🔒 OFFICIAL PRIVACY POLICY – BIG 2

Big 2 Privacy Policy – Protecting Malaysian Players' Data

At Big 2, your privacy is more than a legal formality. It is a responsibility we take seriously every day — from how we collect data to how we protect your information from unauthorised parties.

Last updated: 1 January 2026
Big 2's Privacy Commitment to Malaysian Players
Six core principles that form the backbone of your data protection at Big 2
256-bit SSL Encryption at All Times

Every piece of information you submit to the Big 2 – from registration data and Touch 'n Go eWallet or GrabPay deposit details to your betting history – is protected by 256-bit SSL encryption. This is the same security standard used by Malaysia's major banks. No third party can intercept or read your data while it is in transit.

No Sale of Data to Third Parties

Big 2 has never and will never sell, rent, or distribute players' personal information to any third party for marketing or commercial purposes. Your data belongs to you – we use it only for purposes to which you have given explicit consent or that are necessary for the operation of the platform.

You Control Your Own Data

Players Big 2 have the full right to access, amend, or request deletion of their personal data at any time. You can update your profile information from the account panel, or contact our support team for more specific requests. Control is in your hands.

Secure Data Storage

All player data Big 2 stored on servers protected by the highest security standards — including multi-layered firewalls, strict access controls, and real-time intrusion detection. Data backups are performed automatically to separate, secure locations.

Minimal and Purpose-Driven Data Use

Big 2 only collects data that is strictly necessary to provide the online casino and Sports Betting platform services. We do not collect excessive or irrelevant information. Each type of data collected has a clear purpose, which is communicated to players.

Timely Notification in the Event of an Incident

In the unlikely event that player data may have been compromised, Big 2 committed to notifying affected players within a reasonable timeframe via email or in-platform notification — so you can take the necessary protective steps without delay.

Contents
1. Information We Collect 2. How We Use Your Data 3. Information Sharing 4. Data Security 5. Cookies & Tracking Technologies 6. Data Retention 7. Player Rights 8. Child Protection 9. Changes to the Privacy Policy 10. Contact Us
This Privacy Policy explains how Big 2 collect, use, store, and protect your personal information when you use our online casino and Sports Betting platform. By registering an account and using the Big 2, you agree to the practices described in this document. Please read it carefully and contact us if you have any questions.
1
Information We Collect at big 2

Big 2 collect your personal information through various means when you use our platform. This information can be grouped into three main categories:

A. Information You Provide Directly

  • Registration details: Full name (as shown on your Malaysian identity card), active Malaysian phone number, email address, and the password you create when registering an account Big 2.
  • Identity verification (KYC) information: A copy of your Malaysian identity card (MyKad), a selfie for facial verification, and any supporting documents requested during the KYC process prior to your first withdrawal.
  • Payment information: E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) or bank information for DuitNow and FPX — only what is necessary to process deposits and withdrawals. We do not store your credit card numbers or e-wallet passwords.
  • Communications: Any message you send to our customer support team Big 2 via live chat or email.

B. Information Collected Automatically

  • Platform usage data: Gaming history (slots played, Live Casino tables visited, Sports Betting wagers placed on Liga Super Malaysia, EPL, badminton, e-sports, and more), total bets, wins, and losses.
  • Technical data: IP address, device type, operating system, browser type, screen resolution, and the timestamp of each login session.
  • Location data: General location information based on your IP address – we do not access your device's precise GPS location without explicit consent.
  • Cookie data: Session cookies, preference cookies, and analytics cookies that help us understand how players use the platform. See section 5 for more information on cookies.

C. Information from Third Parties

  • Identity verification and anti-fraud data from licensed third-party services we use for the KYC process.
  • Transaction data from Malaysian payment providers (Touch 'n Go, GrabPay, FPX banks) required to verify deposits and process withdrawals.

Big 2 never collects irrelevant sensitive information such as health data, religious beliefs, political views, or biometric data beyond standard KYC requirements. If you have any doubts about what data we hold on you, you have the right to request a full data report via support@big2.best.

