Bull99 Privacy Policy

1Introduction and Scope

This Bull99 Privacy Policy applies to personal information processed through the website, mobile interface, player account, casino lobby, live dealer products, sports betting services, promotions, payment functions, and support communications. It covers visitors, registered players, former players, and persons who contact Bull99 about its services.

By using Bull99, you acknowledge the processing described in this policy. Where consent is required for a particular activity, Bull99 will request it separately. If you provide information about another person, you confirm that you are authorised to do so and that the person has been informed about the relevant processing.

2Definitions

In this policy, the following expressions have the meanings set out below:

• “Personal information” means information that identifies or can reasonably be linked to an individual.
• “Processing” includes collecting, recording, organising, using, storing, sharing, restricting, or deleting information.
• “Account data” means registration details, settings, credentials, verification status, and account history associated with a Bull99 player.
• “Transaction data” means deposits, withdrawals, wagers, winnings, payment methods, currency, and related verification records.
• “Service provider” means an organisation that supports Bull99 with hosting, security, payments, games, communications, analytics, or professional services.

3Information Bull99 Collects

Bull99 may collect the following categories of personal information:

• Identity details: legal name, date of birth, nationality, MyKad or passport information, photograph, and verification results.
• Contact details: residential address, email address, mobile number, and communication preferences.
• Account information: username, encrypted credentials, security settings, account status, limits, and support records.
• Payment information: bank or e-wallet ownership details, DuitNow or FPX references, cryptocurrency wallet information, deposit and withdrawal history, and source-of-funds evidence where required.
• Gaming information: casino activity, live dealer participation, bonus use, EPL or Liga Super Malaysia wagers, odds, stakes, results, and responsible gambling indicators.
• Technical information: IP address, browser, device type, operating system, session identifiers, language, approximate location, and security logs.

4How Information Is Collected

Bull99 receives information directly when a player registers, completes KYC, changes account details, deposits, withdraws, claims a promotion, places a wager, sets a limit, or contacts support. Information is also generated automatically through service use, including login records, device details, cookie identifiers, transaction logs, and gaming history.

Bull99 may receive information from authorised payment providers, identity-verification services, fraud-prevention tools, game suppliers, sports data services, and public or regulatory sources. For example, a transaction through Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, or FPX may produce a payment reference and account ownership confirmation.

5Purposes of Data Processing

Bull99 processes personal information for legitimate and defined purposes, including:

• Creating, authenticating, administering, and securing a Bull99 account;
• Confirming age and identity, including enforcement of the strict 21+ requirement;
• Processing MYR deposits, withdrawals, refunds, bonuses, and account adjustments;
• Providing slots, live dealer games, instant games, sports markets, and customer support;
• Detecting multiple accounts, payment abuse, unauthorised access, fraud, money laundering, collusion, and technical exploitation;
• Applying responsible gambling controls, deposit limits, cooling-off periods, and self-exclusion;
• Improving performance, device compatibility, payment reliability, and player experience;
• Maintaining records and responding to legal, compliance, audit, or dispute requirements.

6Legal and Operational Basis

Depending on the activity, Bull99 processes information because it is necessary to provide requested services, comply with legal or regulatory obligations, protect legitimate business and security interests, establish or defend claims, or act with the player’s consent. The relevant basis may differ by jurisdiction and category of information.

Where processing is based on consent, a player may withdraw that consent for future activity. Withdrawal does not affect processing already completed. Some account services may become unavailable if Bull99 cannot process information necessary for identity verification, payment security, fraud prevention, or contractual performance.

7KYC and Financial Information

Bull99 may request a MyKad, passport, proof of address, selfie, bank statement, e-wallet record, payment receipt, occupation details, or source-of-funds information. These records support age checks, payment ownership confirmation, security reviews, and the prevention of financial crime.

Payment information is used to reconcile transactions, return funds through an appropriate verified method, address failed transfers, and investigate chargebacks or unauthorised activity. Bull99 does not require players to disclose online banking passwords, e-wallet PINs, or one-time security codes to customer support.

8Cookies and Similar Technologies

Bull99 may use essential cookies and similar local technologies to maintain sessions, remember security preferences, route website traffic, detect suspicious logins, and support core account functions. Performance technologies may help Bull99 understand loading times, navigation patterns, device errors, and feature usage.

Browser controls can remove or restrict cookies, but disabling essential storage may prevent login, payment, game, or security functions from working correctly. Bull99 does not use cookies as a reason to sell personal information. Cookie identifiers are retained only for an appropriate operational, analytical, or security period.

