BX99 Official Documents

BX99 Privacy Policy – Malaysia Player Data & Privacy Protection

Bx99 takes your privacy seriously. This document clearly explains how we collect, use, store and protect the personal information of Malaysian players using the bx99 platform.

SSL 256-bit Updated: January 2026 Bahasa Melayu PDPA Compliance
Your personal data is protected with bank-grade encryption and is never sold to third parties.
Updated: January 2026

BX99 Privacy Policy Summary

Updated: January 2026

A quick overview of the key points in bx99's Privacy Policy before you read the full document.

ItemQuick Summary
Data CollectedName, phone number, email, IP address, betting records, payment information and KYC documents.
Purpose of CollectionIdentity verification, payment processing, account security, AML/KYC compliance and service improvements.
Data EncryptionSSL 256-bit for all data in transit. Stored data is protected with AES-256 encryption.
Data SharingData is never sold to third parties. It is only shared with relevant service providers and regulatory authorities where required by law.
Data RetentionActive data is retained for as long as your bx99 account remains active. Transaction data is kept for a minimum of 7 years for legal compliance purposes.
User RightsRights to access, rectify, erase, restrict processing and port your data in accordance with Malaysia's PDPA.
CookiesBx99 uses cookies for platform functionality, performance analytics and an improved user experience.
Privacy ContactEmail: support@bx99.world for any enquiries relating to your privacy and personal data.

BX99's Privacy Commitment to Malaysian Players

Six core principles that form the foundation of how bx99 handles your personal data

Bank-Grade Encryption

All data transmitted between your device and bx99's servers is encrypted using SSL 256-bit – the same standard used by Malaysia's major banking institutions. Stored data is further protected with AES-256 encryption. No sensitive data is stored in plain text on any bx99 system.

Data Not Sold to Third Parties

Bx99 does not sell, rent, or trade Malaysian players' personal data to any third party for marketing or commercial purposes. Your data belongs to you. bx99 uses your data solely for the purposes clearly stated in this Privacy Policy — nothing more.

Malaysia PDPA Compliance

Bx99's Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means you have clear legal rights to access, correct and request the deletion of your personal data held by bx99 at any time.

Minimum Data Collection

Bx99 only collects personal data that is strictly necessary to operate its services. We do not collect irrelevant or excessive data. This data minimisation principle ensures your digital footprint at bx99 is kept to only what is required for safe and lawful operations.

Strict Internal Access Controls

Only bx99 staff who genuinely need access to player data to carry out their authorised duties are permitted to do so. Internal access is governed through a tiered permissions system, comprehensive audit logs and mandatory privacy training for all staff who handle Malaysian players' data.

Data Breach Notification

In the event of any security incident that may affect bx99 players' personal data, we are committed to notifying affected players within the timeframe required by law. bx99 has a tested incident response plan in place to ensure swift and effective action in such situations.

Important Notice – BX99 Privacy Policy

By registering and using the bx99 platform, you confirm that you have read and understood this Privacy Policy. This document outlines your rights regarding your personal data and how bx99 manages it. For any privacy enquiries, contact us at support@bx99.world.

1

Introduction — BX99's Privacy Commitment

Bx99 ("we", "Platform" or "bx99") is fully committed to protecting the privacy and data security of all Malaysian players using the bx99.world platform. This Privacy Policy transparently explains how we collect, use, store, protect, and in certain circumstances, disclose your personal information.

This policy is guided by Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices in data management. We believe that transparency in how data is handled is the foundation of the trust you place in bx99, and that trust is something we do not take lightly.

This Privacy Policy should be read together with Terms & Conditions bx99 and policies Responsible Gambling us, all of which together form the entire agreement between you and bx99.

2

Personal Data Collected by BX99

Bx99 collects your personal data through several channels – during account registration, while you use the platform, during the identity verification process and through your interactions with bx99 customer support. The categories of data collected are as follows:

Data you provide directly:

  • Full name as shown on official identity documents;
  • An active Malaysian mobile number for OTP verification;
  • Email address for official bx99 communications;
  • Date of birth for verification of the minimum age requirement of 18 years;
  • Malaysian bank account or e-wallet details (Touch 'n Go account number, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks or FPX) for processing deposits and withdrawals;
  • A copy of your MyKad or passport for the KYC (Know Your Customer) process prior to your first withdrawal.

