Your privacy is our priority. This policy clearly outlines what data we collect, how it is used, how we protect it, and your rights as a Bonus99 member under Malaysia's data protection laws.
For inquiries relating to your data privacy:
Response within 2 business days.
Bonus99 understands that your trust depends not only on game quality and payout speed, but also on how we handle the personal information you entrust to us. This Privacy Policy is written in plain, straightforward English — free from confusing legal jargon — so every Bonus99 member in Malaysia knows exactly how their data is managed.
This Policy applies to all information collected through the Bonus99 website, the Bonus99 mobile app and any interactions you have with our customer support team. Bonus99 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of member personal data management.
By registering an account and using the Bonus99 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please contact us before continuing to use the platform.
This Privacy Policy is issued by Bonus99 ("we", "platform", "Bonus99") and applies to all users who register an account, use our services, or interact with the Bonus99 platform through the website bonus99.express or our official mobile application. "You" or "user" refers to any individual using the Bonus99 platform.
This policy explains:
Bonus99 is the data controller for personal information collected through our platform. This means we determine the purpose and manner in which your personal data is processed, and we are fully responsible for ensuring that such processing complies with applicable laws in Malaysia.
Bonus99 only collects data that is strictly necessary to provide our online casino platform services, ensure the security of financial transactions and meet relevant legal requirements. The following are the categories of data we collect:
a) Account Registration Information
b) Identity Verification Information
c) Financial & Transaction Information
d) Technical & Usage Data
Examples of the types of data we collect:
Bonus99 uses your personal data solely for the following purposes. We do not use your data for any other purpose without first obtaining your additional consent:
Account Management & Services
Security & Fraud Prevention
Platform Improvement & Personalisation
Marketing Communications (With Consent)
The security of your personal data is a responsibility we take seriously. Bonus99 continuously invests in security infrastructure on par with financial institution standards to ensure your data is always protected against unauthorized access, disclosure, or loss.
Technical Security Measures
Organisational Security Measures
Bonus99 does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. This is a commitment we uphold without compromise, under any circumstances.
There are, however, situations where Bonus99 needs to share certain data with selected third parties. In all such cases, those third parties are bound by strict data protection agreements and are only permitted to use the shared data for the specified purposes:
a) Payment Service Providers
To process your deposits and withdrawals, Bonus99 is required to share the necessary transaction details with licensed payment gateways and eWallet providers in Malaysia. This includes information needed to verify your identity during transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX. All of these payment providers comply with PCI DSS security standards and Malaysian financial regulations.
b) Game Providers
Third-party game providers such as Microgaming, Evolution Gaming, Pragmatic Play, and others that supply games within the Bonus99 platform may receive minimal technical data (such as a session ID) required for the games to function properly. They do not receive your full personal information.
c) Authorities & Regulatory Bodies
Bonus99 will disclose the necessary personal data to Malaysian authorities such as the police, courts, or financial regulatory bodies when required to do so by law, court order, or directive from a legitimate authority. In such situations, Bonus99 will endeavour to notify you in advance where permitted by law.
d) Technical Service Providers
Technical infrastructure service providers, such as cloud services and security monitoring, may process your data as part of platform operations. They act as data processors under Bonus99's instructions and are bound by strict data protection contracts.
Bonus99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences, maintain your login session, and understand how you use our platform.
The types of cookies Bonus99 uses are:
You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the Bonus99 platform and your gaming experience. For instructions on managing cookies in your web browser or mobile device, please refer to the relevant browser's help documentation.
Bonus99 retains your personal data for as long as your account remains active, and for the required period following account closure to fulfil legitimate legal and operational obligations. Our data retention policy is as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | For the duration of the active account | Service operational requirements |
| Financial transaction records | 7 years after transaction | Malaysia tax and AML legal requirements |
| Identity verification documents | 5 years after account closure | KYC and AML compliance requirements |
| Support communication logs | 3 years after last interaction | Dispute resolution and quality assurance |
| Cookie & Session Data | 30 days to 1 year | Depends on cookie type |
| Closed account data (basic) | 2 years after account closure | Prevention of unauthorised re-registration |
Once the retention period has expired and there is no legal or operational requirement to retain the data further, Bonus99 will securely delete or anonymise the relevant data using methods approved by international data security standards.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data Bonus99 holds about you. You may exercise these rights at any time by contacting our privacy team at support@bonus99.express:
You have the right to request a copy of the personal data Bonus99 holds about you. We will provide this information within 21 days of receiving your request.
