🔒 PRIVACY POLICY

BP99 Privacy Policy – Personal Data Protection for Malaysian Users

Your privacy is a trust we take seriously. This document clearly explains how bp99 collect, use, store, and protect your personal information as a user of our platform.

Last Updated: 1 July 2026
Important Note: This Privacy Policy describes the privacy practices of bp99 and how we process your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the bp99 platform, you agree to this policy.

1Introduction & Scope of This Policy

BP99 ("we", "our platform") respects the privacy of every user and is committed to protecting the personal information you share with us. This Privacy Policy applies to all users who access bp99.run, register an account, or use any of the services we offer.

We understand that your trust is the foundation of our relationship. The information you provide to bp99 — from your full name to your transaction history — will always be handled responsibly, transparently, and in accordance with applicable laws in Malaysia.

This policy is written in Bahasa Melayu to facilitate understanding for Malaysian users. In the event of any conflict between another language version (if available) and this Bahasa Melayu version, the Bahasa Melayu version shall prevail for Malaysian users.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy bp99. All these documents together form your agreement with us.

2Types of Personal Information We Collect

To provide you with a secure, personalised, and high-quality service, bp99 may collect various types of personal information. We only collect what is strictly necessary for the stated purposes.

Data Category Example Information Requirement
Personal Identity Full name, date of birth, MyKad number Mandatory (KYC)
Contact Information Malaysian phone number, email address Mandatory
Financial Data Bank account number, e-wallet holder name (TNG, GrabPay, DuitNow) Mandatory (deposits/withdrawals)
Verification Data MyKad photo, selfie, proof of address Required for withdrawals > RM 10,000
Technical Data IP address, browser type, device, OS Automatic
Usage Data Game history, deposit/withdrawal records, preferences Automatic
Communication Data Live chat records, support emails Retained for reference
We never store: full credit/debit card numbers, your e-wallet PIN, or your bp99 account password in readable form. All sensitive data is encrypted to industry standards.

3How We Collect Your Information

BP99 collects your information through three main methods:

📝
Directly

Information you provide during registration, profile updates, or when contacting bp99 customer support.

🤖
Automatically

Technical and usage data collected through cookies, server logs, and tracking technologies when you browse the bp99 platform.

🏦
Third Parties

Verification data from licensed KYC providers, or basic information from payment providers such as FPX, Maybank2u, and CIMB Clicks to authenticate transactions.

Automatically collected technical data is necessary to keep your account secure. For example, if a login from an unfamiliar device or location is detected, the system bp99 will prompt additional verification to protect your account from unauthorised access.

4How We Use Your Information

BP99 uses the information collected for lawful and limited purposes. We never use your data for purposes not stated in this policy without obtaining your consent first.

Account management: Account registration, identity verification (KYC), and account maintenance.
Transaction processing: Processes deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, and withdrawals to your bank account or e-wallet.
Security and fraud prevention: Detecting and preventing suspicious activity, money laundering, or identity fraud.
Customer support: Resolving complaints, answering enquiries, and providing technical support.
Experience personalisation: Offering relevant game recommendations based on your preferences (e.g. slots, Live Casino, EPL Sports Betting).
Marketing communications: Sending information about bonuses, promotions, and platform updates — only if you have consented to receive them.
Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling and offer appropriate support.
Legal compliance: Fulfilling legal obligations and regulatory requirements applicable in Malaysia.
Opt out of marketing communications: You may opt out of bp99 marketing emails or notifications at any time by clicking the "Unsubscribe" link at the bottom of any promotional email, or by contacting our customer support team.

5Information Sharing & Disclosure

BP99 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. This is our absolute promise to every member.

However, there are limited situations where we may need to share your information with certain parties:

Recipient Parties Purpose of Sharing Legal Basis
Payment providers (FPX, TNG, GrabPay, DuitNow) Processing deposits and withdrawals Contract performance
Licensed KYC Providers Identity and age verification Legal obligations
Game providers (Pragmatic Play, Evolution, etc.) Secure game delivery Contract performance
Malaysian authorities (PDRM, SPRM, etc.) Legal compliance, fraud investigation Legal obligations
Certified cloud services Secure data storage Bp99's legitimate interests

All third parties who receive your data are bound by strict confidentiality agreements and are required to protect your information to the same or higher standards as bp99 itself.

6Security & Data Protection

Protecting your personal information is more than a legal obligation — it is a moral responsibility we take very seriously. BP99 continuously invests in security infrastructure to ensure your data remains protected at all times.

256-bit SSL Encryption

All communications between your browser and bp99's servers are encrypted using 256-bit SSL — the same standard used by leading banks in Malaysia.

Hashed Passwords

Passwords are stored as bcrypt hashes that cannot be decrypted. Even bp99 employees are unable to view your password.

Two-Factor Authentication (2FA)

2FA via SMS OTP is available and strongly recommended for all bp99 members to prevent unauthorised access.

24/7 Monitoring

An anomaly detection system operates around the clock to identify and respond to any security threats.

