bonus99 Privacy Policy

1. Introduction

bonus99 ("we", "us", "our", or the "Company") is committed to protecting the privacy and personal data of all users who access and interact with the bonus99 platform at bonus99.lat (the "Platform"). This Privacy Policy explains what personal data we collect, why we collect it, how it is used and stored, with whom it may be shared, and what rights you hold in relation to your data.

This Policy applies to all individuals who visit the Platform, register a bonus99 account, use any of our gaming products or services, or communicate with our support team. By accessing or using the Platform, you acknowledge that you have read this Privacy Policy and agree to the collection and use of your information as described herein.

This Privacy Policy should be read alongside the bonus99 Terms and Conditions. Defined terms used but not defined in this Policy carry the meanings given to them in the Terms and Conditions. If there is any inconsistency between this Policy and a more specific privacy notice provided to you in connection with a particular service, the more specific notice shall prevail.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register an account with bonus99 or use our services, we collect the following categories of personal data that you provide directly:

• Identity data: full legal name, date of birth, national identity card number or passport number.
• Contact data: email address, mobile phone number, and residential address (including city, state, and postcode).
• Account credentials: username and encrypted password. Passwords are never stored in plain text.
• Financial data: payment method details sufficient to process deposits and withdrawals — including Touch n Go eWallet account identifiers, Boost wallet references, and bank account details for Maybank, CIMB, or Public Bank internet banking transactions. Full card or bank account numbers are processed by our payment service providers and are not stored on our servers.
• KYC documents: government-issued photo identification, proof of residential address, and where required, source-of-funds documentation submitted during the verification process.

2.2 Information Collected Automatically

When you access the Platform, certain data is collected automatically from your device and browser:

• IP address and geolocation data derived from IP.
• Device type, operating system, and browser version.
• Session timestamps, pages visited, features used, and navigation patterns within the Platform.
• Game interaction data, including bet histories, game selections, session durations, and wagering patterns.
• Cookie and tracking technology data as described in Section 6.

2.3 Information from Third Parties

bonus99 may receive personal data about you from third-party sources, including identity verification service providers, payment processors, fraud detection agencies, and gaming regulatory bodies, where such sharing is lawful and necessary for the provision of our services.

3. How We Use Your Personal Data

bonus99 uses your personal data for the following purposes:

• Account management: to create, maintain, and secure your registered account, including authenticating your identity when you sign in via the bonus99 login portal.
• Service delivery: to process deposits and withdrawals in MYR, settle bets, award winnings, and administer bonus and promotional offers.
• Legal compliance: to fulfil obligations under anti-money laundering regulations, KYC requirements, and the guidelines of internationally recognised gaming authorities, including the retention of transaction records and reporting of suspicious activity.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent account activity, unauthorised access, and abuse of the Platform.
• Responsible gaming: to monitor gaming patterns and, where appropriate, proactively contact players who may exhibit signs of problem gambling behaviour, and to administer self-exclusion and limit-setting tools.
• Customer support: to respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: to analyse aggregate usage patterns, conduct A/B testing, and inform product development decisions.
• Marketing communications: to send you relevant promotional offers and updates, where you have provided consent or where we have a legitimate interest in doing so, and subject always to your right to opt out.

4. Legal Basis for Processing

bonus99 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform our obligations under the Terms and Conditions, including account management, payment processing, and game service delivery.
• Legal obligation: processing necessary to comply with applicable laws and gaming regulatory requirements, including AML obligations and KYC verification.
• Legitimate interests: processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: processing for direct marketing communications, where required by applicable law. You may withdraw consent for marketing at any time through your account settings or by contacting our support team.

