Bunus138 Privacy Policy – Your Personal Data Protection

Bunus138 ("we", "Platform", "Bunus138") is committed to protecting the privacy of every individual who uses bunus138.com and all related services. This Privacy Policy clearly outlines the types of personal data we collect, the purposes for collection, how we use it, and the measures we take to keep it secure.

As an online gaming platform operating in Malaysia, Bunus138 complies with applicable data protection requirements. We believe that transparency in data handling is not just a legal obligation, but a fundamental part of the trust you place in us.

By registering as a member or continuing to use our platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please stop using the platform and contact us for assistance with account closure.

Bunus138 collects various types of personal data depending on how you interact with our platform. Here are the main categories of data we collect:

We do not collect sensitive data such as medical information, religious beliefs, or political views unless specifically required by law.

Collected data is used solely for legitimate purposes directly related to the provision of Bunus138 services. Here are the primary purposes for which your data is used:

• Account management: Creating, verifying, and securely maintaining your member account.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform.
• Identity verification (KYC): Meeting legal compliance requirements through thorough identity verification processes.
• Service improvement: Analyzing usage patterns to enhance the user experience and platform performance.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Service communications: Sending important notifications related to your account, transactions, and policy updates.
• Marketing (with consent): Sending promotions and special offers where you have given your consent.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem behavior and offer appropriate assistance.

Bunus138 processes your personal data on a solid legal basis. We ensure every data processing action has a valid justification:

• Contract performance: Processing required to deliver the services you agreed to upon registration.
• Legal obligations: Compliance with applicable laws including anti-money laundering (AML) and know your customer (KYC) requirements.
• Legitimate interests: Processing for platform security, fraud prevention, and business analytics purposes that do not affect your fundamental rights.
• Consent: For activities such as direct marketing, we will obtain your explicit consent beforehand.

Bunus138 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the following limited circumstances, we may share your data:

• Service providers: Companies that help us operate the platform, such as payment processors, cloud service providers, and customer support platforms. They are bound by strict confidentiality agreements.
• Legal requirements: When required by a court order, law enforcement agency, or relevant regulatory authority.
• Fraud prevention: Sharing information with third-party security service providers to detect and prevent fraudulent activity.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity, which will be bound by this privacy policy.

The security of your personal data is bunus138's top technical priority. We continuously invest in security infrastructure to ensure your data remains protected at all times.

• Data encryption in transit: All communications between your browser and Bunus138 servers are protected by 256-bit TLS/SSL protocols.
• Data encryption at rest: Sensitive data such as financial information and identity documents are stored in encrypted format on our servers.
• Role-based access control: Only authorized staff with legitimate job requirements may access member personal data.
• 24/7 security monitoring: Our automated monitoring system detects and responds to security threats in real time.
• Regular security audits: Bunus138 conducts regular security assessments and penetration testing by independent experts.
• Two-factor authentication (2FA): We support two-factor authentication for an added layer of security on member accounts.

Bunus138 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law.

• Active account data: Retained for the duration your account is active and for a reasonable period thereafter for dispute resolution purposes.
• Financial transaction records: Retained for a minimum of seven (7) years to meet legal and financial audit requirements.
• KYC records: Identity verification documents are retained for as long as required under applicable anti-money laundering regulations.
• Communication logs: Customer support interaction records are retained for three (3) years for reference and dispute resolution.
• Marketing data: Retained until you withdraw consent or request deletion.

Once the retention period expires, data will be securely deleted or anonymized so it can no longer be linked to you.

Bunus138 uses cookies and similar tracking technologies to enhance your experience on our platform and to understand how members use our services.

• Essential cookies: Required for core platform functions such as login and session management. Cannot be disabled.
• Performance cookies: Helping us understand how users interact with the platform for improvement purposes.
• Functional cookies: Saving your preferences such as language and display settings for a more personalized experience.
• Analytics cookies: Collecting anonymized data on usage patterns to help us improve the platform.

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help documentation.

As a Bunus138 member, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, contact the bunus138 support team via live chat or email. We will process your request within 30 days of receipt.

Bunus138 is an adult gaming platform not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

If we discover that a minor's data has been collected without our knowledge, the account in question will be closed immediately and all related data will be deleted. If you believe a minor has registered on our platform, please contact our support team right away.

Bunus138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

• The date of the most recent update will always be displayed at the top of this page.
• For material changes, we will notify you by email or in-platform notice at least seven (7) days before the changes take effect.
• Continued use of the platform after any changes take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the bunus138 team is here to help.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the corner of the platform.
• Email: [email protected] — we aim to respond within 24 hours on business days.

For data protection-related inquiries, please include "Privacy Inquiry" in your message subject line so it can be routed to the responsible team more quickly.