BX99 Privacy Policy

1 Introduction

BX99 operates an internationally licensed online gaming platform accessible at bx99.cam. This Privacy Policy applies to every individual who visits the website, creates an account, deposits funds, places a wager or otherwise interacts with BX99 and its customer support services.

BX99 takes the privacy of its players seriously. This policy explains clearly what information we collect, why we collect it, how long we keep it, who we may share it with, and what choices you have. It should be read alongside the BX99 Terms & Conditions.

We process personal data under international data protection standards applicable to our licensed operations. Malaysian players should be aware that BX99 is not regulated by a Malaysian authority; however, we apply privacy and data-security obligations consistent with internationally recognised frameworks for player protection.

2 Definitions

Throughout this Privacy Policy the following expressions carry the meanings defined below:

• "Account" — a registered player profile used to access BX99 services.
• "Data Controller" — BX99, the entity that determines the purposes and means of processing your personal data.
• "Personal Data" — any information that identifies or can reasonably identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, deletion and archival.
• "Third Party" — any organisation or individual that is not BX99 or the registered Account holder.
• "User" or "you" — the individual whose personal data is being processed.

3 Data We Collect

BX99 collects Personal Data through several channels. The categories and examples below describe the information we may hold about you:

3.1 Identity and Registration Data

When you create a BX99 account we collect your full legal name, date of birth, gender, nationality and, where required for Know Your Customer (KYC) verification, copies of identity documents such as a Malaysian identity card (MyKad), passport or driving licence.

3.2 Contact Data

We collect your email address, Malaysian mobile telephone number and residential address. These are used for account management, transaction notifications, security alerts and optional marketing communications.

3.3 Financial and Payment Data

When you deposit or withdraw using payment methods such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong or RHB Bank, we record transaction references, payment method identifiers and amounts. We do not store complete card numbers or e-wallet PIN codes.

3.4 Transaction and Gaming Records

We maintain records of all deposits, withdrawals, wagers, game outcomes and bonus activations associated with your account. These records are required for account management, dispute resolution and regulatory compliance.

3.5 Technical and Device Data

We automatically collect IP addresses, browser type and version, operating system, device identifiers, session timestamps and pages visited. This information supports fraud detection, security monitoring and platform performance analysis.

3.6 Communications Data

We retain records of live chat transcripts, email correspondence and support ticket interactions. These records are used to resolve disputes, train support staff and identify patterns that may indicate fraudulent or harmful activity.

4 Data Processing

BX99 processes your Personal Data for the following purposes:

4.1 Account Registration and Operation

Personal Data is required to create and maintain your BX99 account, verify your identity, authenticate login sessions, administer your gaming activity and process payment requests.

4.2 Age Verification and KYC

BX99 enforces a minimum age of 21 years for all registered players. We process identity documents and biographical data to confirm eligibility and to comply with anti-money-laundering and Know Your Customer obligations under our international licensing framework.

4.3 Payment Processing

To complete deposits and withdrawals through Malaysian payment channels including DuitNow, FPX and major bank accounts, we process financial identifiers and transaction records with authorised payment service providers.

4.4 Responsible Gambling Monitoring

We analyse Account activity to identify patterns that may suggest harmful gambling behaviour. Where such patterns are detected, BX99 may contact the player, apply protective limits or restrict account activity in line with our responsible gambling programme.

4.5 Fraud and Security

Technical and behavioural data is processed to detect account takeover attempts, payment fraud, duplicate registrations and other forms of abuse. This processing protects both individual players and the integrity of the platform.

4.6 Marketing and Communications

Where you have opted in to receive promotional communications, BX99 may send you information about available bonuses, sports betting markets covering EPL, Liga Super Malaysia, UFC and other events, and platform updates. You may withdraw consent for optional marketing at any time through account settings or by contacting support.

4.7 Legal and Regulatory Compliance

BX99 may process and disclose Personal Data where required by applicable law, court order, licensing authority instruction, financial intelligence unit obligation or legitimate law enforcement request.

5 Legal Basis for Processing

BX99 relies on the following legal bases when processing Personal Data:

• Contractual necessity — processing required to provide services under the Terms & Conditions you have agreed to, including account administration, payment processing and betting services.
• Legal obligation — processing required to comply with anti-money-laundering regulations, KYC obligations and other applicable legal requirements under our international gaming licence.
• Legitimate interests — processing necessary for fraud prevention, security monitoring, responsible gambling analysis and platform improvement, where those interests are not overridden by your privacy rights.
• Consent — processing for optional marketing communications, where you have clearly opted in and may withdraw consent at any time.

6 Data Sharing

BX99 does not sell your Personal Data. We may share data with the following categories of recipient where necessary and lawful:

• Payment service providers — to process deposits and withdrawals through channels such as Touch 'n Go eWallet, DuitNow, FPX and major Malaysian banks.
• Identity verification providers — third-party KYC services used to validate identity documents and perform age verification.
• Game and technology suppliers — game studios and platform infrastructure providers who process technical data as part of service delivery under contractual data-processing obligations.
• Fraud prevention services — specialist providers who help detect and prevent fraudulent account activity, payment abuse and security breaches.
• Legal and regulatory authorities — where disclosure is required by law, court order or formal request from a competent authority.

