Official Documents

Privacy Policy BP99A — Data Protection Malaysian Players

Bp99a is fully committed to protecting the privacy and personal data of every player. This document outlines the types of data we collect, how it is used, and your rights as a player on our platform.

Updated: 1 January 2026 PDPA 2010 Compliance Bahasa Melayu

🔒

Bp99a's Privacy Commitment

This Privacy Policy describes bp99a's information handling practices and applies to all players using our platform, website, and mobile apps. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. By using bp99a's services, you agree to the collection and use of information in accordance with this policy.

01Personal Information We Collect

Bp99a collects personal information solely as needed to provide services that are safe, efficient, and compliant with legal requirements. We do not collect data beyond what is necessary for those purposes. The types of information we collect are as follows:

Data Category Data Examples Primary Purpose
Identity Information Full name, date of birth, MyKad/passport number Identity verification (KYC), fraud prevention
Contact Information Email address, phone number Account communications, transaction notifications
Financial Information Bank account number, eWallet (TNG, GrabPay, Boost) Deposit and withdrawal processing
Technical Data IP address, device type, web browser, OS Security, fraud detection, analytics
Usage Data Game history, transaction records, activity logs Responsible gaming, customer support

All information collected is obtained directly from you during the registration process, KYC verification, or through your interactions with our platform. bp99a does not purchase or acquire personal data from third-party sources without your knowledge.

02How We Use Your Data

Collected personal data is used for legitimate and transparent purposes. bp99a will not use your data for any unrelated purpose without your prior consent. The primary purposes for data use are as follows:

  • Account Management: Creating and maintaining your player account, including secure login and password management.
  • Transaction Processing : Processing all deposits, withdrawals, and financial transactions accurately and securely via your preferred payment methods such as DuitNow, FPX, TNG eWallet, GrabPay, and Boost.
  • Identity Verification (KYC): Verifying your identity to meet legal compliance requirements and prevent fraud, money laundering, and other illicit activities.
  • Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance when needed.
  • Platform Security: Monitoring suspicious activity, preventing unauthorized access, and safeguarding the integrity of the bp99a platform.
  • Responsible Gaming: Analyzing gaming patterns to identify signs of problem gambling and provide appropriate support.
  • Marketing Communications: Sending promotional information, bonuses, and exclusive offers — only if you have consented to receive such communications.
  • Legal Compliance: Fulfilling legal obligations, including reporting required by competent authorities.

Bp99a does not use any automated decision-making processes that could significantly affect you without human involvement. Every decision related to your account or finances goes through manual review by our team.

03Data Sharing & Disclosure

Bp99a takes the confidentiality of your personal data seriously. We do not sell, rent, or use your data for third-party advertising purposes without your consent. However, there are certain situations where data may be shared with the following parties:

  • Payment Providers: Required financial information is shared with licensed payment providers such as local banks, FPX operators, and eWallet platforms to process your transactions securely.
  • Game Providers: Basic game session data is shared with licensed game providers supplying slot games, fish shooting games, and other games on the bp99a platform.
  • Regulatory Authority: Data will be disclosed to legal authorities, enforcement agencies, or competent government bodies when required by Malaysian law or a valid court order.
  • Anti-Fraud Services: Required information may be shared with fraud detection and anti-money laundering systems used to protect the integrity of the platform.

Our Guarantee: All third parties that receive data from bp99a are bound by strict confidentiality agreements and are required to use that data only for the specified purpose. They are not permitted to use your data for any other purpose.

04Data Security & Technical Protection

Bp99a continually invests in security infrastructure to ensure your personal data is always protected to the highest standard. The technical security measures we employ include:

  • 256-bit SSL Encryption: All data transmitted between your device and bp99a's servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by leading banking institutions in Malaysia.
  • Stored Data Encryption: Personal and financial data stored on bp99a's servers is encrypted using AES-256, ensuring your information remains unreadable even in the event of unauthorised access.
  • Two-Factor Authentication (2FA): bp99a fully supports 2FA for all player accounts to add an extra layer of security against unauthorised access.
  • Real-Time Monitoring: bp99a's security monitoring system operates 24/7 to detect any suspicious activity, unusual login attempts, or signs of fraud.
  • Internal Access Controls: Access to players' personal data within bp99a is restricted on a need-to-know basis, and every access is recorded in a secure audit log.
  • Periodic Security Testing: bp99a's infrastructure undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no system is entirely risk-free. In the event of any security incident involving your personal data, bp99a will notify you within 72 hours of the incident being identified, in line with international data protection best practices.

05Cookie Policy

Bp99a uses cookies and similar tracking technologies to enhance the user experience, ensure smooth platform functionality, and analyse how the platform is used. Cookies are small text files stored on your device by your web browser.

Cookie Types Function Duration
Essential Cookies Maintaining login sessions, platform security, language preferences Session / 30 days
Functional Cookies Storing user preferences, display settings, search history 90 days
Analytics Cookies Analyzing usage patterns in aggregate and anonymized form 1 year
Security Cookies Detecting unauthorized access attempts, device verification Session / 7 days

Essential cookies cannot be disabled as they are required for the core functions of the bp99a platform. For other cookie types, you can manage your settings through your web browser preferences. Please note that disabling certain cookies may affect platform functionality and your overall experience.

06Your Rights Under PDPA

As a bp99a player based in Malaysia, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). bp99a fully respects these rights and provides straightforward mechanisms for you to exercise them:

Right to Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your data under certain circumstances, subject to our legal obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Restriction

You may request that we restrict the processing of your data in certain situations permitted by law.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for the purpose of data portability.

