Bonus99myr Privacy Policy – Personal Data Protection for Malaysian Players

1 Introduction and Scope of This Privacy Policy

bonus99myr ("we", "our platform") is an online entertainment platform operating under strict data protection standards. This Privacy Policy applies to all personal information collected through the bonus99myr platform, including the website, mobile app, and any other service channels we operate.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and internationally recognised data protection principles. We are committed to ensuring that every Malaysian player who entrusts bonus99myr with their personal information receives protection that is worthy of that trust.

This Privacy Policy covers: the types of data we collect, the purposes for collecting it, how data is stored and protected, who can access your data, your rights as a data subject, and how to contact us regarding your privacy. We encourage you to read this document carefully and to reach out to the support team at bonus99myr if you have any questions.

2 Personal Information We Collect

bonus99myr collects your personal information through several channels — during account registration, while you use the platform, when you carry out financial transactions, and when you interact with our support team. The categories of data we collect are as follows:

We do not collect more data than is necessary for the stated purposes. bonus99myr does not collect sensitive data such as your medical information, religious beliefs, or political affiliations unless you voluntarily provide such information in the context of responsible gaming.

3 How Your Personal Data Is Used

bonus99myr uses the personal data collected solely for legitimate purposes directly related to the operation of the platform. We do not process your data for any other purpose without obtaining fresh consent from you. The primary purposes for which your data is used are as follows:

• Account Management: Creating and maintaining your bonus99myr account, verifying your identity (KYC), processing login requests, and keeping your account secure.
• Transaction Processing: Processing your deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), and other supported Malaysian payment methods.
• Service Delivery: Enabling you to access and use all features of the bonus99myr platform, including games, Sports Betting, and Live Casino services.
• Legal Compliance: Fulfils anti-money laundering (AML), know-your-customer (KYC), and other reporting obligations prescribed by applicable Malaysian laws.
• Service Communications: Sending notifications about your account, transaction confirmations, security alerts, and important updates related to the bonus99myr platform.
• Customer Support: Assists in resolving enquiries, complaints, and technical issues you raise with the bonus99myr support team.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and to enforce the deposit limits or self-exclusion settings you have put in place.
• Platform Security: Detecting and preventing fraud, multi-account usage, bonus abuse, and other activities that violate bonus99myr's Terms & Conditions.
• Marketing Communications: Only with your explicit consent, to send you information about relevant promotions, bonuses, and new offers. You may withdraw this consent at any time.

4 Third-Party Data Sharing and Disclosure

Core Principles bonus99myr is that your personal data is never sold, rented, or shared with third parties for marketing purposes without your explicit consent. However, there are limited situations where we need to share data with certain parties to keep the platform running securely and in compliance with the law:

• Game Providers: Providers such as Evolution Gaming, Pragmatic Play, and SA Gaming may receive game data necessary to process transactions and deliver gameplay. All such providers are bound by strict data protection agreements with bonus99myr.
• Payment Processors: Payment gateway providers that process your DuitNow, Touch 'n Go, GrabPay, FPX, and other Malaysian payment method transactions. They receive only the data necessary to process the relevant transaction.
• Technical Infrastructure Providers: Cloud computing and hosting service providers that store bonus99myr platform data. All such providers are selected based on strict data security standards.
• Regulatory Bodies and Law Enforcement: bonus99myr will disclose data to Malaysian authorities when required by court order, warrant, or other legal obligation. We will notify you of any such disclosure where the law permits us to do so.
• Independent Auditors: Audit firms conducting security, compliance, and financial audits of the bonus99myr platform may access certain data within the limited scope required for the relevant audit, subject to strict confidentiality agreements.

In all instances of data sharing, bonus99myr ensures that recipients are bound by data protection obligations equivalent to or stricter than those we ourselves comply with. We do not share your data with any party outside the situations described above.

5 Data Security and Protection

bonus99myr implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

• 256-bit SSL Encryption: All data transmitted between your browser or app and bonus99myr's servers is protected by 256-bit SSL encryption — the same standard used by Maybank and CIMB to secure their customers' online banking transactions.
• Data-at-Rest Encryption: Sensitive data stored in the bonus99myr database — including financial details and identity verification information — is encrypted using industry-standard encryption algorithms.
• Tiered Access Controls: Only bonus99myr staff who require access to specific data in order to carry out their duties are granted permission to do so — and only at the minimum level necessary. This access is audited on a regular basis.
• Two-Factor Authentication (2FA): bonus99myr's internal systems containing player data are protected by two-factor authentication for all staff access. Players may also enable 2FA on their accounts through the security settings.
• Regular Security Audits: bonus99myr conducts regular security assessments — including penetration testing and vulnerability reviews — to ensure player data protection is maintained at the highest standard.
• Incident Response Plan: bonus99myr maintains a documented security incident response procedure. In the event of a data breach that affects you, we are committed to notifying you within 72 hours of becoming aware of the incident.

