Personal Data Protection

bm98 Privacy Policy

This page explains how your personal data is collected, processed, and protected on the bm98 platform.

About the Privacy Policy

Last updated: 30 October 2026

Table of Contents

  1. Introduction
  2. Types of Data Collected
  3. Purpose of Data Use
  4. Sharing with Third Parties
  5. Cookies and Tracking Technology
  6. Security Protection
  7. Retention Period
  8. User Rights
  9. Minors
  10. Policy Changes
  11. Contact Us

1 Introduction

bm98 is an online gaming platform built for players in Myanmar, and we are committed to protecting your personal data. This privacy policy applies to the https://bm98.run website and all related services.

By accessing and using this website, you are considered to have agreed to the terms set out in this policy. If you do not agree, please stop using the website and contact our support team to close your account.

2 Types of Data Collected

bm98 collects only the data necessary to provide our services. The types of data we collect are as follows.

2.1 — Data You Provide Directly

  • Name, date of birth, and contact details (email address)
  • Payment details (KBZPay phone number, Wave Money phone number, AYA Pay phone number, bank account number — encrypted for security)
  • Registration number or national ID information (collected during age verification)
  • Player's preferred settings and communication preferences

2.2 — Automatically collected information

  • IP address and network information
  • Browser type, operating system and device type
  • Website visit logs (log files)
  • Game history — games played, deposit and withdrawal frequency and amounts
  • Access time (Myanmar Standard Time — MMT, UTC+6:30)

2.3 — Information we do not collect

We never store your bank card PIN, payment card CVV, or account password at any time. Passwords are hashed, so even our own staff cannot view them.

3 How we use your information

bm98 uses your information only for the following purposes—

  • To create, verify and protect your account
  • To manage deposit and withdrawal processes
  • To provide 24/7 customer support — via Live Chat and email in Burmese
  • To ensure fair play and prevent fraud
  • To comply with Responsible Gaming requirements
  • To improve platform functions and user experience
  • To meet legal requirements

We will not use your information for any advertising, marketing or third-party purposes beyond those stated above.

4 Sharing with third parties

bm98 does not sell, rent or trade your personal data to third parties. However, sharing may occur in the following limited cases—

  • Payment processors — KBZPay, Wave Money, AYA Pay and banking service providers receive only the data needed to process deposits and withdrawals.
  • Technology services — Our technology partners who handle server operations, cloud services and security checks can only access what is required for those tasks.
  • Legal requirements — When lawfully requested by authorized authorities, we will comply as required by law.
  • Fraud prevention — Technical data may be shared with providers of fraud detection services as needed.

These third-party partners must accept and maintain data protection agreements that align with bm98's privacy policy.

5 Cookies and tracking technologies

Our website uses cookies and similar technologies. They can be categorized by purpose as follows—

  • Essential Cookies — Required to verify login sessions and maintain sessions. The website cannot function if these cookies are disabled.
  • Functional Cookies — Remember your language preference, regional settings and UI preferences.
  • Performance Cookies — Collect anonymized access data to help improve website usage.

You can control cookies through your browser settings. Non-essential cookies can be disabled, but note that some services may be limited as a result.

6 Security measures

The bm98 platform uses the following measures to protect your personal data—

  • SSL/TLS encryption protects all data transmitted between the website and server
  • Payment data is stored using PCI-DSS compliant encryption
  • Two-factor authentication (2FA) is available at login
  • Regular security audits are conducted and an effective data breach response plan is in place
  • Data access is restricted so that only staff who need it can view it

That said, no digital security system can offer 100% guarantee. You must keep your login credentials to yourself and never share them with anyone.

7 Retention period

bm98 retains personal data only for as long as necessary—

  • Active account data — Retained for the duration that the account remains open.
  • Payment records — Retained for 5 years in accordance with financial legal requirements.
  • Communication records — Customer service review period is kept for 2 years.
  • After account closure — Data held solely for marketing purposes is deleted once the set retention period has passed, unless required by law.

8 User Rights

Every individual who uses bm98's services has the following rights regarding their personal data—

  • Right to access — You can request to view the personal data we hold about you.
  • Right to rectification — You can request correction of any personal data that is inaccurate or incomplete.
  • Right to erasure — You can request deletion of data we hold that is no longer subject to a legal obligation to retain.
  • Right to restriction — You can request that we restrict our processing of your data under certain circumstances.
  • Right to data portability — You can request that we provide your data in a readable format.

To exercise any of these rights, send an email to [email protected] and submit your request. Our customer service team will handle the matter promptly and effectively.

9 Minors

bm98 services are available to users aged 21 and above only. If we become aware that personal data belonging to someone under 21 has been collected, we will delete it immediately and close the relevant account. If you believe a minor has accessed the site, please notify us right away at [email protected].

10 Policy Changes

bm98 may update this Privacy Policy from time to time. Whenever any change is made, the "Last updated" date on this page will be revised, and if the changes are significantly different from the original policy, registered users will be notified.

Continued use of the website after a policy change is considered acceptance of the updated policy.

11 Contact Us

If you have any questions, requests, or issues relating to this Privacy Policy, please contact our support team—

Our customer service team is ready to answer your questions in Burmese.

Privacy Protection — Questions & Answers

bm98 collects your personal data only for account registration, verification, processing deposits and withdrawals, customer support, and maintaining platform security. It is never shared with advertisers or unrelated third parties.

We share only the necessary data with payment processors (KBZPay, Wave Money, AYA Pay, banking services), server/cloud technology providers, and authorities required by law. These partners receive data solely to perform their services and are bound by data protection agreements consistent with our policy.

Yes, you can request deletion of any data we hold that is not subject to legal obligations. Contact [email protected] to submit a deletion request. We will explain which data cannot be deleted because it must be retained by law — such as payment transaction records.

If you disable essential cookies, login and session functions on the website may stop working. If you only disable performance cookies, basic website functions will still be available. You can selectively disable non-essential cookies through your browser settings.

If we become aware of a data breach, our security team will respond immediately and notify affected players as quickly as possible. We will carry out urgent protective checks and put measures in place to prevent it from happening again.

Customer support communication records are kept for 2 years and then deleted. This period is necessary for resolving disputes and maintaining service quality.