Privacy Policy

1.Introduction

This Privacy Policy ("Policy") is issued by bull99 ("bull99", "we", "us", "our") and applies to all personal data collected from or about individuals ("you", "User", "Player") who access or use the bull99 website at https://bull99.asia and all associated services, games, and features (collectively, the "Platform").

bull99 respects your right to privacy. We are committed to handling your personal data responsibly, transparently, and in accordance with the requirements of our international gaming authority licence and applicable data protection regulations. This Policy explains what personal data we collect, the purposes for which it is processed, and the rights you hold in relation to that data.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the overall contractual relationship between you and bull99.

2.Data Controller

bull99 is the data controller in respect of personal data collected through the Platform. As data controller, bull99 determines the purposes for which and the manner in which personal data is processed. Where bull99 engages third-party processors — such as payment providers, KYC verification services, or game software providers — those parties act under contractual obligations that require them to process data only as instructed by bull99 and to implement appropriate security measures.

For all data protection enquiries, you may contact our Data Protection contact via email at [email protected] (plain text — not a clickable link).

3.Data We Collect

3.1 Identity & Registration Data

When you register an account with bull99, we collect your full name, date of birth, nationality, email address, mobile phone number, and a username of your choosing. This data is used to create and maintain your account and to verify that you meet the minimum age requirement of 21.

3.2 KYC & Verification Data

To comply with our international gaming licence and anti-money-laundering obligations, bull99 collects copies of identity documents (Malaysian MyKad or passport), proof of address documents, and payment method verification documents where applicable. This data is handled exclusively by authorised compliance personnel and is not used for any purpose other than identity and source-of-funds verification.

3.3 Financial Data

We collect data relating to your transactions on the Platform, including deposit amounts, withdrawal requests, payment method identifiers (e.g., bank account last four digits, e-wallet registered mobile number), and transaction histories. bull99 does not store full card numbers or full bank account numbers on its own servers — payment processing is handled by PCI-DSS-compliant payment service providers.

3.4 Gaming Activity Data

We record your in-Platform activity, including games played, wagers placed, session duration, bonus usage, and game outcomes. This data is used for account management, responsible gaming monitoring, fraud detection, regulatory reporting, and service improvement.

3.5 Technical & Device Data

We automatically collect technical information when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, and connection data. This information is used for security monitoring, fraud prevention, and Platform optimisation.

3.6 Communications Data

If you contact bull99 via Live Chat, email, or any other channel, we retain records of those communications. This includes support ticket content, chat transcripts, and any attachments you submit. These records allow us to resolve your queries and maintain service quality.

4.How We Collect Data

bull99 collects personal data through the following means:

• Directly from you — when you register, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — through cookies, server logs, and tracking technologies when you browse or interact with the Platform;
• From third parties — from KYC verification service providers, payment processors, fraud detection services, and, where applicable, publicly available databases used for anti-money-laundering compliance checks.

5.Purpose & Legal Basis for Processing

bull99 processes your personal data only where a lawful basis exists. The primary purposes and corresponding legal bases are as follows:

• Contract performance: To create and administer your account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: To conduct KYC identity verification, meet anti-money-laundering reporting requirements, maintain records as required by our gaming licence, and enforce the 21+ age restriction.
• Legitimate interests: To detect and prevent fraud, protect Platform security, improve our services, send service-related communications, and monitor responsible gaming compliance.
• Consent: To send you marketing communications about promotions and offers, where you have expressly opted in. You may withdraw consent for marketing communications at any time by contacting support.

6.Data Sharing

bull99 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Service providers acting as data processors: Payment processors, KYC verification providers, cloud infrastructure providers, customer support platforms, and fraud detection services. These parties are bound by data processing agreements and may not use your data for their own purposes.
• Gaming software providers: Game providers receive limited session data necessary to deliver the game and record outcomes. They do not receive your full identity or financial data.
• Regulatory authorities: bull99 is required to disclose certain data to our gaming regulator, financial intelligence units, and law enforcement authorities where required by law or court order.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bull99's business, your data may be transferred to the acquiring entity subject to equivalent privacy protections.

7.International Data Transfers

bull99 may transfer personal data to service providers and infrastructure located outside Malaysia. Where such transfers occur, bull99 ensures that appropriate safeguards are in place — including contractual standard clauses, data processing agreements, and, where applicable, adequacy decisions — to protect your personal data to a standard equivalent to that applied within the jurisdiction of our gaming licence.

8.Data Retention

bull99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. Specific retention periods are as follows:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by our gaming licence and anti-money-laundering obligations.
• Transaction records: Retained for a minimum of five (5) years.
• Gaming activity data: Retained for a minimum of three (3) years from the date of the relevant session.
• Support communications: Retained for two (2) years from the date of the final communication in a support thread.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent management.

Upon expiry of applicable retention periods, data is securely deleted or anonymised in accordance with industry best practices.

9.Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. bull99 uses cookies and similar technologies (including session tokens and local storage) to operate the Platform, maintain your login session, remember your preferences, and gather analytical data about usage patterns.

9.2 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting Platform functionality.
• Functional cookies: Store your preferences such as language settings and remembered login username (where you have enabled the Remember Me option).
• Analytical cookies: Help us understand how players navigate the Platform so we can improve the user experience. Data collected is aggregated and anonymised where possible.
• Fraud prevention cookies: Used to identify unusual login patterns and device characteristics that may indicate unauthorised account access or fraudulent activity.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the bull99 Platform. Strictly necessary cookies required for Platform operation and security cannot be disabled without preventing access to the Platform.

10.Your Rights

Subject to applicable law and the terms of our gaming licence, you hold the following rights in respect of your personal data held by bull99:

• Right of access: You may request a copy of the personal data bull99 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact bull99 via Live Chat or by email at [email protected] (plain text). We will respond within thirty (30) calendar days. Requests may be subject to identity verification before we action them.

11.Children & Minors

The bull99 Platform is strictly for adults aged 21 and over. bull99 does not knowingly collect personal data from individuals under the age of 21. If we discover or are notified that personal data has been collected from a person under 21, we will immediately close the relevant account, delete or anonymise all associated data (subject to any regulatory retention obligations), and return any deposited funds to the source payment method.

If you believe that a minor has registered an account on the bull99 Platform, please contact us immediately via Live Chat so that the matter can be investigated and resolved promptly.

12.Security Measures

bull99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bull99 servers;
• Encryption at rest for sensitive stored data, including identity documents and financial records;
• Role-based access controls that restrict access to personal data to staff with a legitimate operational need;
• Multi-factor authentication for internal systems that handle personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Incident response procedures to detect, contain, and report data security incidents in accordance with regulatory requirements.

While bull99 takes all reasonable steps to protect your data, no internet transmission can be guaranteed to be completely secure. You transmit data to the Platform at your own risk, and you are responsible for maintaining the security of your own device and login credentials.

13.Third-Party Links

The bull99 Platform does not contain links to external third-party websites. In the event that any contextual reference to third-party services exists within Platform content, bull99 is not responsible for the privacy practices of those third parties. Players who navigate to any external service do so at their own discretion and under that service's applicable privacy policy.

14.Policy Amendments

bull99 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via in-Platform notification or email at least seven (7) days before the revised Policy takes effect, except where immediate changes are required for legal or regulatory compliance. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15.Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or bull99's data handling practices, please contact our support team via Live Chat (available 24/7) or by email at [email protected] (plain text — not a clickable link).

bull99 aims to acknowledge data protection enquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days.

If you are not satisfied with bull99's response to a data protection complaint, you have the right to escalate the matter to the relevant supervisory authority or the independent dispute resolution body designated under our gaming authority licence.