Official Data Protection

Privacy Policy bm69 — Your Data, Our Responsibility

At bm69, every player's privacy is not merely a legal obligation — it is our genuine commitment. This document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026 — Version 2.4

Our Commitment

Full compliance with Malaysia's PDPA 2010 256-bit SSL encryption on all data Data is not sold to third parties Your rights to access and delete your data are protected Secure servers with 24/7 monitoring

Protection Comprehensive At Every Level

We implement multiple layers of protection to ensure your personal data remains safe, private, and under your control.

Industry-Grade Encryption

All data transmitted between your device and bm69 servers is protected with 256-bit SSL encryption — the same security standard used by major banking institutions in Malaysia. No third party can intercept your information during transmission.

Strict Access Controls

Your personal data is accessible only to authorised bm69 staff with a legitimate business need. All access is automatically logged and monitored. Violations of internal policy will result in immediate disciplinary action.

Secure Data Storage

All data is stored in data centres equipped with multi-layered physical and digital security. Regular backups are performed to ensure service continuity. Sensitive data such as passwords is stored in hashed form that cannot be decrypted.

No Data Sale

Bm69 has never and will never sell, rent, or commercialise your personal data to any third party for marketing or any other purpose. Your data belongs to you — we only use it to deliver the best service possible.

Two-Factor Authentication

Bm69 supports two-factor authentication (2FA) to protect your account from unauthorised access. Even if your password is compromised, this additional security layer ensures only you can access your account and personal data.

PDPA 2010 Compliance

Bm69 operations fully comply with the Personal Data Protection Act 2010 of Malaysia. We appoint a Data Protection Officer (DPO) to ensure all data handling practices remain aligned with current legal requirements and industry standards.

This Policy ("Policy") describes bm69's practices for collecting, using, disclosing, and protecting your personal information when you access or use the bm69.fun platform and all related services. By registering or using our platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform immediately.

📋 Important Note: This Policy is written in English for the convenience of our players. We recommend reading the full document from time to time as we may update it periodically. The date of the latest update is shown at the top of this page.

1

Personal Information We Collect

Bm69 collects two main categories of information: details you provide directly during registration and platform use, and information collected automatically via standard tracking technologies. Below is a full breakdown of the data types we handle:

A. Information You Provide Directly

  • Full name as stated on your Malaysian identity card or passport
  • Date of birth for minimum age verification of 18 years
  • Active email address used for platform communications
  • An active Malaysian mobile phone number
  • Bank account or digital wallet details (FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB) registered in your name
  • Identity verification documents (KYC) such as a copy of your MyKad, passport, or bank statement when required
  • Correspondence with our customer support team

B. Information Collected Automatically

  • IP address and estimated geographic location
  • Browser type, operating system, and device type used
  • Game session records including date, time, game type, and wagering amounts
  • Deposit and withdrawal transaction history
  • Platform usage data: pages visited, session duration, and actions taken
  • Cookie information and device identifiers

✅ Data Minimisation Principle: bm69 only collects information genuinely necessary to provide our services, fulfil legal obligations, and maintain platform security. We do not collect excessive or irrelevant data.

2

How We Collect Information

Your personal information is collected through various interaction points throughout your use of the bm69 platform. We are committed to being transparent about how data is collected so you can make informed decisions about the information you share with us.

  • Registration Form: When you register a new account at bm69.fun, you are required to provide basic information needed to open your account.
  • KYC Process: When you make your first withdrawal or when our system identifies a verification requirement, we will request supporting documents to verify your identity.
  • Transaction Activity: Every deposit and withdrawal is automatically recorded in our system for security and accounting purposes.
  • Support Interactions: When you contact our support team via Live Chat or email, the conversation is recorded for quality control and dispute resolution purposes.
  • Cookie Technology: Your browser automatically sends certain information to our servers as you browse the platform.
  • Third-Party Sources: In certain cases, we may receive information from licensed third-party identity verification providers for advanced KYC purposes.
3

Purpose of Use of Your Personal Data

Every piece of information we collect has a clear and legitimate purpose. bm69 does not use your data for any purpose beyond the scope stated here without first obtaining your consent.

