Privacy Policy BonusBear —
Your Data Fully Protected

Welcome to the Privacy Policy bonusbear. This document transparently explains how the bonusbear platform — accessible at https://bonusbear.bet — collecting, using, storing, and protecting the personal data of registered members in Malaysia.

Bonusbear takes your privacy very seriously. As a responsible online Sports Betting and casino platform, we fully comply with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia and all related legislation in force in Malaysia.

By registering a bonusbear account or using any service on our platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Bonusbear collects various categories of personal data from members to ensure the platform operates safely and efficiently. Below are the categories of data we collect:

Bonusbear only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as your health information, religious beliefs, or political views.

Bonusbear collects your personal data through a variety of transparent methods:

• Account Registration: Information you provide directly when completing the bonusbear registration form.
• KYC Verification: Identity documents (MyKad, passport) that you upload for identity verification purposes.
• Financial Transactions: Payment information you provide when making deposits or withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, or other supported Malaysian payment methods.
• Platform Usage: Activity data automatically collected when you browse or use the bonusbear platform, including pages visited, games played, and session duration.
• Communications: Information you share when contacting the bonusbear support team via live chat, email, or WhatsApp.
• Cookies & Tracking Technologies: Technical data collected automatically via cookies, tracking pixels, and similar technologies when you visit the bonusbear platform.
• Authorised Third Parties: Information received from payment service providers, licensed game providers, or identity verification bodies working in partnership with bonusbear.

Bonusbear uses collected personal data solely for legitimate purposes directly related to platform operations. The following are the primary purposes for which your data is used:

• Account Management: Creating, managing, and maintaining your bonusbear account — including login, account security, and your personal settings.
• Identity Verification (KYC): Verifying your identity to fulfil anti-money laundering (AML) legal requirements and comply with Malaysian financial regulations.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on bonusbear securely and efficiently in Malaysian Ringgit (MYR).
• Service Provision: Gives you full access to all bonusbear platform features — Sports Betting (Malaysia Super League, EPL, badminton), Live Casino, baccarat, poker, table games, and more.
• Customer Support: Processing inquiries, complaints, and support requests you submit to the bonusbear support team.
• Promotions & Bonuses: Sending you information about relevant bonusbear promotions, bonuses, and exclusive offers — only if you have opted in to receive marketing communications.
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, and other harmful activities on the bonusbear platform.
• Analytics & Improvement: Understanding how members use the bonusbear platform to improve user experience, test new features, and optimize platform performance.
• Legal Compliance: To meet legal and regulatory obligations imposed by Malaysian authorities, including record retention for periods prescribed by law.

Bonusbear does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, to ensure the platform operates properly and remains legally compliant, bonusbear may share your data with the following categories of third parties in limited and controlled circumstances:

• Payment Service Providers: Payment providers partnering with bonusbear to process your financial transactions — including FPX processors, digital wallet providers Touch 'n Go, GrabPay, DuitNow, and Malaysian banks. They receive only the minimum data necessary to process transactions.
• Licensed Game Providers: Casino and sports game software providers that supply game content on the bonusbear platform. Data sharing is limited to game session information required to ensure a properly functioning gaming experience.
• Identity Verification Provider: Third-party KYC providers that assist in verifying bonusbear members' identity documents securely and efficiently.
• Law Enforcement Authorities: bonusbear will disclose personal data when required by Malaysian law, court order, or lawful direction from enforcement authorities.
• Professional Advisors: Lawyers, accountants, or auditors who are bound by strict professional confidentiality obligations when providing services to bonusbear.

All third parties working with bonusbear are required to uphold data protection standards equivalent to those in this Privacy Policy, and are not permitted to use your data for any purpose other than the services they provide to bonusbear.