5. Data Sharing and Disclosure

bonus99 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment service providers: to process deposits and withdrawals via Touch n Go eWallet, Boost, and Malaysian internet banking partners. These providers act as data processors under our instructions.
• Identity verification providers: to conduct KYC checks and document authentication as required by gaming regulatory guidelines.
• Game content providers: game studios and live casino platform operators receive limited session data necessary to deliver game content and settle results.
• Fraud detection and analytics services: to monitor transactions and usage patterns for fraudulent activity and platform abuse.
• Regulatory and law enforcement authorities: where required by law, court order, or the legitimate request of a gaming regulatory body with jurisdiction over our operations.
• Group companies: within the bonus99 corporate group, to the extent necessary for shared infrastructure, support functions, and compliance operations.

Where we share data with third-party processors, we require them to process it only on our instructions, to maintain appropriate security standards, and not to use it for their own independent purposes.

6. Cookies and Tracking Technologies

The bonus99 Platform uses cookies and similar tracking technologies to operate core Platform functions, remember your session and preferences, analyse usage patterns, and deliver relevant content. The following categories of cookies are used:

• Strictly necessary cookies: essential for the Platform to function. These include session cookies that maintain your logged-in state and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: used to collect aggregated, anonymised data about how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data informs Platform improvements.
• Functional cookies: used to remember your preferences such as language settings, preferred payment method display, and last visited game categories.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use core Platform features including the bonus99 login function.

7. Data Retention

bonus99 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: retained for the duration of your active account relationship and for a minimum of five (5) years following account closure, in accordance with gaming regulatory and AML record-keeping requirements.
• Transaction and betting records: retained for a minimum of five (5) years from the date of each transaction.
• KYC documentation: retained for the period required by applicable gaming authority guidelines, typically five years from the end of the account relationship.
• Support communications: retained for two (2) years from the date of the last interaction.
• Marketing data: retained until you withdraw consent or for a maximum of three (3) years from your last interaction with marketing communications, whichever is earlier.

Following the expiry of the relevant retention period, personal data is securely deleted or anonymised.

8. Data Security

bonus99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data transmitted between your device and the Platform.
• Cryptographic hashing of passwords — plain-text passwords are never stored.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Activity logging and anomaly detection on account access and financial transactions.

While bonus99 takes reasonable steps to secure your data, no system is entirely immune to security risks. In the event of a personal data breach that is likely to result in risk to your rights, bonus99 will notify affected individuals in accordance with applicable requirements.

9. Your Data Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by bonus99:

• Right of access: to request a copy of the personal data we hold about you.
• Right of rectification: to request correction of inaccurate or incomplete personal data.
• Right of erasure: to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: to request that we limit the processing of your data in certain circumstances.
• Right to data portability: to receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: to object to processing based on our legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the bonus99 support team via live chat within the Platform or by email at [email protected]. We will respond within a reasonable timeframe. Identity verification may be required before actioning a request.

10. International Data Transfers

The bonus99 Platform and its service providers may process your personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, bonus99 takes steps to ensure that such transfers are conducted in accordance with applicable data protection requirements, including the use of standard contractual clauses or other appropriate safeguards where required.

11. Third-Party Services and Links

The bonus99 Platform does not contain links to external third-party websites or services for the purpose of this Privacy Policy. Game content delivered on the Platform is provided by licensed third-party studios; their data practices are governed by their own privacy policies and are subject to the data processing agreements in place between bonus99 and those providers.

12. Children and Minors

The bonus99 Platform is strictly for use by adults aged 21 years and above. We do not knowingly collect personal data from persons under 21 years of age. If we become aware that a registered account belongs to a person under 21, that account will be immediately suspended and any associated personal data will be deleted, subject to any overriding legal retention obligations. If you believe a minor has registered an account, please contact us immediately at [email protected].

13. Updates to This Privacy Policy

bonus99 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the Platform. The "Last Updated" date at the top of this page reflects the most recent revision.

Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you must cease using the Platform and close your account.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bonus99, please contact our data privacy team via:

• Live Chat: available 24/7 within the Platform after login.
• Email: [email protected]

We are committed to addressing privacy enquiries promptly and transparently. For complex data rights requests, please allow up to 30 days for a full response, though we will acknowledge receipt of your request within 5 business days.