1. Home
  2. Privacy Policy
Official Document · Updated 1 January 2026

Bonus99 Privacy Policy – Personal Data Protection for Malaysian Players You Can Trust

At Bonus99, your privacy is not merely a legal formality — it is a responsibility we take seriously every day. This Privacy Policy sets out in detail what data we collect, how it is used, who can access it, and your rights as a Bonus99 member over your own personal data.

Version: 1 January 2026 · Effective Immediately
Contents of This Policy
Data Collected
How We Use Your Data
Data Sharing
Data Security
Cookies & Tracking
Your Rights
Data Retention
Contact Us
SSL 256Security Encryption
0Sale of Data to Advertisers
500K+Your Privacy Is Protected
24/7Security Monitoring
Our Data Protection Commitment

Six Data Protection Principles We Uphold at Bonus99

Before reading the full policy, here is a summary of the core values that shape how Bonus99 manages each member's personal data.

Bank-Grade Encryption for All Data
Every bit of data transmitted between your device and Bonus99's servers is protected by 256-bit SSL encryption — the same standard used by Maybank, CIMB, and Malaysia's major banks. Your password is never stored in its original form — it is converted into a one-way hash that cannot be decrypted by anyone, including Bonus99's own technical team.
Your Data Is Never Sold to Anyone
Bonus99 has never and will never sell, rent, or trade members' personal information to any third party for marketing, commercial analytics, or any other purpose unrelated to the delivery of Bonus99 services. This is our absolute commitment to every Malaysian member who trusts us with their data.
Full Control in Your Hands
You have the right to access, correct, download, or request deletion of your personal data at any time. Requests can be submitted directly through the Account Settings menu or by contacting our privacy team. Bonus99 processes all data-related requests within 7 business days at no charge.
Payment Data Is Not Stored on Our Servers
Sensitive payment information such as Touch 'n Go eWallet details, DuitNow account numbers, GrabPay, Boost, ShopeePay, or FPX credentials is never stored on Bonus99 servers. All transactions are processed directly through licensed, encrypted, and regulated payment gateways — meaning your financial data never "sits" in our systems in any accessible form.
Full Transparency on Data Usage
We do not collect data we don't need, and we don't use the data we collect for any purpose not stated in this policy. Every category of data collected by Bonus99 has a clear and legitimate purpose — whether to enable gameplay, process transactions, verify identity, or improve the platform experience.
Prompt Notification in the Event of an Incident
While we take every reasonable precaution, should any data security incident occur that may affect members, Bonus99 is committed to notifying affected members within 72 hours of detection — in line with industry best practices. In seven years of operation, we have never encountered such an incident.
Contents
Privacy Enquiries?
support@bonus99.in
1. Scope and Purpose of This Privacy Policy

This Privacy Policy explains how Bonus99 collects, uses, stores, and protects your personal information when you use our online sports betting and casino platform at bonus99.in. By registering an account or using Bonus99's services, you agree to the terms of this Privacy Policy.

Bonus99 ("We", "Platform") is the data controller responsible for personal information collected through our platform. This Privacy Policy applies to all registered members, users browsing our website, and any individual who interacts with Bonus99 services — including customer support, promotions, and the VIP loyalty programme.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices in data management. Every data-related decision we make is guided by the principle of minimum necessity — we only collect what is genuinely needed to deliver the services you use.

If you have any questions about how Bonus99 manages your personal data, or if you wish to exercise your rights under this policy, please contact us at support@bonus99.in at any time.

2. Personal Data We Collect

Bonus99 collects several categories of personal data depending on how you use the platform. Below is a full breakdown of the data that may be collected and how it is sourced:

Data Category Example Information Source Required?
Identity Full name, national identification number, date of birth Registration / KYC Yes (KYC)
Contact Malaysian phone number, email address Registration Yes
Financial Deposit/withdrawal history, payment methods used Transactions Yes
Platform Activity Betting history, games played, login/logout activity Platform Usage Yes
Technical IP address, device type, browser, operating system Automatic Automatic
Communications Customer support conversation records, emails sent Support Interactions Where relevant
Preferences Preferred language, notification settings, self-imposed betting limits Account Settings Options

Bonus99 does not collect sensitive data such as medical information, political views, or religious beliefs. We also do not collect biometric data (fingerprints, facial recognition) as part of our standard processes. We do not knowingly collect data from individuals under 18 — if we discover such data has been collected inadvertently, it will be deleted promptly.