Automatically collected data:

  • The IP address of the device used to access bx99;
  • Device type, operating system and web browser;
  • Session data – login times, pages visited and session duration;
  • Detailed betting records including game type, stake amounts and outcomes;
  • Financial transaction records — deposits, withdrawals and bx99 bonus credits;
  • Cookie data and tracking technologies as described in Section 7.

Bx99 only collects data that is necessary to operate the service safely and lawfully. We do not request or retain information that is unrelated to the operation of the bx99 platform.

3

How BX99 Uses Your Personal Data

Personal data collected by bx99 is used solely for the following legitimate and stated purposes:

  • Account management: Creating, verifying and maintaining your bx99 account, including identity verification and player eligibility;
  • Financial processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawal of winnings to your account;
  • Platform security: Detecting and preventing fraud, money laundering, account misuse, and activities that violate bx99's Terms & Conditions;
  • Legal compliance: Fulfilling legal obligations, including KYC and AML procedures as required by regulatory authorities;
  • Customer service: Responding to inquiries, resolving complaints and providing technical support in Bahasa Melayu to bx99 players;
  • Platform communications: Sending account notifications, security alerts, terms updates, and relevant bx99 promotional information;
  • Service improvements: Analysing aggregated usage patterns to improve the performance, design and user experience of the bx99 platform;
  • Responsible gaming: Monitoring gameplay patterns to identify players who may benefit from responsible gaming support.

Bx99 does not use your personal data for any purpose beyond those stated above without first obtaining your additional consent.

4

BX99's Sharing of Personal Data with Third Parties

Bx99 does not sell, rent or trade players' personal data to third parties for any marketing or commercial purpose. However, in the course of its operations, bx99 may share your personal data with the following categories of parties, strictly for legitimate purposes:

  • Payment service providers: Malaysian e-wallet and banking providers required to process your deposits and withdrawals – including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX-member banking institutions. Data sharing is limited strictly to information necessary to complete each transaction;
  • Game providers: Game software providers that supply Live Casino, table games, virtual sports, e-sports and slots within the bx99 platform. Data shared is limited to what is necessary to run the games securely;
  • Technical service providers: Companies that provide IT infrastructure, hosting, cybersecurity and analytics services supporting the bx99 platform's operations. All such providers are bound by strict data protection agreements;
  • Regulatory and enforcement authorities: Lawful authorities such as the police, courts, or industry regulators where bx99 has a legal obligation to do so, or where disclosure is necessary to protect public safety.

Every third-party service provider that receives bx99 player data is bound by strict confidentiality and data protection agreements. They are permitted to use that data only for purposes mutually agreed upon with bx99.

5

Personal Data Security on the BX99 Platform

Bx99 implements a range of technical and organisational security measures to protect Malaysian players' personal data from unauthorised access, alteration, disclosure, or unlawful destruction:

  • Data encryption in transit: All communications between your device and bx99's servers are protected with 256-bit SSL/TLS encryption — the same standard used by Maybank, CIMB and Malaysia's major banks;
  • Stored data encryption: Sensitive data stored in bx99's databases is encrypted using AES-256, providing an additional layer of protection even in the event of unauthorised physical access;
  • Access controls: Access to player data is restricted to bx99 staff with a legitimate business need. A tiered permissions system ensures that no single staff member has full access to all data;
  • Continuous monitoring: An intrusion detection system (IDS) and 24-hour threat monitoring help bx99 identify and respond to any suspicious access attempts in real time;
  • Regular security audits: bx99 conducts regular vulnerability assessments and penetration testing by independent third parties to ensure the platform's security defences remain up to date;
  • Staff training: All bx99 staff who handle player data receive regular security awareness and data privacy training.

Despite all these security measures, no system can be guaranteed 100% safe against every possible cyber threat. bx99 is nonetheless committed to responding swiftly and responsibly in the event of any security incident.

