Personal Data Protection

Bonus99 Privacy Policy – Your Personal Data Protection

At bonus99, your privacy is not merely a legal obligation — it is our genuine commitment. This document clearly explains how we collect, use, store, and protect your personal information while you use our platform.

Updated: 1 January 2026
Bahasa Melayu
PDPA 2010 Compliant

The Six Pillars of bonus99 Data Protection

We do not merely comply with the law — we go further to ensure every piece of your personal information is handled with full integrity and transparency.

Advanced Data Encryption

All your personal data and financial transactions are protected with 256-bit SSL encryption. Information transmitted between your device and our servers cannot be intercepted or read by any third party.

No Sharing Without Consent

Bonus99 does not sell, rent, or share your personal data with any third party for marketing purposes without your explicit consent. Your data belongs entirely to you.

Secure KYC Verification

Our identity verification process uses an integrated and secure KYC system. Documents you upload are stored in a protected environment and can only be accessed by authorised personnel.

Full Control in Your Hands

You may access, update, or request deletion of your personal data at any time through your account settings or by contacting our support team directly.

Malaysia PDPA Compliance

Our Privacy Policy fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010. We continuously ensure that our data management practices align with all applicable legal requirements.

Defined Retention Period

We do not store your data indefinitely. Each data category has a defined retention period, and data that is no longer required will be securely deleted or anonymised.

1. Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how bonus99 ("we", "Platform") collects, uses, discloses, and protects your personal information when you use the bonus99.plus website, the mobile app for Android and iOS, and all related services we provide.

This document is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. By registering an account, making a deposit, or using any part of our platform, you are deemed to have read, understood, and agreed to this Privacy Policy.

Note: This Privacy Policy should be read together with the bonus99 Terms and Conditions. Any term not defined here carries the same meaning as in our Terms and Conditions.

This Policy applies to all bonus99 platform users regardless of whether you access our platform via a web browser, Android app, or iOS app. It covers all information you provide directly to us as well as information we collect automatically while you use the platform.

2. Personal Data We Collect

Bonus99 collects various types of personal information to enable us to provide you with a secure, efficient, and personalised service. This data collection is divided into two main categories: information you provide directly and information collected automatically.

2.1 Information You Provide Directly

  • Registration information: Full name, identification card number (MyKad), date of birth, email address, mobile phone number, and your chosen password.
  • KYC information: A valid government-issued photo ID (MyKad, passport, or driving licence), a selfie for identity verification, and proof of residential address if required.
  • Financial information: Your preferred payment method details, including bank account number, bank name, and e-wallet information required to process deposits and withdrawals.
  • Communications: The content of any messages, complaints, or enquiries you submit to our customer support team via Live Chat, email, or other provided communication channels.

2.2 Information Collected Automatically

  • Usage data: Game history, total wagering amount, wins, losses, and general platform usage patterns.
  • Technical data: IP address, device type, operating system, browser version, screen resolution, and other relevant technical information.
  • Location data: Geographic location information derived from your IP address to ensure compliance with applicable geographic requirements.
  • Cookie data: Information stored through cookies and similar tracking technologies that help us improve the user experience.

Data Minimisation Principle: bonus99 only collects personal data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant information beyond what is needed to provide our services.

Data Category Example Information Primary Purpose Retention Duration
Identity Name, MyKad, date of birth Registration & KYC 5 years
Contact Email, phone number Communication & security 5 years
Finance Bank accounts, e-wallet accounts Payment processing 7 years
Technical IP, device, browser Security & anti-fraud 1 year
Games Betting history, wins Compliance & audit 5 years
Marketing Promotion preferences, ad clicks Personalised Offers Deletable

3. How We Use Your Personal Data

Bonus99 uses collected personal information for various legitimate and necessary purposes in the operation of our platform. Every use of data is based on a clear legal basis, whether your consent, our legitimate interests, or applicable legal obligations.