Bonusbear continuously invests in the latest security measures to ensure members' personal data is always protected against unauthorized access, loss, misuse, or disclosure. The following are the security layers we employ:

• 256-bit SSL/TLS Encryption: All communications between your web browser and bonusbear's servers are encrypted using high-grade SSL/TLS protocols — the same standard used by Malaysia's leading banks.
• Encryption of Data at Rest: Sensitive data such as financial information and KYC documents is stored in encrypted format on bonusbear's secure servers.
• Two-Factor Authentication (2FA): bonusbear offers 2FA to protect member accounts from unauthorized access, even if your password has been compromised.
• Internal Access Controls: Only authorized bonusbear staff who require access to specific data are permitted to do so — based on the principle of least privilege.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity.
• Periodic Auditing: bonusbear undergoes regular independent security audits to identify and address potential system vulnerabilities.

The bonusbear platform uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and analyze usage patterns. The following are the categories of cookies we use:

• Essential Cookies: Required for core bonusbear platform functions such as login session tracking and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the bonusbear platform — most visited pages, time spent, and any errors encountered — to help us improve the platform.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details to make your experience on the bonusbear platform more convenient on future visits.
• Analytics Cookies: Used to understand, in aggregate, how bonusbear members interact with the platform — helping us improve existing features and develop new ones.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the bonusbear platform. For more information on managing cookies, refer to your web browser's documentation (Chrome, Firefox, Safari, Edge).

Retention Period: bonusbear retains your personal data for as long as your account remains active, or for as long as necessary for the purposes set out in this Privacy Policy. Following account closure, bonusbear will retain your data for the minimum period required under applicable Malaysian law — typically seven (7) years for financial records in accordance with Malaysia's Companies Act requirements and financial regulations.

Storage Location: bonusbear member personal data is stored on secure servers. In certain circumstances, data may be processed or stored outside Malaysia by our technology service providers. In such cases, bonusbear ensures that data protection standards equivalent to Malaysia's PDPA are upheld.

As a bonusbear member and an individual protected under Malaysia's PDPA, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. bonusbear will provide this information within 21 working days from the date the request is received.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that bonusbear correct it. You may also update certain personal information directly through your bonusbear account profile settings.
• Right to Withdraw Consent: You may withdraw consent for certain data processing activities (such as marketing communications) at any time, without affecting the validity of any processing carried out prior to withdrawal.
• Right to Object to Marketing: You may opt out of receiving bonusbear marketing communications at any time via the unsubscribe link in any promotional email, or by contacting our support team.
• Right to Erasure: Under certain circumstances, you may request that bonusbear delete your personal data. However, we may be unable to fulfil this request in full if the data in question is required to comply with legal obligations.

To exercise any of the above rights, please contact the bonusbear Data Protection team via email support@bonusbear.bet by clearly stating your request. bonusbear will respond within 21 business days.

The bonusbear platform is strictly for users aged 18 and above. bonusbear does not knowingly collect personal data from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without the knowledge or consent of a parent or legal guardian, bonusbear will take immediate steps to delete that data and close the relevant account.

The bonusbear platform may contain links to third-party websites or services for your convenience. bonusbear's Privacy Policy Not applicable to those third-party websites or services.

Bonusbear is not responsible for the privacy practices or content of third-party websites. We encourage you to read and understand the privacy policy of any third-party website you visit via links from the bonusbear platform before sharing any personal data with them.

Bonusbear reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Whenever we make material changes, we will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to registered members via email or in-platform notices on bonusbear
• Displaying a prominent notice on the bonusbear homepage for a specified period

Your continued use of the bonusbear platform following the publication of any changes to this Privacy Policy constitutes your acceptance of the latest version. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding bonusbear's Privacy Policy or how we handle your personal data, please contact bonusbear's Data Protection Officer (DPO) through the following channels:

• Email: support@bonusbear.bet — for all privacy and data protection inquiries.
• Live Chat: Available 24/7 directly on the bonusbear platform — the fastest way to get an immediate response.
• WhatsApp: Contact us via WhatsApp in Bahasa Malaysia for your privacy-related inquiries.

Bonusbear is committed to responding to all privacy-related inquiries within 3 working days. For formal requests such as data access or data deletion, please allow up to 21 working days for us to fully process your request.