While we take all reasonable security measures, no system can guarantee absolute security. We encourage players to also take an active role in protecting their accounts by using strong passwords, enabling 2FA, and never sharing their login credentials with anyone.

6 Data Retention Period

bonus99myr retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Our principle is to never retain data longer than required.

• Active Account Data: For as long as your account remains active with bonus99myr, we retain all data necessary to manage your account and services.
• Data After Account Closure: Upon account closure, core data will be retained for 7 years to comply with anti-money laundering (AML) obligations and Malaysian financial reporting requirements. After this period, data will be securely deleted.
• Transaction Records: Financial transaction history is retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records.
• Support Communication Transcripts: Recordings and transcripts of customer support interactions are retained for 2 years for service quality and dispute resolution purposes.
• Cookie Data: Session cookies are deleted when you close your browser. Preference and analytics cookies are stored for no longer than 12 months.

When data is no longer needed, bonus99myr ensures secure erasure or disposal using methods that make data unrecoverable by any party.

7 Cookies and Tracking Technologies

Platform bonus99myr uses cookies and similar tracking technologies to enhance user experience, maintain security, and understand how our platform is used. Below are the types of cookies we use:

• Essential Cookies: Required for the platform to function properly — including login session cookies, security cookies, and language preference cookies. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting aggregated data on how players use the platform to help us identify and resolve technical issues and improve the overall user experience. This data does not identify you personally.
• Preference Cookies: Saving your chosen preferences — such as interface language and display settings — so you do not have to reconfigure them each time you visit.
• Security Cookies: Helping to identify suspicious activity, protecting against bot attacks, and ensuring that only legitimate users can access their accounts.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect platform functionality. bonus99myr. For more information about the cookies we use and how to manage them, please contact our support team.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and internationally recognised privacy principles, you as a player bonus99myr have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. bonus99myr will provide this information within 21 days of receiving a valid request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update certain information directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that bonus99myr delete your personal data. Please note that this right has exceptions — for instance, we cannot delete data that must be retained to fulfil legal obligations such as AML requirements.
• Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances, such as when the accuracy of the data is in dispute.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to other processing based on our legitimate interests in certain circumstances.
• Right to Withdraw Consent: If our processing of your data is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to your withdrawal.

To exercise any of these rights, please contact the bonus99myr via email at support@bonus99myr.best or through the platform's live chat. We will process your request within the timeframe stipulated by Malaysia's PDPA and provide a clear written response.

9 Amendments to This Privacy Policy

bonus99myr reserves the right to amend this Privacy Policy from time to time in line with changes in legislation, platform operational changes, or evolving industry best practices. We are committed to handling any amendments transparently and fairly.

• For material amendments — that is, changes that significantly affect how we process your data or your rights — we will provide at least 14 days before amendments take effect, via your account or registered email.
• Amendment notices will clearly state what changes have been made and why, so you can make an informed decision about whether to continue using the bonus99myr platform.
• The latest version of this Privacy Policy is always available on this page, with the update date clearly displayed. We encourage you to review this page periodically.
• Continued use of the platform after any amendments take effect will be considered acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account before they come into effect.

If you have any questions or concerns about amendments to this Privacy Policy, please do not hesitate to get in touch with us. The bonus99myr will provide a full explanation of any changes made and how they affect you as a player.

10 How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how bonus99myr manage your personal data, or if you wish to exercise any of the rights afforded to you under this Privacy Policy, you may contact us through the following channels:

• Privacy Email: support@bonus99myr.best — please mark your email subject as "Privacy Enquiry" to ensure it is routed to the staff responsible for privacy matters.
• Live Chat: Available 24/7 within the bonus99myr platform. For sensitive privacy enquiries, email is the more appropriate channel for a clear written record.
• Response Time: bonus99myr is committed to responding to all privacy-related enquiries within 14 working days from the date of receipt. For more complex data access requests, we will notify you if additional time is required (not exceeding 21 business days).

If you are not satisfied with our response to your privacy enquiry, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (PDPC), the regulatory body overseeing the enforcement of the PDPA 2010 in Malaysia. That said, we always encourage you to reach out to us first so we can work to resolve any issues directly and more promptly.