bom29toto Privacy Policy for Malaysian Players

01 Introduction and Scope

This Privacy Policy applies to the bom29toto website, account services, live casino and sports betting functions, payment tools, customer support channels, and related features made available to Malaysian users. It governs personal data processed when you visit bom29toto, register, complete account verification, deposit or withdraw MYR, use a promotion, place a wager, or communicate with our team.

By using bom29toto, you acknowledge that your information will be handled as described in this Policy. This document should be read together with our Terms & Conditions and Responsible Gambling policy. Where consent is required for a particular processing activity, bom29toto will request it separately and in a reasonably clear manner.

02 Definitions

For this Privacy Policy, the following expressions have the meanings stated below:

• Account Data means information linked to a registered bom29toto account, including profile, verification, transaction, and gaming records.
• Personal Data means information relating to an identified or reasonably identifiable individual.
• Processing includes collecting, recording, organising, reviewing, storing, altering, retrieving, sharing, restricting, anonymising, and deleting Personal Data.
• KYC means the Know Your Customer process used to verify identity, age, account ownership, and payment eligibility.
• Service Provider means an organisation engaged to perform a defined service for bom29toto, such as identity checks, hosting, cybersecurity, analytics, or payment processing.
• User means any visitor, registered member, or person who communicates with bom29toto.

03 Personal Data We Collect

Depending on how you use bom29toto, we may collect the following categories of information:

Identity and profile information

• Full legal name, date of birth, nationality, residential address, username, and account identifiers.
• Copies or images of valid identity documents, proof of address, and a verification selfie where KYC is required.
• Confirmation that the user satisfies the bom29toto minimum age requirement of 21 years.

Contact information

• Email address, mobile number, preferred contact channel, and correspondence history.
• Messages sent to customer support, including information supplied during payment or account troubleshooting.

Financial and transaction information

• Deposit and withdrawal values, currency, timestamps, payment references, and transaction status.
• Limited account details associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, cards, or supported digital assets.
• Source-of-funds information where enhanced review is reasonably required.

Gaming and behavioural information

• Bets, stakes, game sessions, wins, losses, bonus use, VIP tier activity, and preferred markets such as EPL, Liga Super Malaysia, UFC, live football, slots, or live casino.
• Responsible gambling settings, including deposit limits, time controls, cooling-off periods, and self-exclusion status.

Technical information

• IP address, browser type, device type, operating system, language, approximate location, login timestamps, referral data, and security logs.
• Cookie identifiers and interaction data used to maintain sessions, reduce fraud, and understand service performance.

04 How Information Is Collected

bom29toto obtains information directly from you when you create an account, update your profile, complete KYC, use a payment method, set responsible gambling controls, claim a bonus, or contact support. We also collect technical and transactional information automatically while you use the platform.

Certain information may be received from payment processors, identity verification services, fraud-prevention providers, game suppliers, or financial institutions where necessary to confirm a transaction or protect the bom29toto platform. Data received from these sources is limited to what is relevant for the applicable purpose.

05 Purposes of Data Processing

bom29toto processes Personal Data for the following purposes:

1. To create, authenticate, maintain, and secure user accounts.
2. To confirm identity, age, location, account ownership, and KYC status.
3. To process deposits and withdrawals in MYR or supported digital assets.
4. To provide live casino, slots, sports betting, bonuses, loyalty rewards, and customer support.
5. To calculate balances, settle wagers, maintain transaction records, and address disputes.
6. To detect account takeover, duplicate accounts, collusion, money laundering, payment abuse, and other prohibited conduct.
7. To apply deposit limits, self-exclusion, cooling-off tools, and responsible gambling safeguards.
8. To improve website reliability, mobile performance, game availability, and service design for users across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia.
9. To send service notices and, where permitted, relevant promotional communications.
10. To comply with valid legal duties, preserve evidence, and respond to lawful requests.

06 Legal Basis for Processing

Depending on the context, bom29toto processes information because it is necessary to perform our agreement with you, comply with a legal obligation, pursue a legitimate operational or security interest, protect vital interests, establish or defend legal claims, or act upon your consent.

Legitimate interests may include preventing fraud, securing user accounts, managing payment risks, analysing platform performance, improving support, and protecting the integrity of games and betting markets. bom29toto considers the potential effect on users before relying on legitimate interests and applies safeguards appropriate to the sensitivity of the data.

Where processing relies on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that was lawful before consent was withdrawn, and it may not prevent processing based on another valid legal ground.

07 Payments, Withdrawals, and KYC

Payment and identity information is used to protect funds and confirm that deposits and withdrawals belong to the registered account holder. A withdrawal to Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or another supported method may require name matching, transaction verification, and KYC completion.

bom29toto may request a valid Malaysian identity document, passport, driving licence, recent proof of address, or selfie holding the relevant document. Documents should be clear and current. Verification results may be retained to demonstrate that required checks were completed, prevent repeated fraud, and resolve later account disputes.

Payment credentials are subject to restricted access. Where a payment provider processes card, bank, e-wallet, or blockchain transactions, that provider may process information under its own legal and security obligations. bom29toto receives only the transaction details reasonably needed to credit, reconcile, investigate, or pay the account.

08 Data Disclosure and Service Providers

bom29toto may disclose relevant information to carefully selected recipients where necessary for a defined purpose, including:

• Payment processors, banks, and e-wallet providers handling deposits, refunds, or withdrawals.
• KYC, age-verification, sanctions-screening, and fraud-prevention services.
• Hosting, cloud storage, cybersecurity, communications, and technical support providers.
• Game and sportsbook suppliers where account identifiers or gameplay records are needed to provide or settle a service.
• Professional advisers, insurers, auditors, or dispute-resolution specialists subject to confidentiality obligations.
• Competent authorities or other recipients where disclosure is required by valid law, court order, or enforceable legal process.

