Data Protection

bm390 Privacy Policy

This policy fully explains how bm390 protects and manages the personal data you provide when you create an account and play.

Last updated: 30 October 2026
Summary: This policy explains what personal data is collected from players and visitors to the bm390 website (bm390.onl), why it is collected, how it is used, and what protection measures are in place. By continuing to use this website, you are considered to have read and agreed to this policy.

Why we collect data

bm390 collects only the personal data that is necessary to provide players with a secure and trustworthy environment to play in. We do not collect data beyond what is needed, and we regard players' right to privacy as an important responsibility. The data collected is intended solely for: (a) account registration and identity verification, (b) smooth processing of financial transactions, and (c) improving player support services.

Types of personal data collected

When you register as a player and use our services, the types of data collected are as follows—

Identifiable information

  • Name, date of birth (to verify you are 21+)
  • Email address
  • Phone number (for OTP verification)
  • Myanmar National Registration Card number (may be required at the time of financial verification)

Financial Information

  • KBZPay, Wave Money, AYA Pay account numbers
  • Bank account numbers (for users transacting via bank transfer)
  • Deposit / withdrawal records
  • Full financial transaction details — no card information is stored

Technical Information

  • IP address (for geographic restriction checks)
  • Browser type and version
  • Device model and operating system
  • Cookies and session tokens

Gaming Data

  • Gameplay activity records
  • Bonus and promotion usage records
  • Bet placement and winning records
  • Platform login times and frequency

How is the collected data used?

The information we collect is used only for specific purposes. How data is handled is explained in the sections below—

2.1 Service Delivery

Your personal information is used to carry out account registration, login, deposits, withdrawals, bonus provision, and player support services (24/7 Live Chat in Myanmar language).

2.2 Security and Protection

IP checks and gameplay pattern reviews are carried out to prevent fraud, money laundering, and unauthorised access. These processes are also intended to protect players' accounts and funds.

2.3 Transaction Auditing and Accountability

Records are kept so that financial transactions can be audited and disputes resolved. If a player raises a complaint about a payment, data is available to review and verify the matter.

2.4 Service Improvement

Gameplay records are analysed to understand which game categories players prefer, so the service can be improved accordingly. This analysis is purely for service evaluation — your personal data is not traded.

Data sharing with third parties

bm390 does not sell your personal information as a product and strictly controls the conditions under which it is shared—

Cases where sharing is permitted

  • Service providers processing payments, such as KBZPay, Wave Money, and AYA Pay
  • Technology providers handling security checks and data storage
  • When required by law, court order, or legal demand
  • When you have given permission to connect with a third-party service

Cases where sharing will not occur

  • To advertising companies or promotional platforms
  • For the marketing purposes of external companies
  • To data exchange or data broker services
  • Without prior consent from the player
Third-party service providers may only work with bm390 under a defined agreement that requires them to comply with bm390's data protection standards.

Cookies Usage

The bm390 website uses cookies for the following purposes—

Security Cookies

These verify your session and protect against unauthorised access. They are essential for the website to function.

Functional Cookies

These remember your language preference, design settings, and login history to give you a better experience on your next visit.

Analytics Cookies

These help us understand which game categories are most popular so we can improve the service. These cookies contain only aggregated data and do not include anything that identifies you personally.

You can disable cookies through your browser settings. Note, however, that disabling certain cookies may limit some functionality of the website.

Data Security Measures

We have a range of technical security measures in place to protect your personal information—

SSL Encryption

All data transfers are encrypted using the TLS/SSL protocol.

Data Access Restrictions

Only staff with a role-based need are permitted to access data.

Intrusion Detection System

A system is in place to detect and respond to unusual access attempts in real time.

Secure Server Infrastructure

Data servers are maintained with firewall protection and multiple redundant backups.

Strong Authentication

OTP and identity verification methods are applied when logging into accounts.

Regular Audits

Security measures are reviewed and updated regularly to keep up with current technology.

Data Retention Policy

Collected data is deleted or anonymised when it is no longer needed. Retention periods by category are—

Data Type Retention Period Description
Account Registration Data 5 years after account deletion For financial audit purposes
Financial Transaction Records Minimum 5 years For dispute resolution and accountability
Gaming History 3 years Service review and player protection
Technical / Log Data 1 year Security audits
Cookies Session end — varies within 1 year Varies depending on cookie type

Players' Data Rights

You have the following rights regarding your personal information on the bm390 platform—

Right to Access

You can request to view the personal information we hold about you. A response will be provided within 30 days.

Right to Rectification

You can request corrections to inaccurate information. This can be done through account settings or by contacting support.

Right to Erasure

You can request deletion of data that is not legally required to be retained. Data such as financial records that must be kept by law will be retained for the required period.

Right to Data Portability

You can request your provided data in a readable format. This right applies only to reasonable requests.

For data rights requests or enquiries — [email protected] or contact us via 24/7 Live Chat in Burmese.

Age Restriction 21+ Protection

bm390 is a platform for players aged 21 and above only. We prioritise child protection and—

Age Verification Policy

Players must confirm they are 21 or older at the time of registration. Date of birth and ID may be required at withdrawal or during security checks. If underage play is detected, the account will be closed immediately and any funds will be handled in accordance with applicable legal procedures.

Notice for Parents / Guardians

Use browser parental controls and device restrictions to prevent minors from accessing this platform. If you become aware of anyone under 21 attempting to access this website, notify us immediately at [email protected].

Policy Changes

bm390 reserves the right to update this privacy policy as needed. When policy changes occur—

  • The "Last Updated" date on this page will be revised
  • For significant changes, registered email addresses will be notified
  • Continued use of the website by players is considered acceptance of the updated policy
  • If you disagree, you may contact [email protected] to close your account

We encourage you to read this policy regularly and watch for any changes. bm390's support team is available 24/7 to answer any privacy-related questions in Burmese.

Contact bm390

For any questions, concerns or data requests related to this policy, you can reach us at—

Email Contact

Data requests and enquiries can be sent to [email protected]. Responses will be provided within 30 days.

Live Chat Contact

For any questions, you can chat with us instantly in Myanmar language via 24/7 Live Chat. Log in through bm390 Login to get in touch.

Personal Data Protection Quick Answers

No. bm390 does not treat players' personal data as a commodity — it is viewed as a responsibility to protect. Data is only shared with essential service providers such as payment processors, and only under strict handling limits.

Financial transactions (KBZPay, Wave Money, AYA Pay, bank transfers) are processed with SSL/TLS encryption. Full card numbers are never stored on bm390 servers — they are handled solely within the encrypted environment of the payment service provider.

Send an email to [email protected] with the subject "Data Access Request" or "Data Deletion Request", or contact us through 24/7 Live Chat. A response will be given within 30 days. Please note that only data not required by law can be deleted.

If you turn off analytics and functional cookies, the site will still work but some features (saved settings, session continuity) may be limited. Security cookies are required for the site to function and cannot be turned off.

Your IP address is used only for security checks, fraud prevention, and verifying service access location. It is not used for ad targeting or shared with third parties.

You are required to enter your date of birth at registration. At the time of withdrawal or identity verification, you may be asked to submit a photo of your Myanmar National Registration Card. This data is used only to verify that you are 21+ and for financial security purposes.

Yes. If a data breach occurs that may affect players' personal data, we will notify you as quickly as possible through your registered email address and via the website, and will take protective action.