6

BX99 Personal Data Retention Period

Bx99 retains players' personal data for as long as necessary for the purposes set out in this Privacy Policy, or for as long as required under applicable Malaysian law. The following are bx99's data retention guidelines:

  • Active account data: Retained for the duration your bx99 account is active and for a reasonable period after closure to resolve any outstanding disputes;
  • Financial transaction records: Retained for a minimum of 7 years from the transaction date to comply with financial reporting and AML requirements mandated under Malaysian law;
  • KYC documents: Retained for the duration the account is active and for a minimum of 5 years after closure to meet legal compliance requirements;
  • Customer support communication logs: Retained for 2 years for quality control and complaint resolution purposes;
  • Log and security data: Retained for 12 months for security investigation and digital forensics purposes if required.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with bx99's established procedures. Anonymised data may be retained for statistical purposes and cannot be linked back to any individual.

7

Cookies & Tracking Technologies at BX99

Bx99 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and understand how players interact with our services. The following are the types of cookies used by bx99:

  • Essential cookies: Required for core bx99 platform functions such as login sessions, security and navigation. These cookies cannot be disabled as they are essential for the platform to operate;
  • Functional cookies: Stores your preferences such as language, display settings and session information to enhance your gaming experience at bx99;
  • Analytics cookies: Collecting aggregated, anonymised information about how players use the bx99 platform to help us understand usage patterns and improve our services;
  • Security cookies: Helping bx99 identify and prevent fraudulent activity by detecting unusual or suspicious access patterns.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality and security of your bx99 account. For analytics and functional cookies, you may opt out without impacting your core gaming experience at bx99.

8

Your Rights Regarding Personal Data at BX99

As a bx99 player who is a Malaysian citizen or resident, you have the following rights regarding your personal data under Malaysia's PDPA 2010:

  • Right to access: You have the right to request a copy of the personal data bx99 holds about you. Requests will be processed within 21 business days;
  • Right to rectification: You may request that bx99 correct any personal data in our records that is inaccurate or incomplete;
  • Right to erasure: Under certain circumstances, you may request that bx99 delete your personal data. Such requests are subject to our legal obligations to retain certain data, such as transaction records;
  • Right to restrict processing: You may request that bx99 restrict the way we process your personal data in certain circumstances provided for by law;
  • Right to data portability: You have the right to receive your personal data in a machine-readable format for transfer to another platform should you choose to do so;
  • Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.

To exercise any of the rights above, please contact the bx99 privacy team by email at support@bx99.world, clearly stating the right you wish to exercise and the relevant details. bx99 will respond to your request within the timeframe prescribed by Malaysia's PDPA.

9

Protection of Children's Data at BX99

Bx99 is an adult entertainment platform strictly restricted to individuals aged 18 and above. bx99 does not knowingly collect or store any personal data from individuals under the age of 18.

If bx99 discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will immediately take the following steps:

  • Suspending and subsequently terminating the account in question with immediate effect;
  • Deleting all personal data associated with that account from bx99's systems;
  • Returning any remaining account balance (if applicable) to the responsible party;
  • Recording the incident for bx99's internal compliance purposes.

Parents or guardians who believe their minor child has registered a bx99 account without authorisation are encouraged to contact the bx99 support team immediately by email at support@bx99.world or via 24-hour live chat.

10

Cross-Border Data Transfers by BX99

In certain operational circumstances, bx99 players' personal data may be processed or stored on servers located outside Malaysia, particularly in connection with the provision of live casino gaming services and the platform's technical infrastructure. Such transfers only take place under the following conditions:

  • Where it is necessary to deliver a service requested by a bx99 player (such as Live Casino games with dealers at international studios);
  • Where the data recipient in a foreign country is subject to a level of data protection equivalent to or higher than the standards set out under Malaysia's PDPA;
  • Where bx99 has implemented appropriate regulatory safeguards, such as standard contractual clauses, to ensure adequate data protection.

Bx99 ensures that all cross-border data transfers are carried out with appropriate safeguards and in full compliance with applicable legal requirements. You may request further information about the regulatory mechanisms used for specific data transfers by contacting bx99.

11

Changes to BX99's Privacy Policy

Bx99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable legal requirements or developments in the data protection industry. Any changes to this Privacy Policy will be communicated to bx99 players via:

  • A prominent notice displayed on the bx99.world homepage whenever an updated policy is published;
  • Email sent to the registered email address on your bx99 account for any material changes;
  • An in-platform pop-up notification during your next login session after the changes have been made.