2
How We Use Your Data at Big 2

Every piece of information collected by Big 2 used for specific, legitimate purposes. We do not use your data for anything unrelated to the services we provide. The following outlines in detail how your data is used:

Purpose of Use Types of Data Used Legal Basis
Registration & account management Name, phone number, email, password Contractual agreement
Identity verification (KYC) MyKad, selfie, supporting documents Legal requirement
Processing deposits & withdrawals E-wallet / bank details, transaction history Contractual agreement
Customer support Communication history, account data Legitimate interests
Fraud Prevention & Security IP, device, transaction patterns Legitimate interests
Platform improvements Anonymised usage data Legitimate interests
Marketing communications (with consent) Email, phone number Explicit consent
Legal compliance & audits Transaction records, account history Legal requirement

Big 2 will not use your data for purposes beyond those listed above without first obtaining your renewed consent. For marketing communications — such as promotional notifications, new bonuses, or special offers for casino games and Sports Betting — you may opt-out at any time via your account settings panel or by contacting customer support.

3
Sharing Information with Third Parties

Big 2 does not sell, rent, or disclose players' personal information to third parties for commercial purposes. However, there are limited situations where data sharing is necessary for platform operations or legal compliance:

Trusted Service Providers

We work with a number of third-party service providers that support the operations of Big 2. This includes:

  • Game providers: Evolution Gaming, Pragmatic Play, PG Soft, and others receive the game session data necessary to deliver live casino and slots games. They do not receive your full identifying information.
  • Payment providers: Touch 'n Go, GrabPay, Boost, ShopeePay, and Malaysian banks via DuitNow and FPX receive only the transaction information required to process deposits and withdrawals.
  • KYC Service: Licensed third-party identity verification providers receive the documents you submit for verification purposes only and do not retain your data once the process is complete.
  • Hosting & security services: Server infrastructure and cybersecurity providers that help us maintain the stability and security of the platform.

All of these service providers are bound by strict data confidentiality agreements and may only use shared data for the purposes specified by Big 2.

Legal Requirements

Big 2 may be required to disclose certain information to authorities when:

  • Required under Malaysian law or by a valid court order.
  • Required to investigate criminal activities such as fraud or money laundering.
  • Required to protect the rights, property, or safety of Big 2, other players, or the general public.

In all permitted instances of data sharing, Big 2 only share the minimum information necessary for the relevant purpose. We never share more data than required, and we always endeavour to inform players of any legally mandated disclosure requests unless specifically prohibited by a court order.

4
Data Security at Big 2

Player data security is the highest technical priority at Big 2. We implement multiple layers of protection to ensure your information remains secure at all times:

  • Data encryption in transit: All communications between your device and our servers Big 2 is protected by TLS 1.3 with 256-bit SSL encryption, ensuring that no third party can intercept or read your data while it is in transit.
  • Data encryption at rest: Sensitive data stored in our databases – including passwords (stored as irreversible hashes) and KYC information – is encrypted using industry-standard algorithms.
  • Internal access controls: Authorised staff only Big 2 with a legitimate business need are permitted to access player data. All access is logged and continuously monitored. Two-factor authentication (2FA) is required for every access.
  • Real-time threat monitoring: Our intrusion detection system (IDS) monitors all inbound and outbound traffic 24 hours a day to detect any suspicious activity and respond promptly.
  • Regular penetration testing: Big 2 conducts comprehensive security audits on a regular basis using independent security experts to identify and patch any vulnerabilities before they can be exploited.
  • Automatic data backups: All data is automatically backed up to geographically separate, secure server locations, ensuring no data is lost even in the event of a serious hardware failure.

While we implement all reasonable technical safeguards, we want to remind players that no system can guarantee absolute 100% security. You also play an important role in protecting your account — use a strong password, never share your login credentials, and enable two-factor authentication (2FA) from your account security panel Big 2 yours.

5
Cookies & Tracking Technologies

Platform Big 2 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

  • Required session cookies: These cookies are essential for the platform to function — they store your login session so you don't have to sign in again every time you navigate to a new page. They expire when you close your browser. Disabling this type of cookie will affect the core functionality of the platform.
  • Preference cookies: Stores your preference settings such as interface language and display preferences, so that Big 2 can display a personalised experience each time you return.
  • Analytics cookies: We use anonymised analytics data to understand how players interact with the platform — which pages are visited most frequently, which games are most popular, and where players encounter issues. This helps us improve the platform over time.
  • Security cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and any suspicious behaviour that may compromise your account security.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect your experience on the Big 2 – in particular the session cookies required for a stable login.

