ExtraBonus Privacy Policy – Malaysian User Data Protection

ExtraBonus ("we", "platform") is committed to protecting the privacy and security of the personal data of every user who accesses or uses our services. This Privacy Policy ("Policy") describes the data collection, use, disclosure, and protection practices we follow.

This Policy applies to all users of the ExtraBonus platform, including those who access it via our official website, Android and iOS mobile apps, and any other digital interfaces provided by ExtraBonus.

By registering or using the ExtraBonus platform, you consent to the collection and use of your personal data as described in this Policy. If you do not agree, please discontinue use of the platform and contact our team to close your account.

ExtraBonus collects various types of personal data depending on how you interact with our platform. The table below provides a clear overview of the data categories we manage:

We only collect data that is strictly necessary for the stated purposes and do not collect sensitive data such as health information, religious beliefs, or political views unless voluntarily shared by the user.

Your personal data is collected through several key channels:

• Account registration: Information you enter during registration — name, email, phone number, and details required for identity verification.
• KYC Verification: Documents you upload for identity verification, including copies of your ID and proof of address.
• Financial transactions: Data collected when you make deposits or withdrawals, including details of the payment method used.
• Platform usage: Data generated automatically when you play, including gaming activity, game preferences, and usage patterns.
• Devices and connections: Technical information such as IP address, device type, operating system version, and web browser is collected automatically.
• Cookies and tracking technologies: Data collected via cookies, web beacons, and similar technologies to enhance the user experience.
• Support communications: Information you share when contacting our customer support team.

ExtraBonus processes your personal data solely for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

• Account management: User account registration, identity verification, maintenance, and closure.
• Transaction processing: Managing deposits, withdrawals, and all financial transactions related to your account.
• Service delivery: Providing access to games, promotions, and all features on the ExtraBonus platform.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and other illegal activities.
• Legal compliance: Meeting legal requirements, regulations, and orders from relevant authorities.
• Service communications: Sending account-related notifications, transaction updates, platform announcements, and promotions.
• Platform improvements: Analysing usage patterns to improve the overall user experience.
• Customer support: Helping resolve inquiries, complaints, and technical issues reported by users.

We do not use your data for purposes beyond those stated above without obtaining your consent first.

ExtraBonus does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data may be shared only in the following limited circumstances:

• Service providers: Third-party companies that assist us in operations, such as payment processors, game software providers, and cloud service providers. All such parties are bound by strict confidentiality agreements and may only use your data for purposes we specify.
• Legal requirements: When required by law, court order, or a legitimate regulatory authority. ExtraBonus will notify you of such requests unless prohibited by law.
• Fraud prevention: Sharing necessary information with fraud prevention agencies, banks, or financial authorities to protect the platform and all its users.
• Business transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to the new entity, which will assume the same data protection responsibilities.

ExtraBonus implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure:

• Encryption in transit: All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption, ensuring information cannot be intercepted in transit.
• Storage encryption: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms.
• Access controls: Only authorised staff with a legitimate business need may access user data, and all access is logged and audited.
• Continuous monitoring: Our systems are monitored around the clock to detect any suspicious activity or intrusion attempts.
• Security testing: Security audits and penetration testing are conducted regularly to identify and address vulnerabilities.

Data Retention Period: We retain your personal data for as long as your account is active and for the period required thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Data that is no longer needed will be securely deleted or anonymised.

The extrabonus platform uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and tailor content to your preferences.

Types of cookies we use:

• Essential cookies: Required for the platform to function properly — this includes login session cookies and security cookies. These cookies cannot be disabled.
• Functional cookies: Saving your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics cookies: Helping us understand how users interact with the platform, the most frequently visited pages, and where users encounter difficulties.
• Performance cookies: Collecting information on how the platform performs to help us identify and resolve technical issues.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect platform functionality. Continued use of the ExtraBonus platform is considered your consent to the use of cookies as described here.

As an extrabonus user, you have the following rights regarding your personal data. We respect and facilitate the exercise of these rights:

The extrabonus platform is strictly for adult users aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

If you are a parent or guardian and believe your child who is underage has registered or used the ExtraBonus platform, please contact our support team immediately. We will take prompt action to close the account and delete all associated data.

ExtraBonus employs a range of technical and procedural measures to prevent underage user registration, including a rigorous identity verification process and ongoing checks to identify accounts that may belong to minors.

In the course of its operations, ExtraBonus may need to transfer your personal data to servers or processing facilities located outside Malaysia. This may occur when we use cloud service providers or technology partners operating in other countries.

In all cases of cross-border data transfers, ExtraBonus ensures that:

• The destination country provides a level of data protection that is adequate or equivalent to Malaysia's standards.
• Appropriate data transfer agreements have been established with data recipients outside the country.
• Appropriate technical and organisational measures are taken to ensure data security throughout the transfer process.

Your data will not be transferred to countries that do not provide an adequate level of data protection without your explicit consent or a valid legal basis.

ExtraBonus reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements that require a different privacy approach.

When material changes are made to this Policy, we will:

• Updating the "Last updated" date at the top of this document.
• Displaying a clear notice on the platform about the changes made.
• Sending email notifications to registered members for significant changes.

Continued use of the extrabonus platform after any amendments are published constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, the ExtraBonus team is here to help.

Available channels for privacy inquiries:

• Live Chat: The fastest way to get a response — available 24/7 via the chat icon on our platform.
• Support email: Send a detailed inquiry to our team via email at [email protected] for a response within 1–2 business days.

When submitting a personal data inquiry, please provide your full name, account username, and specific details of your request so we can process it promptly and accurately.