Privacy Policy

Privacy Policy bonus999 — Data Protection Malaysia Players

Your privacy is our priority. This document transparently explains how bonus999 collects, uses, and protects your personal data at all times.

Effective from
1 January 2026
Last updated
15 December 2026
Data Protection
SSL 256-bit active
Encryption: SSL 256-bit
Server: Southeast Asia
Data Sales: Never
Malaysia PDPA: Complied

Protection Level

Data EncryptionVery High
Access ControlHigh
PDPA ComplianceFull
Data BackupReal-Time

Have questions about your data privacy?

View FAQ

Quick Summary: bonus999 collects only the data needed to operate its services, protects it with bank-grade encryption, never sells it to third parties, and gives you full control over your own data.

1 Introduction & Scope of This Policy

This Privacy Policy ("Policy") is published by bonus999 and describes our practices for collecting, processing, storing, and protecting the personal data of users on our platform, including the bonus999.pro website and Android and iOS mobile apps.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adhere to relevant international data protection standards. We take your privacy seriously — not merely as a legal obligation, but as a commitment we uphold with full responsibility to every bonus999 player.

By using the bonus999 platform, you agree to the collection and use of information as described in this Policy. If you disagree with any part of this Policy, please discontinue use of our platform.

2 Personal Data We Collect

Bonus999 only collects data that is genuinely necessary to provide a safe and fully functional service. Below are the types of data we collect and their purposes:

Data Type Example Requirements
Identity Information Full name, date of birth, MyKad number KYC & age verification
Contact Information Phone number, email address Communication & account recovery
Financial Information Bank account number, bank name Deposit & withdrawal processing
Usage Data Game logs, transaction history Security & customer support
Technical Data IP address, device type, browser Security & fraud detection
Cookie Data User preferences, login sessions Better user experience

2.1 Data We Do NOT Collect

  • Full credit or debit card number (only secure tokens are stored)
  • Plaintext passwords — all passwords are stored in hashed form
  • Biometric data other than that stored locally on your device for biometric login
  • Medical information or special category sensitive data

3 How We Use Your Data

The data we collect is used solely for the following purposes. We do not use your data for any purpose not stated here without first obtaining your explicit consent.

  • Account Management: Registering, verifying, and maintaining your account on the bonus999 platform
  • Payment Processing: Processing deposits, withdrawals, and other financial transactions securely
  • Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and reporting requirements mandated by law
  • Platform Security: Detecting and preventing fraud, money laundering, and unauthorised access
  • Customer Support: Enabling our team to resolve issues and disputes efficiently
  • Service Improvement: Analysing aggregated usage patterns to improve the platform
  • Communication: Sending important notifications, service updates, and (with your consent) promotional information

bonus999 does not use player data to build marketing profiles sold to advertisers. Your data has never been a "product" we trade in.

4 Data Sharing & Disclosure

Bonus999 does not sell, rent, or commercialise your personal data to any third party. However, in certain circumstances, your data may be shared with the following parties on a strictly need-to-know basis:

4.1 Trusted Service Providers

Payment providers such as FPX, DuitNow, and card processors receive the transaction data needed to process your payments. Game providers receive your user ID and balance to manage game sessions. All these providers are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

4.2 Legal Requirements

We may be required to disclose certain data to government authorities or regulatory bodies when mandated by law, court order, or valid legal process. In such circumstances, we will notify you if permitted to do so.

Good to Know: bonus999 does not share player data with parent companies, subsidiaries, or affiliates for cross-marketing purposes without your explicit consent.

5 Security & Data Protection

Protecting your data is not just an added feature at bonus999 — it is the foundation of trust that defines our relationship with every player. We continuously invest in security infrastructure to keep your data safe at all times.

5.1 Technical Measures

  • 256-bit SSL/TLS encryption for all communications between your device and our servers
  • Sensitive data encryption at rest using AES-256
  • Strict network segregation between front-end, back-end, and database systems
  • Automated real-time data backup to multiple geographic locations
  • 24/7 security monitoring with intrusion detection system (IDS)
  • Penetration testing is conducted regularly by independent third parties

5.2 Access Controls

Internal access to user data at bonus999 is restricted to staff who require it to perform their duties only (least privilege principle). All access is logged and monitored, and any unusual access automatically triggers an alert.