  • Service provision: Creating and managing your account, processing deposits and withdrawals, and enabling you to access all games and platform features.
  • Identity verification: Conducting the required KYC process to comply with anti-money laundering laws and to verify that you meet the age eligibility requirements.
  • Account security: Detecting and preventing fraudulent activity, unauthorised access, bonus manipulation, and any conduct that violates the platform's Terms and Conditions.
  • Customer support: Resolving enquiries, complaints, and technical support requests submitted to our support team.
  • Service communications: Sending important notifications related to your account, transactions, security updates, and relevant changes to terms or policies.
  • Personalised marketing: Sending relevant offers, promotions, and bonus information based on your gaming preferences — subject to your consent and cancellable at any time.
  • Platform improvements: Analysing usage patterns, identifying technical issues, and developing new features that enhance the overall user experience.
  • Legal compliance: Fulfilling the reporting and compliance obligations required by Malaysian law and relevant enforcement bodies.

4. Data Sharing With Third Parties

Bonus99 understands that your trust depends on how we handle data sharing. We do not sell or rent your personal data to any third party for their own commercial purposes. However, there are certain circumstances where we need to share specific information with other parties to maintain our services.

4.1 Third-Party Service Providers

We share necessary data with trusted service providers who assist us in operating the platform, including payment processors (such as FPX, DuitNow, Touch 'n Go), KYC service providers, cloud computing infrastructure providers, and analytics platforms. All these providers are bound by strict confidentiality agreements and may only use your data for the specific purposes agreed upon.

4.2 Mandatory Legal Disclosure

In certain circumstances, bonus99 may be legally required to disclose your personal information to government authorities, law enforcement agencies, or courts. This includes investigations related to money laundering, fraud, or other criminal activity involving your account. We will notify you of any such request unless we are prohibited from doing so by a court order or applicable law.

Important: bonus99 never shares your password, full credit card numbers, or sensitive verification information with any third party under any circumstances. We will also never request such information via email or unofficial messages.

5. Data Security & Protection Measures

The security of your personal data is bonus99's highest priority. We continuously invest in the latest security infrastructure and practise a "defence-in-depth" approach that ensures your data is protected at every stage of processing and storage.

Our platform uses the latest version of Transport Layer Security (TLS) encryption for all data communications between your browser or app and our servers. Data stored in our databases is also encrypted using AES-256, the encryption standard adopted by financial institutions and government agencies worldwide.

  • Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) that monitor network traffic 24/7
  • Regular security audits and penetration testing conducted by independent security experts
  • Role-based access control (RBAC) ensuring only authorised personnel can access sensitive data
  • Continuous monitoring of any suspicious account activity with automated alert systems
  • Two-factor authentication (2FA) is available for all user accounts as an additional layer of security
  • Encrypted data backups are stored across multiple data centres in separate locations to ensure service continuity

Shared Responsibility: While we implement comprehensive security measures, the security of your account also depends on your own actions. Please use a strong password, enable 2FA, and never share your login credentials with anyone.

6. Cookies & Tracking Technologies

Bonus99 uses cookies and similar tracking technologies such as web beacons and pixel tags to enhance platform functionality, personalise your experience, and analyse usage patterns. Understanding how we use these technologies will help you make more informed decisions about your privacy settings.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled as they are critical to your account security.
  • Performance Cookies: Collecting information on how you use our platform, which pages are visited most frequently, and technical errors encountered. This data is used to improve platform performance and usability.
  • Functional Cookies: Saving your preferences such as preferred language, display settings, and login information (if you select the "Remember Me" option) for a more convenient return experience.
  • Marketing Cookies: Used to display relevant offers and promotions based on your interests and gaming activity. You may disable marketing cookies through your browser settings at any time.

Most web browsers allow you to manage cookies through your browser settings. However, disabling essential cookies may affect platform functionality and your overall gaming experience.

7. Your Rights Regarding Personal Data

As a bonus99 platform user, you have certain rights regarding your personal data protected under Malaysia's PDPA 2010. We are committed to facilitating the exercise of these rights in a practical and efficient manner. Below is a summary of your key rights:

1

Right of Access

You have the right to request a copy of the personal data we hold about you. This request will be processed within 21 working days.

