Official Bonus99 Documents

Privacy Policy Bonus99 – Our Commitment to Protecting the Data of Malaysian Members

Bonus99 regards your privacy as a top priority. This document sets out transparently how we collect, store, use, and protect your personal data as a member of our platform.

Updated: 1 January 2026 Bahasa Melayu (ms-MY) SSL 256-bit Protected
256-bit
SSL Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Malaysia Compliance

Bonus99's Six Core Privacy Commitments

These are the core principles that shape how bonus99 handles the personal data of every one of our Malaysian members.

Bank-Grade Encryption
All personal data and financial transactions transmitted between your device and bonus99's servers are protected by 256-bit SSL encryption — the same standard used by Malaysia's major banks such as Maybank and CIMB. No data travels in plain text across our network.
SSL 256-bit
Your Data Is Never Sold
bonus99 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your information belongs to you — we only use it for purposes you have explicitly consented to or that are necessary to operate our services.
No Data Sales
Restricted Data Access
Only bonus99 staff who require access to specific data to perform their duties are permitted to view it — and every access is logged and monitored. No staff member may access sensitive member data such as payment details or identity verification documents without the appropriate management-level approval.
Minimal Access
Malaysia PDPA Compliance
bonus99 complies with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations collect and process the personal data of Malaysian residents. This means you have clear legal rights over your data, and bonus99 is obligated to honour requests relating to those rights.
PDPA 2010 Compliant
Right to Erasure
You have the right to request deletion of your personal data from bonus99's systems at any time. Such requests will be processed within 30 business days, subject to any legal requirements for retaining certain records. All deletion requests are handled securely and confirmed via email.
Right to Erasure
Full Communication Control
You have full control over marketing communications from bonus99. Every promotional email, push notification, and SMS includes a clear, functional unsubscribe option. Unsubscribe requests are processed within 48 hours, and you can manage your notification preferences directly from your bonus99 account settings.
Full Control Is Yours
01

Personal Information We Collect

Bonus99 collects your personal data for clear and limited purposes. We do not collect information beyond what is necessary to provide our services to you. The following are the categories of data we may collect:

Data Categories Sample Information Primary Purposes
Identity Data Full name, date of birth, identification card number Account verification (KYC)
Contact Data Phone number, email address, full mailing address Account communications & support
Financial Data Payment account information (Touch 'n Go, GrabPay, DuitNow, FPX, etc.) Deposit & withdrawal processing
Technical Data IP address, device type, web browser, operating system Security & technical troubleshooting
Usage Data Betting history, games played, session duration Service improvement & compliance
Communication Data Support chat records, emails sent to us Complaint resolution & service improvement

We collect this data through several channels: online registration forms, direct use of the bonus99 platform, your communications with our support team, cookie and automated tracking technologies, and KYC identity verification processes where required.

Sensitive Data: bonus99 does not collect sensitive data such as medical information, religious beliefs, or sexual orientation. Biometric information is only collected when specifically required for advanced identity verification processes and with your explicit consent.

02

How bonus99 Uses Your Data

Bonus99 only uses your personal data for legitimate purposes to which you have consented, or as permitted by law. The following are the primary purposes for which your data is used:

  • Verifying your identity during registration and throughout the KYC process to ensure account security
  • Processing deposits and withdrawals via Malaysian local payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
  • Providing Sports Betting, Live Casino, slots, and jackpot services accessible on the bonus99 platform
  • Managing your VIP Rewards programme — tracking cumulative deposits, reward points, and weekly cashback
  • Sending important account-related communications such as transaction confirmations, security alerts, and service updates
  • Sending marketing communications about promotions, new bonuses, and bonus99 events — with your consent and subject to your preferences
  • Monitoring account activity to detect fraud, money laundering, and terms violations
  • Complying with applicable legal and regulatory obligations, including anti-money laundering (AML) reporting requirements
  • Improving the bonus99 platform, products, and services based on anonymised usage data analysis

Bonus99 does not make automated decisions that have a legal or significant impact on you without human involvement — including decisions on credit limits, account closures due to fraud, or VIP eligibility assessments.

Legal Basis for Processing: All data processing carried out by bonus99 has a valid legal basis under Malaysia's PDPA 2010 — whether grounded in your consent, contractual necessity, legal obligation, or the legitimate interests of bonus99 that do not override your privacy rights.

