Banteng69 Privacy Policy – Personal Data Protection for Malaysian Members

Banteng69 ("we", "the platform") operates the website https://banteng69.asia, providing online entertainment services including slots, Live Casino, roulette, Sports Betting and digital lottery to members in Malaysia. As a responsible data controller, we are committed to protecting the privacy of every individual who interacts with our platform.

This Privacy Policy applies to all personal information collected from you when you:

• Visiting the Banteng69 website without registering an account.
• Registering and using a banteng69 member account.
• Making deposits or withdrawals using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX via Maybank2u and CIMB Clicks.
• Contact the Banteng69 customer support team via live chat or email.
• Participating in Banteng69 promotions, bonuses or the VIP Rewards programme.
• Using any other features or services available on the Banteng69 platform.

Banteng69 collects two main categories of data — information you provide directly and information collected automatically while you use the platform.

2.1 Information You Provide Directly

• Registration Information: Full name, Malaysian phone number, email address, date of birth, username and password that you choose when registering a banteng69 account.
• Identity Verification Documents (KYC): A copy of your Malaysian MyKad or other valid identity document, requested for age and identity verification purposes before your first withdrawal is approved.
• Payment Information: Payment method details you have registered — e-wallet account numbers (Touch 'n Go, GrabPay, ShopeePay, Boost), DuitNow information or FPX bank account numbers (Maybank2u, CIMB Clicks). banteng69 does not store credit or debit card numbers directly — processing is handled by authorised third-party payment processors.
• Communications: The content of messages you send to the Banteng69 support team via live chat or email, including complaints, enquiries and feedback.
• Responsible Gaming Information: Deposit limits, self-exclusion settings or self-exclusion information you have set up through the Banteng69 platform.

2.2 Automatically Collected Information

• Platform Usage Data: Game records, betting history, deposits and withdrawals, claimed bonuses and all other activity within your Banteng69 account.
• Technical Data: IP address, internet browser type and version, device operating system, screen resolution, language settings and other technical information related to the device you use to access banteng69.
• Location Data: General geographic location derived from your IP address for eligibility verification and security purposes. Banteng69 does not access the precise GPS location of your device.
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 7 of this policy.

All data passes through 256-bit SSL encryption before being stored within banteng69's secure infrastructure.

Banteng69 uses the personal data it collects solely for the purposes set out below. We do not use your data for any purpose beyond what is stated here without first obtaining your additional consent.

3.1 Primary Purposes of Data Use

• Account Management: Creating, managing, and maintaining your Banteng69 member account, processing logins, updating account information, and handling account closure requests.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as processing winning withdrawals to the payment method registered under your name.
• Identity Verification & KYC: Verifying your identity to confirm you are who you claim to be, fulfilling age verification requirements (18+) and complying with legal obligations relating to anti-money laundering.
• Gaming Services Provision: Enabling you to access and play slots, Live Casino, roulette, Sports Betting (Liga Super Malaysia, EPL, badminton) and digital lottery games on banteng69.
• Bonus & Promotions Management: Managing the welcome bonus, cashback, weekly Lucky Draw and VIP Rewards programme, including verifying eligibility and ensuring wagering requirements are legitimately met.
• Customer Support: Responding to enquiries, resolving complaints and providing technical assistance through Banteng69's support channels.

3.2 Secondary Purposes (With Your Consent)

• Direct Marketing: Sending you notifications about new promotions, exclusive bonuses and Banteng69 platform updates via email or SMS — only where you have agreed to receive such communications. You may withdraw your consent at any time.
• Product Improvement: Analysing usage patterns in aggregate and anonymised form to understand the most valuable features and enhance the overall Banteng69 platform experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), banteng69 processes your personal data on a valid legal basis for each type of processing. These bases are:

• Contractual Compliance: Processing that is necessary to fulfil the service contract between you and banteng69 — including account management, processing deposits and withdrawals, and the provision of gaming services.
• Legal Obligations: Processing required to comply with applicable Malaysian law, including KYC requirements for anti-money laundering purposes and age verification to ensure the platform is accessed only by individuals aged 18 and above.
• Legitimate Interests: Processing that is necessary for banteng69's legitimate interests in detecting and preventing fraud, ensuring platform security and protecting the lawful rights of all other members — provided these interests do not override your privacy rights.
• Consent: For processing activities not covered by the three legal bases above — in particular marketing communications — we will request your explicit consent beforehand.

Banteng69 does not sell, rent, or distribute your personal data to any party for third-party commercial purposes. However, to deliver a complete platform experience, we do need to share limited information with certain categories of trusted third parties in specific circumstances:

5.1 Payment Processors

To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks), Banteng69 is required to share the necessary transaction details with the respective payment processors. The data shared is limited strictly to what is needed to complete each transaction. All payment processors we work with adhere to rigorous security standards.

5.2 Technology Service Providers

Banteng69 uses third-party services for its technical infrastructure, including hosting, performance monitoring and analytics tools. All such providers are bound by strict data protection agreements and are not permitted to use any shared data for purposes other than supporting Banteng69's operations.