Service Providers are expected to process information only for authorised purposes and to apply suitable confidentiality and security safeguards. bom29toto does not permit recipients to use Personal Data for unrelated direct marketing unless you have separately agreed to that use.

09 International Data Processing

Some technical, gaming, payment, or verification providers may operate infrastructure outside Malaysia. As a result, Personal Data may be processed in another jurisdiction where privacy laws and regulatory practices differ.

Where cross-border processing occurs, bom29toto takes reasonable steps to assess the provider, limit transferred data, impose contractual protections, and maintain appropriate technical controls. International processing does not change your ability to contact bom29toto about your Personal Data or exercise the rights described in this Policy.

10 Data Retention

bom29toto retains Personal Data only for as long as reasonably necessary for the purpose for which it was collected, including account administration, payment reconciliation, responsible gambling protection, fraud prevention, complaint handling, and legal compliance.

Retention periods vary by category. Active account information is generally retained while the account remains open. Transaction, KYC, security, self-exclusion, and dispute records may be retained after closure where needed to meet legal requirements, prevent re-registration during exclusion, investigate misconduct, or establish and defend claims.

When information is no longer required, bom29toto will delete it, securely destroy it, or anonymise it so it can no longer reasonably identify you. Backup copies may remain for a limited period until they are overwritten under standard recovery procedures.

11 Information Security

bom29toto applies administrative, technical, and organisational safeguards designed to protect Personal Data against accidental loss, unauthorised access, alteration, misuse, or disclosure. Measures may include encryption in transit, access controls, authentication, network monitoring, logging, staff training, secure backups, and incident-response procedures.

No online environment can be guaranteed completely secure. Users must protect passwords, avoid sharing verification codes, sign out on shared devices, and contact bom29toto promptly if unauthorised activity is suspected. We will investigate credible security reports and take proportionate action where a data incident presents a risk to affected individuals.

12 Cookies and Device Information

Cookies and similar technologies help bom29toto maintain login sessions, remember preferences, support security checks, prevent duplicate account activity, measure performance, and understand how pages are used. Essential cookies are required for core account and security functions.

Optional analytics or preference technologies may be controlled through available browser settings. Blocking essential cookies can affect login, cashier, verification, live betting, and game functionality. Browser controls may also allow you to delete stored cookies; doing so can reset preferences and end active sessions.

13 Marketing Communications and Choices

Subject to your preferences and applicable requirements, bom29toto may send information about bonuses, VIP benefits, cashback, casino releases, or events such as EPL and Liga Super Malaysia fixtures. Service messages about account security, policy changes, transactions, and responsible gambling are not promotional and may still be sent where necessary.

You may change eligible marketing preferences through your account settings or by contacting support. A request to stop marketing will be applied within a reasonable period. bom29toto may retain a minimal suppression record to ensure that your preference continues to be respected.

14 Your Privacy Rights

Subject to applicable law, account security, and relevant exemptions, you may ask bom29toto to:

• Confirm whether we process your Personal Data and provide access to eligible information.
• Correct inaccurate or incomplete account details.
• Delete information that is no longer necessary or legally required.
• Restrict certain processing while an accuracy or legal concern is reviewed.
• Explain an important decision or review a decision that was based substantially on automated processing.
• Provide eligible information in a structured and commonly used format where data portability applies.
• Record an objection to processing based on legitimate interests or direct marketing.
• Withdraw consent for future consent-based processing.

bom29toto may request identity verification before acting on a privacy request. This protects your records from unauthorised access. Some requests may be limited where information must be retained for payment records, fraud prevention, self-exclusion enforcement, legal claims, or other lawful obligations.

15 Responsible Gambling Information

bom29toto processes deposit-limit settings, session controls, cooling-off requests, self-exclusion status, and relevant account activity to promote safer gambling. This information may be used to apply requested restrictions, identify indicators of harmful play, limit promotional messages, and prevent prohibited re-registration during an exclusion period.

Responsible gambling records may need to be retained after account closure so that a self-exclusion or restriction remains effective. For more information about these safeguards, visit the Responsible Gambling page. Gambling services are for users aged 21 and above only.

16 Age Restriction and Underage Data

bom29toto does not knowingly provide gambling services to anyone under 21. Age and identity checks are used to reduce the risk of underage access. If we identify an account associated with a person below the required age, we may suspend the account, stop processing gaming activity, and retain limited evidence needed for investigation and prevention.

A parent or lawful guardian who reasonably believes that a person under 21 has supplied information to bom29toto should contact support. We will review the report, request appropriate verification where necessary, and take proportionate action.

17 Changes to This Privacy Policy

bom29toto may update this Privacy Policy to reflect changes in services, technology, security practices, payment methods, or legal requirements. The effective date at the top of the page will be revised when changes are published.

Where an update materially affects how Personal Data is processed, bom29toto may provide additional notice through the platform or available account contact details. Continued use after an update does not replace consent where fresh consent is legally required.

18 Contact Us

Questions, complaints, or privacy rights requests may be directed to the bom29toto support team. Please provide enough information for us to understand the request, but do not send passwords or unnecessary identity documents in an initial message.

• Email: [email protected] (plain text; response within 24 hours)
• Live Chat: Available 24/7 through the bom29toto platform

For general account questions, consult our FAQ. Contractual matters are addressed in the Terms & Conditions. These internal resources form part of our transparent approach to Malaysian player support.