bambu99 Privacy Policy

Introduction

This Privacy Policy (hereinafter the "Policy") is issued by bambu99 (the "Operator", "Platform", "we", "us", or "our") and applies to all personal data collected, processed, and stored in connection with the operation of the bambu99 online gaming platform accessible at https://bambu99.cam, including any related subdomains, mobile-optimised interfaces, and associated services.

bambu99 is committed to maintaining the highest standards of data privacy and information security for all Users, with particular regard to Users accessing the platform from Malaysia. This Policy sets out in plain and transparent terms how we handle your personal information throughout your relationship with bambu99 — from the moment you first visit our website through to account closure.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. Where any provision of this Policy conflicts with those documents in relation to data privacy matters, this Policy shall prevail.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data"
  Any information that directly or indirectly identifies a natural person, including but not limited to name, identification number (NRIC/passport), email address, phone number, IP address, device identifiers, financial account details, and transactional records.
• "Processing"
  Any operation performed on Personal Data, whether or not by automated means, including collection, storage, use, disclosure, erasure, or any combination thereof.
• "Data Controller"
  bambu99, being the entity that determines the purposes and means by which Personal Data is processed in connection with the platform's operations.
• "Data Processor"
  Any third party that processes Personal Data on behalf of bambu99, including but not limited to payment processors, identity verification providers, and cloud infrastructure providers.
• "User" / "Data Subject"
  Any natural person who has registered on or is using the bambu99 platform, whose Personal Data is held or processed by bambu99.
• "Consent"
  A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for one or more specific purposes.
• "Cookies"
  Small text files placed on a User's device by the bambu99 platform for the purposes of session management, analytics, and user experience personalisation.
• "KYC"
  Know Your Customer — the identity verification process conducted by bambu99 to confirm the identity, age, and eligibility of registered Users, as required under applicable anti-money laundering and responsible gambling obligations.

Personal Data We Collect

bambu99 collects only the categories of Personal Data that are necessary for the legitimate operation of the platform and the provision of services to registered Users. The following table sets out the categories of data we collect and the context in which collection occurs:

How We Collect Personal Data

bambu99 collects Personal Data through the following channels and mechanisms:

4.1 — Direct Collection

Personal data provided directly by you, including information submitted during account registration, the KYC verification process, deposit and withdrawal requests, customer support interactions, survey or feedback forms, and promotional participation.

4.2 — Automated Technical Collection

Technical data collected automatically through your use of the bambu99 platform, including IP addresses, device fingerprints, browser characteristics, session data, and navigation behaviour. This data is collected via server logs, session cookies, and similar technical mechanisms.

4.3 — Third-Party Sources

In certain circumstances, bambu99 may receive Personal Data from third parties, including:

• Payment processors: Transaction confirmation data from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network confirmations.
• Identity verification providers: Results of document authentication and database cross-checks conducted as part of the KYC process.
• Fraud and risk management services: Risk signals and device reputation data from third-party fraud prevention tools used to protect platform integrity.
• Responsible gambling databases: Self-exclusion status data from third-party responsible gambling registries where applicable.

Purposes of Data Processing

bambu99 processes Personal Data for the following identified purposes:

• Account Creation and Management: To register, verify, and maintain your bambu99 account, and to authenticate your identity on each login.
• Service Delivery: To provide access to games, betting markets, live dealer tables, and all other platform features in accordance with your account subscription.
• Payment Processing: To facilitate deposits and withdrawals via your selected payment methods, including DuitNow transfers, Touch 'n Go eWallet transactions, FPX bank transfers, and cryptocurrency settlements.
• Identity Verification (KYC): To verify your identity and eligibility in compliance with anti-money laundering obligations and age verification requirements (21+ minimum).
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and platform abuse.
• Responsible Gambling Compliance: To monitor gameplay patterns for indicators of problem gambling, apply self-exclusion restrictions, and enforce deposit limits and other player protection measures.
• Customer Support: To respond to and resolve your support queries, complaints, and account-related requests effectively.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and make data-informed improvements to the platform's features, performance, and user experience.
• Marketing Communications: To send you promotional offers, bonuses, and news relevant to your bambu99 account where you have provided explicit consent to receive such communications.
• Legal and Regulatory Compliance: To meet obligations imposed by applicable laws, regulations, court orders, and instructions from competent authorities.

