Privacy Policy — buntogel Malaysia

Introduction

This Privacy Policy (hereinafter referred to as "this Policy" or "the Policy") is published by buntogel (hereinafter referred to as "buntogel", "the Platform", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://buntogel.cam. This Policy governs the collection, processing, storage, and disclosure of personal data pertaining to all individuals (hereinafter referred to as "you", "your", "the User", or "the Player") who access or use the buntogel platform in any capacity.

buntogel is committed to responsible data stewardship. We recognise that your personal data is valuable, and we take our obligations as a data processor seriously. This Policy has been prepared to ensure full transparency regarding how your information is handled from the moment you visit our platform to the point at which your account is closed and data retention obligations are satisfied.

This Policy should be read in conjunction with our Terms & Conditions, which govern the use of the buntogel platform more broadly. In the event of any conflict between this Policy and the Terms & Conditions on the subject of data handling, this Policy shall prevail.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Term	Meaning
"Personal Data"	Any information that directly or indirectly identifies a living individual, including name, identification number, contact information, financial details, and online identifiers such as IP addresses.
"Processing"	Any operation performed on personal data, whether automated or manual, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, or deletion.
"Data Controller"	buntogel, the entity that determines the purposes and means of processing your personal data.
"Data Processor"	Any third party that processes personal data on behalf of buntogel, subject to a data processing agreement and under buntogel's instruction.
"Consent"	A freely given, specific, informed, and unambiguous indication by you — via a clear affirmative action — of your agreement to the processing of your personal data for a stated purpose.
"KYC"	Know Your Customer — the identity and age verification process through which buntogel confirms a Player's identity, age, and payment method ownership before processing withdrawals.
"Cookies"	Small data files placed on your device by the buntogel platform to enable core functionality, analytics, and session management.
"Third Party"	Any individual, company, or entity other than buntogel and the registered Player, including payment processors, identity verification services, and analytics providers.

Data We Collect

buntogel collects personal data across several categories, depending on the nature of your interaction with the platform. The categories of personal data we collect are set out below:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify minimum age eligibility of 21 years);
• Residential address at the time of registration;
• Email address and mobile phone number;
• Chosen username and encrypted account password;
• Copies of identity documents submitted during KYC verification, including your MyKad (Malaysian National Identity Card) or passport, and proof of address documents.

3.2 Financial and Transaction Data

• Details of deposits made via Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, or cryptocurrency (USDT/BTC);
• Withdrawal requests, processing status, and destination account details (e-wallet IDs, bank account numbers in masked format);
• Transaction timestamps, amounts (in MYR), and reference numbers;
• Bonus credits claimed and associated wagering activity.

3.3 Gameplay and Behavioural Data

• Betting history, game session logs, wager amounts, and outcomes across all game categories;
• Sports betting selections, live betting activity, and Mix Parlay entries;
• Session duration, login timestamps, and platform navigation patterns;
• Game preferences, most-played titles, and interaction patterns with promotional content.

3.4 Technical and Device Data

• IP address and approximate geolocation at the time of each session;
• Device type, operating system, browser version, and screen resolution;
• Cookie identifiers, session tokens, and platform analytics data.

3.5 Communications Data

• Content of live chat conversations, email correspondence, and support tickets submitted to buntogel's customer service team;
• Responses to voluntary surveys, feedback forms, or promotional opt-in requests.

How We Collect Your Data

buntogel collects personal data through the following channels and methods:

• Direct Provision: Information you provide directly during account registration, KYC document submission, deposit and withdrawal requests, support enquiries, and any correspondence with our team.
• Automated Collection: Technical and behavioural data collected automatically as you navigate the platform, including cookies, server logs, session tracking software, and analytics tools that monitor gameplay patterns and platform usage.
• Third-Party Payment Processors: When you initiate a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, FPX, or any other supported Malaysian payment method, our payment processing partners confirm transaction details to buntogel for the purposes of crediting or debiting your account balance.
• Identity Verification Services: Where automated document verification tools are used to process KYC submissions, a regulated third-party identity verification service may process your documentation on our behalf, under a data processing agreement.
• Public Sources: In specific circumstances related to fraud prevention or regulatory compliance, buntogel may verify information against publicly available databases or fraud-screening services.

