At bonus999, your privacy is more than a legal obligation — it is a responsibility we take seriously. This policy clearly outlines what data we collect, how it is used, who can access it, and the full rights you hold as a member of our platform.
Protected by international banking security standards
Six core data protection pillars that keep your information safe with us
All data transmitted between your device and bonus999 servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions across Malaysia, including Maybank and CIMB. Your data cannot be intercepted or read by third parties.
Bonus999 does not sell, rent or trade members' personal information to any third party for commercial purposes. Your data is collected solely to operate the platform's services, process financial transactions and ensure the security of your account.
As a bonus999 member, you have the full right to access, correct, request a copy of, or in certain circumstances delete your personal data from our systems. Requests can be submitted at any time via our support email.
Bonus999 operates in compliance with applicable data protection requirements, including the Malaysian Personal Data Protection Act (PDPA) 2010. We handle all personal data in accordance with the principles of lawful, fair and transparent data processing.
Your financial information — including your Touch 'n Go wallet, GrabPay, DuitNow or FPX account details — is not stored in the bonus999 system once a transaction is complete. Payment processing is handled through encrypted, certified channels.
Bonus999 retains personal data only for as long as necessary for the stated purpose or as required by law. Once the retention period expires, data is securely deleted in accordance with established procedures and cannot be recovered.
Quick Summary: bonus999 collects your personal data solely to operate the platform, process payments, and keep your account secure. We do not sell your data. All information is protected by 256-bit SSL encryption. You have full rights to access and control your data. For any questions, reach us at support@bonus999.click.
1.1 This Privacy Policy is published by bonus999 ("Platform", "We") and explains how we collect, use, store, process and protect your personal data as a user of the bonus999 website and services.
1.2 This policy applies to all individuals who access or use the bonus999 platform — including website visitors, registered members, active players, and any party that interacts with our services through any digital channel.
1.3 By registering an account or continuing to use the bonus999 platform, you agree to the terms of this Privacy Policy. This Policy should be read together with Terms & Conditions and Responsible Gaming Policy bonus999.
1.4 We are committed to handling your personal data responsibly and transparently, in accordance with internationally recognised data protection principles, including compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and related legislation.
2.1 bonus999 collects various categories of personal data necessary to operate the platform lawfully, securely, and effectively. The data collected includes:
Identity & Registration Data:
Financial Transaction Data:
Gaming Activity Data:
Technical & Device Data:
2.2 bonus999 does not collect sensitive personal data such as health information, political affiliations or religious beliefs unless specifically required by applicable law.
2.3 The data you provide must be accurate, current and complete. You are responsible for notifying bonus999 of any changes to your personal information via your account settings or by contacting our support team.
3.1 bonus999 uses the personal data collected for the following legitimate purposes:
Platform Operations & Account Management:
Security & Fraud Protection:
Legal & Regulatory Compliance:
Service Improvement & Communications:
Important Note: bonus999 uses your data solely for the purposes stated above. We do not build profiles for third-party advertising, nor do we use your data for automated decision-making that materially affects your legal rights without human oversight.
4.1 bonus999 does not sell, rent or trade members' personal data to third parties for marketing or commercial purposes. Data sharing only occurs in the following limited and lawful circumstances:
Operational Service Providers: bonus999 shares necessary data with third-party service providers that assist in operating the platform, including:
All third-party service providers are bound by strict confidentiality agreements and are only permitted to use shared data for the specific purposes set out in their contracts with bonus999.
Legal Requirements: bonus999 may be required to disclose personal data when mandated by law or a valid court order, including to:
4.2 In all permitted instances of data sharing, bonus999 ensures that only the minimum data necessary for the relevant purpose is shared — a data minimisation principle we strictly adhere to.
5.1 bonus999 implements a range of technical and organisational security measures to protect members' personal data against unauthorised access, loss, destruction, or accidental disclosure:
5.2 While we take all reasonable security measures, no digital system can be guaranteed 100% secure against every threat. In the event of a data breach that affects the rights or freedoms of members, bonus999 will notify the relevant authorities and affected members as required by applicable law within the stipulated timeframe.
5.3 You also play an important role in keeping your own data secure. Make sure your bonus999 account password is strong, unique, and never shared with anyone. Use a secure Wi-Fi network when accessing the bonus999 platform, especially when carrying out financial transactions.
6.1 bonus999 uses cookies and similar tracking technologies to enhance the user experience, ensure proper platform functionality and gather analytical data that helps us improve our services. The following are the types of cookies we use:
6.2 You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality or performance of the bonus999 platform. Essential cookies cannot be disabled without preventing full use of the platform.
