Extra Bonus Malaysia Privacy Policy

1Introduction – Why Privacy Matters to Extra Bonus

At extra bonus, we believe that player trust is the most valuable asset we have. Without it, nothing else matters — no matter how impressive our slots collection or Table Games may be. That trust is built in many ways, and one of the most fundamental is how responsibly we handle your personal information.

When you register an extra bonus account and make your first deposit using Touch 'n Go eWallet or Maybank2u, you are entrusting us with sensitive information — your name, phone number, email address and financial transaction details. That is not something we take lightly. Every piece of information you share with extra bonus is handled with care in accordance with this policy and the requirements of Malaysia's Personal Data Protection Act 2010.

This Privacy Policy applies to all players who register and use the extra bonus platform from Malaysia, covering all interactions whether through our website, mobile app or customer support channels. It explains what data we collect, why we need it, who may access it and how you can manage your own information.

2Types of Personal Data We Collect

Extra bonus only collects personal data that is strictly necessary to deliver a safe, fair and high-quality service to our members. The following are the categories of data we collect:

Identity Data

Contact Data

Financial & Transaction Data

Gaming Activity Data

Technical Data

3How We Collect Your Personal Data

Extra bonus collects your personal data through the following channels:

• Registration form: When you register an extra bonus account, you provide basic information such as your name, email address, phone number and date of birth directly to us.
• Identity verification process (KYC): During the account verification process, you may be asked to upload identity documents such as your MyKad or passport to meet anti-money laundering (AML) compliance requirements.
• Activity within the platform: Every action you take on extra bonus — from playing slots, placing virtual sports bets on the Malaysia Super League or EPL, to withdrawing your winnings — leaves a record in our system.
• Communications with us: When you contact extra bonus customer support via live chat or email, the content of that communication is stored for record-keeping and service improvement purposes.
• Cookies and tracking technologies: Your web browser automatically sends technical information when you visit extra bonus. Cookies help us recognise you on return visits and personalise your experience.
• Trusted third parties: In certain circumstances, extra bonus may receive information from third-party payment service providers or identity verification agencies for compliance purposes.

4How Extra Bonus Uses Your Data

Extra bonus uses your personal data only for legitimate and stated purposes only. We do not use your data for any other purpose without informing you in advance:

• Account management: Creating, managing and maintaining your extra bonus account — including secure login, password resets and profile information updates.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as processing your withdrawal requests.
• Legal compliance: Fulfilling legal obligations under the PDPA 2010, anti-money laundering (AML) requirements, know your customer (KYC) requirements, and any other applicable regulations in Malaysia.
• Fraud prevention: Detecting, investigating and preventing fraud, multi-account usage, bot activity and any other misuse of the extra bonus platform.
• Customer support: To provide effective assistance when you contact the extra bonus support team with technical issues, account enquiries or complaints.
• Personalise your experience: Personalising the content, game recommendations and promotional offers shown to you based on your preferences and activity history on extra bonus.
• Service communications: Sending important notices regarding your account, changes to terms, security updates and withdrawal or deposit information.
• Platform improvements: Analysing aggregated usage data (without identifying individuals) to understand how members use extra bonus and to improve the overall experience.

5Sharing Data with Third Parties

Extra bonus does not sell member personal data to any third party for marketing or commercial purposes. However, there are limited situations where extra bonus needs to share your data with certain parties for legitimate purposes:

• Payment service providers: When you make a deposit or withdrawal, the required transaction information is shared with the relevant payment provider (such as Touch 'n Go eWallet, GrabPay or your FPX bank) to process the transaction.
• Technology service providers: extra bonus works with a number of trusted third-party service providers for technical operations — including server hosting, security monitoring and analytics. These providers receive only the minimum data required for their function and are bound by strict data protection agreements.
• Identity verification agencies: To meet KYC and AML requirements, extra bonus may verify your identity details with authorised third-party verification agencies.
• Legal authorities: Extra bonus will disclose required data to Malaysian authorities or regulatory bodies when mandated by law, court order or valid legal process.
• Fraud investigators: In cases where there is serious suspicion of fraud or money laundering, extra bonus may share relevant information with the appropriate authorities.

In all instances of data sharing described above, extra bonus ensures that the receiving party is bound by appropriate confidentiality obligations and uses the data solely for the specified purpose. extra bonus takes responsibility for ensuring that all third-party providers we engage comply with applicable data protection standards.

6Cookies & Tracking Technologies

Extra bonus uses cookies and similar tracking technologies to enhance your experience on our platform. A cookie is a small text file stored on your device when you visit the extra bonus website.

We use the following types of cookies:

• Essential cookies: Required for the core functionality of the extra bonus platform, such as maintaining your login session, remembering your language preference, and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information about how you use the extra bonus platform — which pages you visit, how long you spend on them and any errors you encounter. This data is used in aggregate to improve platform performance.
• Functional cookies: Remembering your personal preferences such as display settings, favourite game choices and other preferences to personalise your experience on extra bonus.
• Analytics cookies: Helping extra bonus understand how members interact with the platform as a whole, in order to make better-informed improvement decisions.

