Privacy Policy bonus bear – Our Member Data Security

Bonus bear ("we", "Platform") takes your privacy seriously. This Privacy Policy explains in detail how we collect, use, store, and protect your personal information when you use our online gaming platform at bonusbear.onl or through our official mobile app.

This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international digital security best practices. We believe transparency is the foundation of trust — which is why we aim to explain these matters in plain language rather than complex legal jargon.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy us, all of which together form the complete agreement between you and bonus bear.

Bonus bear collects various categories of personal information depending on how you interact with our platform. Below is a detailed summary of the data collected:

We do not collect sensitive information such as biometric data, health records or religious beliefs unless specifically required by applicable law.

Every piece of data we collect has a clear and legitimate purpose. bonus bear does not use your data for purposes unrelated to the provision of our platform services.

• Account Management: Creating, verifying and maintaining your member account securely
• Transaction Processing: Processing deposits and withdrawals accurately and securely
• KYC Verification: Fulfilling legal obligations to verify the identity and age of members
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and platform abuse
• Customer Support: Providing assistance and resolving issues reported by members
• Responsible Gaming: Monitoring gaming habits to identify signs of problem gambling
• Platform Improvement: Analysing usage patterns to enhance the overall user experience
• Marketing Communications: Sending promotional information and bonus offers (only with your consent)
• Legal Compliance: Meeting the reporting and record-keeping requirements set by the authorities

Bonus bear does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your data with trusted parties for operational purposes:

• Payment Processors: Payment service providers such as FPX and DuitNow receive the transaction data required to process your deposits and withdrawals
• KYC Service Providers: Accredited third-party identity verification partners for legal compliance purposes
• Game Providers: Third-party game providers receive only the session ID needed to run games — no complete personal data is shared
• Cloud Services: Server infrastructure providers that store our data under strict confidentiality agreements
• Legal Authority: Law enforcement agencies or regulatory bodies when required by court order or applicable law

Bonus bear uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

• Essential Cookies: Required for core platform functions such as login verification and session security — cannot be disabled
• Performance Cookies: Helping us understand how members use the platform for improvement purposes
• Functional Cookies: Saving your preferences such as language and display settings for ease of use
• Analytics Cookies: Collecting anonymous usage data for our internal statistical analysis

You can manage cookie settings through your browser. However, disabling essential cookies may affect overall platform functionality and your ability to log in to your account.

Bonus bear invests seriously in security infrastructure to ensure your personal data is always protected against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL Encryption: All communications between your browser and our servers are fully encrypted
• Static Data Encryption: Data stored in our databases is also encrypted using AES-256 standards
• Strict Access Controls: Only authorised personnel may access members' personal data, and all access is logged
• Regular Security Audits: Our systems undergo regular penetration testing and security audits by independent experts
• 24/7 Monitoring: A threat detection system operates around the clock to identify suspicious activity
• Two-Factor Authentication (2FA): An additional security layer is available to protect your account from unauthorised access

Bonus bear retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active Account Data: Retained for as long as your account is active and in use
• Transaction Records: Retained for a minimum of 7 years in compliance with anti-money laundering legal requirements
• KYC Documents: Retained for 5 years after account termination
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes
• Analytics Data: Stored in anonymised form for no more than 3 years

Once the retention period expires, your data will be securely deleted or converted to an anonymised format that cannot be linked back to you personally.

Under Malaysia's PDPA and our policy, you have the following rights regarding your personal data held by bonus bear:

Bonus bear Platform is not intended for individuals under the age of 18. We do not intentionally collect, process, or store personal data from children or minors.

If you become aware that someone under the age of 18 has registered an account on our platform, please contact us immediately. We will take prompt action to investigate, close the account, and delete all related data.

Bonus bear reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform service improvements.

When significant changes occur, we will:

• Sending notifications via registered email to all active members
• Displaying a clear notice on the platform's home page at least 14 days before changes take effect
• Updating the "Last Updated" date at the top of this document

Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our data protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
• FAQ: Visit the page FAQ us for answers to common questions

We are committed to responding to all privacy-related enquiries within 14 working days after receiving your request. For more complex issues or those requiring further investigation, we will keep you informed of the expected timeframe.