2

Right to Rectification

If your data is inaccurate or outdated, you have the right to request an immediate correction via your profile settings or customer support.

3

Right to Erasure

You may request deletion of your personal data upon account closure, subject to applicable mandatory legal retention obligations.

4

Right to Withdraw Consent

You may withdraw consent for marketing purposes or optional processing at any time without affecting core services.

5

Right to Object

You may object to the processing of your data for direct marketing purposes or profiling that is not necessary for service delivery.

6

Right to Lodge a Complaint

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

8. Data Retention Period

Bonus99 strictly adheres to the principle of data storage limitation. We do not retain your personal data longer than necessary for the original purpose of collection, or as required by applicable laws in Malaysia.

Account information and KYC records are retained for the duration your account is active plus five (5) years following account closure, to meet legal compliance requirements and potential investigations by authorities. Financial transaction records are retained for seven (7) years in accordance with Malaysia's accounting and tax legal requirements. Once the defined retention period expires, your data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to your identity.

Deletion Upon Request: For data not subject to legal retention obligations — such as marketing data and communication preferences — we will process your deletion request within 14 business days following identity verification.

9. Changes to This Privacy Policy

Bonus99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect user data. Each version of the Privacy Policy will display the latest "Updated" date at the top of this document.

For material changes that significantly affect how we use your data, we will provide at least 14 days' advance notice before the changes take effect, via your registered email or in-app notification. Continued use of the bonus99 platform after the effective date of any amendment will be deemed as your acceptance of the updated Privacy Policy.

10. How to Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding personal data, the bonus99 Data Protection Officer (DPO) team is here to assist you. We aim to respond to all privacy-related enquiries within 3 business days.

Contact Our Privacy Team: You can reach us via Live Chat available 24/7 on the bonus99 platform or through our official email at [email protected]. Please include "Data Privacy Inquiry" in your message subject to ensure it is directed to the responsible team.

Frequently Asked Questions About the bonus99 Privacy Policy

Answers to the most frequently asked questions by users regarding data protection and privacy on our platform.

Absolutely not. bonus99 has never and will never sell, rent, or trade your personal data to any third party for their own commercial purposes. We only share necessary data with service providers directly involved in operating our platform, and all such providers are bound by strict confidentiality agreements.

You may request data deletion in two ways: first, via the 24/7 Live Chat within the bonus99 platform; second, by emailing [email protected] with the subject line "Data Deletion Request". We will verify your identity before processing the request. Please note that certain data cannot be deleted due to mandatory legal retention obligations applicable in Malaysia.

Yes. All financial information you provide is encrypted using AES-256 and 256-bit SSL encryption. bonus99 does not store your full credit or debit card numbers — only the information required for transaction processing is retained in encrypted format. Our payment processing uses trusted and registered payment gateways that comply with Payment Card Industry security standards (PCI-DSS).

Yes. You can unsubscribe from promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any promotional email we send. You can also manage your communication preferences directly through your account settings on the platform. Please note that opting out of promotional emails will not affect important transactional and security emails related to your account.

When you close your account, your personal data will be retained for the period required by Malaysian law — typically 5 to 7 years for financial and KYC records. This is a mandatory requirement under anti-money laundering and accounting regulations. After that period, all your data will be permanently deleted or anonymised. Marketing data and communication preferences will be deleted earlier upon your request.

Yes, fully. bonus99 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all regulations issued under it. We have a Data Protection Officer (DPO) responsible for ensuring all our data management practices align with applicable legal requirements. This Privacy Policy is updated periodically to reflect any changes in compliance requirements.

Play Safe, Privacy Guaranteed

Register a bonus99 account today and enjoy a safe, fair, and entertaining online gaming experience. Your personal data is fully protected with the latest encryption and a transparent privacy policy.

SSL Encryption
256-bit Encryption
PDPA 2010
Full Compliance
Secure KYC
Identity Verification
24/7 Support
Here to Help
Bahasa Melayu