Privacy Policy bika99 — Your Data, Our Responsibility

Welcome to the bika99 Privacy Policy. At bika99, we believe that user trust is the foundation of everything we do. When you register and use our platform, you entrust us with your personal information — and we do not take that responsibility lightly.

This Privacy Policy transparently explains how bika99 collects, processes, stores, protects, and in certain circumstances shares your personal data. It also clarifies your rights as a user and how you may exercise them.

This policy applies to all users of the bika99 platform — whether you access it via the website at bika99.vu or via our official mobile app. By registering or continuing to use the bika99 platform, you agree to the terms set out in this Privacy Policy.

If you are under 18 years of age, please do not register or use our platform. bika99 does not knowingly collect personal data from minors.

Bika99 collects several categories of information to ensure our platform runs smoothly, securely, and in compliance with regulatory requirements. We only collect what is strictly necessary — nothing more.

Automatically collected information: When you visit the bika99 platform, our systems automatically record certain technical information such as your IP address, browser type, and session activity. This is standard practice used by all digital platforms to ensure optimal security and performance.

The data we collect is used transparently and responsibly. bika99 does not sell users' personal data to any third party for marketing or commercial purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your user account; processing login and logout requests; enabling secure account recovery.
• Transaction Processing: Processing deposits and withdrawals securely; verifying transactions through payment methods such as DuitNow, FPX, Touch 'n Go, GrabPay, and Boost.
• KYC Verification: Meeting regulatory requirements by verifying user identity before the first withdrawal is processed.
• Security & Fraud Prevention: Detecting suspicious activity, preventing unauthorized access, and protecting your account from malicious parties.
• Customer Support: Responding to inquiries, resolving complaints, and improving service quality based on user feedback.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate support when needed.
• Platform Communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
• Platform Improvements: Analyzing usage data to improve the functionality, design, and overall experience of the bika99 platform.

Bika99 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in the course of operating the platform, there are limited situations where data sharing is necessary:

• Payment Service Providers: Required data is shared with authorised payment providers such as DuitNow, FPX, Touch 'n Go, GrabPay, and Boost solely for processing your transactions. They are bound by strict confidentiality agreements.
• KYC Service Providers: Identity verification information is shared with accredited KYC partners to meet regulatory compliance requirements.
• Game Providers: Minimal game session data is shared with third-party game providers operating on the bika99 platform to ensure seamless gameplay continuity.
• Legal Authority: bika99 will disclose information to the relevant authorities where required by law, court order, or for the purposes of crime prevention and anti-money laundering.
• Business Transfers: In the event of a company merger or acquisition, user data may be transferred to the successor entity, subject to the same privacy protections.

Protecting your personal data is bika99's highest priority. We continuously invest in cutting-edge security infrastructure to ensure your information remains safe at all times.

Security measures we employ:

• 256-bit SSL Encryption: All data transmitted between your device and bika99 servers is encrypted using the latest TLS 1.3 protocol — the same standard used by the world's leading financial institutions.
• Stored Data Encryption: Sensitive information in our databases is encrypted using AES-256, ensuring your data remains unreadable even in the event of an unexpected breach.
• Two-Factor Authentication (2FA): bika99 supports 2FA for an additional layer of protection on your account. We encourage all users to enable this feature.
• 24/7 Security Monitoring: Our security team continuously monitors systems to detect and respond to threats in real time.
• Regular Security Audits: The bika99 platform undergoes independent security audits on a regular basis to identify and address any potential vulnerabilities.
• Internal Access Controls: Access to user data among bika99 staff is restricted on a need-to-know basis, with all access logged and monitored.

The bika99 platform uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and ensure the security of your session.

Types of cookies we use:

• Essential Cookies: Required for basic platform functions such as login verification, session management, and security features. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting statistical information about how users interact with our platform — such as most-visited pages and time spent. This data is used to improve the platform.
• Functional Cookies: Saving user preferences such as language, display settings, and game preferences to deliver a more personalized experience on future visits.
• Security Cookies: Helping identify and prevent fraudulent activity, unauthorized access, and cyberattacks by detecting unusual usage patterns.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect your ability to use certain features of the bika99 platform.

As a bika99 user, you have certain rights regarding your personal data. bika99 fully respects and facilitates the exercise of these rights in accordance with applicable data protection laws.

• Right of Access: You have the right to request a copy of the personal data we hold about you. This request will be processed within 30 business days.
• Right to Rectification: If any information we hold about you is inaccurate or outdated, you have the right to request a correction. You may also update certain information directly through your profile settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. This right is subject to record-keeping obligations prescribed by law.
• Right to Object to Processing: You have the right to object to the processing of your data for certain purposes, including direct marketing.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of prior processing.

Bika99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations.

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure for support and audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial law and anti-money laundering requirements applicable in Malaysia.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by regulatory authorities.
• Security Logs: Retained for 12 months for security analysis and fraud detection purposes.
• Support Communications: Customer support chat records are retained for 2 years for quality assurance and reference purposes.

When your data is no longer needed and there is no legal obligation to retain it, bika99 will securely delete or anonymise it.

In the course of global operations, some of your data may be processed or stored on servers located outside Malaysia. bika99 ensures that any international data transfers are carried out with adequate safeguards.

• All international data transfers are conducted under standard data protection agreements that comply with international regulatory requirements;
• The cloud infrastructure providers we use hold internationally recognized security certifications including ISO 27001 and SOC 2;
• Sensitive financial data is processed in environments that meet PCI-DSS standards regardless of processing location;
• Bika99 regularly reviews our data processing partners to ensure consistent protection standards are maintained.

Bika99 may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. We are committed to keeping you informed of any significant changes.

• When significant changes are made, we will display a clear notice on the platform's homepage;
• The "Last Updated" date at the top of this document will be updated to reflect the date of the most recent changes;
• For changes that significantly affect your privacy rights, we will send a direct notification to your registered email address;
• Continued use of the bika99 platform after the effective date of any changes constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, the bika99 team is ready to assist through the following channels:

• Data Protection Email: [email protected] (text display only — please copy this address to contact us)
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
• Response Time: Under 3 minutes for live chat; 24–48 hours for privacy-related inquiries via email

For privacy rights requests such as data access or data deletion, please include your account number and clear details of your request so we can process it quickly and accurately.