Big 2 do not use third-party cookies for advertising purposes that track your activity across other websites. The cookies we use are solely to enhance your experience within our own platform.

6
Data Retention

Big 2 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law. The following are general retention guidelines for different categories of data:

  • Active account data: Retained for as long as your account is active and for an additional period following account closure as specified below.
  • Financial transaction records: Retained for a minimum of 7 years after the transaction date, in accordance with Malaysian account and tax legal requirements.
  • KYC documents: Retained for a minimum of 5 years following account closure to meet anti-money laundering (AML) requirements.
  • Customer support communication logs: Retained for 2 years from the date of last communication, for audit and dispute resolution purposes.
  • Security logs: Retained for 1 year for the purposes of security investigations and fraud prevention.
  • Marketing data (with consent): Retained until you withdraw consent or close your account.

Once the designated retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or traced back to you.

If you request account closure, Big 2 will initiate the deletion of data that is not required to be retained for legal purposes within 30 days from the date of the request. Data that must be retained for legal requirements will be kept in a restricted-access state until the minimum retention period expires.

7
Player Rights Regarding Personal Data

As a player Big 2, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right of Access
You have the right to request a copy of all personal data that we Big 2 hold about you. Requests can be submitted via email to support@big2.best. We will provide a report within 14 business days. This includes registration data, transaction history, game records, and customer support communication logs.
Right to Rectification
If you find that any personal information we hold about you is inaccurate or incomplete, you have the right to request a correction. For basic details such as your phone number and email address, you can update these yourself from your account panel Big 2. For corrections to your name or KYC information, please contact customer support.
Right to Erasure
You have the right to request the deletion of your personal data when it is no longer needed for the purpose it was collected, or when you withdraw your consent. This request is subject to legal retention requirements. Big 2 will delete or anonymise eligible data within 30 days of a valid request.
Right to Data Portability
You have the right to receive the personal data you have provided to Big 2 in a machine-readable format (such as JSON or CSV). This allows you to transfer your data to another platform should you choose to do so. Data portability requests can be made via the customer support email.
Right to Object to Processing
You have the right to object to the processing of your data for specific purposes, particularly for direct marketing. Once an objection is received for marketing purposes, Big 2 will stop using your data for that purpose immediately. Objections for other purposes are subject to a legitimate interest assessment.
Right to Restrict Processing
In certain situations — such as when you dispute the accuracy of your data or have objected to processing while an investigation is still ongoing — you have the right to request Big 2 to restrict the processing of the relevant data while the issue is being resolved. Restricted data may only be stored and not used for any other purpose.
To exercise any of the above rights, contact the privacy team Big 2 via email at support@big2.best with the subject line "Privacy Data Rights Request." Please include your full name and registered phone number to facilitate identity verification. We will respond within 14 business days. No charges apply for reasonable privacy rights requests.
8
Child Protection

Platform Big 2 is restricted to users aged 18 and above. We do not knowingly or intentionally collect personal data from individuals under the age of 18. The account registration process is designed to verify a player's age, and the KYC process — which requires submission of a Malaysian identity document — is one of the primary safeguards against underage registration.

If a parent or guardian discovers that their child or dependent under the age of 18 has registered or used a Big 2, please contact us immediately at support@big2.best. We will:

  • Suspending the account in question immediately.
  • Initiating the verification and investigation process.
  • Deleting all data associated with that account once it is confirmed to belong to a minor.
  • Refunding any deposits made, upon completion of identity verification for the original account holder.

Big 2 adopts a zero-tolerance approach to the use of the platform by underage individuals. This is not merely a legal requirement — it is an ethical responsibility we take very seriously across all aspects of our platform's operations.

9
Changes to This Privacy Policy

Big 2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in the technologies we use. When significant changes are made, we will notify players through:

  • In-platform notifications: A pop-up notice or banner when you log in to your account Big 2 you for the first time after the changes take effect.
  • Email: For changes that materially affect player rights, we will send a notification email to your registered address at least 7 days before the changes take effect.
  • Last updated: The "Last updated" date at the top of this page will be updated to reflect the date of the latest revision.

It is the player's responsibility to review this Privacy Policy periodically. Continued use of the Big 2 after the changes take effect will be considered acceptance of the amended Privacy Policy. If you do not agree with any of the changes, you have the right to close your account by contacting customer support.

