Privacy Policy — Banjir69

Introduction

This Privacy Policy ("Policy") is published by Banjir69, operating the online gambling platform accessible at banjir69.cam (hereinafter "Banjir69", "we", "us", or "the Platform"). This Policy governs the collection, processing, storage, and disclosure of personal data relating to individuals who access our website, register an Account, or interact with our Services in any capacity.

Banjir69 is committed to protecting your privacy and handling your personal data with the highest standards of care and transparency. We process personal data only for the legitimate purposes described in this Policy and in accordance with applicable data protection legislation.

This Policy should be read alongside our Terms & Conditions, which together form the complete agreement governing your relationship with Banjir69. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

Data We Collect

Banjir69 collects Personal Data through multiple touchpoints across the Player lifecycle — from initial website visit through registration, ongoing gameplay, payment transactions, and support interactions. The categories of data we collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• Residential address, including city, postcode, and country (e.g., Kuala Lumpur, Johor Bahru, Penang).
• Email address and contact telephone number.
• Username and encrypted account password.
• Nationality and, where applicable, national identification number for KYC purposes.

3.2 Financial & Payment Data

• Payment method details: e-wallet identifiers (Touch 'n Go eWallet, Boost eWallet, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong), FPX reference data, DuitNow proxy information.
• Deposit and withdrawal transaction records, including amounts in Malaysian Ringgit (MYR) and transaction timestamps.
• Cryptocurrency wallet addresses where BTC or USDT payments are made.
• Payment processor responses and transaction reference identifiers.

3.3 KYC Verification Documents

• Copies of government-issued photo identity documents (MyKad, Passport, Driver's License).
• Proof of address documents (utility bills or bank statements issued within the preceding 3 months).
• Selfie images or video verification where required for liveness checks.

3.4 Technical & Usage Data

• IP address, device type, operating system, and browser or application version.
• Session data: login timestamps, session duration, and geographic location inferred from IP address.
• Gameplay data: games played, bets placed, amounts wagered, winnings and losses, and bonus activity.
• Clickstream and interaction data collected via cookies and similar tracking technologies.

3.5 Communications Data

• Content of live chat conversations with our support team, including queries, complaints, and resolutions.
• Email correspondence records, including support requests and promotional responses.
• Responses to surveys, feedback forms, or promotional participation where applicable.

How We Use Your Data

Banjir69 processes your Personal Data for the following defined purposes:

Legal Basis for Processing

Banjir69 processes your Personal Data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual Necessity: Processing required to perform the contract between you and Banjir69 — primarily the Terms & Conditions — including Account management, payment processing, and Service delivery.
• Legal Obligation: Processing necessary for compliance with applicable legal obligations, including KYC verification, AML transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing carried out in pursuit of Banjir69's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and service improvement, provided these interests are not overridden by your rights and interests.
• Consent: Where you have given explicit, freely withdrawn consent, for example for receipt of marketing communications. You have the right to withdraw consent at any time without detriment to your Account.

Data Sharing & Disclosure

Banjir69 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients in the circumstances described:

• Payment Service Providers: Financial institutions and e-wallet operators (including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency payment processors) as necessary to execute payment transactions.
• Identity Verification Partners: Third-party KYC and AML compliance service providers who assist in verifying player identity and screening against sanctions and watchlists.
• Game Content Providers: Online casino software and game providers who may receive anonymised session data necessary to deliver their games on the Platform.
• Technology and Infrastructure Providers: Cloud hosting, data storage, cybersecurity, and platform analytics providers operating under binding data processing agreements with Banjir69.
• Regulatory Authorities and Law Enforcement: Competent regulatory bodies, courts, and law enforcement agencies where we are legally obligated to disclose information, or where disclosure is necessary to prevent serious harm or criminal activity.
• Professional Advisers: Legal counsel, auditors, and compliance consultants where necessary, subject to professional confidentiality obligations.

All third parties with whom Banjir69 shares Personal Data are required to handle that data in accordance with applicable data protection standards and are bound by contractual data processing obligations. We do not permit third-party data processors to use your data for their own independent purposes.

