bika99 Privacy Policy

1. Who We Are

This Privacy Policy is published by bika99 ("bika99", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at bika99.win. bika99 is the data controller responsible for the personal data you provide when registering an account, using any service on the platform, or otherwise interacting with bika99.win.

This Policy applies to all personal data collected through bika99.win, its mobile-optimised interface, and any communications you have with bika99 through its support channels. By creating an account and using bika99, you acknowledge that you have read and understood this Privacy Policy in full.

2. Personal Data We Collect

bika99 collects personal data in the following categories:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• National identification number or passport number (for KYC purposes);
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor);
• Email address;
• Malaysian mobile phone number;
• Username and hashed password.

2.2 Financial Data

• Bank account name and last four digits (for withdrawal verification);
• e-Wallet identifiers for Touch n Go eWallet and Boost (account nickname or registered phone number, not full credentials);
• Transaction history including deposits, withdrawals, bets placed, and bonus activity;
• FPX bank reference data associated with your deposit transactions.

2.3 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Session duration, login timestamps, and in-platform navigation patterns;
• Game history, wager amounts, and outcomes;
• Cookie identifiers and session tokens.

2.4 Communications Data

• Records of live chat sessions with bika99 support;
• Email correspondence sent to or received from bika99;
• Feedback, complaints, and dispute records.

2.5 Verification Documents

• Copies of government-issued photo identification (MyKad or passport) submitted during KYC verification;
• Proof of address documents;
• Proof of payment method ownership submitted in connection with withdrawal requests.

3. How We Use Your Personal Data

bika99 uses your personal data for the following purposes:

• Account management — to create, maintain, and administer your bika99 account;
• Identity & age verification — to confirm that you are 21 years of age or older and to fulfil our KYC obligations;
• Payment processing — to process deposits and withdrawals via your chosen payment method, including Touch n Go eWallet, Boost, and FPX bank transfers;
• Service delivery — to provide access to casino games, sportsbook betting, and all other features of the bika99 platform;
• Fraud prevention & security — to detect and prevent fraudulent activity, money laundering, underage access, and other prohibited conduct;
• Customer support — to respond to enquiries, resolve disputes, and improve support quality;
• Regulatory compliance — to fulfil obligations under applicable laws and regulations, including anti-money laundering (AML) requirements;
• Responsible gaming — to monitor play patterns and enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion;
• Communications — to send you account-related notifications, including deposit confirmations, withdrawal updates, and security alerts;
• Platform improvement — to analyse usage patterns and improve the functionality, performance, and content of bika99.win.

bika99 does not use your personal data to send unsolicited marketing communications without your explicit consent. Where you have opted in to marketing communications, you may withdraw consent at any time by contacting support.

4. Legal Basis for Processing

bika99 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our obligations under the Player Agreement, including account management, game access, and payment processing;
• Legal obligation — processing required to comply with applicable laws, including KYC, AML, and age verification requirements;
• Legitimate interests — processing required for fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights;
• Consent — where you have expressly provided consent for a specific processing activity, such as marketing communications.

5. Sharing Your Personal Data

bika99 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipient, strictly as necessary:

• Payment processors — to facilitate deposit and withdrawal transactions via Touch n Go, Boost, FPX, and card processing partners. These processors are contractually bound to process data only as instructed by bika99;
• Game providers — certified third-party software providers whose games are accessed through bika99 may receive limited gameplay data required to operate their titles;
• Identity verification services — third-party KYC and AML screening providers used to verify player identity and comply with regulatory obligations;
• IT and infrastructure providers — hosting, cloud infrastructure, and security service providers who process data on bika99's behalf under appropriate data processing agreements;
• Legal and regulatory authorities — where disclosure is required by law, court order, or regulatory demand, including disclosures to financial intelligence authorities in connection with AML obligations;
• Professional advisers — lawyers, auditors, and insurers where necessary for the conduct of bika99's business.

Any third party receiving personal data from bika99 is required to maintain appropriate technical and organisational security measures and to process such data only for the specific purposes for which it was shared.