3. How We Use Your Data

Every category of data collected by Bonus99 has a specific and legitimate purpose. We do not use your data for anything unrelated to the delivery of Bonus99's services:

  • Account management: Creating, verifying, and maintaining your member account. Processing login requests and ensuring account security.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals to the same payment methods. Maintaining transaction records as required for accounting and compliance purposes.
  • Identity verification (KYC): Meeting legal obligations to verify member identities, particularly for withdrawals exceeding certain limits or when required by the relevant authorities.
  • Delivery of betting and gaming services: Processing sports bets and casino games, calculating odds, storing betting history, and displaying statistics within your account.
  • Bonus and promotion management: Processing bonus claims, calculating and crediting weekly cashback, tracking rollover progress, and verifying eligibility for specific promotions.
  • Customer support: Handling enquiries, complaints, and support requests. Support interaction records are retained to ensure service continuity and quality.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, duplicate account usage, and any other misuse of the platform.
  • Platform improvements: Analysing usage patterns in aggregate (not at the individual level) to improve the interface, platform speed, and overall user experience.
  • Service communications: Sending important notifications about your account, policy changes, promotional offers (if you have not opted out), and security information.

Bonus99 does not use any automated decision-making processes that produce legal or similarly significant effects on you without human involvement. All decisions relating to account closure, withdrawal rejections, or bonus suspension involve manual review by the relevant team.

4. Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), Bonus99 processes your personal data on the following legal bases:

  • Consent: For optional marketing communications and non-essential cookie use — you provide explicit consent and may withdraw it at any time.
  • Contract performance: To process financial transactions, manage accounts, and deliver the betting services you registered for. Without this processing, we are unable to provide Bonus99 services to you.
  • Legitimate interests: For security, fraud prevention, internal analytics, and platform improvement purposes — provided these interests do not override your fundamental rights and freedoms.
  • Legal compliance: To fulfil Malaysian legal obligations including KYC requirements, financial record retention, and cooperation with lawful authorities.
5. Sharing Data with Third Parties

Bonus99 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data sharing occurs only in a very limited set of circumstances, and always for a legitimate purpose.

The following outlines the circumstances under which Bonus99 may share your data with certain parties, and the reasons why such sharing is necessary:

  • Payment service providers: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX receive the transaction details required to process your deposits and withdrawals. They are bound by their own privacy policies and are not permitted to use your data for any other purpose.
  • Game providers: Microgaming, Evolution Gaming, Pragmatic Play, SA Gaming, and Playtech receive the session data required to ensure games function correctly. This data typically consists of session IDs and does not include your full identity.
  • Technical service providers: Companies providing server infrastructure, cybersecurity, and system monitoring services — all bound by strict confidentiality agreements.
  • Legal authorities: Bonus99 will disclose the required data to Malaysian authorities (such as the Royal Malaysia Police, Inland Revenue Board, or courts of law) when lawfully ordered to do so or where there is evidence of serious criminal activity.
  • Fraud investigators: Agencies or companies involved in investigating fraud or money laundering cases related to the Bonus99 platform.

In all cases of data sharing, Bonus99 ensures that recipient parties have adequate data protection measures in place and use the data solely for the stated purpose. We do not permit third parties to use your data for their own purposes.

6. Data Security Measures We Practise

Bonus99 invests seriously in security infrastructure to protect the personal data of all its members. Below is an overview of the technical and operational security measures we maintain:

SSL/TLS encryption for all communications256-bit AES
Password storage (bcrypt hash)Non-decryptable
Two-factor authentication (2FA) availableAvailable to all members
Real-time threat monitoring24/7 automated
Regular encrypted data backupsEvery 6 hours

Operationally, access to member personal data within Bonus99 is restricted to staff with a genuine business need, in accordance with the principle of least privilege. All access is logged and audited on a regular basis. New staff undergo background checks, and all teams complete annual data protection training.