Data Retention

Banjir69 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law or regulation. The following general retention principles apply:

• Active Account Data: Retained for the full duration of the Account's active lifetime plus a minimum post-closure retention period to satisfy regulatory requirements.
• KYC Documentation: Retained for a minimum of five (5) years following Account closure in compliance with standard AML regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• Customer Support Communications: Retained for a period of three (3) years from the date of the most recent interaction, or longer if the matter involves an unresolved dispute or legal proceedings.
• Marketing Consent Records: Retained for as long as you hold an active Account or until you withdraw consent, whichever is sooner, plus a reasonable period to demonstrate compliance.
• Technical Logs and Session Data: Retained for a period of up to twelve (12) months for security monitoring and fraud prevention purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction policy.

Cookies & Tracking Technologies

The Banjir69 Platform uses cookies and similar tracking technologies to enhance user experience, maintain session integrity, measure Platform performance, and support fraud prevention. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the operation of the Platform. These cookies enable core functions such as user authentication, session management, and security. They cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors interact with the Platform, including pages visited, time spent, and error messages encountered. This data helps us improve the Platform experience.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings and display options, to provide a more personalised experience across sessions.
• Security Cookies: Deployed to detect and prevent fraudulent activity, unauthorised account access, and bot-driven interactions.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to access and use the Platform. We do not deploy third-party advertising or behavioural targeting cookies on the Banjir69 Platform.

Data Security

Banjir69 implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Our security framework includes, but is not limited to:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Banjir69 Platform is encrypted using 256-bit SSL encryption, ensuring that data cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive data stored on our servers, including payment details and identity documents, is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All internal access is subject to role-based permissions, multi-factor authentication, and comprehensive access logging.
• Infrastructure Security: Our platform infrastructure is hosted in secure, certified data centres with physical access controls, redundant systems, and continuous threat monitoring.
• Penetration Testing & Vulnerability Management: We conduct regular security assessments and penetration tests to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant regulatory authorities within applicable statutory timeframes.

Your Rights

Subject to applicable data protection law, you hold the following rights with respect to the Personal Data that Banjir69 holds about you. To exercise any of these rights, please contact us using the details provided in Section 15 of this Policy.

We will respond to all verifiable data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days, notifying you accordingly. We may require identity verification before fulfilling a data rights request.

Minors & Age Restriction

The Banjir69 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory component of our KYC process and is enforced at both registration and withdrawal stages.

If Banjir69 becomes aware or has reasonable grounds to believe that Personal Data has been collected from a person under 21 years of age, we will take immediate action to delete that data and close the associated Account. Any funds deposited by an underage user will be held pending investigation and returned in accordance with our legal obligations.

International Data Transfers

In the course of providing our Services, Personal Data collected from users in Malaysia and other jurisdictions may be transferred to, stored, or processed in countries outside your country of residence, including locations where our technology infrastructure providers and data processors operate.

Where Personal Data is transferred internationally, Banjir69 ensures that appropriate safeguards are in place to maintain the protection of your data at a standard equivalent to that in your home jurisdiction. Such safeguards include, but are not limited to, contractual data processing agreements incorporating standard data protection clauses, certification schemes, or equivalent adequacy determinations.

By using the Platform, you acknowledge and consent to such international transfers for the purposes described in this Policy.

Third-Party Services

The Banjir69 Platform may reference or integrate with third-party services, including game content providers, payment processors, and identity verification partners. These third parties operate under their own independent privacy policies and terms of service.

Banjir69 does not control, and is not responsible for, the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party service providers whose services you use in connection with your Banjir69 Account.

Where third-party processors handle Personal Data on our behalf, they do so subject to binding data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

Policy Amendments

Banjir69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date displayed at the top of this Policy indicates the most recent revision date.

In the event of material changes to this Policy, we will provide advance notification to registered Players via email to the address associated with their Account, or through a prominent notice on the Platform, no less than 14 days prior to the changes taking effect.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of those changes. If you do not agree to a revised Policy, you should close your Account and cease use of the Platform before the changes take effect.

Contact & Data Enquiries

For all privacy-related enquiries, data rights requests, or to report a suspected data security incident, please contact Banjir69 through the following channels. All communications regarding personal data matters are handled by our dedicated compliance team.

• Email: [email protected] — Please use the subject line "Privacy Enquiry" or "Data Rights Request" for privacy-related correspondence. This address is displayed as plain text and is not a clickable link.
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform. For data rights requests, please ask to be escalated to the compliance team.
• Response Commitment: We acknowledge all data-related enquiries within 48 hours and aim to provide a substantive response within 30 days, in compliance with applicable data subject rights timeframes.

When submitting a data rights request, please include your full registered name, Account username, the nature of your request, and any relevant supporting information to allow us to verify your identity and process your request efficiently.