Privacy Policy bento123 –
Our Commitment to Protecting Your Data

Your privacy is more than a legal obligation to us — it is the foundation of trust that defines the relationship between bento123 and every member. This document transparently explains how we handle your personal data.

Effective: 1 January 2026 Updated: June 2026 SSL 256-bit Protected

Bento123's Six Data Protection Principles

Limited & Purpose-Driven Data Collection

Bento123 only collects data that is strictly necessary to provide our services. No data is collected purely for statistical purposes without a clear and legitimate objective.

Bank-Grade Encryption

All data transmitted between your device and bento123 servers is protected by 256-bit SSL encryption — the same standard used by leading financial institutions in Malaysia.

No Sale of Data to Third Parties

Your personal data has never been and will never be sold to any third party for marketing or commercial analytics purposes without your explicit consent.

Control in Your Hands

You have full rights to access, amend, download, or request the deletion of your personal data at any time through your account settings or by contacting our team.

Restricted Staff Access

Only bento123 staff who require access to your data for specific authorised duties may do so. All staff are bound by strict confidentiality agreements.

Responsible Data Retention

Data is retained only for as long as necessary in accordance with operational and legal compliance requirements. Once the retention period expires, data is securely and permanently deleted.

This Privacy Policy describes how bento123 collects, uses, stores, and protects your personal information. By using our platform, you agree to the practices outlined in this policy. Please read it carefully and contact us if you have any questions.
1

Introduction & Scope of This Privacy Policy

Bento123 ("We", "Platform") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy applies to all personal information collected through the bento123 website, mobile app, and all other interaction channels including customer support.

We understand that in today's digital age, personal data is an extremely valuable and sensitive asset. That is why we do not rely solely on legal requirements when determining how we handle your data — we go further by setting stricter internal standards to maintain the trust of our members.

This policy covers all users of the bento123 platform, including:

  • Website visitors who have not registered;
  • Individuals currently in the registration process;
  • Registered members actively using the platform;
  • Former members whose accounts have been closed.
2

Types of Personal Data We Collect

Bento123 collects several categories of personal data depending on how you interact with our platform. All data collection is carried out lawfully based on your consent or contractual necessity.

Full name & identification card number
Date of Birth
Mobile phone number
Email address
Residential address
Bank account details
Transaction history
Gaming activity history
Device & browser information
IP address & general location
Support communication records
Platform usage pattern data

Sensitive data such as health information or political affiliation never collected by bento123 as it is not relevant to the services we offer.

3

How We Collect Personal Data

Personal data is collected through several different channels during your interactions with bento123:

  • Account Registration – Information you provide when completing the registration form, including name, ID card number, date of birth, email, and phone number;
  • KYC Process (Identity Verification) – Documents uploaded for identity verification, such as ID card images, verification selfies, and bank statements;
  • Financial Transactions – Information collected during the deposit and withdrawal process, including bank account and e-wallet details;
  • Platform Usage – Data automatically generated when you use the platform, such as login activity, game activity, and site navigation;
  • Customer Support Communications – Records of conversations via live chat, email, and Telegram that you initiate with our support team;
  • Cookies and Tracking Technologies – Data collected automatically via browser cookies to enhance the user experience.
4

Purpose of Personal Data Use

Bento123 uses collected personal data exclusively for legitimate, stated purposes outlined below. We do not use your data for any other purpose without notifying you in advance:

Purpose of Use Data Used Legal Basis
Identity verification & KYC Name, IC, date of birth, photo Legal obligation
Transaction processing Banking details, transaction history Contract performance
Account communications Email, phone number Legitimate interest
Fraud prevention & AML Transaction patterns, IP address Legal obligation
Platform improvements Anonymised usage data Legitimate interest
Customer support Communication records, account information Contract performance
Promotional communications (with consent) Email, phone number Consent

You may withdraw consent to receive promotional communications at any time via the marketing settings in your account. Withdrawal of consent does not affect the processing of data for other purposes required to provide the service.

5

Data Sharing with Third Parties

Our Commitment: bento123 does not sell, rent, or commercialize your personal data to any third party for their own marketing purposes. There are no exceptions to this guarantee.

However, there are limited situations where bento123 needs to share your personal data with specific parties for the purpose of service delivery or legal compliance:

  • Payment Service Providers – Financial information required to process your deposits and withdrawals is shared with approved payment gateways. They are bound by strict data protection agreements with bento123;
  • KYC Service Providers – Third-party identity verification platforms are used to process background checks required by AML obligations. Data is used solely for verification purposes;
  • Statutory Authorities – bento123 will disclose data to the relevant authorities when required by law or a valid court order;
  • Platform Technology Providers – Cloud service and technical infrastructure providers that help operate our platform, subject to confidentiality agreements.

