Privacy Policy BUL99 – Your Personal Data Protection

1. Introduction & Scope of Privacy Policy

BUL99 takes our responsibility to protect every member's privacy seriously. This Privacy Policy has been drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best standards in user data management.

We understand that you trust us with sensitive personal information when you register and use the bul99 platform. We treat that trust as a responsibility we take seriously. To that end, we have established clear policies on the types of data we collect, the purpose of that collection, who may have access to the data, and how you can manage your own personal information.

This policy covers all your interactions with BUL99 — from the initial registration process, daily activity on the platform, and financial transactions, to communications with our customer support team. Any new services we introduce in the future will also be subject to this policy unless stated otherwise.

2. Types of Personal Data We Collect

BUL99 only collects data that is strictly necessary to provide our services safely and efficiently. The following are the categories of data we collect:

BUL99 does not collect data classified as sensitive under Malaysia's PDPA — such as health information, religious beliefs, or criminal records — unless there is a specific legal requirement that obliges us to do so.

3. How We Use Your Data

Every piece of data we collect is used for its stated purpose and will not be used for any other purpose without your consent. Below is a detailed breakdown of how your data is used:

• Account Management: Creating and maintaining your account, processing registration, recovering passwords, and managing account settings.
• Transaction Processing: Processing deposits and withdrawals securely through our integrated payment systems, including DuitNow, FPX, and e-wallets.
• Identity Verification (KYC): Verifying your identity to meet legal compliance requirements and to prevent fraud and money laundering.
• Platform Security: Detecting and preventing suspicious activity, account abuse, fraud, and other security threats.
• Service Improvement: Analysing usage patterns to improve game quality, platform speed, and overall user experience.
• Service Communications: Sending you important account-related notifications, relevant promotions, and platform updates.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities when required under Malaysian law.

We do not use your data to make automated decisions that could significantly affect you without human review where required.

4. Data Sharing & Disclosure

BUL99 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data is only shared in limited and necessary situations:

• Payment Providers: Required financial data is shared with trusted payment processors such as banks and e-wallet providers to complete your transactions.
• Game Providers: Minimum technical information required is shared with licensed game software providers to enable you to access games on the platform.
• Identity Verification: For KYC purposes, your identification documents may be shared with approved third-party identity verification service providers.
• Legal Requirements: BUL99 will disclose the required information to authorities when mandated to do so by law, court order, or directive from a regulatory body.
• Risk Management: In cases of fraud or abuse, relevant information may be shared with authorised financial crime prevention agencies.

All third parties who receive your data are bound by strict confidentiality agreements and are required to comply with data protection standards equivalent to or higher than our own.

5. Data Security & Protection

We continuously invest in the latest security infrastructure to ensure your personal data is always protected at the highest level. The security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your browser and bul99's servers is encrypted using TLS/SSL 256-bit technology — the same standard used by leading banking institutions worldwide.
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are stored in encrypted form using AES-256 algorithms in our secured database.
• Strict Access Control: Only staff with specific authorisation may access members' personal data, and every access is logged for auditing purposes.
• Two-Factor Authentication: We offer two-factor authentication (2FA) to protect your account from unauthorised access.
• 24/7 Monitoring: Our automated security monitoring system operates around the clock to detect and respond to any threats in real time.
• Regular Auditing: Our security infrastructure undergoes regular independent audits by cybersecurity experts to ensure no hidden vulnerabilities exist.

While we employ the best available measures, no system in the world can guarantee 100% absolute security. In the event of any security incident involving your data, we are committed to notifying you within the timeframe required by law.

6. Cookies & Tracking Technologies

BUL99 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as the platform cannot function without them.
• Performance Cookies: Helps us understand how members use the platform — such as the most visited pages and response times — for continuous improvement.
• Functional Cookies: Storing your preferences such as language selection, display settings, and login information for a more convenient experience in the future.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the security of your session on the platform.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality or your experience on the BUL99 platform. The cookies we use do not contain information that directly identifies you and are not transferred to third parties for advertising purposes.

7. Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If there is an error in your data, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances permitted by law, you may request that your personal data be deleted from our systems.
• Right to Restrict Processing: You may request that we restrict how we process your data under certain circumstances.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Non-Automated Decision-Making: You have the right not to be subject to decisions made solely on the basis of automated processing that significantly affects you.

To exercise any of the above rights, please contact the bul99 support team via live chat or email us at [email protected]. We will process your request within 30 business days from the date of receipt.

8. Data Retention & Deletion

BUL99 retains your personal data for as long as necessary to fulfil the original purpose of collection or as required under Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for an additional 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
• KYC Documents: Retained for the duration of the active account plus 5 years after account closure for auditing and compliance requirements.
• Communication Logs: Customer support records are retained for 2 years for quality assurance and dispute resolution purposes.
• Technical Data: Access logs and security data are retained for 12 months and subsequently anonymised or deleted.

When data is no longer required, we ensure it is securely deleted or anonymised using methods that make recovery impossible.

9. Third-Party Links & Services

The bul99 platform offers a wide range of games from internationally licensed providers integrated within our ecosystem. While we select providers that adhere to strict data protection standards, please note that:

• Each third-party game provider has its own privacy policy applicable to the technical interactions between their software and your game data.
• BUL99 reviews and assesses the privacy policies of all providers before they are listed on our platform.
• We are not responsible for the data practices of third parties that are outside bul99's direct control.
• If you have concerns about a specific game provider, you may contact our team for further information.

We do not list external links on our platform that would take you outside the bul99 ecosystem without a clear notification.

10. Changes to the Privacy Policy

BUL99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When significant changes occur, we will:

• Updating the "Updated" date displayed at the top of this page.
• Sending notifications to all registered members via email or in-platform notifications.
• Displaying a clear update notice on the platform's Login page for at least 14 days after changes take effect.

Your continued use of the bul99 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and stop using our services.

11. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• 24/7 Live Chat: The fastest way — available directly on the BUL99 platform at any time.
• Privacy Email: [email protected] — set your email subject to "Privacy Policy Enquiry" for faster processing.
• FAQ Page: Visit FAQ page us for quick answers to common questions.

Our data protection team will respond to privacy-related enquiries within 5 business days. For formal complaints, we are committed to providing a full response within 30 days from the date of receipt.

You also have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) if you believe we have not handled your data properly.