Privacy Policy

bp99c ("we", "our", "us", "the Platform") operates the online gaming services accessible at https://bp99c.cam and all related subdomains and applications. We take the privacy and security of your personal data seriously, and we are committed to handling it in a transparent, lawful, and responsible manner.

This Privacy Policy ("Policy") explains how bp99c collects, uses, stores, shares, and protects the personal data of individuals who visit our website or register an account on our Platform ("you", "the User", "the Player"). It applies to all personal data collected in connection with your use of the bp99c Platform, whether you are accessing it from Kuala Lumpur, Penang, Johor Bahru, Shah Alam, or anywhere else.

By registering an account, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Policy. If you do not agree with how we process your personal data as described herein, please discontinue use of the Platform and contact our support team to request account closure.

For the purposes of this Privacy Policy, the following terms have the meanings ascribed below:

• "Personal Data" means any information that identifies, or could reasonably identify, a natural person — directly or indirectly. This includes but is not limited to name, email address, phone number, payment information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any combination of the above.
• "Data Controller" means bp99c, which determines the purposes and means of processing your personal data.
• "Third Party" means any natural or legal person, public authority, or body other than bp99c and the User, who processes personal data under the authority of bp99c for defined purposes.
• "KYC" means Know Your Customer — the identity verification process we conduct on all registered accounts prior to authorising withdrawal transactions.
• "Cookies" means small text files placed on your device by our website to store session information, preferences, and usage analytics data.

bp99c collects personal data in several categories depending on how you interact with our Platform. The table below summarises the types of data we collect and their respective purposes:

bp99c adheres to the principle of data minimisation — we collect only the personal data that is strictly necessary for the stated purposes. We do not collect sensitive categories of personal data (e.g., health data, racial or ethnic origin) unless specifically required for responsible gambling assessments or legal compliance.

bp99c collects your personal data through the following channels:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to promotions.
• Automated Technical Collection: Data collected automatically when you visit or interact with the Platform, including via cookies, server logs, and device fingerprinting technologies. This includes your IP address, browser settings, and page interaction patterns.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification service providers and payment processors, used to verify the accuracy of the information you have provided and to comply with our anti-money laundering obligations.

bp99c processes your personal data for the following purposes:

1. Account Registration & Management: To create and maintain your bp99c player account, verify your identity, enforce the 21+ age requirement, and administer your account settings.
2. Transaction Processing: To facilitate deposits and withdrawals in Malaysian Ringgit (MYR) via supported payment channels including DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Online, Touch 'n Go eWallet, Boost, and GrabPay.
3. KYC & Regulatory Compliance: To verify your identity and age in compliance with our international gaming licence obligations and anti-money laundering (AML) requirements.
4. Customer Support: To respond to your queries, complaints, and support requests submitted via live chat or email.
5. Responsible Gambling: To monitor for signs of problem gambling behaviour and, where appropriate, apply deposit limits, trigger responsible gambling notifications, or contact you with support resources.
6. Fraud Prevention & Security: To detect and prevent fraudulent account activity, unauthorised access, bonus abuse, and other violations of our Terms & Conditions.
7. Platform Improvement: To analyse usage patterns and improve the functionality, performance, and content of the bp99c Platform.
8. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — subject to your communication preferences and applicable opt-out rights.

bp99c processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the player account agreement — including account creation, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with our international gaming licence, AML regulations, and any applicable legal or regulatory requirements (e.g., KYC verification, transaction record-keeping).
• Legitimate Interests: Processing carried out for bp99c's legitimate business interests, including fraud detection, platform security, and responsible gambling monitoring, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your explicit consent, including marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bp99c does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: We share the financial data necessary to process your deposits and withdrawals with the relevant payment service providers (e.g., FPX operators, e-wallet providers such as Touch 'n Go and Boost, local banks including Maybank, CIMB, Public Bank, and Hong Leong).
• KYC & Identity Verification Providers: We share identity documents and personal information with contracted third-party KYC service providers for the purpose of verifying your identity and age.
• Technology Service Providers: We share data with trusted technology partners who provide infrastructure, hosting, analytics, or security services on our behalf. These providers are contractually bound by data processing agreements that restrict their use of your data to the specified purpose.
• Gaming Software Providers: Game session data may be shared with third-party game studios and aggregators for the purpose of operating and auditing the games you play on bp99c.
• Regulatory & Legal Authorities: We may disclose personal data to our licensing authority, law enforcement, or other government bodies where required by law, court order, or regulatory obligation.

bp99c operates internationally and may transfer your personal data to servers or third-party service providers located outside of Malaysia. Where such transfers occur, bp99c takes steps to ensure that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses or equivalent protective mechanisms recognised under applicable international data protection frameworks.

By using the bp99c Platform, you acknowledge and consent to the potential transfer of your personal data to jurisdictions outside Malaysia as described in this Policy.

bp99c retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your active account relationship with bp99c, plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification in accordance with international gaming licence obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Technical & Log Data: Retained for up to 24 months for security and fraud detection purposes, after which it is anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or for up to three (3) years of inactivity, whichever occurs first.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents any reasonable identification of the individual.

bp99c uses cookies and similar tracking technologies to operate the Platform, analyse usage, and improve your experience. The following categories of cookies are used:

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For details on how to manage cookies in your specific browser, refer to your browser's help documentation.

As a data subject, you have the following rights in relation to the personal data bp99c holds about you. These rights may be subject to certain limitations under applicable law and our regulatory compliance obligations:

To exercise any of these rights, please contact our Data Support team via live chat or email at [email protected] (plain text — not a clickable link). We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days, subject to identity verification requirements.

The bp99c Platform is intended exclusively for individuals aged 21 years and above. We do not knowingly collect or process personal data from anyone under the age of 21. Registration of an account by a person under 21 years of age is a material breach of our Terms & Conditions.

All new registrations are subject to KYC age verification. If bp99c becomes aware or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, that account will be immediately suspended and the associated personal data will be deleted in accordance with our data retention procedures.

bp99c implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption for personal data stored at rest on our database servers.
• Role-based access controls, ensuring that personal data is accessible only to bp99c personnel with a legitimate operational need.
• Regular internal and third-party security audits and penetration testing.
• Intrusion detection systems and real-time security monitoring on all production infrastructure.
• Multi-factor authentication requirements for all administrative access to data systems.

Despite these measures, no online system can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bp99c will notify you and, where applicable, the relevant supervisory authority in accordance with our notification obligations under applicable law.

bp99c reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Players via the email address associated with their account and/or by a prominent notice on the Platform, prior to the changes taking effect where reasonably practicable.

The "Last Updated" date at the top of this page indicates the most recent revision. We encourage you to review this Policy periodically to stay informed of how we protect your personal data. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or bp99c's handling of your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 on the bp99c Platform. Average first response under 2 minutes.
• Email: [email protected] (plain text only — not a clickable link). We aim to respond to all privacy-related enquiries within 5 business days.

For responsible gambling support resources, please visit our Responsible Gambling page.

This Privacy Policy was last reviewed and updated on 1 January 2026. bp99c © 2026. All rights reserved.