This policy explains exactly what account data bull9a collects, how it is used, and the steps in place to keep it secure — covering every interaction from account creation through to wallet transactions via Touch 'n Go eWallet, FPX and DuitNow. Availability and applicable data rights depend on local law and the eligible regions where access is permitted.
Account Data Protection
Touch 'n Go eWallet & FPX Context
Malaysia Region Scope
Your Access Rights
POLICY POSTURE
How bull9a Handles Your Personal Data
When an account is opened on bull9a, certain personal data is collected — including the name, contact details and payment method identifiers linked to the account. This applies whether the payment route used is Touch 'n Go eWallet, FPX or DuitNow. Data collected during account creation and wallet activity is used solely for account operation, identity verification steps shown in the account, and transaction record-keeping. We do not sell personal data to third parties. Where third-party processors handle payment routing — such as the networks behind FPX online banking or Touch 'n Go eWallet — those parties operate under their own published terms, and we apply contractual safeguards before any data passes to them. Retention periods follow the requirements of applicable law in the regions where access is permitted. When a record is no longer needed for the purpose it was collected, it is deleted or anonymised. If local law in your region applies specific data-protection rights — such as correction or erasure — those rights are available to the extent the law provides. The current data-handling state for the account is accessible after login in the account dashboard.
Touch 'n Go eWallet
Transaction identifiers linked to Touch 'n Go eWallet activity are retained only for account verification and transaction history. They are not shared beyond what payment processing requires.
FPX Online Banking
FPX transfers pass through the bank's own network. Bull9a holds the transaction reference for record-keeping purposes only, in line with the retention rules set out in this policy.
DuitNow Transfer
DuitNow payment data is processed through the issuing institution. The reference stored on the account is used only to match deposits and withdrawals to the correct account wallet.
POLICY COVERAGE
Where This Policy Applies and What It Covers
This policy covers data collected and processed through the bull9a platform in regions where access is permitted under local law. It draws a clear line between what falls within this policy, what is governed by third-party terms, and what sits outside the scope of either. Review each area below to understand where this policy applies to your account activity.
Account Access and Login
Data collected during login, account creation and session activity falls fully within this policy. This includes device identifiers and the authentication steps shown in the account.
Wallet Transactions
Deposit and withdrawal records processed through Touch 'n Go eWallet, FPX and DuitNow are covered for retention and access purposes. The payment network's own terms govern their side of the transaction.
Site and Game Content
Browsing behaviour within the lobby — including game selections across studios like Microgaming, CQ9, PlayStar and Bigtime Gaming — is captured for account personalisation and session continuity only.
Third-Party Services
Links or services provided by external parties, including payment processors and identity verification providers, operate under their own published privacy terms. This policy does not extend to those third parties.
YOUR ACCOUNT RIGHTS
Practical Actions Available Under This Policy
Where local law and eligible regions permit, the following actions are open to the account holder regarding personal data held by bull9a. Access to account data — including the transaction history linked to Touch 'n Go eWallet, FPX or DuitNow — is available directly in the account dashboard after login. Corrections to personal details such as contact information can be submitted through the account settings page; the fields and verification steps required are shown there. If there is a question about how a specific piece of data is being used, raising it through the support channel is the fastest route to a clear answer. Requests that go beyond self-service — such as a formal erasure request where local law permits it — are handled through the written contact path set out in the support section below. Response times depend on the nature of the request and applicable legal requirements; we do not quote specific turnaround periods we cannot guarantee.
Review Your Records
Transaction and account history is shown in the account dashboard after login. No separate request is needed to view the data held there.
Correct Account Details
Name, contact details and linked payment identifiers can be updated through account settings. Follow the verification steps shown on that page.
Raise a Data Question
If any aspect of how personal data is used is unclear, the live support channel handles data queries alongside general account questions.
Submit a Formal Request
Erasure or restriction requests available under local law are handled through written contact. The address is in the support section below.
POLICY CONTACT
How to Reach Us About This Policy
Privacy questions, correction requests and formal data enquiries can be directed through the channels below. For account-level data questions, live chat is the fastest first step. For written requests that require a record — such as a formal erasure or restriction request — use the email path listed here.
Live Chat Support
Open the live chat icon from any page on bull9a to reach the support team directly. Live chat handles account data questions, wallet verification queries and general policy clarifications.
Email Contact
Written data requests — including formal correction, access or erasure requests where local law applies — can be submitted by email. The address is listed on the Contact page in the site footer.
Account Dashboard
The account dashboard, accessible after login, shows the current data state for the account including transaction history linked to Touch 'n Go eWallet, FPX and DuitNow. Many access requests can be resolved there without contacting support.
DATA HANDLING DETAIL
How bull9a Manages Data, Cookies and Account Security
The data-handling practices on bull9a cover four areas relevant to the account: how data is stored and retained, how cookies work on the site, account security measures, and the process for requesting policy changes. Each is described below so the position is clear before making a decision about account use.
Data Storage and Retention
Account and transaction data is retained for the period required by applicable law in the regions where access is permitted. Once a record is no longer required for its original purpose, it is deleted or anonymised according to internal schedules reviewed periodically.
Cookies and Session Data
Cookies are used on bull9a to maintain session continuity, remember login state and support the game lobby browsing experience. Cookie preferences can be adjusted through the browser settings on the device in use.
Account Security Practices
Account access is protected through authentication steps shown at login. Wallet activity linked to Touch 'n Go eWallet, FPX and DuitNow is matched to the verified account holder before any transaction is processed.
Policy Updates
When this policy is updated, the revised version is published on this page. Continuing to use the account after a policy update is posted constitutes acceptance of the revised terms, to the extent permitted by local law.
PRIVACY QUESTIONS
Common Questions About This Privacy Policy
The questions below cover what account holders most commonly ask about data rights, cookies, payment data and how to contact bull9a about this policy. If a question is not covered here, live chat is the fastest way to get a clear answer.
What personal data does bull9a collect when an account is opened?
At account creation, bull9a collects the name, contact details and payment method identifiers linked to the account. When Touch 'n Go eWallet, FPX or DuitNow is used, a transaction reference is also stored for wallet matching and record-keeping purposes.
Is my payment data shared with third parties?
Payment data is passed only to the processors needed to complete a transaction — for example, the FPX network or the Touch 'n Go eWallet system. Those parties operate under their own published terms. Bull9a does not sell payment data to unrelated third parties.
How do I see what data is held on my account?
Log in to the account dashboard and check the transaction history and account settings sections. Most account data is visible there without needing to submit a separate request. For data not visible in the dashboard, contact support through live chat.
Can I ask for my personal data to be corrected or removed?
Yes, where local law in the eligible region permits. Contact details and account information can be updated in account settings. Formal erasure or restriction requests are handled through the written email path listed in the Contact page in the site footer.
How are cookies used on bull9a, and can they be turned off?
Cookies on bull9a support session continuity, login state and lobby browsing. They do not store payment credentials. Cookie settings can be adjusted through the browser on the device in use; turning off certain cookies may affect account session behaviour.
How will I know if this policy changes?
The updated policy is published on this page with a revised date. Continuing to use the account after the update is posted indicates acceptance of the changes, to the extent local law in the applicable region permits. Checking this page periodically keeps the current position clear.