The updated Privacy Policy takes effect from the date stated at the top of this document. Your continued use of the bx99 platform after that date constitutes acceptance of the new privacy terms. If you do not agree with the changes, you have the right to close your bx99 account and request the deletion of your personal data.

The current version of this Privacy Policy is effective from January 2026. Please check this page periodically.

12

Contact BX99 for Privacy Enquiries

If you have any questions, concerns, or wish to exercise your personal data rights as described in this Privacy Policy, the bx99 privacy team is here to help:

  • Privacy email: support@bx99.world – please state "Data Privacy Inquiry" in the email subject line for faster handling. Response within 5 business days;
  • Live Chat: Available 24 hours a day, 7 days a week within the bx99 platform for general account and privacy inquiries;
  • Frequently Asked Questions: Visit the page Frequently Asked Questions bx99 for instant answers to the most frequently asked privacy questions.

For data protection complaints that bx99 is unable to resolve to your satisfaction, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for PDPA enforcement in Malaysia.

Your Privacy is BX99's Priority

In today's digital world, personal information is a valuable asset. Many Malaysian players remain hesitant to register on online platforms due to concerns about how their data is used. bx99 understands these concerns and takes that responsibility seriously. This Privacy Policy is more than a legal formality — it is a genuine agreement between bx99 and every Malaysian player who entrusts us with their personal information.

When you deposit funds into bx99 via Touch 'n Go eWallet or DuitNow, your transaction information goes nowhere except through our secure payment processing system. When you submit a copy of your MyKad for KYC verification, that document is stored in an encrypted system with strictly limited access. bx99 does not use your data to serve advertisements, does not share your data with marketing companies, and does not build a commercial profile of you for any purpose beyond operating the platform.

Why BX99 Needs Your Personal Data

Malaysian players sometimes wonder why bx99 requires certain information, particularly KYC documents during a first withdrawal. The answer is straightforward – it is both a legal requirement and a safeguard for you personally. KYC procedures ensure that only the legitimate account holder can make withdrawals, protecting you from situations where someone else attempts to withdraw funds from your bx99 account without authorisation.

From a legal standpoint, financial and gaming platforms worldwide, including Malaysia, are required under anti-money laundering (AML) laws to verify their customers' identities. This is not a choice bx99 makes — it is a legal obligation. bx99 carries out these procedures in the least burdensome and most secure manner possible for Malaysian players, while ensuring full compliance with all applicable legal requirements.

How BX99 Keeps Your Data Separate from Other Players

Each bx99 account is isolated from all other accounts in our system. Your betting data is never combined with that of other players. Your financial records are private and accessible only to you and the bx99 staff responsible for processing the relevant transactions. Even within the bx99 customer support team, staff can only view information relevant to the case they are assisting with — they cannot access your full account history without a legitimate work reason.

Bx99's audit log system records every instance of staff accessing a player's account data, including the date, time, staff member involved, and reason for access. This ensures a high level of internal accountability and helps bx99 detect any unwarranted access. In the event of a data breach or security incident involving your personal data, bx99 is committed to notifying you within the timeframe required under Malaysian law.

Privacy in the Context of BX99 Responsible Gaming

Bx99 uses player betting data for responsible gaming purposes — to identify patterns that may indicate a gambling problem. This is a data use we carry out to protect players, not to exploit them. If the bx99 system detects concerning patterns, our team may reach out to the player in question to offer information about available self-control tools.

Using data for responsible gaming purposes is a prime example of how bx99 puts player information to work in the player's own interest. We do not use gameplay pattern data to send marketing messages designed to encourage you to play more when you should be taking a break. bx99 has an internal code of ethics that prohibits the use of such data in ways that could be harmful to players.

Your Privacy Rights at BX99

Your four core rights as a bx99 player under Malaysia's PDPA

Right to Access Data

Request a copy of all personal data bx99 holds about you. We will process your request within 21 business days.

Right to Rectification

Correct any inaccurate or incomplete personal data in your bx99 records at any time.

Right to Erasure

Request deletion of your personal data under certain circumstances, subject to legal retention obligations.

