Your privacy is not merely a legal obligation to us — it is a core commitment. Find out exactly how bunga189 collects, stores, uses, and protects your personal data as a player in Malaysia.
Key Summary: bunga189 is committed to protecting the privacy of all its members in Malaysia. This Privacy Policy clearly explains what data we collect, why we need it, who may access it, and what rights you have over that data. We do not sell your personal data. We do not share it for third-party marketing without your consent.
Bunga189 (operated under the domain bunga189.best) understands that the trust of Malaysian players depends not only on fair gameplay and fast payouts, but also on how we handle the personal information you entrust to us.
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and internationally recognised data protection standards. It applies to all bunga189 players in Malaysia regardless of account tier or payment method used.
By registering an account with bunga189 or continuing to use our platform after the effective date of this policy, you confirm that you have read and understood how bunga189 manages your personal data as described in this document.
Bunga189's Core Principles: We only collect data that is genuinely necessary. We store it securely. We use it solely for the stated purposes. And we give you full control over your own data.
Bunga189 collects players' personal data through various interaction points across the platform. Below are the categories of data we collect and the sources from which they are gathered:
Every piece of data bunga189 collects has a clear and legitimate purpose. We do not collect data simply because we can — we collect it because it is necessary to provide the service you signed up for. Below is a full breakdown of how your data is used:
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Identity verification and bunga189 account registration | Name, email, phone number, MyKad | Performance of a contract |
| Processing deposits and withdrawals | Financial information, transaction records | Performance of a contract |
| Fraud detection and platform security | IP address, device data, activity patterns | Legitimate interests |
| KYC and anti-money laundering compliance | MyKad, transaction records | Legal obligation |
| Customer support and complaint resolution | Account data, communication records | Performance of a contract |
| Platform improvements and performance analytics | Session data, usage patterns (non-identifiable) | Legitimate interests |
| Delivery of bunga189 promotions and offers (with your consent) | Email, phone number, gaming preferences | Consent |
| Responsible gaming programme | Gaming activity patterns, limits set | Legitimate interest / public protection |
If bunga189 intends to use your data for any new purpose not described in this policy, we will obtain your consent before any new processing begins.
Bunga189 does not sell, rent or trade member personal data to any third party for marketing purposes. This is an unconditional commitment, regardless of any business offers we may receive.
However, in the course of operating bunga189, we may need to share certain data with a limited and controlled set of third-party categories:
Transaction information is shared with the relevant payment service providers — including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and the FPX processor for Maybank2u and CIMB Clicks. This sharing is limited strictly to what is necessary for processing your deposits and withdrawals.
Third-party game providers (such as PG Soft, Pragmatic Play and others) receive only the session data necessary to run games within the bunga189 platform. These providers are bound by strict confidentiality agreements and are not permitted to use your data outside the scope of their contract with bunga189.
Bunga189 will disclose personal data to Malaysian authorities where required by a valid court order, or in cases involving serious criminal investigations such as fraud and money laundering. In such circumstances, we will only disclose the specific data requested.
Some bunga189 service providers may operate outside Malaysia. In such cases, we ensure that all data transfers are carried out in accordance with data protection standards equivalent to or stricter than those required under Malaysia's PDPA, backed by binding contractual agreements.
Bunga189's Guarantee: Your data will never be shared with advertisers, marketing companies, or any party that does not have a legitimate operational need directly related to the bunga189 services you use.
Bunga189 invests seriously in security infrastructure to protect its members' personal data. We understand that a single data breach can destroy years of trust, and we take this threat very seriously.
Only bunga189 staff with a legitimate operational need may access members' personal data, and all such access is logged and monitored. All bunga189 personnel handling personal data are bound by strict confidentiality agreements and receive regular data protection training.
In the event of a security incident involving member personal data, bunga189 is committed to notifying the relevant authorities and affected members within the timeframe required by applicable law, and to taking immediate steps to contain and remediate the situation.
The bunga189 platform uses cookies and similar tracking technologies to deliver a better user experience and to help us understand how players interact with our platform.
You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect bunga189 platform functionality and your overall experience. For guidance on managing cookies in your browser, please refer to your browser's help section.
Bunga189 does not retain your personal data longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:
| Data Type | Retention Period | Purpose |
|---|---|---|
| Active account information | Throughout the active account period + 5 years | PDPA compliance and audit requirements |
| Financial transaction records | 7 years from the date of transaction | Malaysian financial regulatory requirements |
| KYC verification documents | 5 years after account closure | Anti-money laundering compliance |
| Support communication records | 3 years from the date of communication | Complaint and dispute referrals |
| Technical and security logs | 12 months | Fraud detection and issue resolution |
| Marketing data (with consent) | Until consent is withdrawn | Consent-based |
Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by bunga189:
To exercise any of the rights above, please contact the bunga189 privacy team by email at support@bunga189.best with the subject line "Data Subject Rights Request". Please include your bunga189 account number and the specific details of your request. We will verify your identity before processing any request to protect the security of your account.
Bunga189 is a digital entertainment platform intended exclusively for adults aged 18 and above. We do not knowingly collect, store or process personal data of individuals under the age of 18.
During the registration process, bunga189 requires age verification and reserves the right to request proof of identity (MyKad) to confirm that a player meets the minimum age requirement. Any account found to have been registered by an underage individual will be closed immediately and all funds returned to the rightful owner of the payment method used.
Bunga189 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or developments within the bunga189 platform itself.
For material changes — that is, changes that may significantly affect how we handle your personal data — bunga189 will notify members via their registered email address at least 14 days before the changes take effect. The notice will clearly explain what has changed and why.
For minor, non-material changes, we will update the "Last Updated" date at the top of this document. You are encouraged to review this page periodically. Continued use of the bunga189 platform after any change takes effect will be considered acceptance of the updated terms.
If you have any questions, concerns, or complaints regarding bunga189's Privacy Policy or how we handle your personal data, you are welcome to reach us through the following channels:
If you are not satisfied with bunga189's response regarding a privacy matter, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant data protection authority under PDPA 2010.
Our Final Commitment: To bunga189, privacy is more than a policy document — it is a core value that shapes every decision we make. We know that your trust is our most valuable asset, and we work hard every day to ensure it is always well-placed.
A good privacy policy should be reflected in real action — not just written on paper. Here is what bunga189 does every day to protect you.
This Privacy Policy forms part of bunga189's broader policy framework. Learn more about other policies that affect your experience as a Malaysian player.