bp99c Privacy Policy

1 Who We Are

bp99c operates the online gaming platform accessible at bp99c.net, providing casino games, live dealer experiences, and sports betting services to eligible players. References in this Privacy Policy to "bp99c," "we," "us," or "our" refer to the operator of the bp99c platform.

bp99c acts as the data controller in respect of personal data collected directly through the bp99c platform. For purposes of this Policy, "personal data" means any information relating to an identified or identifiable natural person — including name, email address, phone number, device identifiers, financial account information, and gameplay history.

2 Data We Collect

bp99c collects personal data from you in the following ways and categories:

3 How We Use Your Data

bp99c uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your bp99c Account, verify your identity, and process login authentication.
• Service Delivery: To enable you to play games, place bets, participate in promotions, and access all bp99c platform features.
• Payment Processing: To process deposits and withdrawals via your selected payment method — including Touch n Go eWallet, Boost, GrabPay, and supported Malaysian banks.
• KYC & Compliance: To verify your age (21+), identity, and source of funds in fulfilment of anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account abuse, and security breaches.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce deposit or loss limits set by the Player, and process self-exclusion requests.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of support interactions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, improve the user experience, and develop new platform features.
• Legal Obligations: To comply with applicable laws, regulatory requirements, court orders, or lawful requests from government authorities.

4 Legal Basis for Processing

bp99c processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the services you have registered for under bp99c's Terms and Conditions.
• Legal Obligation: Processing required to comply with AML, KYC, tax reporting, and other applicable legal and regulatory requirements.
• Legitimate Interests: Processing conducted for bp99c's legitimate business interests, including fraud prevention, platform security, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, including marketing communications and optional data sharing. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Sharing Your Data

bp99c does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Game Providers: To enable game functionality and record gameplay outcomes. Game providers operate under their own certified frameworks and are contractually bound to protect data.
• Payment Processors: Including Touch n Go eWallet, Boost, GrabPay, and Malaysian bank partners — to facilitate deposits and withdrawals. These parties process only the data required to complete financial transactions.
• KYC & Identity Verification Providers: Third-party services used to verify identity documents and age in compliance with regulatory requirements.
• IT Infrastructure & Hosting Providers: Data centres and cloud service providers who host bp99c platform infrastructure under strict confidentiality agreements.
• Fraud Prevention & Security Vendors: Providers who assist in detecting and preventing fraudulent account activity and financial crime.
• Regulatory Authorities & Law Enforcement: Where required by applicable law, court order, or regulatory directive, bp99c may be required to disclose personal data to government authorities or law enforcement agencies.

6 Cookies & Tracking Technologies

bp99c uses cookies and similar tracking technologies on the bp99c.net platform. Cookies are small data files stored on your device that help us provide and improve our services.

We use the following types of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to understand how players navigate the platform, which features are most used, and where technical issues occur. This data is used in aggregate and does not identify individual users.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limits you have set.
• Security Cookies: Support fraud detection and bot prevention measures.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect your ability to use some bp99c platform features. bp99c does not use third-party advertising cookies or share cookie data with advertising networks.

7 Data Retention

bp99c retains your personal data for as long as your Account is active and for such additional periods as are required to fulfil the purposes described in this Policy or as mandated by applicable law.

Specific retention periods apply as follows:

• Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years following the date of each transaction, as required under financial record-keeping regulations.
• Gameplay history: Retained for three (3) years following your last active session, or longer where required by regulatory obligations.
• Support communications: Retained for two (2) years from the date of the last communication in a support thread.
• Marketing consent records: Retained until you withdraw consent or for a reasonable period following Account closure.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with any individual.

8 Data Security

bp99c implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bp99c servers;
• Encryption of sensitive stored data, including financial information and identity documents;
• Access controls restricting staff access to personal data on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability monitoring;
• Multi-factor authentication for internal systems that hold personal data;
• Incident response procedures to detect, contain, and respond to data security incidents.

Notwithstanding these measures, no method of data transmission over the internet or electronic storage is completely secure. bp99c cannot guarantee absolute security, and Players are encouraged to take their own precautions — including using strong, unique passwords and enabling two-factor authentication on their bp99c Account.

9 Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by bp99c:

• Right of Access: You may request a copy of the personal data bp99c holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. You can update basic account information directly in your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bp99c's legal retention obligations.
• Right to Restriction: You may request that bp99c restricts processing of your data in certain circumstances — for example, while accuracy is contested.
• Right to Data Portability: You may request a copy of data you provided to bp99c in a structured, machine-readable format, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, or to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact bp99c support. We will respond to verified requests within a reasonable timeframe. We may need to verify your identity before processing certain requests.

10 Children's Privacy

The bp99c platform is strictly intended for adults aged 21 years and above. bp99c does not knowingly collect, use, or retain personal data from individuals under the age of 21. If you believe that a minor has provided personal data to bp99c, please contact us immediately at [email protected] and we will take prompt steps to delete such data and close the relevant account.

Age verification is applied at the point of withdrawal, and bp99c reserves the right to request proof of age at any stage of the Account lifecycle. Any Account found to be held by a person under 21 will be closed immediately in accordance with bp99c's Terms and Conditions.

11 International Data Transfers

bp99c may transfer personal data to service providers or infrastructure located outside Malaysia. Where such transfers occur, bp99c ensures that appropriate safeguards are in place — including contractual data protection clauses with the receiving party — to protect your data to a standard consistent with this Privacy Policy.

By using the bp99c platform, you acknowledge that your data may be transferred, stored, and processed in jurisdictions outside your country of residence. bp99c takes reasonable steps to ensure that all international transfers are conducted in a manner that protects your privacy rights.

12 Changes to This Privacy Policy

bp99c may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or platform features. When we make material changes, we will notify you by posting the updated Policy on bp99c.net with a revised "Last Updated" date. For significant changes, we may also provide notice via email to your registered address.

Your continued use of the bp99c platform following the effective date of any updated Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically.

13 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or bp99c's data processing practices, please contact our support team:

When submitting a data rights request, please include your Account username and a description of your request. We may need to verify your identity before processing your request. bp99c aims to acknowledge all data rights requests within 5 business days and to provide a substantive response within 30 days.