bola888 Privacy Policy

1. Information We Collect

When you register and use the bola888 platform, we collect various categories of personal data. The information we collect falls into the following categories:

1.1 Registration Data

When you create a bola888 account, we collect: your full legal name, date of birth, Malaysian IC number (MyKad) or equivalent government-issued identification number, residential address, email address, and mobile phone number. This information is required to create and verify your account.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, bola888 may collect copies of identity documents (such as your Malaysian IC front and back), proof of address documents (such as a Maybank, CIMB, or Public Bank statement), and selfie photographs for biometric identity matching purposes. These documents are processed by our licensed KYC verification partner.

1.3 Financial Data

bola888 collects information about your deposit and withdrawal transactions, including payment method details (Touch 'n Go eWallet account identifiers, Boost account identifiers, bank account details), transaction amounts in MYR, and transaction timestamps. bola888 does not store full card numbers or complete banking credentials — payment processing is handled by PCI-DSS compliant payment processors.

1.4 Gaming Activity Data

bola888 records your gaming activity on the platform, including game sessions, bet amounts, win/loss outcomes, and game history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting purposes.

1.5 Technical and Device Data

When you access bola888, our systems automatically collect certain technical data, including: IP address, device type and operating system, browser type and version, session duration, pages visited within bola888, and referral source. This data is used for security monitoring, fraud detection, and platform optimisation.

1.6 Communications Data

If you contact bola888 customer support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

2. How We Use Your Information

bola888 uses the personal data we collect for the following purposes:

• Account creation and management: To register your bola888 account, verify your identity, maintain your account, and process your login credentials securely.
• Payment processing: To process deposits and withdrawals in MYR via your selected payment method, and to maintain accurate financial records for your account.
• Legal and regulatory compliance: To meet KYC, anti-money laundering (AML), and responsible gaming obligations under our licensing framework, including age verification (21+) and identity verification.
• Fraud prevention and security: To detect and prevent unauthorised account access, payment fraud, multi-accounting, and other forms of platform abuse.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance with your bola888 account.
• Responsible gaming: To monitor gaming patterns and identify players who may be showing signs of problem gambling, enabling proactive intervention in line with our responsible gaming obligations.
• Marketing communications: To send you promotional offers, bonus notifications, and platform news where you have consented to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyse usage patterns and technical performance data to improve the bola888 user experience.

3. Legal Basis for Processing

bola888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the bola888 account agreement, including account operation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, and platform optimisation, where these interests are not overridden by your privacy rights.
• Consent: Processing of data for marketing communications, where we rely on your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

4. Data Sharing and Disclosure

bola888 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

4.1 Service Providers

bola888 engages third-party service providers to support platform operations, including payment processors, KYC verification providers, fraud detection services, IT infrastructure providers, and customer support technology providers. These partners are contractually bound to process data only on bola888's instructions and in accordance with applicable data protection requirements.

4.2 Gaming and Content Providers

Game studios and live casino content providers whose products are available on bola888 may receive anonymised or pseudonymised technical data necessary for game delivery and integrity monitoring. Individual identifiable player data is not shared with game studios beyond what is strictly necessary.

4.3 Regulatory and Legal Disclosure

bola888 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, by court order, or in connection with the prevention or investigation of financial crime. bola888 will notify affected players of such disclosures where legally permitted to do so.

4.4 Corporate Transactions

In the event of a merger, acquisition, or sale of all or a substantial part of bola888's business assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance.

5. Cookies and Tracking Technologies

bola888 uses cookies and similar tracking technologies to operate and improve the platform. Categories of cookies we use include:

• Essential cookies: Required for platform functionality, including session management, login persistence, and security token validation. These cannot be disabled without affecting platform operation.
• Analytics cookies: Used to collect anonymised data on how players navigate and use bola888, enabling us to identify performance issues and improve the user experience.
• Fraud prevention cookies: Used by our fraud detection systems to identify suspicious patterns, device fingerprinting for multi-account detection, and session anomaly monitoring.
• Marketing cookies: Used where you have consented to receive personalised bola888 promotions. You may withdraw consent via your account settings or browser controls.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the bola888 platform.

6. Data Retention

bola888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to minimum retention periods required by our licensing obligations and applicable law. Specific retention periods include:

• Account registration and identity verification data: retained for a minimum of five (5) years following account closure, in line with AML regulatory requirements.
• Financial transaction records: retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: retained for a minimum of three (3) years from the date of each session.
• Customer support communications: retained for a minimum of two (2) years from the date of each interaction.
• Marketing consent records: retained for the duration of the consent and for two (2) years following withdrawal of consent.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised.

7. Data Security

bola888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between player devices and bola888's servers.
• Encryption at rest for sensitive personal data stored on bola888's infrastructure.
• Access controls limiting employee access to personal data on a strict need-to-know basis, with audit logging of all data access events.
• Regular security assessments and penetration testing of the bola888 platform and infrastructure.
• Incident response procedures for data breaches, including regulatory notification within applicable timeframes where required by law.

While bola888 takes all reasonable precautions, no data transmission over the internet is entirely secure. Players are responsible for maintaining the security of their own bola888 login credentials.

8. Your Rights

Subject to applicable law, registered bola888 players have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data bola888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your bola888 account.
• Right to erasure: You may request deletion of your personal data, subject to bola888's legal obligation to retain certain records.
• Right to restrict processing: You may request that bola888 restrict the processing of your personal data in certain circumstances.
• Right to object: You may object to processing based on bola888's legitimate interests, including marketing communications.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to bola888 where processing is based on consent or contractual necessity.

To exercise any of these rights, please contact the bola888 support team via live chat. bola888 will respond to verified requests within thirty (30) days. Some requests may be subject to identity verification before processing.

9. Children's Privacy

bola888 is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the bola888 registration and KYC process.

If bola888 discovers that personal data has been collected from an individual under 21, the associated account will be closed immediately, all data will be deleted, and any balance will be returned to the source payment method minus any applicable costs.

10. Changes to This Policy

bola888 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address associated with their account at least fourteen (14) days before taking effect, except where immediate implementation is required by law or regulatory obligation.

The effective date of the current version of this Privacy Policy is stated at the top of this page. Continued use of the bola888 platform following notification of changes constitutes acceptance of the revised policy. If you do not accept the revised policy, you may close your account by contacting the bola888 support team.

11. Contact and Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a privacy-related complaint, please contact the bola888 privacy team via live chat support. We will acknowledge your request within three (3) working days and aim to resolve it within thirty (30) days.

If you are not satisfied with bola888's response to your privacy complaint, you may escalate the matter to the applicable data protection authority in the jurisdiction relevant to your complaint.

This Privacy Policy was last reviewed and updated in June 2026. bola888 is committed to handling your personal data responsibly and in accordance with applicable data protection law.