Bali19 Privacy Policy – Player Personal Data Protection

Welcome to the Privacy Policy page bali19. We understand that your trust in us begins with the confidence that your personal information is handled responsibly. This document is our written commitment to you — an agreement that clarifies your rights and our obligations regarding the personal data you entrust to bali19.

This Privacy Policy applies to all users of the bali19 platform, including website visitors, registered players and former members. It covers all our service channels — the main website, Android and iOS mobile apps, and any official bali19 communications. By using any bali19 service, you agree to the collection and use of data as described in this document.

Bali19 is an online entertainment platform that operates with full integrity towards all members. We recognise privacy as a fundamental right of every individual, not merely a legal compliance requirement. This Privacy Policy has been prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data protection.

As the data controller, bali19 bears full responsibility for how your personal data is collected, processed and stored. We appoint a Privacy Officer who is responsible for ensuring ongoing compliance with all applicable data protection regulations and for addressing any privacy-related queries or complaints from our members.

This document also outlines the rights available to you as a data subject and how you may exercise those rights. bali19 does not treat players differently based on how they exercise their privacy rights — every valid request will be processed fairly and within the stipulated timeframe.

Bali19 collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data types we collect:

We do not collect any sensitive personal data such as health information, religious beliefs or political views unless it is specifically required for a particular purpose and you have provided explicit consent for its collection. In such cases, we will inform you clearly before collection takes place.

Technical data is collected automatically when you visit or use the bali19 platform. This includes information about your device, internet connection, operating system and general usage patterns. This data helps us detect suspicious activity and protect your account from unauthorised access.

Bali19 uses your personal data only for legitimate and necessary purposes. We adhere to the principle of data minimisation — meaning we only collect and use information that is strictly required for the stated purpose. The following are the primary purposes for which your data is used:

• Account management – To create, verify, and manage your bali19 account, including the KYC process required by regulation.
• Transaction processing – To process deposits, withdrawals, and any other financial transactions securely and accurately.
• Platform security – To detect and prevent fraud, money laundering, unauthorised access, and other illegal activities.
• Customer support – To respond to enquiries, resolve technical issues, and improve your overall user experience.
• Responsible gaming – To monitor gameplay patterns and identify players who may require assistance or game limit restrictions.
• Marketing communications – To send you promotional offers, exclusive bonuses, and platform updates (only where you have given your consent).
• Legal compliance – To fulfil the legal and regulatory obligations applicable to bali19's operations.

Bali19 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, in the course of operating the platform, there are certain situations where we need to share your information with specific parties:

• Payment processors – Payment service providers who help us process your deposits and withdrawals securely. They only receive the data necessary to complete the relevant transaction.
• KYC service providers – Identity verification companies that help us verify your information as part of the mandatory KYC process.
• Regulatory authority – When required by law, we will disclose the requested information to the relevant authorities or regulatory bodies.
• Technology providers – Software and infrastructure providers who help us operate the platform, subject to strict confidentiality agreements.

All third parties who receive your data from bali19 are bound by strict confidentiality and data protection agreements. They are only permitted to use that data for the specified purposes and are prohibited from processing your data for any other purpose without written consent from bali19.

Protecting your data is a responsibility we take seriously. bali19 implements multiple layers of technical and organisational security to ensure your personal data is always safeguarded against unauthorised access, loss, alteration or disclosure:

• 256-bit SSL Encryption – All data transmitted between your device and bali19's servers is protected by 256-bit SSL encryption, ensuring no third party can intercept that information.
• Secure storage – Sensitive data such as passwords is stored in hashed form using irreversible algorithms. Your original password is never stored in plain text.
• Two-factor authentication (2FA) – An additional security layer that ensures only you can access your account even if your password becomes known to someone else.
• 24/7 Monitoring – Our automated monitoring system detects and responds to suspicious activity around the clock.
• Regular security audits – Penetration testing and security audits are conducted regularly by independent parties to identify and address any vulnerabilities.

Bali19 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies – Required for core platform operations such as login sessions and security. These cookies cannot be disabled as they affect essential functionality.
• Performance Cookies – Collects anonymous information about how visitors use our website to help us improve platform performance and usability.
• Functional Cookies – Allows the platform to remember your preferences such as language, region, and display settings to deliver a more personalised experience.
• Marketing Cookies – Used to display relevant ads and offers to you based on your interests and behaviour. You may opt out of this type of cookie.

You may manage or delete cookies through your internet browser settings. Please note that disabling certain cookies may affect the functionality or user experience on the bali19 platform.

As a data subject under Malaysia's PDPA, you have certain rights regarding the personal data held by bali19. We respect and facilitate the exercise of these rights:

Bali19 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are the general retention period guidelines we follow:

• Active account data – Retained for the duration your account remains active and for an additional period following account closure to meet legal obligations.
• Financial transaction records – Retained for a minimum of 7 years in line with tax legislation and financial compliance requirements.
• Support communication logs – Retained for 3 years for reference and dispute resolution purposes.
• Technical data and system logs – Retained for 12 months for security and fraud detection purposes.
• Marketing data – Retained until you withdraw consent or for a period of 3 years without interaction, whichever comes first.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with industry-standard procedures. Anonymised data cannot be linked back to you as an individual and may be used for general analytical purposes.

The bali19 platform may from time to time contain links or references to third-party websites or services. These links are provided for your convenience only. bali19 has no control over the content, privacy policies or security practices of those third-party websites and therefore accepts no responsibility for them.

We encourage you to read the privacy policy of every website you visit. Recommendations or links to third-party websites do not imply that bali19 endorses or validates the content, products or services offered by those websites.

If you have any questions, concerns or complaints regarding this Privacy Policy or how bali19 handles your personal data, please contact our Privacy Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
• Response time: We aim to respond to all privacy-related enquiries within 5 working days

For official requests relating to data rights (access, correction, deletion), please submit a written request via the email above, including your full name, bali19 account number and details of your request. We will process valid requests within 21 business days.