We value the trust that Malaysian players place in Big 2 by using our platform for online casino, Malaysia Super League football betting, badminton, MPL Malaysia esports, and much more. That trust can only be maintained through consistent protection of your privacy – and that is our commitment to every player.

10
Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding the way Big 2 handling your personal data, our privacy team is here to help. We believe open communication is the foundation of trust between the platform and its players.

You can reach us through:

  • Email: support@big2.best – Please use the subject line "Privacy Data Enquiry" so your email is routed to the right team. We aim to respond within 24–48 hours for privacy enquiries.
  • Live Chat: Available 24/7 directly within the platform Big 2. For non-sensitive privacy matters, live chat is the fastest way to get assistance.
  • Written request: For formal privacy rights requests (data access, deletion, correction), we recommend using email to ensure a clear written record for both parties.

We are committed to resolving all privacy-related complaints in a fair and transparent manner. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant regulatory authority in Malaysia.

FAQ – Big 2 Privacy Policy
The most frequently asked questions from Malaysian players about privacy and data protection at big 2

No. Big 2 never sells, rents, or discloses players' personal data to any advertiser or external marketing party. Your data is only shared with service providers that support platform operations — such as game providers (to deliver casino games), payment processors (to handle Touch 'n Go or GrabPay deposits), and KYC services — and all such parties are bound by strict confidentiality agreements. They may not use your data for any other purpose.

KYC documents you upload — including copies of your MyKad — are stored in an encrypted storage system with strict access controls. Only staff involved in the identity verification process have access to these documents, and every access is logged for audit purposes. Once the KYC process is complete and your identity is verified, the original documents are moved to a secure archive. KYC documents are retained for the minimum period required under Malaysia's anti-money laundering laws (minimum 5 years), after which they are securely deleted using methods that ensure they cannot be recovered. Big 2 never discloses KYC documents to any third party unless required by a valid court order.

Yes, you have the right to request data deletion upon closing your account. Once a valid request is received, Big 2 will delete or anonymise data that is not required to be retained for legal purposes within 30 days. However, financial transaction records must be kept for a minimum of 7 years under Malaysian law, and KYC documents must be retained for a minimum of 5 years under anti-money laundering (AML) requirements. Data subject to these retention obligations will be kept in a restricted-access state and may only be used to fulfil the relevant legal requirements. To initiate the data deletion process, send a request to support@big2.best with the subject line "Data Deletion Request."

No. Big 2 do not use third-party cookies for retargeting advertising or to track your activity on other websites or applications. The cookies we use are strictly limited to the platform's own operational purposes – session cookies for login, preference cookies for display settings, anonymised analytics cookies to understand platform usage patterns, and security cookies for fraud prevention. All of these operate within the context of the Big 2 only and does not share data with any external advertising networks.

In the unlikely event of a security breach that may expose player data, Big 2 has a structured incident response procedure in place. The first step is to identify and contain the damage as quickly as possible. We will then assess the scope of the breach — which data was affected and how many players may be involved. Players whose data may have been compromised will be notified within a reasonable timeframe via email or in-platform notification, with details on what occurred and the steps you can take to protect yourself. We will also report significant incidents to the relevant authorities as required by applicable law.
View All FAQs
Big 2 Related Policy Documents
Also read the other policy documents that complement this Privacy Policy
Terms & Conditions

Full terms of use for the Big 2 platform, covering account rules, deposits, bonuses, and betting.

Read More
Responsible Gaming

Tools and guidance for a healthy, safe gaming experience that stays within your control.

Read More
About Us

Learn about Big 2's story, mission, core values, and commitment to every player in Malaysia.

Read More
Frequently Asked Questions

Complete answers to the questions Malaysian players ask most about big 2.

Read More

Your Data Is Safe at big 2 – Play with Peace of Mind

We understand that trust is the hardest thing to build and the easiest to lose. That is why every technical decision at Big 2 — from how we store data to how we process payments — is made with player privacy as the primary consideration.

Register an account now. Minimum deposit RM10 via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX. For adults aged 18 and above.

Register a Big 2 Account Log In
TNG eWallet GrabPay Boost ShopeePay DuitNow FPX

For adult players aged 18 and above only. Please gamble responsibly.

Bahasa Melayu