PERSONAL DATA PROTECTION

BonusBear Privacy Policy – Our Commitment to Protecting Malaysian Members' Data

Your privacy is not something we take lightly. At BonusBear, every piece of information you provide to us is protected to the highest security standards and is never shared without your consent. This document clearly explains how we manage your data.

Updated: 1 January 2026
Version: 3.1
11 Sections
🔒
SSL 256-bit
Bank-Grade Encryption
PDPA Compliant
Data Protection Act
Malaysian Personal

BonusBear's Six Privacy Commitments to You

BonusBear members' privacy is protected by these core principles — not merely as promises, but as daily practices we uphold without exception.

Data Stored Securely

All BonusBear members' personal data is stored on servers protected with AES-256 encryption and accessible only to authorised personnel.

No Data Sales to Third Parties

BonusBear has never sold, rented or shared members' personal data with third-party advertisers or any commercial party, and never will without your consent.

Full Control in Your Hands

You have the right to access, update, correct or request the deletion of your personal data at any time through your BonusBear account settings.

Data Stored in Malaysia

All BonusBear Malaysia members' data is stored in data centres located in Malaysia or in regions that meet equivalent data protection standards.

Data Breach Notification

In the event of a security incident involving your data, BonusBear is committed to notifying you within 72 hours in accordance with our incident response procedures.

Malaysia PDPA Compliance

The BonusBear Privacy Policy is designed and updated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) to ensure your rights as a user are fully protected.

01Introduction and Scope of This Privacy Policy

Welcome to the Privacy Policy of BonusBear. This document explains how BonusBear collects, uses, stores and protects your personal data when you use our platform at bonusbear.ws and all related services.

As an online casino platform operating in Malaysia, BonusBear fully committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA). We take our responsibilities as a data controller seriously and ensure that all data processing is carried out lawfully, fairly and transparently.

Important: By registering and using BonusBear's services, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please contact our team before continuing to use the platform.

This policy applies to all BonusBear members across Malaysia — from Peninsular Malaysia to Sabah and Sarawak. It also applies to anyone browsing the BonusBear website, even if they have not yet registered as a member.

02Types of Personal Data We Collect

BonusBear only collects data that is strictly necessary to provide our services effectively and securely. The following are the categories of data we collect:

2.1 Data You Provide Directly

  • Identity Information: Full name, date of birth, identification number (MyKad) for KYC verification.
  • Contact Information: Malaysian phone number, email address, residential address.
  • Financial Information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank account numbers for withdrawal purposes.
  • Account Information: Username, password (stored in encrypted form), language preference and personal settings.

2.2 Data We Collect Automatically

  • IP address and geolocation information.
  • The type and version of your web browser and device operating system.
  • Activity log data including login times, pages visited, and session duration.
  • Game data includes betting history, wins and losses.
  • Cookie data and similar tracking technologies (see Section 9 for more details).

2.3 Data from Third Parties

In certain circumstances, BonusBear may receive information about you from legitimate sources such as identity verification service providers, payment processors (Touch 'n Go eWallet, Maybank2u, CIMB Clicks and others), or fraud prevention agencies for security purposes.

Data CategoryPrimary PurposeRequired?Retention Period
Name & MyKadKYC verification, fraud preventionYes5 years after account closure
Phone Number2FA verification, communicationsYesDuration of active account
Financial DataProcessing of deposits & withdrawalsYes7 years (audit requirement)
Game DataTransaction records, customer supportAuto5 years
Cookie DataUser experience, analyticsOptional30 days – 2 years

03How BonusBear Uses Your Data

BonusBear uses your personal data for the following purposes and nothing beyond:

  • Account Management: Registering and maintaining your account, processing logins and managing your profile settings.
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks) and withdrawals to your account.
  • Identity Verification (KYC): Verifying your identity to comply with anti-money laundering regulations.
  • Customer Support: To help you resolve any issues or enquiries related to your BonusBear account and gameplay.
  • Platform Security: Detecting and preventing fraud, unauthorised access and illegal activity.
  • Product Improvement: Analysing aggregated usage patterns to improve the overall user experience on the BonusBear platform.
  • Essential Communications: Sending important notifications regarding your account, changes to our terms, or security-related matters.
  • Responsible Gaming: Monitoring gameplay patterns to identify potential gambling issues and offer appropriate support.

A Note on Marketing Communications: BonusBear will only send promotional and marketing communications if you have given your explicit consent. You may opt out of such communications at any time via your account notification settings.

04Legal Basis for Data Processing

BonusBear processes your personal data on valid legal grounds under Malaysia's PDPA:

  1. Contract: Processing required to fulfil the service agreement between you and BonusBear — including account management and transaction processing.
  2. Legal Obligation: Processing required to comply with Malaysian law, including KYC requirements and financial reporting.
  3. Legitimate Interest: Processing for purposes of platform security, fraud prevention, and product improvement, based on BonusBear's legitimate interests where these do not override your privacy rights.
  4. Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which may be withdrawn at any time.

