Bull99 Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

Bull99 is an online casino and Sports Betting platform serving Malaysian players. In the course of delivering our services, we collect players' personal information as part of the registration process, identity verification, payment processing, and ongoing service provision.

This Privacy Policy applies to all registered players who use the Bull99 platform via the website https://bull99.xyz. It explains what data we collect, why we need it, who may access it, how long we retain it and your rights in relation to that data.

This Policy does not apply to third-party websites or services that may be linked from our platform. We encourage you to read the privacy policy of each website you visit separately.

Bull99 collects various types of information depending on how you interact with our platform. Generally, the information we collect falls into three main categories:

Information You Provide Directly:

• Full name provided at account registration.
• An active Malaysian phone number for verification purposes.
• Email address for official communications and account verification.
• Date of birth to verify that you are 18 years of age or older.
• E-wallet or bank account details for processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX.
• Identity verification documents (a copy of your MyKad or passport) when requested as part of the KYC process.

Automatically Collected Information:

• The IP address of the device used to access the platform.
• Device type, operating system, and browser version.
• Login timestamps, dates, and in-platform activity.
• Game history, bet values and transaction records within the platform.
• Approximate location data based on IP address (GPS or precise location is not used).

Information from Third-Party Sources:

• Transaction verification from payment providers such as Touch 'n Go, GrabPay or banks to confirm deposit and withdrawal statuses.
• Identity verification information from authorised third parties where required for KYC compliance.

Personal data collected by Bull99 is used solely for purposes directly related to delivering platform services to you. Specifically, we use your data to:

• Account Management – To create, verify and maintain your player account on bull99.
• Payment Processing – To process deposits via Touch 'n Go, GrabPay, DuitNow and FPX, and to manage withdrawals of winnings to your account.
• Identity Verification (KYC) – To meet legal requirements for verifying player identity and age, and to prevent fraud and money laundering.
• Customer Support – Responding to enquiries, resolving complaints, and providing technical support.
• Platform Security – Detecting and preventing fraudulent activity, hacking, or platform abuse.
• Official Communications – To send important notices relating to your account, transactions, changes to terms or security information.
• Platform Improvements – Analysing usage patterns (in aggregated, non-personally identifiable form) to improve the performance and user experience of the bull99 platform.
• Legal Compliance – To fulfil legal obligations and comply with requests from lawful authorities.

Bull99 does not sell, rent, or trade players' personal data to third parties for marketing purposes. However, in the course of operating the platform, we may share data in limited circumstances as follows:

All third parties involved in processing Bull99 players' data are bound by strict data protection agreements and are not permitted to use that data for any purpose beyond what is specified. Bull99 only works with third parties whose data security standards are equivalent to or exceed our own.

Bull99 continually invests in security infrastructure to ensure players' personal data is protected to the highest standard. The security measures we have in place include:

• 256-bit SSL Encryption – All communications between your device and bull99's servers are encrypted using 256-bit TLS/SSL protocols, making the data unreadable to unauthorised parties even if intercepted.
• Stored Data Encryption – Sensitive data stored in bull99's databases – including passwords and payment information – is encrypted using industry-recognised encryption algorithms.
• 24/7 Monitoring – Bull99's security team monitors all platform activity around the clock to detect and respond to any anomalies or security threats.
• Regular Security Audits – Independent security audits are conducted periodically by qualified third parties to identify and address any system vulnerabilities.
• Internal Access Controls – Access to player data within Bull99 is granted only to staff who require it for their job responsibilities, enforced through strict role-based access control.
• Two-Factor Authentication (2FA) – Players can enable two-factor authentication for an additional layer of account security.

While bull99 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. We therefore also encourage players to use strong passwords, avoid sharing their login credentials, and notify us promptly if they suspect any suspicious activity on their account.

The Bull99 platform uses cookies and similar technologies to enhance the user experience and platform functionality. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies – Required for core platform functions such as login, session management and security. These cookies cannot be disabled, as the platform will not function properly without them.
• Analytics Cookies – To help us understand how players use the platform in aggregated, anonymised form. This information is used solely to improve the user experience.
• Preference Cookies – Saves your preferences such as language, display settings, and game preferences so you don't have to reconfigure them every time you log in.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some areas of the Bull99 platform. For non-essential cookies, you will be given the option to accept or decline them when you first visit our platform.

Bull99 retains players' personal data only for as long as necessary for the purposes outlined in this policy or as required by applicable Malaysian law.

• Active Account Data – Retained for as long as your account is active on the bull99 platform, and for the required period following account closure for record-keeping and legal compliance purposes.
• Financial Transaction Records – Retained for a minimum of seven (7) years in accordance with applicable Malaysian accounting and financial record-keeping requirements.
• Platform Activity Log – Retained for a period of between 90 and 180 days for security purposes, fraud investigation and dispute resolution.
• Customer Support Communication Records – Retained for three (3) years for reference purposes and service quality improvement.

Once data is no longer needed and there is no legal obligation to retain it, Bull99 will securely delete or anonymise that data in a manner that ensures it cannot be recovered or misused.

All player data is stored on servers housed in a secure, encrypted environment. Bull99 ensures that our data storage infrastructure providers comply with internationally recognised data security standards.

As a Bull99 player and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to your personal data:

The Bull99 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

All players are required to confirm that they are at least 18 years of age upon registration. Bull99 reserves the right to request age verification documents at any time, and accounts suspected of belonging to underage individuals will be suspended immediately while an investigation is carried out.

Should we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. If you believe that a person under 18 has registered a Bull99 account, please contact us immediately at support@bull99.xyz.

Bull99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements or platform improvements. The "Last Updated" date at the top of this document will be revised whenever changes are made.

For material changes – that is, changes that significantly alter how we use or protect your personal data – Bull99 will notify you via your registered email or a prominent notice within the platform at least 7 days before the changes take effect.

Continued use of the Bull99 platform following any changes to this Privacy Policy will be considered acceptance of the updated terms. If you do not agree with the changes, you may close your account before they take effect and request deletion of your data.

If you have any questions, concerns or requests regarding this Privacy Policy or how Bull99 handles your personal data, please reach out to our team through the following channels:

• Email: support@bull99.xyz – For privacy-related enquiries, please include "Data Privacy Enquiry" in the subject line.
• Live Chat: Available on the Bull99 platform 24 hours a day, seven days a week.

Our team treats privacy-related enquiries as a high priority and will respond within 2 business days for email. For urgent data security matters, we aim to respond within 24 hours.

If you are dissatisfied with the way bull99 has handled your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant enforcement body under the Personal Data Protection Act 2010.