6. Data Retention

bika99 retains personal data for as long as necessary to fulfil the purposes described in this Policy, including for the duration of your account relationship with us and as required by applicable legal, regulatory, and compliance obligations.

In practice, this means:

• Account and identity data is retained for a minimum of five (5) years from the date of account closure, in accordance with standard AML record-keeping requirements;
• Financial transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Support and communication records are retained for three (3) years from the date of the relevant interaction;
• Technical and usage data may be retained in anonymised or aggregated form indefinitely for platform analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bika99's data deletion procedures.

7. Cookies & Tracking Technologies

bika99 uses cookies and similar technologies (including local storage and session tokens) to operate the platform, maintain your logged-in session, and improve performance.

7.1 Essential Cookies

These are strictly necessary for the platform to function. They include session authentication tokens, security cookies, and load-balancing identifiers. Essential cookies cannot be disabled without impairing platform functionality.

7.2 Analytics Cookies

bika99 uses analytics tools to understand how players navigate the platform, which pages are visited most frequently, and where errors occur. This data is collected in aggregate and does not identify individual players.

7.3 Preference Cookies

These cookies remember your platform preferences, such as language settings and display options, so that your experience is consistent across sessions.

7.4 Managing Cookies

You can control non-essential cookies through your browser settings. Blocking all cookies may affect your ability to log in to bika99 or use certain platform features. For detailed guidance on managing cookies in major browsers, refer to your browser's help documentation.

8. Security Measures

bika99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bika99's servers;
• Encryption of sensitive data fields at rest within bika99's database infrastructure;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication for all administrative access to systems holding player data;
• Regular security assessments and penetration testing of platform infrastructure;
• Fraud detection systems that monitor for unusual account activity and flag suspicious transactions in real time.

Notwithstanding these measures, no transmission of data over the internet can be guaranteed to be completely secure. bika99 cannot guarantee absolute security and shall not be liable for any unauthorised access resulting from circumstances outside its reasonable control. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their bika99 account.

9. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by bika99:

• Right of Access — you may request a copy of the personal data bika99 holds about you;
• Right to Rectification — you may request correction of any inaccurate or incomplete personal data we hold;
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction — you may request that we restrict the processing of your data in certain circumstances, such as while the accuracy of data is being verified;
• Right to Object — you may object to processing based on legitimate interests where your individual circumstances warrant it;
• Right to Data Portability — where processing is based on your consent or contractual necessity, you may request a structured, machine-readable copy of the data you provided to bika99.

To exercise any of these rights, contact bika99 at [email protected]. We will respond to all verifiable requests within a reasonable timeframe. We may require identity verification before processing a data rights request.

10. Children & Minors

bika99 does not knowingly collect personal data from any individual under the age of 21. Our services are strictly for adults. If you believe that a minor has registered an account or provided personal data to bika99, please contact us immediately at [email protected] and we will take prompt action to investigate and, where confirmed, delete the relevant data and close the account.

We encourage parents and guardians in Malaysian households to use parental control software to restrict access to online gambling platforms.

11. International Data Transfers

bika99 may process or store your personal data on servers located outside Malaysia, including in jurisdictions where data protection laws may differ from those applicable in Malaysia. Where such transfers occur, bika99 implements contractual safeguards — such as standard data processing agreements — to ensure that your data receives an adequate level of protection consistent with this Privacy Policy.

Specifically, third-party game providers, payment processors, and cloud infrastructure partners who may receive data are contractually required to maintain data protection standards commensurate with those described herein.

12. Changes to This Privacy Policy

bika99 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered players via the email address associated with their account or through a prominent notice on the platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Continued use of bika99.win following any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure by contacting our support team.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bika99, please contact our data team via:

Email: [email protected]

bika99 aims to respond to all privacy-related enquiries within five (5) business days. For account-specific matters requiring urgent attention, live chat support is available on the platform around the clock.

Additional information on your rights and our platform policies is available on our Terms & Conditions and Responsible Gaming pages.