Purpose of Use Data Types Involved Legal Basis
Account opening and management Name, email, phone number, date of birth Contract performance
Identity verification (KYC/AML) ID documents, bank information Legal obligation
Financial transaction processing Bank details, transaction records Contract performance
Security and fraud prevention IP address, session records, activity patterns Legitimate interests
Customer support Correspondence records, account data Contract performance
Promotional communications (with consent) Email, phone number Consent
Platform improvements Anonymous usage data Legitimate interests
Legal compliance & reporting All relevant data Legal obligation

📧 Marketing Communications: You may opt out of promotional emails at any time by contacting our support team. However, account-related communications such as transaction confirmations and security notifications cannot be disabled as they are part of our core service.

4

Information Sharing & Disclosure

Bm69 maintains a strict policy on personal data sharing. We do not disclose your information to third parties except in the following transparently documented situations:

  • Trusted Service Providers: Payment providers (FPX, Touch 'n Go eWallet, Boost), licensed gaming platforms, and technology service providers that help us operate the platform — all bound by strict confidentiality agreements.
  • Legal Requirements: When required by a court, government authority, or Malaysian law enforcement agency through a valid legal process.
  • Fraud Prevention & AML: In situations where there is strong evidence of illegal activity, we may share information with relevant agencies to protect the integrity of the financial system.
  • KYC Verification: Licensed and trusted third-party identity verification service providers, used solely to authenticate the validity of your documents.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred to the new entity — you will be notified in advance.

🔒 Our Guarantee: All bm69 third-party partners are required to sign data processing agreements prohibiting them from using your information for any purpose other than those specified in our service contracts.

5

Data Storage & Security

The security of your personal data is bm69's highest priority. We continuously invest in the latest security infrastructure to ensure your information is protected against cyber threats, unauthorised access, and data breaches.

  • Transmission Encryption: All communications between your browser and bm69 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
  • Storage Encryption: Sensitive data such as bank account numbers and KYC documents are stored in encrypted format using AES-256 encryption.
  • Hashed Passwords: Your password is never stored in plain text — we use the bcrypt algorithm with a unique salt for each account.
  • 24/7 Security Monitoring: An intrusion detection system (IDS) operates around the clock to identify and block suspicious activity in real time.
  • Regular Backups: Your data is automatically backed up daily to geographically separate server locations to ensure service continuity.
  • Penetration Testing: Our security infrastructure undergoes regular penetration testing by independent security experts to identify and address any vulnerabilities.

ℹ️ In the Event of a Breach: If bm69 detects any security breach affecting your data, we will notify you within 72 hours via your registered email, in line with industry best practices and applicable compliance requirements.

6

Cookies & Tracking Technologies

Bm69 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and ensure platform security. Below are the types of cookies we use and their purposes:

  • Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects anonymous information about how users interact with the platform to help us understand and improve website performance.
  • Functional Cookies: Saves your preferences such as interface language and display settings so you do not need to reconfigure them each time you visit the platform.
  • Analytics Cookies: Used to understand how players interact with various platform features for the purpose of continuous improvement.

You can control and manage cookie settings through your web browser. Most modern browsers allow you to view, delete, and block cookies from specific websites. However, blocking essential cookies may affect your experience on the bm69 platform.

🍪 Cookie Duration: Session cookies are automatically deleted when you close your browser. Persistent cookies are stored for a maximum of 12 months and are renewed each time you visit our platform.

7

Your Rights Under PDPA 2010

As a bm69 player and individual covered under Malaysia's Personal Data Protection Act 2010, you have legally protected rights regarding your personal data. bm69 fully respects these rights and provides straightforward mechanisms for you to exercise them.

1
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

2
Right to Rectification

If your data is inaccurate or outdated, you have the right to request an immediate correction at no additional charge.

3
Right to Erasure

You may request the deletion of your personal data, subject to legally mandated record retention obligations.

4
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time.

5
Right to Data Portability

You may request your data in a machine-readable format for transfer to another service provider.

6
Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

📬 How to Exercise Your Rights: To exercise any of the above rights, contact our Data Protection Officer via 24/7 Live Chat or the official email listed on the page About Us. Please include your account number and a copy of your identification document to expedite the process.