Legal Basis for Processing

bambu99 processes Personal Data on the following legal bases, applied on a purpose-by-purpose basis:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and bambu99, including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, age verification requirements, and instructions from regulatory or law enforcement authorities.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, technical diagnostics, and responsible gambling monitoring — where these interests do not override your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit and freely given consent has been obtained. You may withdraw this consent at any time without detriment to your account access.

Third-Party Disclosure

bambu99 does not sell, lease, or transfer your Personal Data to any third party for their independent commercial or marketing purposes. We may share your data with the following categories of third parties solely for the purposes identified in this Policy:

7.1 — Payment Service Providers

Transaction data is shared with payment processors including DuitNow network participants, Touch 'n Go eWallet, Boost, GrabPay, FPX-connected Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency network infrastructure — solely to complete your requested transactions.

7.2 — Identity Verification and KYC Providers

Identity documents and verification data may be shared with licensed third-party KYC and anti-money laundering compliance service providers who process the data strictly on our behalf under binding data processing agreements.

7.3 — Game and Technology Providers

Gameplay data (bet history, session information) may be shared with the game studios and live dealer operators that supply content to the bambu99 platform, solely for the purpose of operating the games and resolving disputes about specific game rounds.

7.4 — Fraud and Security Service Providers

Technical and behavioural data may be processed by third-party fraud prevention and cybersecurity service providers retained by bambu99 to protect the integrity of the platform.

7.5 — Legal and Regulatory Disclosure

bambu99 may disclose your Personal Data to government authorities, regulators, courts, or law enforcement agencies where required to do so by applicable law, court order, or valid legal process. Where legally permitted, we will endeavour to notify you of such a disclosure.

Data Retention

bambu99 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is applied, the resulting data is no longer Personal Data and may be retained indefinitely for aggregate analytics purposes.

Data Security

bambu99 implements a layered approach to data security, applying both technical and organisational measures appropriate to the sensitivity of the Personal Data processed. The following safeguards are in place:

• Encryption in Transit: All data transmitted between your device and the bambu99 servers is protected using industry-standard TLS 1.2 or higher encryption protocols.
• Encryption at Rest: Sensitive Personal Data stored on bambu99 infrastructure — including KYC documents, payment details, and authentication credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to systems containing Personal Data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged.
• Infrastructure Security: bambu99's platform operates on hardened server infrastructure with active monitoring for intrusion attempts, DDoS attacks, and anomalous access patterns.
• Password Security: User passwords are stored using one-way cryptographic hashing with salting. bambu99 does not have access to your plaintext password and will never request it.
• Security Auditing: bambu99 conducts periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses in its data handling infrastructure.

Cookies & Tracking Technologies

bambu99 uses cookies and similar tracking technologies to enable platform functionality, analyse usage, and (where you have consented) personalise your experience. The following categories of cookies are used:

10.1 — Strictly Necessary Cookies

These cookies are essential for the bambu99 platform to function correctly. They enable core operations such as session authentication, security token validation, and load balancing. These cookies cannot be disabled without substantially impairing platform functionality.

10.2 — Functional Cookies

Functional cookies remember your preferences — such as preferred language (English, Bahasa Melayu, or Mandarin), session settings, and display preferences — to provide a consistent and personalised experience across sessions.

10.3 — Analytics Cookies

Analytics cookies collect aggregated, anonymised data about how Users navigate and interact with bambu99. This data is used to identify performance issues, optimise page layouts, and improve the overall user experience. Analytics data is not used to identify individual users.

10.4 — Marketing Cookies

Where you have provided consent, marketing cookies may be used to track interactions with bambu99 promotional content and to deliver relevant offers. You may withdraw consent for marketing cookies at any time via your browser settings or by contacting support.

You can manage your cookie preferences at any time through your browser's cookie settings. Note that disabling certain cookies may affect the functionality of parts of the bambu99 platform.