03

Sharing Information with Third Parties

Bonus99 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited circumstances where we need to share your data with trusted third parties in order to deliver our services to you:

  • Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow providers, and FPX banks such as Maybank and CIMB receive the transaction data required to process your deposits and withdrawals. Only the minimum data necessary for those purposes is shared.
  • Game Providers: Third-party game providers may receive the minimum technical data required to run their games on the bonus99 platform — this does not include your full financial or identity information.
  • Technical Service Providers: Companies that provide the server infrastructure, cloud services, security systems, and analytics used by bonus99 are subject to strict data processing agreements and may only use your data for the purposes specified in their contracts with us.
  • Statutory Authorities: bonus99 may be required by law to disclose certain information to Malaysian authorities — such as the Malaysian Anti-Corruption Commission (MACC), the police, or the courts — upon receipt of a valid legal order. We will notify you of any such disclosure where permitted by law.

All third parties who receive bonus99 member data are bound by strict confidentiality agreements and are periodically audited to ensure their compliance with the privacy standards we have set. We will not share your data with parties outside Malaysia without protections equivalent to or exceeding those under PDPA 2010.

No Cross-Border Sharing Without Safeguards: If any data needs to be transferred outside Malaysia — for example, to international cloud servers — bonus99 ensures that adequate data protection mechanisms are in place, including standard contractual clauses or equivalent data protection standards.

04

Bonus99 Data Security Measures

Bonus99 implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, loss, destruction, or improper disclosure. Key security measures we employ include:

  • 256-bit SSL encryption for all data in transit between your device and bonus99 servers
  • Sensitive data — including payment information and identity documents — is encrypted at rest within our databases
  • Two-factor authentication (2FA) available and recommended for all member accounts
  • Round-the-clock 24/7 account activity monitoring by automated intrusion detection systems
  • Segregation of members' financial data from operational data within separate server infrastructure
  • Role-based access control (RBAC) ensuring staff can only access the data necessary for their specific responsibilities
  • Regular security audits conducted by independent third parties to identify vulnerabilities
  • Mandatory privacy and data security training program for all bonus99 staff
  • A comprehensive security incident response plan to address any data breaches swiftly

In the event of a data breach affecting your personal information, bonus99 is committed to notifying you within 72 hours of becoming aware of the breach — in line with international data protection best practices. The notification will include details of the data affected, the steps being taken, and actions you can take to protect yourself.

Shared Responsibility: While bonus99 takes all reasonable steps to protect your data, account security also depends on your own actions. Keep your password strong and unique, enable 2FA, never share your login credentials with anyone, and contact bonus99 support immediately if you suspect any suspicious activity on your account.

05

Cookies & Tracking Technologies

Bonus99 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain security, and analyse usage. Below are the categories of cookies we use:

  • Essential Cookies (Required): Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Preference Cookies: Stores your preferences such as language selection, display settings, and saved login information. Helps the bonus99 platform remember your choices for future sessions.
  • Analytics Cookies: Collecting statistical data on how members use the bonus99 platform — including pages visited most frequently, time spent, and navigation paths. This data helps us improve the platform's design and performance. All analytics data is collected anonymously.
  • Security Cookies: Assists the bonus99 fraud detection system in identifying suspicious activity by comparing current usage patterns against your account's normal history.

You can manage your cookie preferences through your web browser. However, disabling essential cookies will affect the core functionality of the bonus99 platform. If you browse in private (incognito) mode or disable cookies, please be aware that certain features may not work as intended.

Bonus99 does not use third-party cookies for behavioral advertising targeting our members on other platforms. We respect your privacy beyond our own platform.

06

Your Privacy Rights as a bonus99 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by bonus99. All requests relating to these rights can be sent to support@bonus99-jit.com with the subject line "PRIVACY RIGHTS REQUEST":

Right of Access
You have the right to request a copy of all personal data we hold about you. We will provide a full report within 14 business days.
Right to Rectification
If any data we hold about you is inaccurate or out of date, you have the right to request a correction. Updates will be made within 7 business days.
Right to Erasure
You may request the deletion of your personal data from our systems, subject to applicable legal record-retention requirements. Requests are processed within 30 business days.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time without providing a reason. Such requests will be actioned within 48 hours.
Right to Restrict Processing
In certain circumstances, you may request that we restrict how we process your data — for example, while a complaint regarding the accuracy of that data is under investigation.
Right to Data Portability
You may request that we provide your data in a machine-readable format (such as CSV or JSON) for transfer to another service provider.

