Bull98 Privacy Policy – Personal Data Protection for Malaysian Members

Bull98 collects your personal data in several different ways, depending on how you interact with our platform. Generally, the data we collect falls into three main categories:

a) Data You Provide Directly

• Registration Information: Full name as per MyKad, an active Malaysian phone number, email address, date of birth, and a password of your own creation.
• Identity Verification Information: Where required for the KYC (Know Your Customer) process, we may request a copy of your MyKad or passport, a selfie, and proof of your current address.
• Payment Information: Your e-wallet account details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay) or bank account information (for FPX via Maybank2u, CIMB Clicks, and others) used for deposits and withdrawals. Note: Bull98 does not store your full credit or debit card number — all transactions are processed through secure, encrypted third-party payment gateways.
• Support Information: The contents of live chat conversations, emails, or any communication you initiate with the Bull98 support team.

b) Automatically Collected Data

• Platform Usage Data: Games you play, bets you place, session duration, and your navigation within the platform.
• Technical Data: Your device's IP address, device type (Android/iOS smartphone or computer), operating system, web browser type, and language settings.
• Approximate Location Data: General location based on IP address, used to verify that you are in Malaysia and not in a restricted region.
• Cookie Data: Session information and preferences stored via browser cookies — explained in further detail in Section 5.

c) Data from External Sources

In limited circumstances, Bull98 may receive information from external sources, such as third-party identity verification service providers who assist us in verifying your age and identity, or information required to meet legal obligations. This data is used solely for the stated purposes and is not combined with marketing data.

Every piece of data Bull98 collects has a clear and legitimate purpose. We use your personal data for the following:

Bull98 does not use your personal data for any purpose beyond those listed above. Should we require a new use not covered by this policy, we will notify you and seek your consent where required before any new processing begins.

Regarding marketing communications — Bull98 may send SMS notifications or in-platform messages about the latest promotions, new bonuses, or special offers relevant to your favourite games. This is done solely on the basis of consent given during registration or within your account settings. You may withdraw this consent at any time without any penalty.

Bull98 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is an absolute commitment on our part. That said, there are limited situations where Bull98 needs to share certain information with other parties to keep our platform running safely and efficiently:

• Payment Service Providers: When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX through Maybank2u or CIMB Clicks, the necessary transaction information is shared with the respective payment provider solely for the purpose of processing your transaction. These providers have their own privacy policies and are subject to Malaysian financial regulations.
• Identity Verification Provider: For KYC purposes, Bull98 may engage third-party services that specialise in digital identity verification. Any information shared is limited strictly to what is required for the verification process.
• Game Providers: The required game session information is shared with licensed game providers such as Pragmatic Play or PG Soft to ensure games function correctly. This does not include your sensitive personal information.
• Malaysian Authorities: Bull98 will disclose the necessary information to the relevant authorities in Malaysia when required through legitimate legal channels, such as in fraud or money laundering investigations. We will not disclose your information without a valid court order or official legal request.
• Professional Advisors: Lawyers, accountants, or auditors who assist with Bull98's business operations may access the information required, and they are bound by strict professional confidentiality obligations.

Bull98 consistently invests in security infrastructure to ensure your personal data remains protected against both internal and external threats. Below are the key technical and organisational measures we have in place:

• Data Encryption in Transit: All communications between your device and Bull98's servers are secured with 256-bit TLS/SSL encryption — the same standard used by major financial institutions in Malaysia. This means that even if someone were to intercept your network traffic, they would not be able to read its contents.
• Stored Data Encryption: Sensitive data such as passwords is stored in encrypted form using strong hashing algorithms. No one — including Bull98's own technical team — can view your password in its original form.
• Strict Access Controls: Only Bull98 employees who require access to specific data in order to perform their duties are permitted to access it — based on the principle of least privilege. All access is logged and audited on a regular basis.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect suspicious activity, unauthorised login attempts, or any anomalies in usage patterns that may indicate a security compromise.
• Regular Security Audits: Bull98 conducts regular internal and external security audits to identify and address any vulnerabilities in our systems before they can be exploited.
• Incident Response Procedure: In the event of a data security breach that may affect your personal information, Bull98 has established response procedures to notify affected users within a reasonable timeframe.

While Bull98 takes all reasonable security measures, no system is entirely perfect or impenetrable. We encourage you to take your own precautions as well — use a strong, unique password for your Bull98 account, do not share your login credentials, and contact us immediately if you suspect any suspicious activity on your account.

Cookies are small text files stored in your web browser or device when you visit the Bull98 platform. We use cookies for several distinct purposes, and it is important that you understand what we use and why.

• Session Cookies (Essential): These cookies are required for the Bull98 platform to function properly. They store your login session details so you don't have to log in again each time you navigate between pages on the platform. These cookies are automatically deleted when you close your browser.
• Preference (Functional) Cookies: These cookies remember your preferences such as display language, favourite game categories, and interface settings you have chosen — saving you the hassle of resetting them every time you log in.
• Analytical Cookies (Performance): Bull98 uses aggregated, anonymised analytics data to understand how users interact with our platform as a whole — which pages are visited most frequently, how long users spend in certain sections, and where users encounter difficulties. This helps us improve the overall user experience. This data cannot be used to identify you as an individual.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, suspicious login attempts, and platform abuse. They form part of our broader security system.

You can manage your cookie settings through your web browser. However, please note that blocking or deleting essential cookies may affect the functionality of the Bull98 platform and your gaming experience. Functional and analytics cookies can be disabled without significantly impacting the platform's core functions.

Bull98 respects your rights with regard to your personal data. Below are the rights you hold and how to exercise them: