bonusbears168 Privacy Policy: How We Handle Your Account Data
This policy explains exactly what data bonusbears168 collects when you register, transact via Touch 'n Go eWallet, DuitNow or FPX, and use the lobby — and what choices you have over that data. Availability of our platform and the rights described here depend on local law and the eligible regions from which access is permitted.
Account data you control
Touch 'n Go eWallet & FPX context
Clear retention practice
No data sold to third parties
POLICY POSTURE
What We Collect and Why We Hold It
When you open an account, we collect the registration details you enter — name, contact information and login credentials. When a transaction is processed through Touch 'n Go eWallet, FPX or DuitNow, our system records the transaction reference, amount and payment channel to keep your wallet history accurate and verifiable. We do not store full payment credentials on our servers; those are handled by the respective payment rails under their own security standards. Beyond registration and payment context, we collect device and session data — browser type, operating system, session timestamps — to keep the account secure and to detect irregular access. This data is held for as long as your account remains active and for a retention period after closure as required by applicable jurisdiction rules. We do not sell your personal data to advertising networks or unrelated third parties. Data shared with service providers — such as identity verification or fraud-screening partners — is limited to what those functions strictly require, and those partners are contractually bound to handle it responsibly. You can review what data is held against your account by following the steps in your account dashboard after login.
Touch 'n Go eWallet transaction references
FPX payment channel records
DuitNow transfer references
Device and session logs
Account registration details
POLICY BOUNDARIES
Where This Policy Applies and What It Covers
This policy covers data collected directly through the bonusbears168 platform — including account creation, lobby access, wallet transactions and support interactions. It does not govern how third-party payment providers, game studios or linked services handle their own data. Each of those parties operates under its own privacy terms, which we encourage you to review independently.
Account Access
All data collected at registration, login and account verification falls within this policy. That includes your login credentials, contact details and any identity records submitted through the account page.
Wallet Transactions
Transaction references generated when you use Touch 'n Go eWallet, FPX or DuitNow are covered here. The payment rail itself operates under its provider's terms; we hold only the reference data our system generates.
Lobby and Site Content
Session data logged while you browse games — such as Kuching Gold Reels or Rapid Mines Board — falls within scope. Game outcome data held by a studio provider is governed by that studio's own data practice.
Third-Party Services
Links to external sites, payment processors and game content providers are outside this policy's scope. Once your session moves to an external service, that service's own policy applies and we do not control it.
YOUR PRACTICAL CHOICES
Actions You Can Take Over Your Own Data
Your data is not a locked file. After logging in, the account dashboard shows the personal details held on your profile — you can review them at any time and submit a correction request if anything is inaccurate. If you want a record of what data we hold, a data-access request can be submitted through the support contact paths listed below; we will respond within the timeframe required by the applicable jurisdiction. Closing your account does not immediately erase all records — a retention period applies for transaction and compliance purposes — but you can ask for confirmation of what remains and when it is due to be cleared. For any data question that the dashboard does not resolve directly, the support channel is the right path: use it to raise a correction, flag a concern or request a formal data review. All requests are tracked and responded to in writing.
Review Your Records
Log in and open the account dashboard to see the personal and contact details we currently hold. The dashboard reflects the current state of your profile in real time.
Correct Account Details
If a name, contact number or email address is wrong, submit a correction through the account settings page. For identity-linked fields, the support channel handles verification before the change is applied.
Raise a Data Question
Any question about how a specific piece of your data is used — including wallet reference data from FPX or DuitNow transactions — can be directed to support. We respond to data queries in writing.
Request a Formal Data Review
A formal access or erasure request can be submitted via the privacy contact email. We will confirm receipt and outline the applicable timeline based on the jurisdiction rules that apply to your account.
PRIVACY CONTACT PATHS
How to Reach Us on Privacy Matters
Three routes are open if you have a question about how your data is handled, want to correct a record or need to submit a formal request. Pick the channel that suits the urgency of your query — live chat handles quick clarifications; email is the right path for formal written requests that need a tracked response.
Live Chat
Open the chat widget from any page while logged in. Live chat handles quick data clarifications, account detail corrections and general privacy questions. It is not the path for formal erasure or access requests — use email for those.
Privacy Email
Send a written request to the privacy contact address shown in the account help section after login. Use this route for formal data-access requests, erasure inquiries and any matter that requires a documented response trail.
Account Dashboard
The quickest self-serve path for profile corrections and reviewing what personal data is on file. Log in, open the account settings panel and follow the fields shown there — no support ticket needed for standard updates.
HOW WE HANDLE DATA
Data Practice, Cookies and Account Security
Our approach to data handling is built around keeping your account records accurate, your session secure and your choices visible to you at login. Cookies are used to maintain your session state, remember login preferences and detect unusual access patterns — you can manage cookie preferences through your browser settings at any time. Account security relies on login credentials you set; we do not log your full password and access logs are retained for security review purposes. Where wallet transaction data from Touch 'n Go eWallet or FPX passes through our system, it is handled under encryption in transit and stored only as reference-level records. Data retention periods depend on the applicable jurisdiction and the type of record — transaction references are held longer than session logs. If you want to know the retention period for a specific data type, submit the question through the privacy email channel and we will respond with the applicable timeframe.
Cookie Practice
We use session cookies and preference cookies — not advertising trackers. Cookie settings can be adjusted through your browser at any time. Disabling session cookies may affect your ability to stay logged in to the account.
Account Security
Login credentials are hashed; we do not store or transmit your password in plain form. Access logs are kept for a defined period to allow security review if unusual login activity is detected on your account.
Wallet Data Handling
Transaction references from Touch 'n Go eWallet, DuitNow and FPX are stored as records tied to your account. Full payment credentials are never held on our side — those stay with the payment provider's own infrastructure.
Data Retention
Retention periods vary by data type and jurisdiction requirement. Session data is cleared sooner; transaction and identity records are held for the compliance period that applies. Contact the privacy email for a specific timeline on any record type.
PRIVACY QUESTIONS ANSWERED
Frequently Asked Questions About This Policy
These are the questions that come up most often about how bonusbears168 handles account data, what choices are available and how to act on them. If your question is not covered here, the privacy email channel is the right place to send it.
What personal data does bonusbears168 collect when I register?
At registration, we collect the name, contact details and login credentials you submit. Once your account is active, session and device data is logged to keep your access secure. You can see the current state of your profile data in the account dashboard after login.
Does bonusbears168 store my Touch 'n Go eWallet or FPX payment details?
We store transaction references — the record that a transaction occurred, the channel used and the amount — not your full payment credentials. Those stay with the payment provider. The references are visible in your account transaction history.
Can I ask bonusbears168 to correct or update my account data?
Yes. Standard profile fields like contact number and email can be updated through the account settings panel after login. For identity-linked fields, submit a request through live chat or the privacy email and the support team will verify the change before applying it.
How long does bonusbears168 keep my data after I close my account?
A retention period applies after account closure, the length of which depends on the data type and the applicable jurisdiction rules. Transaction and compliance records are held longer than session data. You can request a specific timeline for any record type via the privacy email.
Does bonusbears168 share my data with third parties?
Data is shared only with service providers whose function requires it — such as identity verification or fraud-screening partners — and only to the extent needed for that function. Those partners are bound by contract. We do not sell personal data to advertising networks.
How do I submit a formal data-access or erasure request?
Send your request to the privacy contact email address shown in the account help section after login. Include your account identifier so we can locate the relevant records. We confirm receipt and outline the applicable response timeline based on the jurisdiction rules for your account.