Bull99 Privacy Policy – Data Protection Malaysian Member Privacy

Bull99 is an online betting and casino entertainment platform operating in Malaysia, fully committed to protecting the privacy of all its users. This Privacy Policy outlines how Bull99 collects, uses, stores, and safeguards personal data in the course of operating its platform.

This Privacy Policy applies to all individuals who register an account, browse the website, use the mobile app, or interact with any service provided by Bull99. This includes registered members, unregistered visitors, and anyone who contacts the Bull99 support team.

By continuing to use the Bull99 platform after this Privacy Policy or any amendments to it are published, you are deemed to have agreed to the updated terms. The "Last updated" date at the top of this document will always reflect the latest version in effect.

Bull99 collects various types of personal information from its members to support secure platform operations, meet legal obligations, and deliver the best possible user experience. The information collected can be grouped into several main categories:

Data marked "Required" is necessary for account registration and basic operations. "Automatic" data is collected automatically as you use the platform. "Conditional" data is only requested in specific situations, such as KYC verification prior to large withdrawals or when Bull99 is required to comply with certain legal obligations.

Bull99 collects your personal information through several different channels, depending on how you interact with our platform. The following are the data collection methods used by Bull99:

• Account registration form: When you register a new Bull99 account, you provide basic details such as your name, Malaysian phone number, and password directly.
• KYC verification process: When identity verification is required, you submit documents such as your MyKad and a selfie through Bull99's secure verification portal.
• Financial transactions: Every time you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks, the relevant transaction details are recorded automatically.
• In-platform activity: Bull99's system automatically records betting activity, games accessed, login and logout times, and your interactions with the platform interface.
• Support communications: When you reach out to the Bull99 support team via live chat or email, the content of those communications is stored for reference and service improvement purposes.
• Cookie and tracking technologies: Bull99 uses cookies and similar web tracking technologies to automatically collect technical and behavioural usage data as you browse the platform.

Bull99 uses the personal data collected for legitimate and defined purposes. We do not use your data for anything unrelated to platform operations without first obtaining your consent. The primary purposes for which Bull99 uses your data are as follows:

• Account management: To create, verify, and manage your Bull99 member account, including processing logins, updating your profile, and managing your password.
• Financial transaction processing: To securely process your deposits and withdrawals through your preferred Malaysian local payment methods, including transaction verification and financial fraud prevention.
• KYC/AML legal compliance: To meet Malaysian legal requirements relating to customer identity verification (Know Your Customer) and anti-money laundering (Anti-Money Laundering).
• Platform security: To detect and prevent fraudulent activity, unauthorised access, bonus abuse, and cybersecurity threats that could affect other members.
• Service improvement: To analyse platform usage patterns on an aggregated and anonymised basis for the purpose of improving Bull99's products, user interface, and overall platform experience.
• Service communications: To send you important notices relating to your account, updates to terms and conditions, security alerts, and other relevant service information.
• Responsible gambling: To monitor usage patterns that may indicate signs of problem gambling and to enforce the limits you set yourself through Bull99's responsible gaming tools.

Bull99 understands that your data privacy is of the utmost importance. We do not sell, rent or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where Bull99 needs to share certain information with other parties for legitimate platform operational purposes:

• Technology service provider: Game software providers such as Pragmatic Play, Evolution Gaming and Habanero may receive limited technical data necessary to deliver gaming services to you. All such providers are bound by strict data protection agreements with Bull99.
• Local payment processors: When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay or FPX, the required transaction information is shared with the relevant payment processor to allow the transaction to be completed securely.
• Statutory authorities: Bull99 may disclose information when required to do so by Malaysian law, court order, or a lawful request from a law enforcement agency such as PDRM or Bank Negara Malaysia in the context of a legitimate investigation.
• Identity verification services: Third-party KYC service providers engaged by Bull99 to process member identity verification are bound by strict confidentiality agreements and may only use the data for verification purposes.

The security of member personal data is Bull99's highest priority. This platform continually invests in industry-grade digital security infrastructure to ensure your information is always protected against cyber threats and unauthorized access.

Key security measures implemented by Bull99 include:

• 256-bit SSL encryption: All communications between your device and Bull99's servers are encrypted using 256-bit SSL/TLS — the same standard adopted by major Malaysian banking institutions such as Maybank and CIMB.
• Two-factor authentication (2FA): Bull99 supports and encourages all member accounts to enable two-factor authentication, adding an extra layer of protection to the login process.
• Real-time transaction monitoring: Bull99's automated fraud detection system monitors all transaction activity around the clock to identify suspicious patterns and issue early alerts to our security team.
• Fund segregation: Member funds are held separately from Bull99's operational company accounts — meaning your money is never used for business operations and can always be returned to you.
• Encrypted password storage: Your Bull99 account password is never stored in plain text — it is processed using a strong one-way hashing function, meaning even Bull99 staff cannot view your password.
• Regular security reviews: Bull99 conducts regular penetration testing and security audits by independent third parties to identify and address system vulnerabilities before they can be exploited.

Bull99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Bull99's data retention policy is as follows:

• Active account data: For as long as your account remains active, Bull99 will retain all profile data and transaction history required for the operation of your account.
• Closed account data: Upon account closure, whether at your request or by Bull99, core account data and transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements governing financial record-keeping and AML/KYC compliance.
• Support communication logs: Live chat and email communication records with the Bull99 support team are retained for 3 years from the date of communication for reference and dispute resolution purposes.
• Technical data and server logs: Technical access logs, IP addresses and session data are retained for a maximum of 12 months for security analysis and threat detection purposes.

Bull99 uses cookies and similar web tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse Bull99. They allow our system to recognise you, remember your preferences, and deliver more relevant content.

Types of cookies used by Bull99:

• Essential cookies: Required for core Bull99 platform functions such as maintaining login sessions and ensuring security. These cookies cannot be disabled as they are essential to platform operation.
• Performance cookies: Used to collect anonymous usage statistics, such as the most frequently visited pages and time spent in each section of the Bull99 platform. This information is used to improve the overall user experience.
• Functional cookies: Allows the Bull99 platform to remember your preferences, such as your chosen language, display settings, and login details, for a more convenient experience on future visits.
• Session cookies: Temporary cookies that are automatically deleted when you close your browser. Used to maintain your gaming and betting session throughout a single active session on Bull99.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the Bull99 platform and cause certain features to not work properly.

As a Bull99 member whose personal data is processed by our platform, you have certain rights under Malaysia's Personal Data Protection Act 2010 (PDPA). Bull99 is committed to respecting and facilitating the exercise of all these rights. Your key rights are as follows:

If you have any questions, concerns, or complaints regarding how Bull99 handles your personal data, we welcome you to reach out. Bull99's privacy team is ready to address every data-related issue promptly and professionally.

You may contact Bull99 regarding privacy matters through the following channels:

• Email: Send your privacy enquiries to support@bull99.click with the subject line "Privacy Inquiry – [Your Username]". We aim to respond within 3 business days.
• Live Chat: For urgent privacy matters, contact the Bull99 support team via 24/7 live chat available on the platform. Responses are typically provided in under 5 minutes.
• Written request: For formal requests relating to data rights (access, rectification, deletion), please submit a written application via email along with appropriate proof of identity for verification.