While we take every reasonable precaution, no security system is 100% impenetrable. You can help protect your account by using a strong, unique password, enabling 2FA, and never sharing your login credentials with anyone.

7. Cookies and Tracking Technologies

Bonus99 uses cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better user experience. Cookies are small text files stored on your device when you visit the Bonus99 platform.

The types of cookies we use are as follows:

  • Essential cookies (cannot be disabled): These cookies are required for the platform's core functions — including login session management, CSRF security, and language preferences. Without them, the platform will not function properly.
  • Functional cookies (optional): Cookies that store your preferences such as odds display size, favourite betting board layout, and game display settings. These cookies make your experience more comfortable, though the platform functions without them.
  • Analytics cookies (optional): We use internal web analytics (not third-party services) to understand how members use the platform — which pages are visited most, where players encounter friction, and how we can improve the experience. All analytics data is aggregated and anonymised.
  • Security cookies: Used to detect suspicious login attempts, bot activity, and abnormal usage patterns in order to protect your account.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the Bonus99 platform. We do not use third-party cookies for advertising or cross-platform marketing purposes.

8. Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights over the personal data held by Bonus99. All requests can be submitted by email to support@bonus99.in and will be processed within 7 business days:

Right of Access
You have the right to request a copy of all personal data we hold about you, including your transaction history, betting records, and communication logs.
Right to Rectification
If any of your personal data is inaccurate or out of date, you have the right to request prompt correction. Your name and phone number can be updated directly in Account Settings.
Right to Erasure
You may request deletion of your personal data when it is no longer required, subject to our legal retention obligation of 5 years for financial records.
Right to Restriction
Under certain circumstances, you have the right to request that we restrict the processing of your data while a dispute is being resolved or an investigation is ongoing.
Right to Data Portability
You have the right to receive your data in a machine-readable format (CSV or JSON) for transfer to another platform, should you choose to do so.
Right to Object
You have the right to object to the processing of your data for marketing purposes at any time. You can opt out of promotional communications directly through your account settings.
9. Data Retention Period

Bonus99 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, including to meet legal obligations, resolve disputes, and enforce our agreements. The following are retention period guidelines by data type:

  • Account records and registration data: Retained for the duration of the active account, plus 5 years after account closure for Malaysian legal compliance purposes.
  • Financial transaction history: A minimum of 7 years, as required by Malaysian accounting and financial legislation.
  • Betting and game records: 5 years from the date of transaction.
  • Customer support communication records: 3 years from the date of last interaction.
  • Security logs and technical data: 1 to 2 years depending on requirements.
  • Cookie and analytics data: Between 30 days and 13 months, depending on the cookie type.

Once the mandatory retention period has expired and there is no continuing legal requirement, your data will be securely deleted using methods that ensure it cannot be recovered. You may request earlier deletion for data that is not subject to legal retention obligations.

10. Changes to This Privacy Policy

Bonus99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. We encourage you to review this page periodically.

When changes that significant to this Privacy Policy — particularly changes that affect how we use your personal data or your rights — Bonus99 will notify you via an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about your continued use of the Bonus99 platform.

For minor changes such as spelling corrections, added clarifications, or updated contact information, we may not send individual notifications, but the "Updated" date at the top of this document will be revised to reflect those changes.

11. Contact the Bonus99 Privacy Team

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, we encourage you to reach out to us directly. Our team is ready to assist you in both Bahasa Malaysia and English.

Privacy Enquiry Email
support@bonus99.in
Response time: within 24 hours
In-Platform Live Chat
Available after login
24 hours a day, 7 days a week

For formal data rights requests (access, correction, deletion), please send an email with the subject line "Personal Data Rights Request" along with your registered account number or phone number to help speed up the verification process. We will respond to and resolve your request within 7 working days.

This Privacy Policy is effective from 1 January 2026. Previous versions are no longer applicable.

Our Approach to Privacy

Why Data Privacy Is a Real Priority at Bonus99

Some platforms treat a privacy policy as a document that exists purely for legal compliance — written in language that is difficult to understand, buried in a small link at the bottom of the page, and rarely updated. At Bonus99, we take a completely different approach. We believe Malaysian players deserve to know exactly what happens to their data — explained in clear, straightforward language.