Legal Basis for Processing

buntogel processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

Legal Basis	Application to buntogel Processing Activities
Contractual Necessity	Processing required to fulfil our contractual obligations to you as a registered Player, including account management, payment processing, and dispute resolution.
Legal Obligation	Processing required to comply with applicable anti-money laundering (AML) laws, KYC regulations, reporting obligations to regulatory authorities, and fraud prevention requirements.
Legitimate Interests	Processing for platform security, fraud detection, responsible gambling monitoring, improving our services, and personalising your platform experience, where these interests are not overridden by your data protection rights.
Consent	Processing for direct marketing communications (including promotional emails and SMS notifications), where you have explicitly opted in. You may withdraw consent at any time via your account settings.

How We Use Your Data

buntogel uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your buntogel account, including processing login authentication, managing your account balance, and fulfilling your transaction instructions.
• Identity and Age Verification (KYC): Confirming that you meet the minimum age requirement of 21 years and that your identity matches the payment methods registered to your account.
• Payment Processing: Executing deposit credits and withdrawal payments via your chosen MYR payment method, including Touch 'n Go eWallet, DuitNow, FPX, and all major Malaysian banks.
• Fraud Prevention and Platform Security: Detecting and investigating suspicious account activity, preventing duplicate account registration, monitoring for bonus abuse, and maintaining the overall integrity of the buntogel platform.
• Anti-Money Laundering Compliance: Screening transactions against AML thresholds, maintaining transaction records as required by applicable regulations, and reporting suspicious activity to relevant authorities where legally required.
• Responsible Gambling Monitoring: Analysing gameplay patterns to identify potential indicators of problem gambling behaviour and, where appropriate, applying protective measures such as deposit limit prompts or responsible gambling notifications.
• Customer Support: Responding to your queries, complaints, and requests submitted via live chat, email, or any other support channel.
• Marketing Communications (with Consent): Where you have opted in, sending you promotional emails, SMS, or in-platform notifications about new bonuses, game launches, and platform updates. You may opt out at any time.
• Platform Improvement and Analytics: Analysing aggregated, anonymised usage data to improve the buntogel platform, optimise the user experience, and inform product development decisions.

Data Sharing & Disclosure

buntogel does not sell, rent, or trade your personal data to third-party marketers. We may share your data with third parties only in the circumstances described below, and always subject to appropriate data protection safeguards:

• Payment Processors: Your transaction data is shared with our approved payment processing partners (including providers facilitating Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB, DuitNow, FPX, and crypto transactions) solely to execute payment instructions. These partners are contractually bound to process your data only for this purpose.
• Identity Verification Providers: KYC documents and identity data may be processed by regulated third-party verification services under a data processing agreement. These providers access only the minimum data necessary to complete verification.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, buntogel will disclose personal data to the appropriate authority. We will notify you of such a requirement where legally permitted to do so.
• Fraud and AML Screening Services: Anonymised or pseudonymised transaction data may be shared with industry fraud-prevention networks and AML screening databases for the purpose of detecting illicit activity.
• Platform Technology Providers: Service providers who operate platform infrastructure, customer support software, and analytics tools on behalf of buntogel may access personal data as necessary to perform those services, subject to strict data processing agreements.
• Corporate Transactions: In the event of a merger, acquisition, or reorganisation of buntogel, personal data may be transferred to the acquiring or successor entity, subject to equivalent data protection standards being maintained.

Cookies & Tracking Technologies

buntogel uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow the platform to recognise you between sessions, maintain your login state, and deliver a personalised experience. The categories of cookies we use are as follows:

Cookie Type	Purpose	Duration
Essential Cookies	Required for core platform functionality including user authentication, session management, and maintaining your account login state. Cannot be disabled without disrupting platform access.	Session / up to 30 days
Functional Cookies	Remember your preferences such as language settings, display configurations, and previously selected payment methods to enhance your experience on return visits.	Up to 12 months
Analytics Cookies	Collect anonymised usage data — including pages visited, session duration, and navigation paths — to help us understand how the platform is used and identify areas for improvement.	Up to 24 months
Security Cookies	Assist in fraud detection and account security by identifying anomalous access patterns, flagging suspicious login attempts, and verifying device fingerprints.	Session-based

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair your ability to log in and use the buntogel platform. Disabling analytics or functional cookies will not prevent you from accessing core features but may reduce the quality of your experience.