While we take all reasonable precautions, no security system is 100% foolproof. In the unlikely event of a data breach that may affect your rights, bp99 will notify you within the timeframe required under Malaysia's PDPA and take immediate action to contain and remediate the situation.

7Cookies and Tracking Technologies

Platform bp99 uses cookies and similar tracking technologies to enhance your experience, maintain the security of your login session, and help us understand how users interact with our platform.

Essential Cookies: Required for core platform functions such as login sessions, bet slip management, and language settings. These cookies cannot be disabled.
Performance Cookies: Collects anonymous usage statistics to help us improve the performance and navigation of the bp99 platform.
Functional Cookies: Remembering your preferences such as language, default betting limits, and your favourite games.
Security Cookies: Helps detect unusual activity and protect your account from unauthorised access.
You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the bp99 platform. For more information on managing cookies, refer to your web browser's help section.

8Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy policy of bp99, you have certain rights regarding the personal data we hold about you:

👁️
Right of Access

Request a copy of all personal data we hold about you.

✏️
Right to Rectification

Request the correction of inaccurate or outdated personal data.

🗑️
Right to Erasure

Requesting data deletion under certain circumstances ("right to be forgotten").

⛔
Right to Object

Objecting to the processing of your data for direct marketing purposes.

📦
Right to Portability

Receive your data in a machine-readable format for transfer to another provider.

🔕
Right to Withdraw Consent

Withdraw consent for data processing that relies on consent.

To exercise any of the rights above, please contact the bp99 privacy team by email at privacy@bp99.run or via live chat. We will respond within 30 days of receiving your request. Please note that some requests may be subject to record-keeping obligations required under Malaysian law.

9Data Retention and Deletion Period

BP99 does not retain your personal data longer than necessary for the stated purposes or as required under Malaysian law.

Active account data: Retained for the duration your account remains active and for 7 years after account closure for financial record-keeping and legal compliance purposes.
Transaction records: Retained for a minimum of 7 years as required under Malaysian financial laws.
Customer support communication records: Retained for 2 years from the date of last communication.
Server log data: Retained for 90 days for security and debugging purposes.
Marketing data: Deleted within 30 days of you withdrawing your marketing consent.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, secure destruction methods will be applied.

10Cross-Border Data Transfers

To deliver a reliable platform experience, bp99 may store or process some of your data on servers located outside Malaysia, including data centres in Asia Pacific and Europe.

Whenever your data is transferred across borders, we ensure that:

The recipient country maintains equivalent or stricter data protection standards
Legally binding data transfer agreements have been signed
Data recipients are held to the same security requirements as bp99
Transfers comply with the requirements of Malaysia's PDPA

11Children's Privacy

Platform bp99 is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we determine that a child's personal data has been collected inadvertently, we will delete that data immediately and close the associated account. Parents or guardians who discover that their child has registered on bp99 are urged to contact us immediately at support@bp99.run.

12Amendments to This Privacy Policy

BP99 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or updates to the services we offer. We are committed to:

Displaying the latest update date at the top of this page
Notifying you via email or in-app notification of any material amendments
Providing reasonable notice before changes take effect

Continued use of the platform bp99 after the changes take effect will be considered acceptance of the amended Privacy Policy.

13Contact Our Data Protection Officer

If you have any questions, concerns, or wish to exercise your privacy rights regarding the data we hold, please contact the bp99 Data Protection Officer (DPO):

Privacy Email

Privacy@bp99.run
Response within 3 business days

Live Chat

Available 24/7
Bahasa Melayu & English

Formal Complaints

Support@bp99.run
For cases requiring escalation

You also have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated and bp99 has failed to address your concerns to your satisfaction.

bp99's Privacy Commitment

Your Data, Our Responsibility

🔒
Bank-Grade Encryption

All your data is protected with 256-bit SSL encryption — the same security technology used by Maybank2u and CIMB Clicks to safeguard financial transactions.

🇲🇾
Malaysia PDPA Compliant

All of bp99's data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the country's primary privacy legislation protecting user rights.

🚫
No Data Sales

BP99 has never and will never sell, rent, or trade your personal information to advertisers, marketing agencies, or any third party for profit.

⚙️
Control in Your Hands

You can access, correct, or request deletion of your data at any time. Full control remains in your hands — not ours.

🔍
Regular Security Audits

The bp99 platform undergoes independent annual security audits by qualified third parties to ensure our data protection standards remain current.

📞
Dedicated DPO

BP99 has a dedicated Data Protection Officer (DPO) to ensure all privacy matters are handled promptly, professionally, and in accordance with the law.

PRIVACY ASSURED, PLAY WITH CONFIDENCE

Your Data is Safe at BP99 – Register and Play with Peace of Mind

We take your privacy seriously. Register now and enjoy slots, Live Casino, EPL sports betting, and the Malaysia Super League with the peace of mind that your data is always protected.

🔒 256-bit SSL Encryption 🇲🇾 Malaysia PDPA Compliant 🚫 No Data Sales
Bahasa Melayu