Privacy Policy

Last updated: 14 August 2026

Who we are

The Brunei Cybersecurity Association (“BCSA”, “we”, “us”) is the data controller for the personal data described in this notice. BCSA operates this website together with the membership portal, events platform and members’ threat-intelligence service. For any privacy question or to exercise your rights, contact us at contact@bcsa.bn.

What we collect

Membership data — name, email, phone, organisation, address, membership tier and status, invoices and payments.
Event data — attendee names and emails, ticket type, payment proof and check-in status.
Threat-intelligence subscription — your email and digest preferences (categories, frequency).
Website data — contact-form submissions and standard technical/usage data.
Identity verification data — if you choose to verify with Brunei ID, your Brunei identity card (IC) number, and for event registration the name shown on your IC. This is optional everywhere we offer it — see Brunei ID verification below.

How we use it

To administer your membership, process event registrations and payments, deliver the services and communications you have asked for (including the members’ digest), maintain security, and meet our legal and accounting obligations. We rely on your consent, the performance of our membership/ticketing agreement with you, and our legitimate interest in running the association.

Brunei ID verification

We offer Brunei ID as an optional way to prove who you are. It is never required: you can join, sign in and register for events without it, using your email address and password.

Signing in to the member portal. If you link your Brunei ID to your BCSA account, we receive only your IC number — no password, and no other personal details — and store it against your account so that we can recognise you next time you sign in that way.
Registering for an event. If you choose to verify when registering, your Brunei ID app shares the name and IC number held on your identity credential, which we use to confirm your identity and to fill in your registration for you. We request only the details we need, and we never receive your Brunei ID password.

Your IC number is used only to confirm your identity. It is never shown in the public member directory, never published, and never shared with other members. The details disclosed during an event verification are kept only briefly to complete that registration and are then removed automatically.

You can remove a linked Brunei ID at any time under My account → Privacy in the member portal. Unlinking deletes the stored IC number from your account; your membership and your ability to sign in with your email and password are unaffected. If you ask us to delete your data, any stored IC number is deleted with it.

Sharing across BCSA services

BCSA uses a single sign-on account so you can move between the website, membership, events and intelligence services. Your membership status may be shared between these services to apply member benefits (for example, member event pricing or access to the members’ feed). We do not sell your personal data. We share data with service providers (such as hosting and email delivery) only as needed to operate the services.

Retention

We keep membership and financial records for as long as you are a member and for the period required by law afterwards. Event and subscription data is kept while relevant and then deleted or anonymised.

Your rights

You may request access to, correction of, or deletion of your personal data, object to certain processing, and withdraw consent (including opting out of the directory or the members’ digest) at any time. Members can manage many of these settings in the member portal, or contact us at contact@bcsa.bn.

Cookies

We use cookies that are necessary for sign-in and security. Where we add analytics or optional cookies, we will ask for your consent first.

Changes

We may update this policy. Material changes will be posted here with a revised “last updated” date.