bm69 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data processed by bm69 ("bm69," "we," "us," or "our") in connection with your use of the bm69 online gaming platform at bm69.win ("the Platform"), including its website, games, payment services, support channels, and any related communications.

By registering a bm69 account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the bm69 Platform.

This Policy should be read alongside the bm69 Terms & Conditions and Responsible Gaming Policy, both of which form part of the contractual relationship between you and bm69.

2. Data Controller

bm69 is the data controller responsible for the personal data you provide when using the Platform. bm69 operates under international gaming authority licensing and is subject to the data protection obligations imposed by that licensing framework.

For all privacy-related queries, data subject requests, or complaints, you may contact bm69's data protection point of contact at: support@bm69.win. We endeavour to respond to all privacy enquiries within 30 calendar days of receipt.

3. Personal Data We Collect

bm69 collects the following categories of personal data in the course of providing its services:

3.1 Identity & Contact Data

• Full legal name, date of birth, and nationality;
• Email address and mobile phone number;
• Residential address, city, and postcode;
• Government-issued identification documents (for KYC/AML compliance).

3.2 Account Data

• Username and encrypted password;
• Account registration date, login history, and session data;
• Communication preferences and account settings.

3.3 Financial Data

• Deposit and withdrawal transaction records;
• Payment method details (e-wallet identifiers, bank account references — bm69 does not store full card numbers);
• Account balance history and bonus transaction records.

3.4 Gaming Activity Data

• Game session records, bet history, and gaming outcomes;
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion requests);
• Sports betting selections and sportsbook activity.

3.5 Technical & Usage Data

• IP address, device type, operating system, and browser type;
• Geolocation data (country/region level, derived from IP);
• Pages visited, navigation patterns, and session duration on the Platform;
• Cookie identifiers and similar tracking data (see Section 6).

3.6 Communications Data

• Support chat transcripts and email correspondence with bm69 staff;
• Survey responses and feedback submitted via the Platform.

4. How We Collect Your Data

bm69 collects personal data through the following means:

• Direct provision: Data you provide during registration, account verification, payment processing, or support interactions;
• Automated collection: Technical and usage data collected automatically as you interact with the Platform via cookies, log files, and analytics tools;
• Third-party sources: Identity verification data from KYC/AML service providers; fraud detection signals from payment processors; geolocation data from IP intelligence services;
• Publicly available sources: Where required for compliance purposes, bm69 may consult publicly available registers or databases.

5. Purposes & Legal Bases for Processing

The specific purposes for which bm69 processes personal data are as follows:

• Account management and service delivery — processing necessary to create, maintain, and administer your bm69 account and provide access to all Platform features (contract performance);
• Payment processing — processing deposits, withdrawals, and bonus transactions in MYR via supported payment methods (contract performance);
• Identity verification (KYC/AML) — verifying player identity and preventing financial crime in compliance with international gaming authority licensing requirements and applicable anti-money laundering obligations (legal obligation);
• Responsible gaming compliance — monitoring gaming activity to identify signs of problem gambling and administering responsible gaming tools including self-exclusion (legal obligation and legitimate interests);
• Fraud prevention and security — detecting and preventing fraudulent transactions, unauthorised account access, and abuse of bonuses or promotions (legitimate interests);
• Customer support — responding to queries, complaints, and dispute resolution requests (contract performance and legitimate interests);
• Platform improvement and analytics — analysing usage patterns to improve Platform performance, game selection, and user experience (legitimate interests);
• Marketing communications — sending promotional offers, bonus notifications, and news about bm69 products where you have provided consent or where permitted under applicable law (consent / legitimate interests).

6. Cookies & Tracking Technologies

bm69 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve performance, and support analytics. The categories of cookies bm69 uses are:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled without impairing core Platform functionality;
• Performance & analytics cookies: Used to collect aggregated data about how Players use the Platform, enabling bm69 to identify and address usability issues;
• Functional cookies: Remember your preferences and settings, such as language selection and responsible gaming tool configurations;
• Targeting & marketing cookies: Used where you have consented, to deliver relevant bm69 promotional content and measure campaign effectiveness.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the bm69 Platform. bm69 does not use cookies to collect sensitive personal data or financial information.

7. Sharing of Personal Data

bm69 does not sell your personal data to third parties. bm69 shares personal data only in the following circumstances and only to the extent necessary:

• Payment processors: Transaction data shared with payment service providers (including Touch 'n Go eWallet, Boost, DuitNow, Maybank, CIMB, FPX, and others) to process deposits and withdrawals;
• KYC/AML service providers: Identity and verification data shared with licensed identity verification services to fulfil regulatory obligations;
• Gaming platform providers: Minimum necessary account data shared with licensed game studios and live casino operators to facilitate gameplay;
• Fraud prevention services: Risk signals shared with fraud detection partners to protect player accounts and the integrity of the Platform;
• Legal and regulatory authorities: Data disclosed to competent regulatory, law enforcement, or judicial authorities where required by applicable law or by our licensing obligations;
• Professional advisers: Data shared with lawyers, auditors, and accountants subject to professional confidentiality obligations where necessary for business operations.

All third parties with whom bm69 shares personal data are contractually required to process such data only for the stated purpose, under appropriate security measures, and in compliance with applicable data protection law.

8. International Data Transfers

bm69's Platform infrastructure and some of its third-party service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, bm69 ensures that appropriate safeguards are in place to protect the data, including contractual data processing agreements aligned with internationally recognised standards for data protection.

By using the bm69 Platform, you acknowledge that your data may be processed in jurisdictions outside your country of residence, including the jurisdiction of bm69's international gaming licence.

9. Data Retention

bm69 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The general data retention principles applied by bm69 are:

• Active accounts: Data retained for the lifetime of the account plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations;
• Financial records: Transaction records retained for a minimum of seven (7) years in compliance with applicable financial regulation;
• KYC documents: Retained for the period required by the applicable licensing framework and AML legislation;
• Support communications: Retained for two (2) years from the date of the communication;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bm69's data destruction procedures.

10. Your Rights as a Data Subject

Subject to applicable law and the constraints of bm69's licensing and legal obligations, you have the following rights with respect to your personal data held by bm69:

• Right of access: You may request a copy of the personal data bm69 holds about you;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
• Right to restriction: You may request that bm69 restrict processing of your data in certain circumstances;
• Right to data portability: Where processing is based on consent or contract performance, you may request your data in a structured, machine-readable format;
• Right to object: You may object to processing based on bm69's legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at support@bm69.win. We will respond within 30 calendar days. Note that some requests may be subject to identity verification before they can be processed.

11. Security Measures

bm69 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the bm69 Platform;
• Encryption of sensitive data at rest, including financial records and identity documents;
• Access controls limiting personal data access to authorised bm69 personnel on a need-to-know basis;
• Regular security audits and penetration testing of the Platform;
• Automated monitoring for anomalous account activity and potential data breaches;
• Staff training on data protection obligations and security best practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, bm69 will notify affected individuals and relevant authorities in accordance with applicable law and our licensing obligations.

12. Children's Privacy

13. Changes to This Policy

bm69 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, bm69 will notify registered players via the Platform or by email to the registered address. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the bm69 Platform following any update constitutes your acceptance of the revised Policy.

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or bm69's data processing practices, please contact us via live chat on the bm69 Platform (available 24/7) or by email at support@bm69.win.

If you are dissatisfied with bm69's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority or the independent complaints body established under bm69's international gaming licence.