9Information Sharing

Bull99 may disclose limited personal information to service providers that support hosting, cybersecurity, identity verification, payments, game delivery, communications, analytics, professional advice, or account administration. Each provider receives only the information reasonably required for its role and is expected to apply suitable confidentiality and security controls.

Information may also be disclosed where required to comply with lawful requests, prevent harm, investigate fraud, enforce the Terms & Conditions, protect Bull99 or player rights, or complete a business restructuring. Bull99 does not permit service providers to use player information for unrelated independent marketing unless the player has separately agreed.

10International Data Processing

Some technology, game, security, payment, or support providers may process information outside Malaysia. Data protection standards can vary between locations. Where information is transferred internationally, Bull99 takes reasonable steps to use appropriate contractual, technical, and organisational safeguards.

International processing is limited to what is necessary for service delivery, platform protection, compliance, or support. Bull99 evaluates the sensitivity of the information, the purpose of transfer, provider controls, and available legal protections when selecting relevant safeguards.

11Data Security

Bull99 uses layered safeguards designed to protect personal information. Measures may include encryption in transit, access controls, account authentication, security monitoring, network protection, staff confidentiality requirements, restricted administrative permissions, and incident-response procedures.

No internet service can guarantee absolute security. Players also have an important role: use a unique password, protect verification codes, secure personal devices, avoid shared networks when managing payments, and report suspected unauthorised access promptly. Bull99 support will never ask for a banking password or e-wallet PIN.

12Data Retention

Bull99 retains personal information only for as long as reasonably required for account administration, transaction reconciliation, responsible gambling controls, fraud prevention, dispute handling, security, taxation, audit, or other applicable obligations. Different categories of information may have different retention periods.

Closing a Bull99 account does not always permit immediate deletion. Identity, financial, security, self-exclusion, and transaction records may need to remain restricted and securely stored for an appropriate period. When retention is no longer necessary, information is deleted, anonymised, or placed beyond ordinary operational use.

13Player Privacy Rights

Subject to applicable law, verification, and legitimate exceptions, a player may request to:

• Receive confirmation of whether Bull99 processes their personal information;
• Access eligible personal information and obtain information about its use;
• Correct incomplete, outdated, or inaccurate account information;
• Object to or restrict certain forms of processing;
• Withdraw consent where consent is the relevant basis;
• Request deletion of information that Bull99 is no longer required to retain;
• Receive eligible information in a portable format where applicable.

Bull99 may request identity verification before responding to protect the account from unauthorised disclosure. A request may be limited or refused where information must be retained for security, legal compliance, responsible gambling, dispute resolution, or the rights of another person.

14Marketing and Communications

Bull99 may send essential communications about account security, KYC, payment status, withdrawals, service interruptions, policy changes, or responsible gambling controls. These messages are operational and may be necessary even when a player does not wish to receive promotions.

Promotional communications are managed separately and may depend on consent or applicable preferences. Players can request that optional marketing stop. Bull99 may retain a suppression record so that a marketing opt-out continues to be respected.

15Automated Risk Checks

Bull99 may use automated tools to identify unusual logins, duplicate accounts, payment anomalies, bonus abuse, collusion, or signs of gambling harm. These tools assess patterns and risk indicators but may not independently determine every outcome.

Where an automated alert materially affects account access or a transaction, Bull99 may conduct a manual review and request further information. Players may contact support to ask for clarification about an account decision, subject to security restrictions and the need to protect fraud-detection methods.

16Age Protection

Bull99 is intended only for players aged 21 and above. Personal information may be processed to verify age and prevent underage access. If Bull99 reasonably believes that an account belongs to a person under 21, access may be suspended while verification takes place.

Parents and guardians should use suitable device controls and avoid leaving payment details or account credentials accessible. Suspected underage activity should be reported promptly to Bull99 support so that protective action can be taken.

17Policy Updates and Contact Us

Bull99 may update this Privacy Policy when services, technology, payment options, security practices, or legal requirements change. The revised version will show an updated effective date. Material changes may also be communicated through an account notice or another suitable channel.

Questions, correction requests, privacy concerns, or requests to exercise applicable rights can be directed to the Bull99 privacy team at [email protected]. This email address is displayed as plain text and is not a clickable link. Please do not send passwords, banking credentials, e-wallet PINs, or one-time security codes.