🔒 Updated: 1 January 2026

Bulan2 Privacy Policy – Personal Data Protection for Malaysia's Platform

bulan2 is fully committed to protecting the privacy and personal data of every member. This document transparently outlines how we collect, use, store, and safeguard your information — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
PDPA 2010 Compliant 256-bit SSL No Data Sales Full Member Rights
🔐

At bulan2, we understand how much privacy matters to every Malaysian. Whether you're registering an account, making a deposit via Touch 'n Go eWallet or Maybank2u, or simply browsing bulan2 to check out the latest games — you are trusting us with your personal information. We take that trust seriously.

This Privacy Policy is written in plain, straightforward language — not dense legal jargon designed to confuse. We want you to genuinely understand what happens to your data, not just click "I Agree" without knowing what you're agreeing to. That's how bulan2 operates — with complete transparency towards every one of our Malaysian members.

This policy outlines bulan2's privacy practices across all our services, including the main website, mobile app, all games such as Mega Fishing, Aviator, The Warriors, and Egypt Treasure, as well as all communication channels between you and the bulan2 team.

📌 Quick Summary: bulan2 collects only the data we need, uses it solely for the stated purposes, never sells it to third parties, and protects it with the highest security standards. You have full rights to access, correct, or request deletion of your data at any time.

SECTION 01

Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by bulan2 ("we", "platform", or "bulan2") and applies to all individuals who use bulan2's services, including registered members, website visitors, and bulan2 mobile app users. This Policy outlines our commitment to protecting your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By using bulan2's services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of bulan2's services and contact us to request deletion of your account and data.

Bulan2 acts as the Data Controller under Malaysia's PDPA and bears full responsibility for how member personal data is processed. We have appointed a Data Protection Officer who can be reached at [email protected] for any privacy-related enquiries or concerns.

SECTION 02

Types of Personal Data We Collect

Bulan2 only collects data that is genuinely necessary to provide our Malaysian members with a quality, secure service. We do not collect excessive or irrelevant data. The following are the categories of data we may collect:

Registration & Identity Data:

  • Full name as shown on your Malaysian MyKad
  • An active Malaysian phone number
  • A valid email address
  • Date of birth (for 18+ age verification)
  • MyKad number (collected during the KYC process where required)

Financial & Transaction Data:

  • Deposit and withdrawal records, including payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX)
  • Transaction history within the bulan2 platform
  • Payment verification information required by financial service providers

Platform Usage Data:

  • Gaming history, including games played, session duration, and game outcomes
  • Date and time of login to your bulan2 account
  • IP address and device type used to access bulan2
  • Web browser and device operating system information

Communication Data:

  • Records of conversations with the bulan2 support team via live chat, WhatsApp, or email
  • Complaints, feedback, and suggestions you submit to bulan2
  • Responses to optional surveys you have chosen to participate in
Data Category Purpose of Collection Legal Basis
Identity Data Account registration & KYC verification Legal Compliance
Financial Data Deposit & withdrawal processing Contract Performance
Usage Data Platform improvement & security Legitimate Interest
Marketing Data Promotions & personalised offers Your Consent
SECTION 03

How bulan2 Uses Your Personal Data

Every piece of data we collect has a clear and lawful purpose. bulan2 never uses your data for purposes not stated in this Policy without first obtaining your additional consent.

The following are the primary purposes for which your personal data is used at bulan2:

  • Account Management: Creating and managing your bulan2 account, processing registrations, and verifying your identity in compliance with KYC requirements and anti-money laundering laws.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods, and completing withdrawals to your bank account or e-wallet within the specified timeframe.
  • Gaming Services Provision: Giving you access to all bulan2 games, including slots, Live Casino, Mega Fishing, Craps, Aviator, and every other title in our catalogue.
  • Platform Security: Detecting and preventing fraud, hacking, money laundering, and any illegal or suspicious activity that could compromise the safety of our members and the bulan2 platform.
  • Customer Support: Providing effective technical assistance and customer support in Bahasa Malaysia, including resolving account, transaction, and gaming issues.
  • Service Communications: Sending important account-related notifications such as transaction confirmations, changes to terms, security alerts, and service updates.
  • Personalised Marketing (with your consent): Sending information about promotions, bonuses, new games, and exclusive offers that may interest you based on your gaming history. You may withdraw this consent at any time.
  • Platform Improvements: Analysing aggregated usage patterns to better understand the needs of our Malaysian members and develop improved new features.
  • Legal Compliance: To fulfil legal obligations under Malaysian law, including the PDPA 2010 and applicable financial compliance requirements.
SECTION 04

