Privacy Policy

This Privacy Policy ("Policy") is published by Banteng69 ("we", "us", "our", "the Operator") and applies to all personal data collected, processed, stored, and transmitted in connection with your use of the Banteng69 online gaming platform accessible at https://banteng69.cam/ and any associated mobile or web-based interfaces (collectively, the "Platform").

We are committed to handling your personal information responsibly, transparently, and in accordance with applicable international data protection standards. This Policy describes our practices in plain, accessible language so that you understand precisely how your data is treated from the moment you visit the Platform to the conclusion of your account relationship with us.

By registering an Account on Banteng69, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact our support team to close your account.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, financial account details, or any combination of data that could reasonably be used to identify an individual.
• "Data Controller" means Banteng69, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of Banteng69 under a contractual obligation, such as payment processors, KYC verification providers, and cloud hosting services.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, deletion, or any other form of handling.
• "Consent" means a freely given, specific, informed, and unambiguous indication by the User agreing to the processing of their Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification procedures applied by Banteng69 in compliance with applicable anti-money laundering (AML) standards.
• "Cookie" means a small text file placed on a User's device by the Platform server to facilitate session management, preference storage, and usage analytics.
• "User" / "you" means any individual who accesses, registers on, or interacts with the Banteng69 Platform.

Banteng69 collects Personal Data in several categories depending on the nature of your interaction with the Platform. The table below summarises the types of data we collect and the context in which they arise:

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) beyond what may be incidentally disclosed in the course of identity verification or responsible gambling self-assessment.

We collect Personal Data through the following channels:

Banteng69 processes your Personal Data only where a lawful basis exists under applicable data protection law. The primary bases on which we rely are:

• Contractual Necessity: Processing is necessary to perform the contract between Banteng69 and the User — including account management, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing is required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and international licensing obligations.
• Legitimate Interests: Processing is necessary for Banteng69's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by the User's rights and freedoms.
• Consent: Where you have given explicit consent — for example, opting in to promotional email communications — we process your data for that specific purpose until consent is withdrawn.

The purposes for which we process your Personal Data include:

• Creating, maintaining, and administering your Banteng69 Account;
• Processing deposits and withdrawals in MYR and cryptocurrency;
• Verifying your identity and age (minimum 21 years) in compliance with our KYC programme;
• Detecting, investigating, and preventing fraud, money laundering, and prohibited activities;
• Operating our Responsible Gambling programme, including monitoring for at-risk behaviour and processing self-exclusion requests;
• Providing customer support and responding to your enquiries;
• Sending service-critical communications such as account verification emails, security alerts, and transaction confirmations;
• Sending promotional communications where you have consented to receive them;
• Improving the Platform's features, performance, and user experience through aggregated analytics;
• Complying with any applicable legal or regulatory obligation.

All Personal Data processed by Banteng69 is handled in accordance with the following core principles, which reflect international data protection best practices:

• Lawfulness, Fairness, and Transparency: We process data only on a lawful basis and in a manner that is fair and transparent to the User.
• Purpose Limitation: Personal Data is collected for specified, explicit, and legitimate purposes and is not processed in a manner incompatible with those purposes.
• Data Minimisation: We collect only Personal Data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
• Accuracy: We take reasonable steps to ensure Personal Data is accurate and kept up to date. Users are encouraged to promptly update inaccurate account information.
• Storage Limitation: Personal Data is retained only for as long as necessary for the stated purposes or as required by law. See Section 9 for retention periods.
• Integrity and Confidentiality: Personal Data is processed with appropriate technical and organisational security measures to protect against unauthorised access, loss, or destruction.

Banteng69 does not sell your Personal Data. We may share your data with the following categories of third parties solely for the purposes disclosed in this Policy:

• Payment Service Providers: Banks and payment operators (including FPX network participants, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet operator, Boost, GrabPay, and cryptocurrency exchange partners) to facilitate transaction processing. These providers receive only the minimum data necessary to settle transactions.
• KYC and Identity Verification Providers: Third-party services engaged to verify the identity and age of Users as part of our KYC programme. Data shared is limited to that required for verification.
• Fraud Prevention and AML Services: Screening services used to identify potentially fraudulent activity or prohibited persons, including sanctions list screening.
• Cloud Infrastructure and Hosting Providers: Data centre and cloud service providers that host Platform data under contractual data processing agreements requiring them to maintain confidentiality and security.
• Game Content Providers: Third-party game studios and live dealer operators may receive anonymised or pseudonymised session data to facilitate game delivery and technical support.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or licensing authority directive, we may disclose Personal Data to government agencies, law enforcement bodies, or regulatory authorities. We will, where legally permissible, notify the User of any such disclosure.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged under duties of professional confidentiality.

