Privacy Policy

Privacy Policy extrabonus
Your Personal Data Protection

Extrabonus takes the privacy of every member seriously. This Policy clearly explains how we collect, use, protect, and manage your personal information as a user of our gaming platform in Malaysia.


The Six Pillars of extrabonus Data Protection

At extrabonus, privacy is not just a written policy — it is a daily practice embedded in every system and process we operate to protect your information.

Industry-Grade Encryption

All data transmitted between your device and extrabonus servers is protected by 256-bit SSL encryption, ensuring that your personal and financial information cannot be intercepted or read by unauthorized parties during transmission.

No Sale of Data to Third Parties

Extrabonus does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes without your explicit consent. Your data is used solely for legitimate platform operational purposes.

Full Control in Your Hands

As an extrabonus member, you have the right to access, correct, update, and request deletion of your personal data at any time. Our support team is ready to help you manage your personal information with ease.

Secure & Redundant Servers

Extrabonus member data is stored in internationally certified data centres with full redundancy systems and strict physical security. Database access is restricted to authorised personnel only, with multi-level authentication.

Legal Compliance

The extrabonus privacy policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We continually ensure our data management practices comply with all applicable current legislation.

Data Breach Notification

In the event of a security incident involving your personal data, extrabonus is committed to notifying you within the timeframe required by applicable law, including full details of the incident and the remedial steps taken.


Last updated: 1 January 2026  |  Effective from the same date.

Important Note: This Privacy Policy explains how extrabonus collects and handles your personal data. By using the extrabonus platform, you agree to the terms set out in this document. Please read it carefully and contact us if you have any questions.

01 Introduction

Extrabonus ("we", "our platform") operates as a trusted online gaming and entertainment platform in Malaysia. We understand that privacy is something every user values deeply, and we take this responsibility seriously.

This Privacy Policy ("Policy") details the types of personal data we collect from members and website visitors, how that data is used, who it is shared with, and how we protect it. This Policy applies to all users of the extrabonus platform, including our website and mobile app.

This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and is intended to ensure your privacy rights are always protected. If you disagree with any part of this Policy, please stop using the extrabonus platform and contact us for further assistance.

02 Personal Data We Collect

Extrabonus collects your personal data through several means — directly from you during registration, through your use of the platform, and automatically via tracking technologies. The following are the categories of data we collect:

Data Category Sample Information Collection Method
Identity Information Full name, MyKad/passport number, date of birth, selfie photo Account registration & KYC
Contact Information Email address, phone number, residential address Account registration
Financial Information Bank account number, bank name, deposit & withdrawal transaction records Financial transactions
Usage Data Game history, betting records, login frequency, session duration Automatically during use
Technical Data IP address, browser type, operating system, device information Automatically via cookies & logs
Communications Support chat records, emails, complaints, and feedback Interactions with the support team

Extrabonus only collects data that is strictly necessary for legitimate operational purposes. We do not collect excessive or irrelevant data beyond the scope of the services we offer.

03 Data Collection & Usage Purposes

Every piece of data we collect has a clear and legitimate purpose. extrabonus uses your personal data for the following purposes:

  • Account management: Creating, verifying, and maintaining your member account, including registration processing, identity verification (KYC), and account settings management.
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions related to your account securely and accurately.
  • Service delivery: Providing access to all games, promotions, and extrabonus platform features you choose to use.
  • Customer support: Responding to enquiries, resolving complaints, and providing technical support when needed.
  • Security & fraud prevention: Identifying, investigating, and preventing any fraudulent activity, money laundering, or platform abuse.
  • Regulatory compliance: Meeting legal compliance obligations, regulations, and directives from relevant authorities.
  • Platform improvements: Analysing usage patterns to improve the performance, design, and features of the extrabonus platform.
  • Marketing communications: Sending information about promotions, bonuses, and the latest offers — only to members who have consented to receive such communications.

Extrabonus will not use your personal data for any purposes other than those stated above without first obtaining your consent. The legal basis for our data processing is grounded in contractual necessity, legal obligation, legitimate interest, and your consent.

04 Data Sharing & Disclosure

Extrabonus does not sell or disclose your personal data to third parties for commercial purposes. However, under certain limited circumstances, we may need to share your information with the following parties:

  • Payment service providers: Required financial information is shared with recognised payment processors (such as banks and digital wallet providers) solely to process your transactions securely.
  • Game providers: Minimum technical data required to ensure a smooth gaming experience is shared with our licensed game providers.
  • Legal authorities: extrabonus will disclose personal data to government authorities or law enforcement when required to do so by law, court order, or official directive.
  • Auditors & professional advisors: Lawyers, accountants, or auditors bound by confidentiality obligations may access necessary data for compliance and internal audit purposes.
  • Business transfers: In the event of a merger, acquisition, or asset transfer, user data may be transferred to the new entity subject to equivalent or stricter privacy policies.

Our Commitment: All third parties with whom we share your data are bound by strict confidentiality agreements and are required to protect your personal data in accordance with the standards we have established.