Bulan2 Data Storage & Security Measures

Bulan2 invests heavily in security infrastructure to protect your personal data to the highest standard we can achieve. This goes beyond mere legal compliance — it is our moral responsibility to every member who places their trust in bulan2.

Data Encryption: All data transmitted between your device and bulan2's servers is protected with 256-bit SSL/TLS encryption — the same security standard used by leading Malaysian banks such as Maybank and CIMB. Data stored in our databases is also encrypted using the AES-256 standard.

Access Controls: Access to member personal data is strictly limited to bulan2 staff who require it to perform their specific duties. All access is logged and continuously monitored. Staff with no operational need are prohibited from viewing member data under any circumstances.

Regular Security Audits: bulan2 conducts internal security audits every quarter and engages independent cybersecurity firms for external audits at least once a year. Any vulnerabilities identified are addressed promptly in accordance with our incident response policy.

  • All bulan2 servers are housed in data centres holding internationally recognised physical and cybersecurity certifications.
  • Two-factor authentication (2FA) is available for all bulan2 member accounts and is strongly encouraged.
  • Data backups are performed daily to geographically separate locations to ensure continuity of service.
  • In the event of a data breach affecting your account, bulan2 will notify you within 72 hours of the breach being detected.

🛡️ Important: bulan2 never stores your full credit or debit card details. All payment information is processed directly by certified payment providers (Touch 'n Go, GrabPay, DuitNow, and others), and bulan2 receives only a verification token — not your full account number.

SECTION 05

Data Sharing with Third Parties

Bulan2 never sells members' personal data to any third party under any circumstances. This is a core principle we do not compromise on. That said, there are limited situations where bulan2 must share data with certain parties to enable our services to function properly:

Payment Service Providers: Only the minimum data necessary is shared with payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX processors to complete financial transactions. They are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

Game Software Providers: To enable third-party games to operate within the bulan2 platform, the minimum technical data required to run a game session may be shared with game providers that have undergone bulan2's strict vetting process.

Legal Authorities: bulan2 will disclose data to Malaysian authorities when required by a court order, legal warrant, or directive from a relevant regulatory body. We will notify you of any such disclosure unless prohibited by law from doing so.

  • Bulan2 does not share data with third-party advertisers for targeted marketing purposes.
  • All bulan2 business partners are bound by data processing agreements that comply with Malaysia's PDPA.
  • In the event of a bulan2 merger, acquisition, or asset sale, members will be notified in advance and given choices regarding their data.
SECTION 06

Cookies, Analytics & Tracking Technologies

Bulan2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit bulan2. They allow bulan2 to remember your preferences, maintain the security of your login session, and understand how you use the platform.

Types of Cookies Used by bulan2:

  • Essential Cookies: Required for core bulan2 platform functions such as secure login sessions, bet slips during gameplay, and CSRF security. These cookies cannot be disabled, as the platform will not function correctly without them.
  • Preference Cookies: Saves your preferences such as interface language, display settings, and game configurations. This enables a more personalised experience each time you visit bulan2.
  • Analytics Cookies: Helps bulan2 understand how members interact with the platform — which pages are visited most, time spent on each section, and navigation flows. This data is used in aggregate form and is not used to identify individuals.
  • Performance Cookies: Monitoring the technical performance of the bulan2 platform — including page load times and technical errors — to help our team identify and resolve issues quickly.

You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the bulan2 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

SECTION 07

Your Rights as a Data Subject under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to the personal data bulan2 holds about you. bulan2 respects and supports the exercise of all these rights at no additional charge:

Right of Access
You have the right to request and obtain a copy of all personal data bulan2 holds about you. Requests will be processed within 21 business days.
Right to Rectification
If any personal data we hold about you is inaccurate or out of date, you have the right to request immediate correction without any restrictions.
Right to Erasure
You may request the deletion of your personal data, subject to our legal obligations to retain certain data for compliance purposes.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time, and bulan2 will cease such processing immediately.
Data Portability Rights
You have the right to receive your personal data in a machine-readable format for transfer to another service provider of your choosing.
Right to Restrict Processing
Under certain circumstances, you have the right to request that bulan2 restrict the processing of your data while a dispute or review is in progress.