While we take all reasonable precautions, no system can be guaranteed 100% secure. If you suspect any suspicious activity on your account, contact bonus999 support immediately.

6 Cookies & Tracking Technologies

The bonus999 platform uses cookies and similar technologies to enhance your experience, enable essential platform functions, and help us understand how users interact with our services.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core functions such as login sessions and security. Cannot be disabled.
  • Functional Cookies: Storing your preferences such as language and display settings.
  • Analytics Cookies: Collecting aggregated (non-personalised) usage data to help us improve the platform.

You can manage cookie preferences through your browser. However, disabling essential cookies may affect login functionality and platform security.

7 Your Privacy Rights as a User

Under Malaysia's PDPA and bonus999's commitment to user privacy, you have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Update or correct your personal data that is inaccurate or outdated.

Right to Erasure

Request deletion of your data subject to legal and contractual requirements.

Right to Object

Object to the processing of your data for specific purposes such as direct marketing.

Right to Data Portability

Receive your data in a structured format for transfer to another service.

Right to Restrict Processing

Request that we restrict how we process your data in certain situations.

To exercise any of the rights above, contact the bonus999 support team via live chat or email at [email protected]. We will process your request within 14 business days.

8 Data Retention & Deletion Period

Bonus999 does not retain data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

  • Active Account Data: For as long as your account remains active
  • Transaction History: 7 years after transaction (financial legal requirements)
  • KYC Records: 5 years after account closure (AML requirements)
  • Game Log: 2 years for dispute resolution purposes
  • Analytics Cookie Data: Maximum 13 months

When the retention period expires or you request deletion (and no legal hold applies), your data will be securely deleted or anonymised so it can no longer be linked to you.

9 Cross-Border Data Transfers

To deliver stable and fast services to Malaysian players, bonus999 uses cloud infrastructure distributed across multiple data centres in the Southeast Asia region. This means your data may be processed on servers located outside Malaysia.

Regardless of where data is processed, bonus999 ensures a level of protection equal to or exceeding the standards required by Malaysia's PDPA. All data transfers are safeguarded by strict confidentiality agreements and encryption in transit.

10 Children's Data Protection

The bonus999 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we find that a child's data has been collected unintentionally, we will delete it immediately and close the associated account. If you have reason to believe that a child has registered a bonus999 account, please contact us immediately.

11 Privacy Policy Amendments

Bonus999 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or added platform features.

When there are material amendments — meaning changes that significantly affect how we use or protect your data — we will notify you via in-platform notification or email at least 14 days before the changes take effect.

Continued use of the bonus999 platform after the effective date of any amendment constitutes acceptance of the revised Policy.

12 Contact Us Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

Live Chat
24/7 within the platform
Response time < 3 minutes
Privacy Email
[email protected]
Response within 3 business days
Help Centre
bonus999.pro/faq
Instant response

Commitment bonus999 Privacy in Practice

Privacy is more than words in a document. Here's how we put it into practice every day for Malaysian players.

End-to-End Encryption

Every bit of data travelling between your device and bonus999 servers is protected by 256-bit SSL encryption — the same standard used by leading financial institutions.

Regional Servers

Malaysia player data is stored on servers located in the Southeast Asia region to ensure low response times and compliance with local data policies.

Full Control in Your Hands

The privacy management portal within your account lets you review, amend, or request deletion of your data at any time without needing to contact support.

No Data Sales

Bonus999's policy is absolute — your personal data has never been and will never be sold, rented, or shared with advertisers or data brokers for any purpose.

Malaysia PDPA Compliance

Bonus999 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). Our compliance team reviews policies regularly to ensure they remain up to date.

Communication Control

You can control the types of communications you receive from bonus999 — from promotional notifications to system updates — directly through your account settings.

Your Data Is Secure. Keep Your Gaming Fun.

Now you know how bonus999 protects your privacy. Register a free account today and enjoy over 1,000 games with complete peace of mind.

256-bit SSL Encryption
No data sales
PDPA compliant
24/7 Support
Bahasa Melayu