Privacy Policy – How bm69 Handles Your Data

1. Introduction & Scope

This Privacy Policy ("Policy") describes how bm69 ("bm69," "we," "our," or "us") collects, uses, discloses, and safeguards personal data obtained from individuals ("Members," "users," or "you") who access or use the bm69 platform at bm69.asia, including all associated services, features, content and communications (collectively, the "Services").

bm69 is committed to protecting your privacy in a manner consistent with applicable personal data protection legislation. This Policy should be read together with the bm69 Terms & Conditions, which govern your overall use of the Services. By registering a bm69 account or using the Services, you acknowledge that you have read and understood this Policy.

This Policy applies to all personal data processed by bm69 regardless of the medium through which it is collected — including the website, mobile browser interface, customer support channels and any other touchpoint through which Members interact with bm69.

2. Data Controller

bm69 acts as the data controller in respect of personal data collected and processed under this Policy. As data controller, bm69 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted in accordance with applicable legal obligations.

For all data protection enquiries, including the exercise of data subject rights, please contact bm69 via the channels listed in Section 14 of this Policy.

3. Personal Data We Collect

bm69 collects the following categories of personal data in the course of operating the platform:

bm69 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required by applicable responsible gaming or regulatory obligations and with your explicit consent.

4. How We Collect Your Data

bm69 collects personal data through the following means:

• Direct Collection: Information you provide when registering a bm69 account, completing KYC verification, making deposits or withdrawals, contacting support, or submitting feedback.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs and similar tracking technologies as you interact with the bm69 platform.
• Third-Party Sources: Identity verification data from KYC service providers; fraud intelligence from anti-money laundering screening services; payment confirmation data from licensed payment processors such as FPX, Touch 'n Go and Boost.
• Publicly Available Sources: Sanctions screening lists, politically exposed persons (PEP) databases and other public registries consulted as part of bm69's AML compliance programme.

5. Purposes & Legal Basis for Processing

bm69 processes your personal data only where a lawful basis exists. The primary purposes and corresponding legal bases are:

• Performance of Contract: Processing necessary to register your account, execute deposits and withdrawals, settle bets and provide the Services you have requested.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) laws, age verification requirements, tax reporting obligations and regulatory directives from competent authorities.
• Legitimate Interests: Fraud prevention, platform security monitoring, responsible gaming risk assessment, and internal analytics to improve the bm69 experience — where such interests are not overridden by your rights and freedoms.
• Consent: Direct marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time by contacting support or updating your account notification preferences.

bm69 does not make automated decisions with legal or similarly significant effects on Members using solely automated processing without human oversight.

6. Data Sharing & Third Parties

6.1 No Data Sales. bm69 does not sell, rent or trade your personal data to any third party for their own commercial purposes.

6.2 Authorised Processors. bm69 shares personal data with carefully selected third-party processors who assist in delivering the Services, including:

• Payment service providers (FPX, Touch 'n Go eWallet, Boost, DuitNow, Maybank, CIMB, Public Bank and others as updated) for transaction processing.
• KYC and identity verification service providers for age and identity confirmation.
• AML screening providers for sanctions and PEP list verification.
• Live casino and game content providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) who may receive session data necessary to operate their games.
• Customer support platform providers who process support chat and email data on bm69's behalf.
• Cloud hosting and cybersecurity service providers maintaining the bm69 technical infrastructure.

All third-party processors are bound by data processing agreements requiring them to process personal data only as directed by bm69 and to implement appropriate security measures.

6.3 Legal Disclosures. bm69 may disclose personal data to law enforcement agencies, regulatory bodies, courts or other public authorities where required to do so by applicable law, court order, or to protect the rights and safety of bm69 or its Members.

6.4 Business Transfers. In the event of a merger, acquisition or sale of substantially all assets, personal data held by bm69 may be transferred to the successor entity, subject to equivalent privacy protections.

7. International Data Transfers

bm69's primary data processing infrastructure is located within the region. Where personal data is transferred to processors or sub-processors operating outside Malaysia, bm69 ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with applicable law, prior to any such transfer. bm69 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing supplementary protective measures.