To exercise any of the above rights, please submit a written request to [email protected], including your bulan2 username and a copy of your identification. bulan2 will acknowledge receipt of your request within 3 business days and resolve it within 21 business days.

SECTION 08

Children's Data Protection

Bulan2 is an online entertainment platform intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe you are the parent or guardian of a minor who has submitted personal data to bulan2, please contact us immediately at [email protected] and we will take steps to delete that data within 48 hours.

Bulan2 uses an automated age verification system during registration and reserves the right to request age verification documents (MyKad or equivalent identification) at any time where there is doubt regarding a member's age. Any account found to belong to a minor will be closed immediately, and all remaining balances will be returned to the individual's legal guardian upon appropriate identity verification.

⚠️ If you discover a minor using the bulan2 platform, please report it to us immediately at [email protected]. We take this matter extremely seriously and will act without delay.

SECTION 09

International Data Transfers

Bulan2 stores member data primarily on servers located in Malaysia and the Southeast Asian region. In limited cases where data processing must take place outside Malaysia — for example, for data backup or specialised technical processing purposes — bulan2 ensures that a level of protection equivalent to or higher than Malaysia's PDPA is applied.

Every cross-border data transfer is carried out only to parties that comply with recognised data protection standards and have entered into binding data processing agreements with bulan2. bulan2 does not transfer member data to countries without adequate data protection laws unless appropriate additional safeguards are in place.

SECTION 10

Data Retention Period

Bulan2 retains your personal data only for as long as necessary for the purposes stated in this Policy or to fulfil our legal obligations. bulan2's data retention schedule is as follows:

  • Active Account Data: Retained for the duration of your bulan2 membership and updated in line with any changes you make.
  • Financial Transaction Data: Retained for 7 years from the date of transaction, in accordance with Malaysian legal requirements relating to financial records and anti-money laundering compliance.
  • Support Communication Data: Retained for 2 years from the date of communication for reference and service improvement purposes.
  • Closed Account Data: Upon voluntary account closure, basic personal data is retained for 5 years for legal compliance purposes before being permanently deleted. Data no longer required for legal purposes will be deleted earlier upon your request.
  • Security Log Data: Retained for 1 year for security incident investigation purposes if required.

Once the retention period expires, bulan2 will securely delete or anonymise your data so it can no longer be linked to your identity.

SECTION 11

Amendments to This Privacy Policy

Bulan2 reviews this Privacy Policy at least once a year and will update it whenever there are changes to our privacy practices, relevant Malaysian legislation, or the addition of new services involving the collection of new categories of data.

When material changes are made to this Privacy Policy, bulan2 will notify you via:

  • An in-platform notification on bulan2 upon your next login
  • Email to your registered email address at least 14 days before the changes take effect
  • A prominent notice on the bulan2 main website homepage

The "Updated" date at the top of this page reflects the date this Privacy Policy was last revised. Your continued use of the bulan2 platform after any changes take effect will be considered acceptance of the revised privacy terms.

Current version: 1 January 2026. Previous versions are available upon request at [email protected].

SECTION 12

Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding your privacy and personal data protection at bulan2, we encourage you to reach out to us directly. Our privacy team is available to assist in Bahasa Malaysia and is committed to responding within 3 business days.

If you are dissatisfied with how bulan2 has handled your privacy concerns after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels provided by the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.