7Data Security Measures We Take

Extra bonus takes data security seriously to ensure your personal information is protected against unauthorised access, disclosure, alteration, or destruction. The key security measures we employ include:

• 256-bit SSL encryption: All communications between your device and extra bonus servers are encrypted using TLS protocol with 256-bit encryption keys — the same security standard used in banking.
• Layered access controls: Member data is accessible only to extra bonus staff with a legitimate business need. All access to sensitive data is logged and monitored.
• Firewall and intrusion detection systems: The extra bonus server infrastructure is protected by enterprise-grade firewalls and an intrusion detection system (IDS) operating twenty-four hours a day.
• Regular security audits: Extra bonus conducts regular security assessments and penetration testing by independent third-party experts to identify and address vulnerabilities before they can be exploited.
• Secure password storage: extra bonus account passwords are never stored in plain text. We use a strong one-way hashing algorithm with a unique salt for every account.
• Two-factor authentication (2FA): Extra bonus members are encouraged to enable 2FA on their accounts as an added layer of security that prevents unauthorised access even if your password is compromised.

While extra bonus takes all reasonable steps to protect your data, no security system is completely foolproof. You also play an important role in keeping your extra bonus account secure — use a strong and unique password, never share your login credentials, and notify us immediately if you suspect any suspicious activity.

8Personal Data Retention Period

Extra bonus retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under Malaysian law.

• Active account data: Your personal data is retained for as long as your extra bonus account remains active or for as long as you continue using our services.
• Financial transaction data: Deposit and withdrawal transaction records are retained for a minimum of seven (7) years to meet Malaysia's financial and tax regulatory requirements.
• KYC and identity verification data: Identity verification documents submitted during the KYC process are retained for the period required under Malaysia's AML regulations.
• Support communication logs: Live chat and email records with the extra bonus support team are retained for two (2) years for reference and service improvement purposes.
• Data after account closure: After your account is closed, extra bonus will delete or anonymise data that is no longer needed within a reasonable timeframe, except where continued retention is required by law.

9Your Rights as an Extra Bonus Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and extra bonus's privacy policy, you have the following rights regarding your personal data:

Extra bonus will process requests relating to your rights within 30 days of receipt. For complex cases or those involving large volumes of data, we may require up to 60 days and will inform you of the need for additional time. We do not charge a fee for most data rights requests, except where requests are excessive or repetitive.

10Children's Data Protection

Extra bonus strictly prohibits the use of the platform by individuals under the age of 18. Our platform is not designed for children and we do not knowingly collect any personal data from minors.

If extra bonus discovers that personal data belonging to a child under the age of 18 has been collected without our knowledge, we will take immediate steps to:

• Immediately closing the associated account.
• Delete all such children's personal data from our systems.
• Notifying the relevant parent or guardian where their contact information is known.

11Amendments to This Privacy Policy

Extra bonus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, Malaysian law or technological developments. When material amendments are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a prominent notice on the main page of the extra bonus platform.
• Sending email notices to registered members for high-impact amendments.

We encourage you to review this Privacy Policy from time to time to stay informed about how extra bonus protects your information. Continued use of the extra bonus platform after any amendments are published will be considered acceptance of the updated terms.

For amendments that involve material changes to how we use your data, extra bonus will seek your fresh consent where required by law. You will have the option to accept or decline those changes.

12Contact Us About Privacy

If you have any questions, concerns or complaints regarding extra bonus's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

We are committed to handling all privacy enquiries seriously and within a reasonable timeframe. If you are not satisfied with how extra bonus has handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.

Closing Note — Privacy Is Our Promise to You

We understand that a lengthy document like this Privacy Policy is not exactly a page-turner. It is full of legal terms and technical descriptions that can feel dry. But we want you to know — every paragraph in this document exists because we genuinely care about how your information is handled.

As an online entertainment platform serving hundreds of thousands of Malaysian players from Kuala Lumpur to Kota Kinabalu — from casual players spinning slots while watching Malaysia Super League football on weekends to serious Poker players competing in weekly tournaments — we understand that player trust cannot be bought. It has to be earned, one experience at a time.

When you deposit RM50 into your extra bonus account via GrabPay and play live casino blackjack, you are not only trusting us with your money — you are also trusting us with your transaction data and personal information. That is a responsibility we take very seriously.

That is why extra bonus invests in enterprise-grade security infrastructure, conducts regular security audits, restricts internal access to member data to only those who genuinely need it, and ensures your data is never sold or shared for marketing purposes without your consent. This is not merely a compliance requirement — it is how we operate because it is simply the right thing to do.

If there is anything in this Privacy Policy that you do not understand or would like to know more about, do not hesitate to reach out to the extra bonus support team. We are here around the clock, ready to help, and we will do our best to ensure your experience with extra bonus — including your peace of mind regarding your privacy — is the best we can provide.