Bonus99 will handle all privacy rights requests seriously and within the stipulated timeframes. If we are unable to fulfil your request for valid legal or technical reasons, we will explain why clearly and suggest a suitable alternative.

Identity Verification for Rights Requests: To protect your privacy, bonus99 is required to verify your identity before processing any privacy rights request. This is a security measure to ensure that only you can access or request the deletion of your data.

07

Data Retention & Storage Periods

Bonus99 does not retain your personal data for longer than is necessary for the purpose it was collected, or as required by law. The following is a general guide to our data retention periods:

  • Active Account Data: Retained for the duration your bonus99 account remains active, and for a defined period following account closure to meet our legal obligations
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in compliance with Malaysian legal requirements on financial records and anti-money laundering
  • KYC Documents: Retained for a minimum of 5 years from the date of verification or the date of account closure, whichever is later
  • Support Communication Logs: Retained for 3 years for reference and service improvement purposes
  • Technical & Security Log Data: Retained for 12 months for technical troubleshooting and security investigation purposes
  • Marketing Data (with consent): Retained until you withdraw your consent or submit a deletion request

Once the designated retention period has lapsed, data will be securely deleted or anonymised in a manner that makes it permanently unlinkable to you. This process runs automatically on a schedule defined within the bonus99 data management system.

08

Changes to This Privacy Policy

Bonus99 may update this Privacy Policy from time to time to reflect changes in our practices, new technologies, updated legal requirements, or other operational factors. When we make material changes to this policy, we are committed to:

  • Updating the "Updated" date at the top of this document
  • Displaying a clear notice on the bonus99 homepage for at least 14 days following any material changes
  • Sending email notifications to all active bonus99 members informing them of key changes and how those changes affect their privacy
  • Providing a clear summary of key changes to make them easy to understand without having to re-read the entire document

Continued use of the bonus99 platform after any Privacy Policy changes take effect will be considered acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data before the changes come into effect. Previous versions of this Privacy Policy are available upon request via our support email for historical reference.

Your Feedback Matters: bonus99 encourages you to review this Privacy Policy periodically and to reach out if you have any questions or concerns about how we handle your data. Your feedback helps us continuously improve our privacy practices.

09

Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how bonus99 handles your personal data, please contact our Data Privacy Officer through the following channels:

  • Privacy Email: support@bonus99-jit.com — use the subject line "PRIVACY ENQUIRY" or "PRIVACY RIGHTS REQUEST" to ensure your message is routed to the right team
  • Live Chat: Available 24/7 within the bonus99 app and website — for general privacy enquiries requiring an immediate response
  • Response Time: We aim to respond to all privacy enquiries within 2 business days, and to formal rights requests within the timeframe required by law (typically 14–30 business days)

If you are not satisfied with how bonus99 has handled your privacy complaint after contacting us, you have the right to escalate your concerns to the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection authority in Malaysia. We encourage you to reach out to us first so we can resolve any issues directly and promptly.

Bonus99 takes every privacy-related complaint and enquiry seriously. We are committed to responding transparently, respecting your rights, and taking appropriate corrective action when needed. Your privacy is not merely a legal obligation to us — it is a fundamental part of the trust you place in our platform, and we do not take that responsibility lightly.

Bonus99's Privacy Commitment to Malaysian Members
All your personal information and financial transactions on bonus99 are protected by bank-grade 256-bit SSL encryption. We do not share your data with any third parties for marketing purposes. Information collected is used solely for the purposes stated in this Privacy Policy. You have the right to request access to, correction of, or deletion of your data at any time. All gaming activity is subject to Terms & Conditions bonus99. Please visit the Responsible Gaming us for information on the responsible gambling tools available.
256-bit SSL Encrypted
PDPA 2010 Compliant
No Data Sales
24/7 Privacy Support
Third-Party Audited

Your Data Is Safe at Bonus99 — Register Now

Bonus99 puts your privacy and data security first at every stage of your gaming experience. Register for free today and experience Malaysia's most trusted online betting platform for yourself.

Data protected by SSL 256-bit
Not sold to third parties
Malaysia PDPA Compliance
Bahasa Melayu