05 Data Security Measures

Extrabonus continually invests in the latest security infrastructure to ensure your personal data remains protected at all times. The technical and organizational security measures we implement include:

  • Data encryption in transit: All communication between your device and our servers uses TLS 1.3 protocol with 256-bit SSL encryption that cannot be intercepted.
  • Data encryption at rest: Sensitive data such as financial information and identity documents is stored in encrypted format on our servers.
  • Role-based access control: Only staff with a legitimate business need are permitted to access user data, and every access is logged and monitored.
  • Two-factor authentication (2FA): extrabonus supports and encourages the use of 2FA for all member accounts to add an extra layer of security.
  • Continuous monitoring: Our systems are monitored 24 hours a day, 7 days a week to detect and respond swiftly to any security threats.
  • Regular penetration testing: We conduct regular security assessments by independent cybersecurity experts to identify and address any vulnerabilities.

While we take all reasonable precautions, no security system can guarantee 100% absolute protection. In the event of a data breach, we are committed to responding promptly and notifying affected members in accordance with legal requirements.

06 Cookies & Tracking Technologies

Extrabonus uses cookies and similar tracking technologies to enhance the user experience and analyze platform usage. Cookies are small text files stored in your browser when you visit our website.

Types of cookies we use:

  • Essential cookies (required): Required for core platform functions such as maintaining your login session and ensuring account security. These cookies cannot be disabled.
  • Performance cookies: Helping us understand how visitors interact with our platform through anonymous data collection, enabling us to improve the user experience.
  • Functional cookies: Allowing the platform to remember your preferences such as language, region, and display settings to deliver a more personalised experience.
  • Analytics cookies: Used to analyse aggregated usage patterns for product development and platform improvement purposes.

You can manage and delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality and performance of the extrabonus platform.

07 Data Retention & Deletion

Extrabonus only retains your personal data for as long as necessary to fulfil the collection purposes stated in this Policy, or for as long as required by applicable laws and regulations.

  • Active account data: Retained for the duration your account is active and used to provide ongoing services to you.
  • Data after account closure: After an account is closed, your personal data will be retained for a minimum period of 7 years for anti-money laundering compliance and financial audit requirements.
  • Transaction records: Financial records are retained for a minimum of 7 years in line with Malaysia's legal requirements.
  • Communication data: Support chat records and emails are retained for 3 years after the last interaction.
  • Technical log data: System logs and technical data are retained for 12 months for security and troubleshooting purposes.

When data is no longer needed, it will be securely deleted or anonymised using industry-recognised methods to ensure it cannot be recovered or re-identified.

08 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by extrabonus:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of any inaccurate or incomplete personal data held in our records.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data from our systems.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another provider.

Right to Restrict Processing

In certain circumstances, you may request that we restrict how we process your personal data.

To exercise any of the above rights, please contact the extrabonus privacy team through our support channels. We will process your request within 30 business days. In complex cases, this period may be extended to up to 60 days with appropriate notice to you.

09 Children's Privacy

Extrabonus strictly prohibits the registration and use of the platform by individuals under the age of 21. Our platform is not designed for, and we do not knowingly collect personal data from, children or minors below the stipulated age limit.

If we determine that personal data has been collected from someone who does not meet our minimum age requirement, we will take immediate steps to delete that information and close the account in question. Parents or guardians who discover that their child has registered on the extrabonus platform are required to contact our support team immediately.

Warning: extrabonus employs an age verification process during registration and KYC checks to prevent access by underage individuals. Any attempt to circumvent these checks constitutes a serious violation of our Terms and Conditions.

10 Cross-Border Data Transfers

In the course of its operations, extrabonus may need to transfer your personal data to servers or service providers located outside Malaysia. Any such transfer will be carried out in compliance with Malaysia's PDPA requirements and with equivalent or higher levels of data protection in place at the destination.

The steps we take to protect data during cross-border transfers include:

  • Ensuring data recipients are bound by comprehensive data processing agreements
  • Using recognised transfer mechanisms such as Standard Contractual Clauses (SCC)
  • Conducting data protection impact assessments prior to large-scale transfers
  • Ensuring data recipients comply with security standards equivalent to extrabonus internal requirements

11 Privacy Policy Amendments

Extrabonus reserves the right to update or amend this Privacy Policy at any time to reflect changes in business practices, legal requirements, or security enhancements. The "Last Updated" date at the top of this document will be updated whenever changes are made.

For significant changes to this Policy, extrabonus will notify members through one or more of the following methods:

  • Email notifications to your registered email address
  • A clear notice on the platform's home page or login page
  • In-app notifications on the extrabonus mobile app

Your continued use of the extrabonus platform after any Privacy Policy changes take effect will be considered your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we manage your personal data.

12 Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. The extrabonus privacy and customer support team is available to assist you 24 hours a day, 7 days a week.

You can reach us through the customer support channels available on the platform, or via our official email at [email protected]. We are committed to responding to all privacy-related inquiries within 3 business days.

If you are not satisfied with our response, you have the right to submit a complaint to the Malaysia Personal Data Protection Department or the relevant data protection authority in your country.

Extrabonus always puts member trust first. Your privacy is not merely a legal obligation to us — it is the foundation of the relationship we build with every user of our platform.


Secure Platform, Privacy Guaranteed

Now you know how extrabonus carefully safeguards your personal data. Enjoy a safe, fair, and enjoyable online gaming experience with thousands of extrabonus members across Malaysia.

Bahasa Melayu