Bull99a Privacy Policy – Protection of Your Personal Data

Bull99a collects your personal information for clear and lawful purposes in the context of providing a safe and responsible online gaming platform in Malaysia. Data collection is done directly from you during the registration process, daily platform use, and any interactions with our support team.

The types of information we collect include:

Every piece of data we collect is used solely for legitimate and transparent purposes. bull99a does not use your data for any purpose not stated in this Privacy Policy without your prior consent.

The following are the primary purposes for which your personal data is used on the bull99a platform:

• Account Management: Creating, verifying, and securely maintaining your member account, including all required KYC processes.
• Transaction Processing: Processing all deposits and withdrawals promptly and accurately into your registered bank account.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, and unauthorized access to your account.
• Customer Support: Providing effective support when you reach out to us via live chat or email.
• Service Improvement: Analyzing aggregate usage patterns to enhance the platform experience and introduce relevant new features.
• Marketing Communications: Sending promotional information, exclusive bonuses, and special offers — only to members who have consented to receive such communications.
• Legal Compliance: Meeting the reporting and compliance obligations required under Malaysian law, including the Anti-Money Laundering Act 2001.

Bull99a maintains a strict policy on the sharing of members' personal data. We do not sell, rent, or transfer your data to third parties for commercial gain. However, there are limited situations where we may need to share your information with certain parties:

• Payment Service Providers: Required transaction data is shared with approved payment gateways (FPX, Maybank, CIMB, and others) solely for the purpose of processing your deposits and withdrawals.
• Game Software Providers: Minimal game session data is shared with licensed game providers solely to ensure smooth gameplay functionality.
• Identity Verification Services: KYC data may be shared with approved third-party identity verification services that are PDPA-compliant, for verification purposes.
• Legal Requirements: bull99a may disclose your personal data to government authorities, law enforcement bodies, or courts when required to do so by Malaysian law or a valid court order.

Bull99a uses cookies and similar tracking technologies to enhance your browsing experience, maintain session security, and understand how users interact with our platform.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collecting information about how you use our website — such as the most frequently visited pages — in aggregate form that does not identify individuals.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for a more convenient future experience.
• Analytics Cookies: Helps us understand overall user behavior to improve platform design and content.

Bull99a retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by Malaysian law. Generally, active account data is retained throughout your active membership, while transaction records are kept for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.

The technical and organizational security measures we implement include:

• Data encryption in transit using TLS 1.3 protocol
• Data encryption at rest using AES-256
• Role-based access control (RBAC) for internal staff
• Continuous auditing and monitoring of access logs
• Regular penetration testing by independent security experts
• Two-factor authentication (2FA) required for administrative access
• Cybersecurity awareness training for all bull99a staff

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a bull99a member have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you. bull99a will provide this information within 21 business days of receiving a valid request.
• Right to Rectification: If any of your personal data is inaccurate or out of date, you have the right to request a correction. We will update your records within 14 business days.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Such requests will be assessed in accordance with applicable legal requirements.
• Right to Restrict Processing: You may request that we restrict how we process your data in certain situations, such as while we are verifying its accuracy.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider, where technically feasible.

To exercise any of the above rights, please contact the bull99a Data Protection Officer (DPO) team via our official email. Your identity will be verified before any action is taken to protect the security of your account.

Bull99a strictly does not provide services to individuals under the age of 18. Our platform is not designed for children and we do not knowingly collect personal data from minors.

If we determine that we have collected personal data from an individual under the age of 18 without proper age verification, we will immediately take the following steps:

• Suspending the account in question while an investigation is conducted
• Deleting all personal data belonging to that individual from our systems
• Returning any remaining balance in that account
• Reporting incidents to the relevant authorities when required

The bull99a platform may from time to time contain links or references to third-party websites or services, including game providers, payment partners, or social media platforms. The bull99a Privacy Policy applies only to our own platform and does not cover the privacy practices of any third-party websites.

Bull99a is not responsible for the content, privacy policies, or security practices of third-party websites. We recommend that you read the Privacy Policy of every website you visit, especially before providing any personal information to them.

Bull99a reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we protect your information. The latest version of this Privacy Policy is always available on this page.

If there are significant changes to how we process your personal data, bull99a will notify you via:

• A prominent notice on the bull99a platform homepage
• Email to your registered email address (for material changes)
• In-app notification via the bull99a mobile app

The "Updated" date shown at the top of this page indicates when this Privacy Policy was last reviewed. Continued use of the bull99a platform after any changes take effect constitutes acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding how bull99a handles your personal data, we encourage you to contact our Data Protection Officer (DPO) directly. We are committed to addressing every inquiry seriously and resolving it within a reasonable timeframe.