Given the international nature of our operations, your Personal Data may be transferred to and processed in countries outside Malaysia. This includes transfers to servers or service providers located in the jurisdiction of our licensing authority and in jurisdictions where our cloud infrastructure partners operate.

Where such international transfers occur, Banteng69 ensures that:

• The recipient country organisation provides an adequate level of data protection;
• Appropriate safeguards are in place, such as contractual data processing agreements that impose obligations equivalent to applicable data protection requirements;
• Transfers are limited to what is strictly necessary for the stated purpose.

Users who wish to obtain further information about the safeguards applicable to any particular international transfer of their data may submit a request to [email protected].

Banteng69 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations. The following general retention periods apply:

• Account Data: Retained for the duration of the active account relationship plus a minimum of 5 years following account closure, to comply with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with standard international AML requirements.
• KYC Documentation: Retained for a minimum of 5 years following submission, or longer if required by the applicable licensing authority.
• Support Communications: Retained for 2 years from the date of resolution of the relevant enquiry or complaint, unless a longer period is required for legal proceedings.
• Marketing Preferences and Consent Records: Retained for the duration of the marketing relationship, plus2 years following any opt-out or consent withdrawal, for audit purposes.
• Technical Log Data: Retained for 12 months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where complete deletion is not immediately possible due to backup system constraints, data will be isolated and protected until deletion can be completed.

Banteng69 uses cookies and similar technologies (including session tokens, local storage, and pixel tags) to operate and improve the Platform. Cookies do not themselves contain personally identifiable information, but they may be associated with Personal Data we hold about you.

Subject to applicable law and certain conditions, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 2 business days and provide a substantive response within 30 days.

The Banteng69 Platform is strictly intended for persons aged21 years and above. We do not knowingly collect, solicit, or process the Personal Data of individuals under the age of 21. This minimum age threshold applies to all users regardless of jurisdiction.

During the account registration process, users are required to confirm they meet the minimum age requirement. KYC verification — including submission of a government-issued identity document such as a MyKad or passport — is required to confirm age before any withdrawal is processed.

If you have reason to believe that a person under 21 years of age has registered an Account on Banteng69, please contact our support team immediately at [email protected].

Banteng69 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption — equivalent to the standard employed by Maybank2u, CIMB Clicks, and Public Bank Online.
• Encryption at Rest: Sensitive Personal Data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing Personal Data is restricted to authorised personnel only, based on the principle of least privilege. All access is authenticated and logged.
• Two-Factor Authentication: Administrative access to systems holding Personal Data requires multi-factor authentication.
• Intrusion Detection: Real-time monitoring systems are deployed to detect and respond to suspicious activity or potential security incidents.
• Data Segregation: Personal data and financial records are held in separate, independently secured systems with different access control configurations.
• Regular Security Audits: Our security posture is reviewed regularly through internal assessments and periodic external security reviews.
• Incident Response Plan: In the event of a personal data breach, we maintain a documented incident response procedure. Affected Users will be notified as required by applicable law, without undue delay.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Users are encouraged to protect their Account credentials and notify us immediately of any suspected unauthorised access.

The Banteng69 Platform may incorporate third-party services such as game content from licensed game studios, live streaming infrastructure, and payment processing interfaces. These third-party components operate under their own privacy policies and data handling practices, over which Banteng69 has limited direct control beyond contractual obligations.

Where Banteng69 engages third-party Data Processors, we ensure that:

• A formal Data Processing Agreement (DPA) is in place that restricts the processor to processing Personal Data solely on Banteng69's documented instructions;
• The processor provides sufficient guarantees regarding technical and organisational security measures;
• Sub-processing by third-party providers is subject to equivalent contractual protections;
• The processor is required to assist Banteng69 in meeting its obligations to respond to User rights requests.

Banteng69 is not responsible for the privacy practices of any third-party website or service that is not under our operational control. Users are encouraged to review the privacy policies of any third-party service they interact with independently.

Banteng69 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, the introduction of new platform features, amendments to applicable law, or regulatory guidance from our licensing authority.

In the event of a material change to this Policy — particularly any change that affects how your Personal Data is used or your rights in relation to it — we will notify registered Users by publishing a notice on the Platform and, where practicable, by email to the address associated with your Account. The "Last Updated" date at the top of this Policy will be revised with each amendment.

Continued use of the Platform following publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the Platform and contact our support team to close your Account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Banteng69, please contact us through any of the following channels. We are committed to responding to all privacy-related enquiries within the timeframes stated below:

For questions about your Account, bonus terms, or general platform enquiries, please visit our FAQ page. For information about responsible gambling tools and self-exclusion, please visit our Responsible Gambling page.