8

Children's Data Protection

Bm69 is an entertainment platform strictly for adults aged 18 and above. We take child protection extremely seriously and maintain a zero-tolerance policy against any attempts by minors to access our platform.

  • We do not knowingly collect, process, or store any personal data from individuals under the age of 18.
  • Our KYC process is specifically designed to detect and block accounts registered by underage individuals.
  • If we determine that a child's data has been collected without valid consent, that data will be deleted immediately and the associated account will be closed.
  • Parents or guardians who suspect their child has registered on our platform must contact our support team immediately for investigation and data deletion.

🔞 Minimum Age Requirement: The bm69 platform is strictly limited to individuals who are 18 years of age or older. Registration by minors is a violation of our Terms and Conditions and may be in breach of applicable laws.

9

Cross-Border Data Transfers

In the context of global online platform operations, your personal data may be transferred to, stored in, or processed in countries other than Malaysia. bm69 ensures that all international data transfers comply with strict data protection requirements.

  • Data Transfer Agreement: All cross-border data transfers are protected by contractual agreements ensuring a level of data protection equal to or exceeding Malaysia's PDPA 2010 standards.
  • Uniform Security Standards: Regardless of where your data is physically stored, the same encryption standards and security controls apply across all our server locations.
  • Trusted Partners: We only work with infrastructure providers holding internationally recognised security certifications such as ISO 27001.
  • Data Minimisation: Only the minimum data required to deliver our services is transferred across borders — no excess data is shared without a clear operational need.

🌐 Transfer Notification: By using the bm69 platform, you consent to the transfer of your personal data as described in this section. If you do not agree to cross-border data transfers, please contact us to discuss available options.

10

Data Retention Period

Bm69 does not retain your personal data indefinitely. We have a clear data retention policy based on operational needs and applicable legal obligations. Once the retention period expires, data will be securely deleted or anonymised.

Data Type Retention Period Retention Reasons
Active account information Throughout the active account period Service contract performance
Financial transaction records 7 years after transaction Accounting legal obligations
KYC documents 5 years after account closure AML requirements and compliance
Support communication logs 3 years Dispute resolution and quality
Cookie & session data Maximum 12 months Platform security and analytics
Closed account records 5 years after closure Fraud prevention & compliance
Security & audit logs 2 years Security incident investigation

🗑️ After the Retention Period Expires: Data that has exceeded its retention period will be permanently deleted using secure deletion methods, ensuring no possibility of recovery by any party.

11

Changes to This Privacy Policy

Bm69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. We are committed to informing you of any material changes that affect how we handle your personal data.

  • The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy.
  • For material changes, a notification will be sent to your registered email address at least 14 days before the changes take effect.
  • Continued use of the bm69 platform after the effective date of any changes will be considered acceptance of the updated Privacy Policy.
  • If you disagree with any changes made, you have the right to close your account and request deletion of your data before the effective date.
  • Previous versions of the Privacy Policy are available upon request from our support team for historical reference.

💡 Our Recommendation: We encourage you to review this Privacy Policy page at least once every three months to stay informed about how we handle and protect your personal information.

12

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly. The bm69 Data Protection Team is ready to assist you.

  • Live Chat 24/7: The fastest way to get immediate assistance — available around the clock at bm69.fun.
  • Official Email: Submit your written inquiry to the official bm69 email address listed on our About Us page. Expect a response within 1–3 business days.
  • FAQ Page: Browse our frequently asked questions at FAQ page for instant answers to common questions about privacy and account security.
  • About Us Page: More information about bm69 and how to reach our team is available at About Us page.

⏱️ Response Time: We are committed to responding to all privacy-related inquiries within 5 business days. For cases involving a potential data breach or urgent security issue, we aim to respond within 24 hours.

Your Data Is Secure — Join bm69 Today

You now understand our commitment to privacy and data protection. Register a bm69 account for free and enjoy a safe, fair, and exciting gaming experience alongside thousands of players in Malaysia.

Register Free Now View Game Lobby
256-bit SSL PDPA 2010 Compliance No Data Sale 24/7 Support
Bahasa Melayu