05Data Sharing & Disclosure

BonusBear does not sell your personal data. However, in certain circumstances, we may need to share your data with the following parties:

5.1 Trusted Service Providers

BonusBear works with carefully selected third-party service providers to support the operation of our platform. These include payment processors (Touch 'n Go, GrabPay, DuitNow and FPX infrastructure providers), cloud service providers, identity verification companies and customer support platforms. All providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes we define.

5.2 Legal Requirements

BonusBear may be required to disclose your personal data to Malaysian authorities where mandated by law, court order, or in the context of a legitimate financial fraud investigation.

5.3 Protection of Rights and Security

In cases where BonusBear needs to protect its legitimate rights, prevent fraud, or ensure the safety of our members, relevant data may need to be disclosed to the appropriate parties.

BonusBear's Guarantee: We have never shared and will never share your financial information — including e-wallet account numbers or banking details — with any party other than the payment processors required to execute your transactions.

06BonusBear's Data Security Measures

BonusBear continuously invests in security infrastructure to keep your personal data protected at all times. The following are the key security measures we employ:

🔐
256-bit SSL/TLS Encryption

All communications between your browser and BonusBear's servers are encrypted using the same bank-grade SSL/TLS protocol standards used by Malaysia's leading financial institutions.

🛡️
Two-Factor Authentication (2FA)

BonusBear members are encouraged to enable 2FA, which sends a verification code to your registered Malaysian mobile number for every new login from an unrecognised device.

👁️
24/7 Security Monitoring

BonusBear's security team monitors platform activity around the clock using automated threat detection systems, complemented by manual reviews carried out by security experts.

🔑
Strict Internal Access Controls

Only specifically authorised BonusBear staff may access member personal data. All access is logged and regularly audited to ensure there is no unauthorised use.

🔄
Regular Security Audits

BonusBear conducts quarterly penetration tests and independent third-party security audits to identify and address any system vulnerabilities.

07Data Retention Period

BonusBear retains your personal data only for as long as it is needed for the purposes outlined in this policy or as required by Malaysian law. In general:

  • Active account data is retained for as long as your account remains active on the BonusBear platform.
  • Following account closure, identity information and transaction records are retained for 5 to 7 years to comply with Malaysia's tax legislation and financial audit requirements.
  • Anonymous log and analytics data is retained for no longer than 2 years.
  • Cookie data is retained for the duration specified in each cookie's respective settings.

Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked back to your identity.

08Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following important rights regarding your personal data held by BonusBear:

Right of Access

You may request a copy of the personal data BonusBear holds about you at any time.

Right to Rectification

You have the right to request the correction of any inaccurate or incomplete data held in BonusBear's records.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data from BonusBear's systems.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Restrict Processing

You may request that BonusBear restrict the processing of your data in certain circumstances recognised under the PDPA.

Right to Withdraw Consent

You may withdraw your consent for consent-based processing at any time.

To submit any request regarding your privacy rights, please contact BonusBear's Data Protection Officer by email at [email protected]. We will respond within 30 calendar days of receiving your request.

09Cookies Policy

BonusBear uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some BonusBear platform features.

10Children's Privacy and Protection of Minors

BonusBear's services are strictly for individuals aged 18 years of age and above. We do not knowingly collect personal data from children or underage individuals.

If you believe that someone under the age of 18 has registered a BonusBear account or provided us with their personal data, please notify our privacy team immediately at [email protected]. We will take immediate action to delete the information and close the relevant account.

To Parents and Guardians: BonusBear recommends using the parental control tools available on your device to prevent minors from accessing online gambling platforms.

11How to Contact Us Regarding Privacy Matters

If you have any questions, concerns, or complaints about how BonusBear handles your personal data, we welcome your feedback:

We are committed to responding to all privacy-related enquiries within 5 business days and resolve formal complaints within 30 calendar days.

If you believe BonusBear has not handled your privacy complaint to your satisfaction, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, which is responsible for overseeing PDPA compliance in Malaysia.

Last updated: 1 January 2026. This Privacy Policy supersedes all previous versions. BonusBear will notify members via platform notifications or email should any material changes be made to this policy in the future.

🔒 Your Data Is Safe. Your Journey Starts Here!

BonusBear takes your privacy seriously so you can play with complete peace of mind. Register for free today and claim your Welcome Bonus of up to RM1,000 — with the assurance that your data is always in safe hands.

For adults (18+) only. Your data is protected in accordance with Malaysia's PDPA.

Bahasa Melayu