Privacy Policy

Privacy Policy bali19
Your Data, Our Responsibility

Bali19 is committed to protecting the privacy and personal data of every user. This document clearly explains how we collect, use, and safeguard your information — no hidden fine print.

Updated: 1 January 2026  |  Region: Malaysia
Why Your Privacy Matters to bali19

Six core principles that underpin how bali19 manages user data.

Highest-Level Encryption

All data transmitted between your device and bali19 servers is protected with 256-bit SSL encryption and TLS 1.3 protocol — the same security standard used by leading financial institutions.

No Sale of Data to Third Parties

Bali19 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes without your explicit consent.

Secure Identity Verification

Bali19's KYC (Know Your Customer) process is designed to ensure the safety of all users. Identity documents submitted are stored in a protected environment and accessed only by authorised personnel.

Full User Control

You have full rights to access, correct, transfer, or request deletion of your personal data. All data requests are processed within 30 business days by the bali19 privacy team.

Responsible Data Retention

Your data is stored on servers housed in certified data centres that comply with international standards. Data is retained only for as long as required by service needs and legal obligations.

Data Breach Notification

In the event of any data breach affecting your personal information, bali19 will notify you within 72 hours in line with industry best practices for data protection.

Important Note: This Privacy Policy applies to all bali19 services, including the website, mobile app, and any related platforms. By using bali19 services, you agree to the collection and use of data as described in this document.

1Information We Collect

Bali19 collects several categories of personal information from users to ensure that the services provided are secure, fair, and compliant with platform requirements. The following are the types of information we collect:

Information you provide directly:

  • Full name, date of birth, and identity card or passport number during account registration and the KYC process.
  • Email address, mobile number, and residential address for communication and verification purposes.
  • Bank account details, e-wallet numbers (Touch 'n Go, GrabPay) or other payment methods registered for deposits and withdrawals.
  • Supporting documents submitted during the identity verification process, such as copies of your ID card, bank statement, or utility bill.
  • The content of your communications with the bali19 support team via live chat, email, or other official channels.

Information collected automatically:

  • IP address, device type, operating system, and browser version used to access the platform.
  • Activity log data including pages visited, session duration, clicks, and navigation patterns within the platform.
  • Geolocation data at the country or city level based on IP address (not precise GPS).
  • Technical data related to app performance and error reports for service improvement purposes.
Our commitment: bali19 only collects information that is strictly necessary to provide its services. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.

2How We Use Your Data

All information collected by bali19 is used for legitimate and specific purposes only. The following are the primary purposes for which your data is used:

Purpose of Use Types of Data Used Legal Basis
Account management & verification Name, email, KYC documents Contract performance
Financial transaction processing Payment information, account balance Contract performance
Fraud prevention & security IP, activity logs, transaction patterns Legitimate platform interests
Legal compliance & AML Identity, transaction records Legal obligation
Customer Support Communication records, account information Contract performance
Platform improvement & analytics Logs, usage patterns Legitimate platform interests
Marketing communications (with consent) Email, phone number User consent

Bali19 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

3Sharing Information with Third Parties

Bali19 does not sell personal user data. However, in limited and controlled situations, we may share your information with the following parties:

  • Payment service providers: Payment gateways and e-wallet providers used to process your deposits and withdrawals. Sharing is limited to the information necessary to complete transactions only.
  • Technology service providers: Third-party companies that help us operate the platform, such as cloud computing, analytics, and cybersecurity services — all bound by strict confidentiality agreements.
  • Relevant authorities: Law enforcement agencies or regulatory bodies when required by applicable laws in Malaysia or other relevant jurisdictions.
  • Business partners: In the event of a merger, acquisition, or sale of bali19 assets, user data may be transferred as part of the business assets — with advance notice provided to users.
Our commitment: Every third party that receives bali19 user data is bound by a data protection agreement requiring them to handle that information to a security standard equal to or higher than that of bali19.

4Cookies & Tracking Technologies

Bali19 uses cookies and similar tracking technologies to enhance the user experience and understand how the platform is used. The following are the types of cookies used:

You can manage cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of some parts of the bali19 platform.

