Bull9 Privacy Policy – Member Personal Data Protection

Bull9 ("we", "Platform", "bull9") is an online gaming platform operating in https://bull9.app. We understand that your trust is the most valuable asset we hold. That is why personal data protection is not merely a legal obligation for us — it is a sincere commitment we uphold in every operational decision.

This Privacy Policy clearly and transparently explains how bull9 collects, stores, processes, and protects your personal information while you use our platform, whether via the desktop website or mobile app.

This document also outlines your rights as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), and how you may exercise those rights. If you have any privacy-related questions, our team is available at any time via 24/7 customer support.

Bull9 collects your personal information through various channels throughout your use of our platform. The following are the categories of information we collect:

A. Information You Provide Directly

• Full name as stated in official identity documents;
• Date of birth for minimum age verification of 18 years;
• Active email address for account communications;
• Mobile phone number for two-factor authentication (2FA);
• Current residential address for KYC compliance purposes;
• A copy of your identity document (MyKad or passport) during the identity verification process;
• Payment method information including bank account numbers or e-wallet details.

B. Information Collected Automatically

• IP address and general geographic location data;
• Device type, operating system, and browser version used;
• Game session logs including login time, logout time, and in-platform activity;
• Financial transaction data including amounts, dates, and deposit and withdrawal methods;
• Cookie data and similar tracking technologies (see Section 6).

C. Information from Third Parties

• Identity verification data from approved KYC service providers;
• Compliance information from anti-money laundering (AML) agencies;
• Technical data from payment service providers for transaction verification.

Schedule of Data Categories Collected:

The personal information we collect is used for specific, legitimate purposes. Bull9 will not use your data for any other purpose without first obtaining your consent.

Primary Purpose of Data Use:

• Service Provision: To manage your account, process deposits and withdrawals, and provide access to all gaming products on the bull9 platform;
• Identity Verification: To carry out the KYC process and ensure all members meet minimum eligibility requirements, including the 18-year age limit;
• Security & Fraud Prevention: To detect, investigate, and prevent suspicious activity, fraud, money laundering, and cybersecurity threats;
• Legal Compliance: To fulfil compliance obligations under PDPA 2010, Anti-Money Laundering laws (AMLA), and applicable regulatory requirements;
• Communications: To send account notifications, transaction updates, security alerts, and important service information;
• Marketing (with Consent): To send promotional information, exclusive bonuses, and special offers to members who have consented to receive marketing communications;
• Service Improvements: To analyse aggregated usage patterns in order to improve the user experience, platform performance, and the development of new features.

You may withdraw consent for marketing communications at any time by contacting our support team or using the unsubscribe link found in every marketing email.

Bull9 does not share your personal information except in the following clearly defined circumstances:

• Approved Service Providers: We share necessary information with payment service providers, KYC providers, third-party gaming platforms, and technology service providers that support our platform operations. All parties are bound by strict confidentiality agreements;
• Legal Obligations: We may be required to disclose information to government authorities, courts, or regulatory bodies when mandated by Malaysian law or a lawful authority directive;
• Bull9 Rights Protection: In circumstances where disclosure is necessary to protect bull9's legal rights, prevent fraud, or safeguard the security of the platform and other users;
• Your Consent: In other circumstances where we have obtained your explicit consent to share such information.

Bull9 continuously invests in security infrastructure to ensure that members' personal data is always protected against unauthorised access, disclosure, alteration, or destruction.

Security Measures We Practise:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bull9 servers;
• Passwords are stored using hashing techniques combined with a unique salt — your actual password is never stored in our system;
• Two-factor authentication (2FA) available for all member accounts;
• Round-the-clock integrated security monitoring by our internal cybersecurity team;
• Regular penetration testing conducted by independent security experts;
• Role-based access control (RBAC) across all bull9 internal systems;
• Automatically encrypted data backups stored across multiple secure server locations.

Bull9 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand general platform usage patterns.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login session management and security settings. These cookies cannot be disabled;
• Performance Cookies: Collecting information on how you use the platform to help us improve website performance and usability;
• Functional Cookies: Remembering your preferences such as language, currency, and display settings to provide a more personalised experience;
• Analytics Cookies: Used to analyse traffic and usage patterns in aggregate, anonymised form for continuous improvement purposes.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the bull9 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by bull9:

To exercise any of the above rights, please contact the bull9 privacy team via our 24/7 customer support. Your request will be processed within 14 business days.

Bull9 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Following account closure, we retain your data for the periods prescribed by applicable laws and regulatory requirements.

Once the specified retention period has ended, your data will be securely deleted or fully anonymised so it can no longer be linked to your identity.

Bull9 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you via:

• A prominent notice on the bull9 platform homepage;
• Email notification to the registered email address at least 7 days before changes take effect;
• In-app notification via the bull9 mobile app (where applicable).

Your continued use of the bull9 platform after any Privacy Policy changes take effect will be considered as your acceptance of the updated terms. The "Last Updated" date at the top of this page will always reflect the latest version of the Privacy Policy currently in force.

If you have any questions, concerns, or requests regarding this Privacy Policy or the use of your personal data, the bull9 privacy team is ready to assist. You may contact us via:

• Live Chat: Available 24/7 directly on the bull9 platform — the fastest way to get a response;
• Privacy Email: [email protected] — for official enquiries relating to privacy and data protection;
• General Support: [email protected] — for general enquiries relating to accounts and services.

We are committed to responding to all privacy-related enquiries within 72 hours business days. For formal requests relating to data subject rights (such as data access or deletion), the processing period is 14 working days.

This document was last updated on 1 January 2026. For more information regarding your rights and responsibilities as a bull9 member, please also read Terms and Conditions and page Responsible Gaming us.