If the personal data Bonus99 holds about you is inaccurate or out of date, you have the right to request a correction. We will update your data within 14 days.
You may request Bonus99 to delete your personal data. Such requests will be processed unless retention is required by law or legitimate operational necessity.
You may object to the use of your data for direct marketing purposes at any time. Such objections will take effect immediately upon receipt.
You have the right to receive your personal data in a machine-readable format (JSON or CSV) for your own use or to transfer it to another platform.
In certain circumstances, you may request Bonus99 to temporarily restrict the processing of your data — for example, while we are handling a correction request or objection from you.
To exercise any of the rights above, submit a written request to support@bonus99.express stating the type of right you wish to exercise along with sufficient information for us to verify your identity. We will acknowledge receipt of your request within 3 business days and resolve it within the timeframe prescribed by law.
Bonus99 strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect, store, or process any personal data from individuals below this age limit.
All new Bonus99 members are required to confirm that they are at least 21 years of age upon registration. Bonus99 reserves the right to request age verification via identity documents at any time, particularly where there is reason to believe that an account holder may not meet the minimum age requirement.
If Bonus99 discovers or is made aware that personal data belonging to an individual under the age of 21 has been collected without our knowledge, we will immediately take the following steps:
If you believe that a child or individual under the age of 21 may have registered a Bonus99 account, please contact us immediately at support@bonus99.express so we can take prompt action.
Bonus99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, new legal requirements or evolving industry best practices. The latest version of the Privacy Policy will always be available on this page, with the update date clearly stated.
For material amendments — those that substantially affect your rights or change how we use your data — Bonus99 will provide reasonable notice to active members via:
Your continued use of the Bonus99 platform after an amended Privacy Policy is published will be considered your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data by contacting support@bonus99.express.
We recommend reviewing this page at least once every three months to stay informed about how Bonus99 manages your personal data.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way Bonus99 handles your personal data, please reach out to our privacy team through the following channels:
The Bonus99 privacy team will endeavour to respond to all enquiries within 2 business days. For formal data rights requests, we will acknowledge receipt within 3 business days and resolve them within the timeframe required by law.
If you are not satisfied with our response to your privacy inquiry or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (Ministry of Communications and Digital), which is the regulatory authority under the PDPA 2010.
Six layers of protection we provide for every member in Malaysia
Playing at an online casino involves a higher level of trust than most other online platforms. You are sharing not just your name and phone number, but also sensitive financial information — your Touch 'n Go eWallet number, GrabPay account, DuitNow details, or the bank account you use for FPX. This makes your choice of platform critically important from a data security standpoint.
Bonus99 understands the weight of that trust. That is why we never request financial information beyond what is needed to process your transactions. We do not store your full debit or credit card number. We do not store your eWallet password. What we do retain are the transaction records required to keep your account functioning properly and to comply with applicable legal requirements.
One aspect of privacy that online casino users often overlook is their gaming history. At Bonus99, your gaming history — from the slots you play to the Sports Betting wagers you place on Malaysia Super League football or BWF badminton — is highly personal information. We retain it for dispute resolution, winnings verification and technical support purposes, but we do not use it for unrelated profiling or sell it to third parties.
Bonus99 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). All member personal data is protected with 256-bit SSL encryption and is never shared with third parties for marketing purposes. You have the full right to access, correct, delete, or port your personal data. Contact us at support@bonus99.express for any privacy-related enquiries.
Casino games at Bonus99 are for entertainment purposes. Never wager more than you can afford to lose. Use the deposit limit, loss limit, and self-exclusion features available in your account to stay in control. If you or someone you know needs help with a gambling problem, the national helpline is available 24 hours a day, free of charge.
For users aged 21 and above only. Malaysia problem gambling helpline (free, 24 hours): 1-800-888-228