7 Data Retention

BX99 retains Personal Data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory and licensing obligations. The following general retention guidelines apply:

• Account and identity records — retained for a minimum period of five years following account closure, consistent with standard anti-money-laundering recordkeeping requirements.
• Transaction and gaming records — retained for a minimum of five years to support dispute resolution, audit and compliance functions.
• Support communications — retained for a minimum of two years or longer where a dispute remains unresolved.
• Marketing preference records — retained for as long as the account is active and for a reasonable period to evidence consent or withdrawal of consent.

Data that is no longer required for any retained purpose is deleted or anonymised in accordance with our data management procedures. Anonymised and aggregated data, which cannot be used to identify you, may be retained indefinitely for analytical purposes.

8 Security Measures

BX99 implements technical and organisational safeguards designed to protect your Personal Data against unauthorised access, accidental loss, alteration and disclosure. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and BX99 servers.
• Encrypted storage of sensitive data fields at rest.
• Access controls limiting internal data access to authorised personnel on a need-to-know basis.
• Two-factor authentication options for player account access.
• Continuous monitoring for anomalous access patterns, brute-force attempts and suspicious transaction behaviour.
• Regular security assessments and penetration testing of platform infrastructure.

No security system can guarantee absolute protection. Players can strengthen account security by using a unique, complex password and enabling available two-factor authentication options. Suspected unauthorised access should be reported to BX99 support immediately.

9 Cookies & Tracking Technologies

BX99 uses cookies and similar technologies to support platform functionality, remember session preferences, analyse site usage and detect fraud. The following types of cookie may be set:

9.1 Strictly Necessary Cookies

Required for the platform to function correctly. These include session identifiers, authentication tokens and security cookies. These cannot be disabled without disrupting core platform features.

9.2 Functional Cookies

Remember your preferences such as language settings, currency selection and notification options to provide a more personalised experience on return visits.

9.3 Analytics Cookies

Collect anonymous, aggregated data about how players navigate the site. This information is used to identify technical issues, improve page performance and optimise user journeys. No individual betting history is used in these analytics.

9.4 Security and Fraud-Detection Cookies

Used to identify suspicious sessions, detect automated bots and protect player accounts from credential-stuffing and account-takeover attempts. These cookies are essential to the integrity of the platform.

You may manage cookie preferences through your browser settings. Disabling cookies other than strictly necessary ones may affect platform functionality. BX99 does not use cookies to serve third-party advertising networks.

10 User Rights

Subject to applicable law and our retention and compliance obligations, you may have the following rights in respect of your Personal Data held by BX99:

• Right of access — to request a copy of the Personal Data BX99 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete data held your account.
• Right to erasure — to request deletion of your Personal Data where BX99 has no continuing legal basis to retain it. Note that regulatory retention obligations may prevent full erasure in all cases.
• Right to restrict processing — to request that BX99 limits how it uses your data in certain circumstances, such as while a dispute is under review.
• Right to data portability — to receive a structured copy of personal data you have provided to BX99 in a commonly used format, where technically feasible.
• Right to withdraw consent — where processing is based on your consent (for example, optional marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object — to object to processing based on legitimate interests, including direct marketing.

11 Minors and Age Restrictions

BX99 is an adult platform. No person under the age of 21 is permitted to register for or use BX99 services. If BX99 becomes aware that Personal Data belonging to a person under 21 has been collected, that data will be deleted and the associated account closed without delay.

Parents and guardians who suspect that a minor has accessed BX99 should contact support immediately. We take age verification obligations seriously and apply KYC document checks to enforce this restriction.

12 International Data Transfers

BX99 operates on an internationally distributed infrastructure. Your Personal Data may be stored on or accessed from servers located outside Malaysia. Where data is transferred internationally, BX99 takes steps to ensure that an appropriate level of protection is applied, consistent with the standards under which our platform is licensed.

Transfers to payment processors, KYC providers and technology suppliers are governed by contractual data-processing agreements that impose data protection obligations on those recipients. BX99 does not transfer your data to recipients in jurisdictions that provide no meaningful data protection framework without implementing additional safeguards.

13 Changes to This Policy

BX99 may update this Privacy Policy from time to time to reflect changes in how we process data, to comply with updated legal obligations or to improve clarity. Material changes will be published on this page with a revised effective date.

Where a change is significant, BX99 may notify registered players via their account email address. Continued use of BX99 after the effective date of a revised policy constitutes acceptance of the updated terms. Players who do not accept a change should discontinue use and contact support to close their account.

14 Contact Us

For questions, concerns or requests relating to this Privacy Policy or the Personal Data BX99 holds about you, please contact our support team:

• Live Chat: Available 24/7 through the BX99 platform — the fastest route for account-specific matters.
• Email (non-urgent enquiries): [email protected]

Please do not send passwords, full payment credentials or other sensitive account information by email. Identity verification will be required before BX99 can disclose information or action data rights request.

For further guidance on protecting your personal information online, you may consult publicly available resources from internationally recognised data protection authorities. BX99 does not endorse any third-party resource and provides no external links from this page.