5Data Security at bali19

Protecting your data is a priority at bali19. We implement multiple layers of technical and organisational security to ensure your information remains protected at all times:

  • Encryption of data in transit: All communications between your device and bali19 servers use HTTPS with TLS 1.3 encryption and 256-bit SSL certificates.
  • Encryption of data at rest: Sensitive information such as passwords is stored using bcrypt hashing, which cannot be decrypted.
  • Internal access controls: Access to user data within bali19's internal systems follows a role-based access control (RBAC) model — only staff who require access for their specific duties are permitted.
  • 24/7 Monitoring: The bali19 security team monitors system activity in real time to detect any intrusion attempts or unusual activity.
  • Regular security audits: The bali19 platform undergoes regular security assessments and penetration testing by independent security experts.
  • PCI-DSS payment processing: All financial data is processed through PCI-DSS compliant payment gateways — card details and bank account information are never stored directly on bali19 servers.
Data Breach Notification: In the event of a security incident affecting your personal data, bali19 will notify you within 72 hours via your registered email, along with details of the incident and the steps being taken.

6Your Rights as a User

As a bali19 user, you have the following rights regarding your personal data. All requests can be submitted via support email or bali19 live chat:

Right to Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Request correction of any inaccurate or incomplete information in your records.

Right to Erasure

Request deletion of your data, subject to applicable legal retention obligations.

Right to Data Portability

Request your data in a structured, machine-readable format for transfer to another platform.

Right to Restrict Processing

Request a restriction on the processing of your data under certain circumstances during an investigation or dispute.

Right to Object

Object to the use of your data for direct marketing purposes at any time, without needing to provide a reason.

Bali19 will process all data rights requests within 30 business days from the date the request is received. In complex cases, this period may be extended with notice to you.

7Protection of Children's Data

Bali19 services are strictly for individuals aged 18 and above. Our platform is not designed for minors and we do not knowingly collect any personal information from underage individuals.

If we discover that personal information of individuals under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that information and close the relevant account.

To parents and guardians: If you believe your child has registered an account on bali19, please contact our support team immediately at [email protected] so we can take prompt action.

8Cross-Border Data Transfers

In operating the bali19 platform, your personal data may be stored or processed on servers located outside Malaysia, including through internationally certified cloud computing services.

Bali19 ensures that all cross-border data transfers are carried out with adequate protections through:

  • Use of cloud service providers compliant with international data protection standards such as ISO 27001.
  • Data Processing Agreements with all service partners involved in cross-border data transfers.
  • Regular assessments of service providers' security environments to ensure data protection standards are maintained.

9Data Retention Period

Bali19 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with legal obligations. General data retention guidelines are as follows:

  • Active account data: Retained for as long as your account is active and for a minimum of 5 years after account closure for anti-money laundering (AML) compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years in line with Malaysian financial regulatory requirements.
  • Support communication logs: Retained for 3 years for reference and service improvement purposes.
  • Technical log data: Retained for 90 days for security and system debugging purposes.
  • KYC documents: Retained for 5 years after account closure, or for the period required by the relevant authorities, whichever is longer.

Upon expiry of the retention period, your data will be securely deleted or anonymised in accordance with bali19's established data disposal procedures.

10Amendments to This Privacy Policy

Bali19 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or business operations.

Each time this Privacy Policy is updated, we will:

  • Updating the "Last Updated" date shown at the top of this document.
  • Displaying an in-platform notification within bali19 upon your next login.
  • Sending an email notification to your registered address for significant changes that materially affect your privacy rights.

We encourage you to review this Privacy Policy periodically. Continued use of the bali19 platform after any amendments constitutes your acceptance of the updated privacy terms.

11Contact the bali19 Privacy Officer

If you have any questions, concerns, or complaints about how bali19 handles your personal data, you can reach our privacy team through the following channels:

Privacy Email: [email protected]
Live Chat: Available 24/7 via the chat icon at the bottom corner of the bali19 platform
Response Time: All privacy enquiries are answered within 3 business days; data rights requests are resolved within 30 business days

We take every privacy inquiry seriously and are committed to providing a thorough and satisfactory response to all bali19 users.

Secure & Trusted Platform

Join bali19 – Where Your Privacy Comes First

Now you know how we protect your data. Register a bali19 account today and enjoy a safe, fair, and exciting wagering experience alongside more than 500,000 Malaysian users.

Bahasa Melayu