One thing we take pride in is limiting data collection to only what is genuinely necessary. We do not install tracking pixels from ad networks, collect behavioural data for sale to data brokers, or use third-party social media applications that track users across multiple websites. This "minimum necessity" approach means every Bonus99 player leaves a smaller digital footprint compared to using many other seemingly similar platforms.

Another aspect of privacy we manage with great care is internal communication. Members' personal data — including names, phone numbers, and financial information — is accessible only to staff who genuinely need it to perform their roles. A customer support agent handling bonus enquiries does not have access to your bank account details. An engineer working on the odds system cannot view members' personal identity records. This separation of duties and principle of minimum access is part of the privacy culture we have built since Bonus99 was founded.

For players who actively enjoy slots, live casino, baccarat, blackjack, Malaysia Super League football betting, or MPL Malaysia e-sports on Bonus99, one thing you may not be aware of is that your game activity records are stored in encrypted form on servers that are separate from your personal identity data. This means that even if, hypothetically, a party were to gain access to one set of data, they would still be unable to link it to your full identity without access to a second system that operates under an entirely different set of security controls.

Privacy Policy FAQs

Frequently Asked Questions About Bonus99 Privacy

Not at all. Bonus99 does not share, sell, or rent member personal data to any advertisers, marketing companies, or third-party data brokers. This is an absolute commitment on our part. The only data sharing that takes place is with service providers directly involved in delivering Bonus99's services — such as payment providers (Touch 'n Go eWallet, DuitNow, GrabPay, FPX, and others) and game providers — and all such parties are bound by strict confidentiality agreements and may only use your data for purposes related to the services they provide to Bonus99.

Yes, you may request deletion of your personal data by contacting support@bonus99.in. However, certain limitations apply under Malaysian law. Financial and transaction records must be retained for a minimum of 5 to 7 years in accordance with the Companies Act and financial reporting requirements. KYC records must also be kept for a specified period under anti-money laundering regulations. Data not subject to legal retention obligations — such as platform preferences, older support chat records, and analytics logs — can be deleted upon your request.

All financial transactions at Bonus99 — whether deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX — are processed over 256-bit SSL encrypted connections. Importantly, Bonus99 does not store your bank account numbers, credit card details, or eWallet login credentials on our servers. When you make a deposit, you are redirected to a secure payment gateway where the transaction is processed directly. Bonus99 only receives confirmation that a transaction was successful or failed — not your financial account details.

Bonus99 uses its own internal analytics system and does not rely on third-party analytics services such as Google Analytics or Meta Pixel, which can collect data across multiple websites. This means your behavioural data on the Bonus99 platform is not shared with major tech companies like Google or Meta. Our internal analytics measures things like most-visited pages and general usage patterns — all in aggregate form that cannot be used to identify any individual.

In the unforeseen event that Bonus99 needs to cease operations, member personal data will be handled in accordance with applicable Malaysian law. Members will be notified in advance and given the opportunity to withdraw their balances before any closure process begins. Financial records that must be retained by law will be transferred to the responsible entity. All other data not required by law will be securely deleted using industry-recognised data destruction procedures.

Bonus99 Platform-Related Documents

This Privacy Policy should be read together with the other documents that form the comprehensive protection framework for Bonus99 members. Our Terms & Conditions set out the rights and responsibilities involved in using the platform. The Responsible Gaming page provides guidance on playing safely and healthily. Our FAQ addresses the most common questions about accounts and services.

Terms & Conditions Responsible Gaming FAQs About Us support@bonus99.in
Join with Confidence

Your Data Is Safe at Bonus99 – Register and Enjoy a Secure Gaming Experience

With 256-bit SSL encryption, no sale of data to third parties, and full control in your hands — Bonus99 is the Malaysian betting platform that puts the safety and privacy of every member first. Minimum deposit RM 10 via Touch 'n Go eWallet or DuitNow.

SSL 256
Security Encryption
RM 1,500
Welcome Bonus
7+
Years of Secure Operation
Register a Free Account Log In
Bahasa Melayu