In all of the above data-sharing instances, bento123 ensures that the receiving parties adhere to data protection standards equal to or exceeding those we set for ourselves.

6

Data Security Measures

Bento123 continuously invests in security infrastructure to ensure your personal data is always protected against unauthorized access, loss, alteration, or disclosure:

256-bit SSL/TLS Encryption

All data transmitted between your browser or app and bento123 servers is encrypted using SSL/TLS protocol with a 256-bit key — the highest industry standard.

Encryption at Rest

Data stored in the bento123 database is also encrypted. Even in the event of a physical breach of the servers, the data cannot be read without the appropriate encryption key.

Two-Factor Authentication (2FA)

An additional security layer is available for all member accounts. With 2FA enabled, logging in from a new device requires verification via an OTP code sent to your phone.

Regular Penetration Testing

The bento123 security system is regularly tested by independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited.

24/7 Monitoring & Anomaly Detection

An automated monitoring system operates around the clock to detect suspicious access patterns or unusual activity, with an immediate response from our security team.

7

Use of Cookies & Tracking Technologies

Bento123 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies – Required for core platform functions such as login verification and session security. These cookies cannot be disabled as they are critical to platform operations;
  • Preference Cookies – Stores your personal preferences such as language selection, display theme, and game configuration. This saves you from having to reset your preferences each time you log in;
  • Analytics Cookies – Helps us understand how users interact with the platform so we can make meaningful improvements. This data is collected in aggregate and does not personally identify you;
  • Security Cookies – Helps detect and prevent fraudulent activity and unauthorized access attempts to your account.

You can manage cookies through your browser settings; however, please note that disabling essential cookies may affect the functionality of the bento123 platform.

8

Data Retention Period

Bento123 does not retain your personal data longer than necessary. Retention periods are determined based on the original purpose of collection and applicable legal requirements:

Data Category Retention Period
Identity & KYC data 5 years after account closure
Financial transaction records 7 years (AML requirement)
Gaming activity log 2 years from the date of activity
Support communication records 3 years from the date of interaction
Analytics cookie data 13 months
Login session data 90 days

Once the retention period expires, data is securely deleted or anonymised in accordance with established procedures. Anonymised data that cannot be re-linked to you personally may be retained for analytical purposes without a time limit.

9

Your Privacy Rights as a bento123 Member

As a bento123 member, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 working days and data will be provided in a human-readable format.

Right to Rectification

If the personal data bento123 holds about you is inaccurate or out of date, you have the right to request an immediate correction. Basic information such as phone number and email address can be updated directly through your account settings.

Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data. However, requests may be subject to legal retention requirements, such as financial transaction records that must be retained for AML compliance.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. This request will be actioned immediately without any additional conditions.

Right to Data Portability

You may request an export of your personal data in a machine-readable format (such as JSON or CSV) for personal use or to transfer to another platform.

To exercise any of the rights above, contact our data protection team via in-app live chat or bento123's official email. We will respond to your request within 5 business days.
10

Privacy Policy Amendments & Contact Us

Bento123 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. All amendments will be published on our website with an updated effective date.

For material amendments that significantly affect your privacy rights, bento123 will provide at least 30 days' advance notice before the changes take effect, via your registered email or an in-app notification.

Continued use of the bento123 platform after the effective date of any amendment constitutes acceptance of the revised terms. If you do not agree, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 9.

Please check this page periodically. The latest version of the Privacy Policy will always be available at bento123.pw/privacy-policy and the "Updated" date at the top of the document indicates when the last changes were made.

Frequently Asked Questions About Data Privacy at bento123

bento123 only discloses data to authorities when required by a valid court order or clear legal obligation. We do not share data voluntarily without legal basis, and where permitted by law, we will notify you that such a request has been received.

Yes, you may submit a data deletion request. However, certain data such as financial transaction records must be retained for the period prescribed by anti-money laundering laws (typically 5–7 years). Data not subject to legal retention requirements will be deleted within 30 days of the request being received.

Sensitive financial information such as bank account numbers is processed through an integrated payment gateway compliant with PCI-DSS standards. bento123 does not store full card numbers or card security details — this data is processed directly by certified payment providers and is never stored on our servers.

bento123 uses your usage data solely to personalize promotional offers within our own platform — for example, suggesting bonuses relevant to the game types you enjoy. We do not share your data with third-party advertising networks and do not use it to advertise products or services outside the bento123 platform.

Your Data Is Safe at bento123 — Play with Peace of Mind

Join over 500,000 members who trust bento123 for a safe, fair, and enjoyable digital entertainment experience.

Bahasa Melayu