8. Data Retention

bm69 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy and to comply with applicable legal and regulatory obligations. Specific retention periods are determined by the following principles:

• Active Account Data: Retained for the duration of the Member relationship and for a minimum period of five (5) years following account closure, consistent with AML and gambling regulatory record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the conclusion of the business relationship, or longer if required by applicable law.
• Transaction Records: Retained for a minimum of seven (7) years for tax and financial regulatory compliance purposes.
• Marketing Data: Retained until withdrawal of consent or account closure, whichever is earlier.
• Technical Logs: Retained for up to twelve (12) months unless longer retention is required for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. Cookies & Tracking Technologies

bm69 uses cookies and similar technologies to operate and improve the platform. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for the platform to function — maintaining your login session, wallet state and security tokens. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as language selection, game display settings and notification preferences to provide a more personalised experience.
• Analytical Cookies: Used to collect aggregated information about platform usage patterns — pages visited, session duration, error events — to help bm69 improve service quality. Data processed for analytics purposes is anonymised where possible.
• Security Cookies: Support fraud detection and account protection functions including device fingerprinting and anomalous login detection.

bm69 does not use third-party advertising or retargeting cookies. You may configure your browser to reject non-essential cookies; however, this may affect the functionality of certain platform features.

10. Your Rights

Subject to applicable law and certain exemptions related to legal obligations and legitimate interests, you have the following rights in respect of your personal data held by bm69:

• Right of Access: You may request a copy of the personal data bm69 holds about you and information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For basic account details, many corrections can be made directly in your bm69 account settings.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to bm69's legal obligations to retain data under AML and gambling regulations.
• Right to Restrict Processing: You may request that bm69 temporarily suspend processing of your data while an accuracy dispute or objection is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your data for transfer to another service.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. If you object to marketing, bm69 will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the bm69 data protection team via Live Chat or email as detailed in Section 14. bm69 will respond to verified requests within 30 days. Identity verification will be required before processing data subject requests.

11. Children's Privacy

The bm69 Services are strictly prohibited for individuals under the age of 21. 21+ bm69 does not knowingly collect personal data from minors. All account registrations require confirmation of age eligibility and are subject to KYC verification. If bm69 becomes aware that personal data has been collected from a person under the minimum age requirement, the account will be immediately suspended, any balance refunded to the originating payment method, and the personal data deleted without undue delay.

If you believe a minor has registered a bm69 account, please notify us immediately via Live Chat or the contact details in Section 14.

12. Security Measures

bm69 implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration or destruction. Measures include:

• Transport Layer Security (TLS 1.2 and above) for all data in transit between your browser and bm69 servers.
• Encryption at rest for sensitive data fields including identity documents, financial information and authentication credentials.
• Role-based access controls limiting staff access to personal data on a strictly need-to-know basis.
• Multi-factor authentication for all internal administrative systems.
• Real-time security monitoring and intrusion detection systems.
• Regular security assessments and vulnerability testing by qualified third parties.
• Formal data breach response procedures including notification protocols consistent with applicable law.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. bm69 encourages all Members to use strong, unique passwords for their bm69 account and to enable two-factor authentication.

13. Changes to This Policy

bm69 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, platform operations or data processing practices. Material changes will be communicated to registered Members via email to the registered address and/or a prominent notice on the bm69 platform. The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Services following the effective date of a revised Policy constitutes your acceptance of the updated terms.

14. Contact & Complaints

For all privacy-related enquiries, data subject rights requests, or to report a data protection concern, please contact the bm69 data protection team through the following channels:

• Live Chat: Available 24/7 within your bm69 account dashboard — the fastest route for urgent privacy matters.
• Email: [email protected] — include "Privacy Request" in the subject line.

bm69 will acknowledge privacy requests within 5 business days and aim to resolve them within 30 calendar days. Where additional time is required for complex requests, bm69 will notify you and provide a revised timeline.

If you are not satisfied with bm69's response to a privacy concern, you have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction.

This Privacy Policy was last reviewed and updated on 1 June 2026. 21+  bm69 is an online entertainment platform for adults only.