Data Retention

buntogel retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any mandatory retention periods imposed by applicable law. Our general data retention guidelines are as follows:

• Account and Identity Data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, in accordance with AML and KYC regulatory obligations.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years, as required for financial audit and regulatory compliance purposes.
• KYC Documentation: Identity verification documents are retained for five (5) years from the date of submission or account closure, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing Preferences: Records of consent to marketing communications are retained for three (3) years from the date of the last consent event, or until you withdraw consent, whichever is earlier.
• Anonymised Analytics Data: Aggregated, anonymised usage data derived from your platform activity may be retained indefinitely for statistical and product improvement purposes, as it no longer constitutes personal data once de-identified.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

Data Security

buntogel implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• Transport Encryption: All data transmitted between your browser or device and the buntogel platform is encrypted using 256-bit TLS/SSL encryption, ensuring that your personal and financial data cannot be intercepted in transit.
• At-Rest Encryption: Sensitive personal data stored on buntogel servers — including identity documents and payment records — is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data within buntogel's internal systems is restricted on a strict need-to-know basis. Staff are granted access only to the data necessary for their specific role, and all access events are logged and auditable.
• Real-Time Fraud Monitoring: Automated systems continuously monitor account activity for anomalous patterns, flagging potential unauthorised access attempts, duplicate account registrations, and suspicious transaction behaviour.
• Regular Security Audits: buntogel's platform infrastructure is subject to regular internal and external security audits and penetration testing to identify and remediate vulnerabilities.
• Password Security: Account passwords are stored using one-way cryptographic hashing. buntogel employees cannot view your password in plain text. We strongly recommend you use a unique, complex password for your buntogel account and enable any two-factor authentication options where available.

Your Rights

As a data subject whose personal data is processed by buntogel, you hold the following rights. These rights may be subject to certain limitations where compliance with legal obligations or legitimate interests take precedence, but we will always respond to your request transparently and within the timeframes set out below.

To exercise any of the rights listed above, please contact our support team using the details provided in Section 16. We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days, and will notify you accordingly.

Children & Minors

The buntogel platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals below this age threshold. Age verification is a mandatory component of our KYC process, and we implement technical measures designed to prevent underage registration.

If we become aware that personal data has been collected from an individual who has not attained the age of 21, we will take immediate steps to permanently close that account and delete all associated personal data, subject to any mandatory retention obligations under applicable law. Any funds deposited by an underage individual will be returned to the originating payment method following completion of the investigation process.

If you believe that a minor has created an account on buntogel using false age information, please notify us immediately via the contact details in Section 16 so that we can investigate and take appropriate action.

International Data Transfers

As an internationally operated online gaming platform, it is possible that personal data processed by buntogel — or by third-party data processors engaged by buntogel — may be stored on or transferred to servers located outside of Malaysia. Such transfers may occur in the course of providing platform services, processing payments, or engaging identity verification or analytics service providers.

Where personal data is transferred internationally, buntogel ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding that applicable in Malaysia. These safeguards may include contractual data protection clauses, adequacy assessments, and technical security standards equivalent to those described in Section 10 of this Policy.

You may request information about the specific safeguards applied to any cross-border transfer of your personal data by contacting us using the details in Section 16.

Third-Party Links

The buntogel platform does not contain links to third-party websites for marketing or commercial purposes. Any third-party services referenced in this Policy — such as payment processors (Touch 'n Go eWallet, Maybank2u, DuitNow, FPX) and identity verification providers — operate their own independent privacy policies.

buntogel accepts no responsibility for the privacy practices, data handling procedures, or security measures of any third-party service provider. Where you interact directly with a third-party payment provider's interface (for example, authorising a transaction through the Touch 'n Go eWallet app or completing a Maybank2u bank transfer), that interaction is subject to the third party's own privacy policy, which you should review independently.

Policy Amendments

buntogel reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable data protection laws, platform functionality, or our data processing practices. Material amendments — those that meaningfully affect your rights or the way in which we process your data — will be communicated to registered Players via email to their registered address and via a notification displayed upon platform login.

The "Last Updated" date displayed at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to remain informed about how buntogel protects your personal data. Your continued use of the platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

Prior versions of this Privacy Policy are available upon written request to our support team, subject to a reasonable administration period.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact buntogel's data protection team using the following channels:

• Support Email: [email protected] (plain text — not a clickable link; copy and paste this address into your email client)
• Live Chat: Available 24 hours a day, 7 days a week via the buntogel platform. For data protection enquiries, please select "Account & Privacy" as the subject.
• Languages: Enquiries are accepted in English, Bahasa Melayu, and Mandarin.
• Response Commitment: We will acknowledge your privacy enquiry within 72 hours and provide a full substantive response within 30 calendar days.

When submitting a data subject rights request (Section 11), please include your full registered name, account username, and the email address associated with your buntogel account to allow us to verify your identity and process your request accurately.