Your Data Rights

Subject to applicable law and certain statutory limitations, you have the following rights with respect to Personal Data held by bambu99:

• Right of Access: You may request a copy of the Personal Data bambu99 holds about you, along with information about the purposes of processing and the categories of data held.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. You may also update certain profile information directly through your account settings.
• Right to Erasure: In certain circumstances, you may request that bambu99 delete your Personal Data. This right is subject to legal retention obligations — for example, transaction records subject to AML legislation cannot be deleted on request.
• Right to Restriction of Processing: You may request that bambu99 restrict the processing of your Personal Data in certain defined circumstances, such as where you contest the accuracy of data or where processing is found to be unlawful.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that bambu99 provide your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your Personal Data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, subject to bambu99 demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact bambu99's support team at [email protected] with a clear description of your request and sufficient information to verify your identity. Requests will be acknowledged within five (5) business days and responded to in full within thirty (30) calendar days.

Children's Privacy

bambu99 is an adult online gaming platform strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain Personal Data relating to any person under the age of 21.

All account registration applications are subject to age verification procedures. Where bambu99 discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended pending verification, and all account balances, including any winnings, will be held pending the outcome of that review. If underage use is confirmed, the account will be permanently closed and any deposited funds may be returned subject to applicable procedures.

If you are a parent or guardian and believe that a minor in your care has registered on bambu99, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

International Data Transfers

As an internationally operated online gaming platform, bambu99 may process and store your Personal Data on servers and infrastructure located in jurisdictions outside Malaysia. Such transfers may occur in the course of providing Services to you and in engaging Data Processors located outside your country of residence.

Where Personal Data is transferred internationally, bambu99 takes steps to ensure that appropriate safeguards are in place to protect your data, including:

• Engaging only Data Processors who maintain data protection standards materially equivalent to or exceeding applicable requirements.
• Applying contractual protections with third-party Data Processors that govern the handling, security, and permitted use of transferred Personal Data.
• Ensuring that server infrastructure hosting Personal Data is secured in accordance with the technical standards described in Section 9 of this Policy.

By using bambu99 and agreeing to these terms, you acknowledge and consent to the international transfer and processing of your Personal Data as described in this Policy.

Marketing Communications

bambu99 may send you promotional communications including information about bonuses, new games, sports betting promotions, and platform updates — but only where you have provided explicit opt-in consent to receive such communications.

Marketing communications may be sent via email, SMS, or in-platform notifications, depending on your preferences and the channel to which you have consented. We may personalise the content of these communications based on your account activity, preferred games, and betting history, for the purpose of presenting offers that are relevant to your interests.

You may withdraw your consent to marketing communications at any time by:

• Using the unsubscribe link included in any marketing email sent by bambu99.
• Updating your communication preferences in your account settings.
• Contacting our support team at [email protected] with a clear request to unsubscribe.

Withdrawal of marketing consent will be processed within five (5) business days and will not affect your access to the platform or any of the Services you are currently using.

Policy Amendments

bambu99 reserves the right to update, amend, or replace any part of this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, or our operational practices. The most current version of this Policy will always be available at https://bambu99.cam/privacy-policy, and the effective date at the top of this document will be updated accordingly.

Where amendments are material — particularly where they affect the categories of data collected, the purposes of processing, or your rights as a Data Subject — bambu99 will endeavour to notify registered Users by email prior to the changes taking effect.

Your continued use of the bambu99 platform following publication of an amended Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with the amended Policy, you should cease using the platform and may request account closure in accordance with the process described in our Terms & Conditions.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or bambu99's handling of your Personal Data, please contact us through the following channels:

• Data Privacy Queries — Email: [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate. Do not include sensitive financial information in email correspondence.
• Live Chat Support: Available 24/7 via the bambu99 platform. Agents are available in English, Bahasa Melayu, and Mandarin. Average response time: 3–5 minutes.
• Formal Complaints: If you are dissatisfied with our response to a data-related query, you may escalate the matter to an appropriate data protection authority or seek independent legal advice.