At bpay99, your privacy is more than a legal obligation — it is our responsibility to you. Find out exactly how we collect, use, and protect every piece of personal information you entrust to us.
Document Version
Version 2.5
Updated: 1 January 2026
Last updated: 1 Jan 2026
Version: 2.5
Welcome to the bpay99 Privacy Policy. This document explains in detail how bpay99 — Malaysia's leading online entertainment platform — collects, uses, stores, and protects your personal information when you use our services.
This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects bpay99's full commitment to transparency in all data handling practices. When you register an account, make a deposit, play on our platform, or simply browse the bpay99 website, you consent to the practices described in this policy.
This Privacy Policy forms part of the Terms and Conditions bpay99 and should be read together with that document. In the event of any conflict, the provisions of this Privacy Policy shall apply in matters relating to personal data.
We understand that your trust is bpay99's most valuable asset. We never sell, rent, or disclose your personal data to any third party without your explicit consent, except in situations required by Malaysian law.
Bpay99 only collects information that is strictly necessary to provide you with a safe, seamless, and high-quality service. This information is divided into several key categories:
| Data Categories | Examples of Information | Primary Purposes |
|---|---|---|
| Identity Information | Full name, national identity card number (MyKad), date of birth | KYC verification, legal compliance |
| Contact Information | Phone number, email address, residential address | Account communications, OTP verification |
| Financial Information | Bank account number, bank name, transaction records | Processing deposits and withdrawals |
| Technical Data | IP address, device type, operating system version, web browser | Account security, fraud detection |
| Usage Data | Game records, session duration, game preferences | Service improvement, internal analytics |
| Communication Data | Support chat logs, emails, complaint tickets | Complaint resolution, quality assurance |
All data is collected directly from you during registration, account verification (KYC), financial transactions, and platform usage. We do not collect sensitive personal data such as medical records or religious information without your explicit consent.
Bpay99 follows a "minimum collection" principle — we only request data that is strictly necessary, not everything that might be useful. If a piece of data is not required for platform operations, we will not ask for it.
Every piece of data we collect is used for a clear and legitimate purpose. bpay99 never uses your data for purposes unrelated to platform operations without obtaining your prior consent. The primary purposes for data use are as follows:
If you no longer wish to receive marketing communications from bpay99, you may opt out at any time through the notification settings in your account or by contacting our support team. However, communications directly related to account security and financial transactions cannot be disabled, as they are essential to protecting you.
Bpay99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website, and they help us recognise you on future visits.
You can manage your cookie preferences through your web browser at any time. Please note that disabling essential cookies may affect certain functions on the bpay99 platform. For non-essential cookies, you may opt out without impacting your core platform experience.
Bpay99 does not use third-party cookies for advertising or cross-site tracking purposes. All cookies we use are solely for the operation and improvement of the bpay99 platform.
Bpay99 has never sold, rented, or traded your personal data to any third party for their own commercial purposes. However, there are limited situations where we may need to share certain information with trusted parties:
All third parties that receive bpay99 user data are required to sign strict data processing agreements, adhere to data protection standards equal to or higher than our own, and use that data only for authorised purposes.
Your data security is bpay99's highest priority. We continuously invest in the latest security infrastructure to ensure your personal information is always protected from unauthorized access, loss, misuse, or disclosure.
While bpay99 takes all reasonable steps to protect your data, no digital security system can guarantee 100% protection. We therefore encourage you to also play your part in keeping your account secure by using a strong password and never sharing your login credentials with anyone.
As a bpay99 user and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:
You have the right to request a copy of all personal data we hold about you at any time.
You may request corrections to any inaccurate or outdated personal data held in our records.
You may request the deletion of your personal data once it is no longer required for its original purpose of collection.
You may request that we restrict how we process your data in certain circumstances permitted under the PDPA.
You have the right to object to the processing of your personal data for direct marketing purposes at any time.
You may request your personal data in a machine-readable format for transfer to another service provider.
To exercise any of the above rights, please contact our privacy team by email at [email protected] with the subject line "PDPA Privacy Rights Request". We will process your request within 21 business days as required by the PDPA.
Bpay99 retains your personal data for as long as necessary to fulfil the original purpose of collection, or as required by applicable Malaysian law. Retention periods vary by data type:
Once the designated retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.
The bpay99 platform may contain links or integrations with third-party services such as game providers, payment gateways, and analytics services. Please note that:
Bpay99 only works with third-party providers that have a strong track record in data protection and have undergone our internal security assessment process before integration is approved.
Bpay99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Each new version supersedes the previous one and takes effect immediately upon publication on the platform.
When we make significant changes to this policy, we will notify you through one or more of the following methods:
Continued use of the bpay99 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account before they take effect.
We recommend reviewing this Privacy Policy page regularly — at least once every three months — to stay informed on how we handle your personal data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how bpay99 handles your personal data, our Data Protection Officer team is ready to listen and assist you.
Bpay99 is committed to resolving every privacy inquiry and complaint thoroughly, fairly, and in a timely manner. Your trust is our priority, and we are always ready to provide clear and satisfactory responses to any concerns you raise.
Six core pillars underpinning the protection of your personal data on our platform.
All data transmitted between your device and bpay99 servers is protected with 256-bit SSL encryption. No third party can read or intercept your information in transit.
Bpay99 has never and will never sell, rent, or trade your personal data to any third party for their commercial gain. Your data belongs to you alone.
All data handling operations at bpay99 are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), providing you with robust legal protection.
You have the full right to access, correct, delete, or transfer your personal data at any time. Our privacy team is committed to processing every request within 21 business days.
Access to user data within the bpay99 organisation is strictly controlled under the principle of least privilege. Only staff with a legitimate operational need are granted access.
Bpay99's security monitoring system operates around the clock to detect any suspicious activity, unauthorised access, or potential data breaches before they can impact you.