7.1 bonus999 follows strict Know Your Customer (KYC) protocols as part of our anti-money laundering (AML) obligations and regulatory compliance requirements. The KYC process may require you to submit:
7.2 KYC documents submitted are stored securely in an encrypted environment and are accessible only to authorised compliance personnel. These documents are not used for any purpose other than identity verification and regulatory compliance.
7.3 For financial transactions, bonus999 retains only the information needed to record the transaction — amount, date, time, payment method type, and account holder name. Your full account number, card number, or digital wallet password is never stored in bonus999's systems.
7.4 All financial transaction records are retained for the minimum period required by law before being securely deleted.
8.1 As a data subject under Malaysia's Personal Data Protection Act, you have the following rights with respect to personal data held by bonus999:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
If your personal data is inaccurate or out of date, you have the right to request a correction through your account settings or by contacting our support team.
In certain circumstances, you may request the deletion of your personal data — subject to any applicable legal record retention obligations.
You may request that we restrict how we use your data in certain circumstances while a dispute is being resolved.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider if required.
You may withdraw your consent to receive marketing communications at any time through the notification settings in your bonus999 account.
How to Submit a Rights Request: Submit a written request to support@bonus999.click with the subject line "Data Privacy Rights Request". Please include your full name, bonus999 account number and details of your request. We will respond within 21 business days. In some cases, additional identity verification may be required before your request is processed.
9.1 The bonus999 platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from anyone under the age of 18.
9.2 If we discover that personal data belonging to a minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a child has registered on bonus999, please notify us immediately at support@bonus999.click.
10.1 In the course of operating the platform, personal data of bonus999 members may be stored or processed outside Malaysia, specifically on certified cloud computing infrastructure. All cross-border data transfers are carried out in compliance with applicable Malaysian legal requirements.
10.2 bonus999 ensures that all cross-border data transfers are protected by appropriate safeguarding mechanisms, including binding data processing agreements with overseas service providers that require data protection standards equivalent to those in Malaysia.
10.3 Cloud service providers used by bonus999 are selected based on strict security criteria and must hold internationally recognised security certifications such as ISO 27001 or equivalent.
11.1 The bonus999 platform may contain links or references to third-party services such as sports streaming providers, casino game providers and payment processors. This Privacy Policy applies only to data collected directly by bonus999.
11.2 bonus999 is not responsible for the privacy practices or content of such third-party services. We recommend that you read the privacy policies of any third-party services you use separately. All third-party service providers integrated with bonus999 are selected based on strict security and privacy standards.
12.1 bonus999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or relevant technological developments. The latest version of the Privacy Policy is always available on this website with the update date clearly displayed.
12.2 For material amendments — changes that significantly affect how we use your data — bonus999 will notify members via their registered email address or a prominent notice displayed within the platform at least 14 days before the amendment takes effect.
12.3 Continued use of the bonus999 platform after an amended Privacy Policy takes effect constitutes acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account and request deletion of your data.
13.1 If you have any questions, concerns or requests regarding this Privacy Policy or how bonus999 handles your personal data, please contact our privacy team:
13.2 For complaints that cannot be resolved internally, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory body.
Security Reminder: bonus999 will never ask for your account password via email, live chat or any other channel. If you receive a communication claiming to be from bonus999 that requests your password or sensitive financial information, treat it as a phishing attempt and report it to us immediately at support@bonus999.click.
A quick overview of the data we collect, how it is used and how long it is retained
| Data Category | Primary Purpose | Shared with | Retention Period |
|---|---|---|---|
| Identity Data (Name, IC, DOB) | Account verification & KYC | Registered KYC providers only | Throughout active account + 7 years |
| Email & Phone Number | Account & Security Communications | Not shared | For the duration of the active account |
| Financial Transaction Records | Deposit & Withdrawal Processing | Payment processors (Touch 'n Go, GrabPay, DuitNow, FPX) | Minimum 7 years (statutory requirement) |
| Gaming Activity History | Compliance, auditing & service improvement | Regulatory authorities (where required) | 5 years from the date of activity |
| Technical Data (IP, Device) | Security & Fraud Prevention | Cybersecurity providers | 90 days to 2 years |
| Cookies & Session Data | Platform functionality & analytics | Internal analytics tools only | Sessions up to 12 months |
| KYC Documents (MyKad, Selfie) | Identity verification & AML | Licensed KYC providers only | Minimum 5 years after account closure |
Detailed answers to the privacy questions our members ask most frequently
Your data protection goes hand in hand with our commitment to responsible gaming. Information about your gaming activity is used internally to identify patterns that may require support — it is never shared with third parties. bonus999 believes every player deserves both full privacy and the right level of support.
Read more about Responsible GamingRegister for free today and enjoy the best Sports Betting, Live Casino and online gaming experience in Malaysia with bonus999 — a platform that takes your data security seriously. Claim your 150% welcome bonus of up to RM 1,500 to get started.