-party service you use to understand how they handle your data.

Big 2 carefully selects third-party providers and only works with those that have a strong, industry-recognised data security reputation. That said, the decision to use any third-party services integrated with big 2 is entirely at your own discretion.

9
Changes to This Privacy Policy

Big 2 reserves the right to update this Privacy Policy from time to time to reflect changes in our data collection practices, applicable laws, or how we handle personal information. The latest version of the Privacy Policy will always be available on this page with an updated "Last Updated" date.

For significant changes that materially affect how we use your personal data, big 2 will:

  • Sending notifications to all registered users via SMS or in-platform notifications at least 14 days before the changes take effect.
  • Displaying a clear change notice on the big 2 platform homepage and at the top of this Privacy Policy page.
  • In cases where changes require new consent, we will explicitly request your agreement before proceeding to process your data under the new terms.

Continued use of the big 2 platform after notification of changes constitutes acceptance of the updated Privacy Policy, except for changes that require explicit consent as stated above.

Current Version: This Privacy Policy takes effect in January 2026 and supersedes all previous versions. Archives of older versions are available upon request through big 2 support.

10
Contact Us About Privacy

If you have any questions, concerns, or requests regarding big 2's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

Privacy Email
privacy@big2.site
Dedicated to privacy & data rights enquiries. Response within 3 business days.
24/7 Live Chat
Within the big 2 platform
For general privacy enquiries. Malay-speaking agents are available at all times.

For complaints about how big 2 handles your personal data that cannot be resolved internally, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory authority under the Personal Data Protection Act 2010. That said, we encourage you to contact big 2 first, as most privacy concerns can be resolved more quickly by dealing directly with us.

FAQ — Big 2 Privacy Policy

Answers to the most frequently asked questions about our data protection practices

No. Big 2 does not store your credit or debit card numbers, banking PINs, or any online banking credentials. All financial transactions are processed through certified third-party payment gateways such as Touch 'n Go eWallet, DuitNow, and the FPX network. Big 2 only receives confirmation of whether a transaction was successful or failed — not your full financial details.

Yes, you may request the deletion of your personal data by closing your account and submitting a written data deletion request to privacy@big2.site. However, please be aware that certain data — particularly financial and transaction records — must be retained for 7 years to comply with Malaysian laws governing financial records. Data falling under this category cannot be deleted before the legal retention period expires, but other data such as your profile, preferences, and communication logs can be deleted.

Absolutely not. Big 2 does not sell, rent, or disclose users' personal data to advertisers, data brokers, or marketing companies for their own commercial purposes. This is an unconditional commitment — not simply a statement in a privacy policy. If you receive any marketing communications from a third party claiming to be associated with big 2 and you have never registered with them, it is very likely a scam with no connection to us.

In the event of a data breach that materially affects your personal information, big 2 is committed to notifying you within 72 hours of discovering the incident via SMS or in-platform notification. We will explain what type of data was involved, the steps taken to contain the incident, and what you should do to protect yourself. We will also report the incident to the relevant authorities as required under Malaysian law.

Yes. You can opt out of promotional SMS at any time through the notification settings in your big 2 account. You may also contact our customer support team via live chat to withdraw your consent to receiving marketing communications. Changes will take effect within 24 hours. Please note that security-related SMS such as OTPs and transaction notifications cannot be disabled, as these are essential communications tied to the security of your account.

big 2 user data is stored on servers located in secure, certified data centres. While some technical infrastructure services may involve global cloud providers, big 2 ensures that all data storage and processing meets established security standards and is covered by appropriate data processing agreements. If you have specific questions about data storage locations, please contact privacy@big2.site for further information.
Related Policy Documents

Your Privacy is Protected. Play with Peace of Mind at Big 2.

Your personal data is protected with 256-bit SSL encryption, never sold to anyone, and entirely within your control. Register a free big 2 account today and enjoy a sports betting and casino experience that is secure, transparent, and built for Malaysian players.

Privacy questions? Reach us at privacy@big2.site — we speak your language and are available to help 24/7.

Bahasa Melayu