🛡️ Why Your Data Is Safe with bulan2
Six concrete commitments bulan2 makes to protect the privacy of every Malaysian member
End-to-End 256-bit SSL Encryption
Every bit of data transmitted between your device and bulan2's servers — whether it's a RM 10 deposit via Touch 'n Go or a conversation with customer support — is protected by the same level of encryption used by Malaysia's leading banks. No third party can intercept or read your data in transit.
Full Compliance with Malaysia's PDPA 2010
bulan2 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) — the personal data protection legislation enacted by the Malaysian government. We have a dedicated appointed Data Protection Officer and undergo regular compliance reviews to ensure we always meet the latest legal requirements.
No Data Sales — Absolute & Without Exception
bulan2 never sells members' personal data under any circumstances. This is not merely a written policy — it is a core value embedded in our company culture. Your data belongs to you; we are simply its custodians for the duration of your bulan2 membership.
Members' Full Rights Over Their Own Data
You have full control over your personal data at bulan2. Request access, make corrections, or have your data deleted — all of this can be done with a simple request to our privacy team. Requests are processed free of charge and resolved within 21 business days, no questions asked.
72-Hour Data Breach Notification
While we are confident in our security systems, bulan2 is committed to notifying you within 72 hours should any data breach occur that may affect your account. This transparency allows you to take immediate protective action if necessary.
Periodic Independent Security Audits
bulan2's data protection system is audited by an independent cybersecurity firm at least once a year. These audits ensure our security practices meet the latest industry standards, and any vulnerabilities are identified and remediated before they can be exploited.

📬 Contact the bulan2 Privacy Team
Three ways to reach us for any privacy questions or requests
Privacy Email

For data rights requests, privacy complaints, or detailed enquiries relating to this Privacy Policy.

Response within 3 business days
Live Chat 24/7

For general privacy enquiries requiring a prompt response. Our team is available to assist in Bahasa Malaysia.

Access via bulan2.my
Response within 2 minutes
Data Protection Officer

For serious or complex privacy matters that require the direct attention of bulan2's Personal Data Protection Officer.

Response within 5 business days

❓ bulan2 Privacy FAQs
Answers to the most frequently asked questions by Malaysian members about privacy at bulan2

Absolutely not. bulan2 has never sold, rented, or traded members' personal data to any third party — including advertisers, marketing firms, or data analytics companies. Your data is used solely for the purposes stated in this Privacy Policy: to provide bulan2's services to you safely and effectively. This is a core commitment that has remained unchanged since bulan2 began operations in 2019.

bulan2 does not store your payment account details directly. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, or any other payment method, the transaction is processed directly by the respective payment provider through a secure gateway. bulan2 receives only a transaction verification token — not your account number, password, or any other sensitive details. All communications between you and bulan2 are protected by 256-bit SSL encryption.

Yes, you may request the deletion of your personal data by emailing [email protected]. Please be aware, however, that bulan2 may need to retain certain data to meet legal obligations — for example, financial transaction records must be kept for 7 years under Malaysian law. Data not subject to any legal retention obligation will be deleted within 30 days of your request. We will provide you with a detailed account of what has been deleted and what must be retained, along with the reasons.

bulan2 only discloses data to Malaysian authorities when required by a valid court order, legal warrant, or directive from a relevant regulatory body. We do not voluntarily share member data with government agencies or law enforcement except in the circumstances stated. Where we receive a lawful disclosure request, we will endeavour to notify you in advance unless prohibited from doing so by court order or law. We also reserve the right to challenge any disclosure request we believe to be unlawful or beyond reasonable scope.

You can opt out of marketing communications from bulan2 in several straightforward ways: (1) Click the "Unsubscribe" link found at the bottom of any marketing email you receive; (2) Log in to your bulan2 account, go to notification settings, and turn off marketing communication preferences; (3) Contact our support team via live chat or email at [email protected] and ask us to update your communication preferences. Requests will be processed within 5 business days. Please note that even if you opt out of marketing emails, we will still send you important notifications relating to the security and operation of your account, which cannot be disabled.

📖 Also Read: Other Important bulan2 Documents

For a complete understanding of your rights and responsibilities as a bulan2 member, we recommend reading the following documents as well:


🌙

Your Privacy Is Protected at bulan2

You now know exactly how bulan2 safeguards your personal data. Play with peace of mind — the security of your information is our top priority.

Join over 500,000 Malaysian members who already trust bulan2. Register for free today and enjoy a welcome bonus of up to RM 388 with a platform that respects your privacy.

⚠️ 18+ only. Play responsibly. Contact Talian Kasih 15999 if you need assistance.

Bahasa Melayu