Right to Data Portability

Receive your personal data in a machine-readable format for transfer to another platform, should you choose to do so.

BX99's Data Security Layers

Technologies and processes that protect the personal data of Malaysian players on the bx99 platform

SSL/TLS 256-bit Encryption All data communications between your device and bx99's servers are encrypted to the same 256-bit SSL standard used by Malaysian banking institutions.
AES-256 Data at Rest Encryption Sensitive data stored in bx99's databases is protected with AES-256 encryption for layered security.
Tiered Access Controls bx99 staff access to player data is restricted on a need-to-know basis and fully logged for accountability.
24/7 Threat Monitoring An active intrusion detection system monitors the bx99 platform around the clock to identify and block cyber threats.
Regular Security Audits Vulnerability assessments and penetration testing by independent third parties are conducted on a regular basis to ensure the bx99 platform's defences remain up to date.
Malaysia PDPA Compliance bx99's Privacy Policy is drafted in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010.

BX99 Players' Trust in Privacy Protection

Based on a survey of active bx99 players throughout 2026–2026

Confidence in Data Security at BX99 96%
Satisfaction with BX99 Privacy Policy Transparency 93%
BX99 Privacy Support Response Times 91%
Overall Trust in the BX99 Platform 94%

FAQ – BX99 Privacy Policy

Answers to the most frequently asked questions by Malaysian players about data privacy at bx99

No. bx99 does not sell, rent or share players' personal data with any marketing company or third party for commercial purposes. Your personal data is only shared with service providers necessary to operate the platform — such as payment processors handling your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay and others — and only to the extent required for those purposes. All such providers are bound by strict confidentiality agreements with bx99.

Know Your Customer (KYC) procedures are a mandatory legal requirement for all legitimately operating financial and gaming platforms, including bx99. They are designed to prevent money laundering, ensure that only the legitimate account holder can make withdrawals and protect you from account misuse. Your MyKad copy is stored in bx99's encrypted systems with strictly limited access and is used solely for identity verification purposes. KYC is required only once for the lifetime of your bx99 account.

Yes, you have the right to request deletion of your personal data held by bx99 under certain circumstances provided for under Malaysia's PDPA. However, such requests may not be fulfilled in full where bx99 has a legal obligation to retain the data — for example, financial transaction records must be kept for a minimum of 7 years to comply with anti-money laundering laws. To initiate a data deletion request, contact bx99 at support@bx99.world with the subject line "Data Deletion Request". Your bx99 account must be closed before data deletion processing can proceed.

When your bx99 account is closed, active account data — such as profile information and setting preferences — is no longer used for platform operations. However, bx99 is legally required to retain financial transaction records for a minimum of 7 years and KYC documents for a minimum of 5 years following account closure. These are mandatory legal obligations that cannot be waived. Once the required retention periods have elapsed, your data will be securely deleted or anonymised in accordance with bx99's data management procedures.

If you have a complaint regarding how bx99 handles your personal data, the first step is to contact the bx99 team by email at support@bx99.world, clearly setting out the details of your complaint. bx99 will review your complaint and respond within 10 business days. If you are not satisfied with how bx99 has handled your complaint, you have the right to escalate it to Malaysia's Personal Data Protection Department (PDPD), the official PDPA regulatory body in the country.
Responsible Gaming & BX99 Privacy

Your gaming data on bx99 is used in part to identify play patterns that may indicate a need for responsible gaming support — this is done to protect you, not to exploit you. For information on self-exclusion tools, deposit limits and self-break options, visit the Responsible Gambling us. Age limit: 18 and above.

Relationship with BX99 Terms & Conditions

This Privacy Policy forms part of the overall agreement between you and bx99, and should be read together with the Terms & Conditions bx99. In the event of any conflict between this Privacy Policy and the Terms & Conditions relating to data protection, this Privacy Policy shall take precedence.

Play Safe & Privacy Protected at BX99

Your personal data is protected with bank-grade encryption and is never sold to third parties. Register for free today, deposit via Touch 'n Go eWallet or DuitNow, and enjoy a safe, fair, and secure online casino experience at bx99.

18+ age restriction • SSL 256-bit data protection • Malaysia PDPA compliant

Bahasa Melayu