Privacy Policy — BingoPlus

Introduction

This Privacy Policy (hereinafter "Policy") issued by BingoPlus (hereinafter "we", "us", "our", or "the Platform"), the operator of the online casino and sports betting platform accessible at bingoplus.casa. This Policy describes how BingoPlus collects, uses, stores, protects, and discloses personal data relating to individuals (hereinafter "you", "Player", or "User") who access or register on the Platform.

BingoPlus is committed to processing personal data in a manner that is lawful, transparent, and proportionate. We operate in compliance with applicable international data protection standards and the requirements of our gaming licence jurisdiction.

By accessing the Platform, registering an account, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identification numbers, location data, online identifiers, and factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means BingoPlus, which determines the purposes and means of processing personal data on this Platform.
• "Data Processor" means any third party engaged by BingoPlus to process personal data on its behalf, under contractual instructions.
• "KYC" means Know Your Customer — the identity and age verification procedures conducted to confirm the identity of a Player prior to processing withdrawals.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a specified purpose.
• "Cookie" means a small text file stored on a User's device by a web browser for the purpose of session management, analytics, or personalisation.

Data We Collect

3.1 Information You Provide to Us

When you register an account or interact with the Platform, we may collect the following categories of personal data that you provide directly:

• Identity Data: Full legal name, date of birth, gender, nationality.
• Contact Data: Email address, Malaysian mobile phone number, residential address (including city — Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, or elsewhere in Malaysia).
• Identity Verification Documents: Malaysian Identity Card (MyKad), passport, utility bill, or other government-issued document submitted for KYC purposes.
• Financial Data: Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-linked accounts), or cryptocurrency wallet addresses used for deposits and withdrawals.
• Account Credentials: Username and encrypted password (passwords are never stored in plain text).
• Support Communications: The content of messages, complaints, or enquiries you send to our support team via live chat or email.

3.2 Data We Collect Automatically

When you use the Platform, we automatically collect certain technical and behavioural data, including:

• Technical Data: IP address, browser type and version, device type (desktop, mobile, tablet), operating system, screen resolution.
• Usage Data: Pages visited, games played, betting markets accessed, session duration, login and logout timestamps.
• Transaction Data: Deposit amounts, withdrawal amounts, game wagers, bonus usage, and transaction history.
• Geolocation Data: Approximate geographic location derived from your IP address, used for compliance and fraud detection purposes.

3.3 Data We Receive From Third Parties

We may receive limited personal data about you from third-party service providers in the following contexts:

• Payment processors (e.g., DuitNow, FPX network participants, Maybank, CIMB, Public Bank) — transaction confirmation and status data.
• Identity verification service providers — confirmation results from document and biometric checks.
• Fraud detection and anti-money laundering screening services — risk scoring and sanctions screening results.

How We Use Your Data

The table below sets out the purposes for which BingoPlus uses your personal data and the corresponding lawful basis for each processing activity:

Lawful Basis for Processing

BingoPlus processes personal data one or more of the following lawful bases:

• Contract Performance: Processing is necessary for the performance of the Terms and Conditions agreement between BingoPlus and you as a registered Player. This covers account management, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with applicable law, including anti-money laundering obligations, KYC requirements imposed by our gaming licence conditions, and record-keeping obligations.
• Legitimate Interest: Processing is necessary for the legitimate interests of BingoPlus, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent (e.g., for sending promotional communications), you have the right to withdraw that consent at any time by contacting support or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

6.1 Third-Party Service Providers

BingoPlus engages trusted third-party service providers to assist in delivering our services. These providers act as Data Processors and are contractually bound to process personal data only on our instructions and in compliance with applicable data protection standards. Categories of third-party processors include:

• Payment processing partners (including DuitNow, FPX network, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank)
• Identity and KYC verification service providers
• Fraud prevention and anti-money laundering screening services
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Analytics and platform performance monitoring tools

6.2 Legal and Regulatory Disclosure

We may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or regulatory direction. In all such cases, we will disclose only the minimum data necessary to comply with the relevant requirement.

6.3 No Sale of Personal Data

6.4 Business Transfers

In the event that BingoPlus undergoes a merger, acquisition, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the registered email address on your account if such a transfer materially affects the processing of your personal data.

Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website server. BingoPlus uses cookies and similar tracking technologies (such as web beacons and local storage) to operate core platform functions, enhance your experience, and collect analytical data about Platform usage.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication, security tokens, and load balancing cookies. They cannot be disabled without affecting core functionality.
• Functional Cookies: Remember your preferences such as language, device settings, and game lobby layout to provide a more personalised experience.
• Analytics Cookies: Collect anonymised or aggregated data about how Players use the Platform, which pages are visited most frequently, and where errors occur. This data informs our product improvement decisions.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

7.3 Cookie Management

You can control non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of the Platform. For full cookie management on mobile browsers (as many Malaysian players use mobile devices), consult the settings section of your Android or iOS browser application.

Data Retention

BingoPlus retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulation, or our gaming licence conditions. The following retention schedule applies:

• Account and Identity Data: Retained for the duration of your active Account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years following the last transaction or account closure, whichever is later.
• Transaction and Financial Records: Retained for a minimum of 5 years following the transaction date.
• Customer Support Communications: Retained for3 years following the closure of the relevant support case.
• Usage and Technical Data (non-anonymised): Retained for 12 months, after which data is either deleted or irreversibly anonymised for statistical use.
• Marketing Preferences and Consent Records: Retained for the duration of your Account and for 2 years following account closure, to demonstrate compliance with consent requirements.

When personal data is no longer required for its original retention purpose, it is securely deleted from our systems or anonymised beyond re-identification. We conduct periodic data audits to ensure compliance with our retention schedule.

Data Security

BingoPlus implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all Platform pages, payment flows, and API communications.
• Encryption at Rest: Sensitive personal data — including KYC documents, payment details, and identity records — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within BingoPlus is governed by a role-based access control framework. Only personnel with a verified business need may access player personal data, and all access is logged and audited.
• Password Security: Player passwords are stored using bcrypt hashing with appropriate salting. Passwords are never stored in recoverable plain text. BingoPlus will never ask you for your password via any channel.
• Two-Factor Authentication: BingoPlus supports optional two-factor authentication (2FA) for account login, which we strongly recommend all players enable.
• Penetration Testing: Our platform undergoes regular third-party security penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities within the timeframes required by applicable law.

International Data Transfers

BingoPlus operates as an internationally licensed platform. Your personal data may be processed, stored, or accessed by BingoPlus personnel or authorised service providers located outside of Malaysia. This includes data centres and cloud infrastructure operated in jurisdictions with established data protection frameworks.

Where personal data is transferred outside of your home jurisdiction, BingoPlus ensures that appropriate safeguards are in place, which may include:

• Contractual protections with third-party processors binding them to data protection standards equivalent to those applied by BingoPlus.
• Transfers to jurisdictions recognised as providing adequate levels of data protection.
• Data processing agreements containing standard contractual clauses or equivalent protections.

If you wish to obtain further information about the safeguards in place for international transfers of your personal data, please contact using the details in Section 14.

Your Rights

Subject to applicable law and our legitimate interests in maintaining platform security and regulatory compliance, you have the following rights in relation to your personal data held by BingoPlus:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data. You can update most contact details directly within your Account dashboard.
• Right of Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 8).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interest as the lawful basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected] (plain text — not a clickable link). We will acknowledge your request within 5 business days and fulfil it within 30 days, subject to identity verification. Requests from players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location in Malaysia are treated identically.

Children & Minors

The BingoPlus Platform is strictly for individuals aged21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that an account has been registered by a person under 21, we will immediately suspend the account, delete the associated personal data, and void any related transactions in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that your child may have registered an account on the Platform, please contact our support team immediately at [email protected] (plain text — not clickable). We will investigate and take appropriate action as a priority.

Changes to This Privacy Policy

BingoPlus reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via their registered email address at least 7 days before the revised Policy takes effect.
• Display a prominent notice on the Platform's home page for a period following the update.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree with the changes, you should cease using the Platform and request account closure.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, the personal data we hold about you, or the exercise of your data protection rights, please contact BingoPlus using the following details. Our support team is available 24 hours a day, 7 days a week, including Malaysian public holidays.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request — [Your Account Username]" for privacy-related enquiries to ensure prompt routing.
• Live Chat: Available on the Platform — average response time under 2 minutes
• Response Time: Privacy-related requests will be acknowledged within 5 business days and fulfilled within 30 days.

For account-related queries, bonus disputes, or responsible gambling support, please also see our FAQ page and our Responsible Gambling page.

For the full contractual terms governing your use of BingoPlus, please refer to our Terms & Conditions.