5.3 Legal Requirements

Banteng69 may disclose your personal data to the relevant authorities if we are required to do so by Malaysian law, a court order, or a lawful investigation by a law enforcement agency. In such circumstances, we will disclose only the minimum data necessary and will notify you where permitted to do so by law.

Banteng69 implements multiple layers of technical and procedural security controls to protect your personal data against unauthorised access, disclosure, alteration, or accidental destruction.

6.1 Technical Security Measures

• Data Encryption in Transit: All communication between your browser and banteng69's servers uses TLS 1.3 protocol with 256-bit SSL certificates.
• Data Encryption at Rest: Sensitive data such as passwords is stored as an irreversible hash using the bcrypt algorithm. Payment data is encrypted within the database using AES-256 encryption.
• Access Controls: Access to member personal data within Banteng69's internal systems is restricted to staff who require it for their specific duties, based on a strict need-to-know principle.
• Security Monitoring: Banteng69's systems are monitored around the clock by a dedicated security team to detect any suspicious activity or unauthorised access attempts.
• Regular Security Testing: Banteng69 conducts regular penetration testing and security audits carried out by independent third parties to identify and address any system vulnerabilities.

6.2 Data Breach Response

In the unlikely event of a data breach that may affect your privacy, Banteng69 is committed to notifying affected members within 72 hours of becoming aware of the incident — in line with industry best practices and applicable legal requirements. The notification will describe the nature of the breach, the data potentially affected, and the steps being taken to address the situation.

Banteng69 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small data files stored in your browser when you visit the Banteng69 website. Below is an explanation of the types of cookies we use:

You can manage your cookie preferences through your browser settings. Please note, however, that disabling essential cookies may affect the functionality of the Banteng69 platform — for example, you may not be able to stay logged in as you navigate between pages. Analytics and functional cookies can be disabled without impacting the platform's core functionality.

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you specific rights regarding your personal data held by Banteng69. Banteng69 respects and facilitates the exercise of all these rights.

8.1 How to Exercise Your Rights

To exercise any of the rights above, submit a written request to banteng69 by emailing support@banteng69.asia and stating:

• The username or phone number registered to your Banteng69 account.
• The type of right you wish to exercise (e.g., right of access, correction, or deletion).
• Specific details of your request (e.g., the type of data you wish to access or delete).

Banteng69 will process your request within 21 business days as stipulated under the PDPA 2010. In complex cases, this period may be extended with prior notice to you. We may require additional identity verification before processing requests that involve the disclosure or deletion of data.

Banteng69 does not retain personal data longer than is necessary for the original purpose of collection or to meet applicable legal requirements. Our retention policy is as follows:

• Active Account Data: Retained for as long as your account is active on banteng69 and for 5 years after account closure for financial record-keeping and audit purposes.
• Financial Transaction Records: Retained for 7 years after the transaction date, in accordance with Malaysia's accounting and tax legal requirements.
• KYC Documents: Retained for the duration of the active account and 5 years after account closure, or longer if required under anti-money laundering legislation.
• Support Communication Logs: Retained for 2 years after the last interaction for quality control and dispute resolution purposes.
• Marketing Data (where permitted): Retained until you withdraw consent or request deletion, whichever comes first.
• Technical Log Data: Security and system access logs are retained for 90 days for security monitoring purposes only.

Once the retention period expires, data will be securely deleted or fully anonymised so that it can no longer be linked to any individual. Our deletion procedures use methods that ensure data cannot be recovered once removed.

In the course of its operations, banteng69 may need to process or store some data on servers located outside Malaysia. When this occurs, banteng69 ensures that such data transfers comply with Malaysia's PDPA requirements and are protected by appropriate safeguards.

The safeguards we apply to international data transfers include standard data transfer agreements that bind recipients to data protection standards equivalent to those in Malaysia, as well as ensuring that the destination country has adequate data protection laws or that appropriate contractual guarantees are in place.

Banteng69 does not transfer your personal data to jurisdictions that lack adequate data protection without appropriate additional safeguards in place.

The banteng69 platform is intended for individuals aged 18 and above only. banteng69 does not knowingly collect personal data from individuals under the age of 18. The banteng69 registration process requires age verification through a valid identity document (Malaysian MyKad).

If banteng69 discovers that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe that a child or minor has registered an account on banteng69, please notify us at support@banteng69.asia without delay.

Banteng69 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or new platform features. When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the Banteng69 homepage for a minimum period of 7 days.
• Sending an email notification to all active members informing them of the material changes.

Continued use of the Banteng69 platform after an updated Privacy Policy is published will be considered your acceptance of the changes. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data in accordance with your rights under Malaysia's PDPA.

12.1 Contact Us About Privacy

If you have any questions, concerns or complaints about how Banteng69 handles your personal data, or to exercise any of your PDPA rights, please contact us at:

• Privacy Email: support@banteng69.asia (please include "Privacy Inquiry" in the email subject line)
• Live Chat: Available on the banteng69 platform, 24 hours a day, 7 days a week
• Response Time: We aim to respond to all privacy inquiries within 2 business days

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe that Banteng69's processing of your personal data violates the PDPA 2010. Further information on how to submit such a complaint is available through the official channels of the Department of Personal Data Protection Malaysia.