To exercise any of the rights above, contact the bp99a customer support team via live chat or Telegram. bp99a will process your request within 21 working days from the date the request is received.

07Data Retention Period

Bp99a retains your personal data only for as long as it is needed for the purposes stated in this policy or to fulfil legal obligations. Data retention periods are as follows:

  • Active Account Data: For as long as your account remains active and you continue using bp99a's services.
  • Financial Transaction Records: Minimum 7 years after the transaction, in line with Malaysian legal requirements on financial records and anti-money laundering.
  • KYC Documents: Minimum 5 years after account closure or the date of the last transaction.
  • Communication Logs: 2 years for customer support logs and account-related communications.
  • Technical Data & Logs: 90 days for system logs and technical data that do not contain personally identifiable information.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. This secure deletion process uses methods that ensure data cannot be recovered.

08International Data Transfers

In the course of its operations, bp99a may store or process your personal data on servers located outside Malaysia. Any such data transfer is only carried out where an adequate level of protection equivalent to Malaysia's PDPA is guaranteed.

Steps we take to protect your data during international transfers include:

  • Ensuring that the recipient country or region has equivalent data protection laws.
  • Executing binding data processing agreements with all international partners.
  • Applying recognized standard contractual clauses to protect your rights throughout the transfer process.

Local Preferences: bp99a prioritises the use of Malaysian local infrastructure and service providers wherever possible, to ensure that Malaysian players' data remains within an ecosystem governed by local law.

09Third-Party Links & Content

The bp99a platform includes games developed by licensed third-party providers. Each game provider operates under its own privacy policy, separate from bp99a's. Game session data shared with these providers is limited strictly to information required for game operation.

Bp99a is not responsible for the privacy practices of third parties outside our direct control. However, we only work with licensed providers that have undergone security and privacy compliance reviews by our team.

10Contact Us & Privacy Complaints

If you have any questions, concerns, or complaints about how bp99a handles your personal data, we encourage you to contact us directly. bp99a's privacy team is committed to addressing every inquiry seriously and professionally.

You can reach us through the following channels:

  • Live Chat: Available 24/7 via the chat icon at the bottom right corner of the bp99a platform.
  • Telegram: Reach our support agents via bp99a's official Telegram channel.
  • Email: [email protected]

Bp99a will endeavour to respond to every privacy-related enquiry within 7 working days. For more complex complaints requiring investigation, we will keep you updated on the progress within 21 working days.

If you are unsatisfied with bp99a's response to your privacy complaint, you have the right to escalate it to Malaysia's Personal Data Protection Department (JPDP) under the provisions of PDPA 2010.

Policy Amendments: bp99a reserves the right to amend this Privacy Policy at any time. Any material changes will be communicated to registered players via email or in-platform notification at least 7 days before taking effect. The date of the last update is always displayed at the top of this page.


Security Commitment

Why Your Data Secure Together bp99a

Privacy is more than a legal document at bp99a — it is the foundation of trust between us and every player who joins our platform.

🔐
256-bit SSL Encryption

Every bit of data moving between your device and bp99a's servers is protected by continuous 256-bit SSL encryption — a banking-grade security standard that ensures no outside party can intercept your information.

🛡️
Malaysia PDPA 2010 Compliance

Bp99a operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Every process of data collection, storage, and use adheres strictly to local legal requirements.

👁️
24/7 Fraud Monitoring

Bp99a's real-time monitoring system runs non-stop to detect any suspicious activity or unauthorised access attempts on your account, providing comprehensive protection at every moment.

🚫
No Data Sales

Bp99a has never sold, rented, or used players' personal data for third-party advertising — and never will. Your data belongs to you; we only use it to deliver the best possible service.

🔑
Two-Factor Authentication (2FA)

Bp99a fully supports 2FA for all player accounts. With this additional security layer, your account remains protected even if your password becomes known to someone else.

⚡
72-Hour Incident Response

In the event of any security incident involving your data, bp99a is committed to notifying you within 72 hours — well ahead of most companies in the industry.


FAQ

Questions About Privacy & Data bp99a

bp99a only discloses data to government authorities or law enforcement bodies when required by Malaysian law or a valid court order. We do not share data voluntarily without a solid legal basis, and every such request will be carefully reviewed by our legal team beforehand.

Yes, you may request data deletion through bp99a customer support. Please note, however, that certain limitations apply — financial transaction records and KYC documents must be retained for at least 5–7 years under Malaysian financial and anti-money laundering laws. Deletion of other data not subject to legal requirements will be processed within 21 working days.

When you close your bp99a account, your active account data will be deactivated immediately. However, transaction records and KYC documents will be retained for the minimum legally required retention period (5–7 years). After that period, all data will be securely deleted or fully anonymised.

No. bp99a only uses cookies that operate within the bp99a.app domain. We do not use cross-site tracking cookies to monitor your activity on other websites. Our analytics cookies only collect aggregated data that cannot be used to identify you individually.

bp99a is committed to notifying you within 72 hours in the event of any security incident involving your personal data. Notification will be sent via your registered email and in-platform notification. The notice will describe the nature of the incident, the data potentially involved, and the steps that have been and are being taken to address it.

Yes, this is your right under PDPA 2010. You may submit a data access request through bp99a customer support. We will provide a full report of the data we hold about you in a readable format within 21 working days. This request is free of charge for the first request each calendar year.

Join bp99a Today

Gaming Platform That Trusted & Secure

Your privacy is our priority. Register a bp99a account today and enjoy a safe, fair, and enjoyable online gaming experience with Malaysia's player community.

256-bit SSL PDPA Compliance Encrypted Data 24/7 Support

Bahasa Melayu