Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bola888 ("we", "us", "our", "the Platform") — accessible at bola888.cam — collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "User") who visit our website, register an account, or use any of our online gaming and sports betting services.

bola888 serves players across Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection legislation and international best practices.

By registering an account with bola888 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with any part of this Policy, please cease using the Platform and contact us to close your account.

2 Definitions

The following terms are used throughout this Policy:

• "Personal Data" means any information that can be used to directly or indirectly identify a living individual, including name, identification number, contact details, IP address, and payment information.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means bola888, which determines the purposes and means by which your personal data is processed.
• "Data Processor" means any third party engaged by bola888 to process personal data on our behalf, such as payment providers or identity verification services.
• "KYC" (Know Your Customer) means the identity and document verification process required before withdrawals or upon regulatory request.
• "Cookies" means small text files placed on your device by the Platform for functional, analytical, or preference-retention purposes.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.

3 Data We Collect

bola888 collects personal data across three broad categories. The specific data collected depends on how you interact with the Platform.

3.1 Registration & Account Data

When you create a bola888 account, we collect:

3.2 Financial & Transaction Data

To process deposits and withdrawals in Malaysian Ringgit (MYR) via your preferred payment method — including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB, or Hong Leong — we collect:

We do not store full card numbers or banking credentials. Payment authentication is handled by your payment provider's own secure systems.

3.3 Technical & Usage Data

When you access the Platform, we automatically collect certain technical data:

4 How We Collect Your Data

bola888 collects your personal data through the following means:

• Direct provision: Data you voluntarily provide during registration, KYC verification, customer support interactions, or promotion participation
• Automated collection: Technical data collected automatically when you access the Platform via cookies, log files, and session tracking tools
• Payment providers: Transaction confirmation data received from Malaysian payment processors (Touch 'n Go eWallet, DuitNow, FPX, and participating banks) when you initiate a deposit or withdrawal
• Identity verification partners: Document verification results from KYC service providers when you submit identification documents
• Fraud detection systems: Behavioural and device data collected as part of our real-time fraud monitoring and anti-money laundering (AML) controls

5 Legal Basis for Processing

bola888 processes your personal data under one or more of the following legal grounds:

6 How We Use Your Data

bola888 uses your personal data for the following defined purposes:

6.1 Account Operation

Your registration data is used to create and maintain your bola888 account, authenticate your identity on login, enforce our single-account policy, and communicate essential account-related notifications (such as withdrawal confirmations, security alerts, and policy updates).

6.2 Payment Processing

Financial data is used to process your deposits and withdrawals via supported Malaysian payment channels. All transactions are denominated in MYR. We use transaction history to investigate disputes, apply responsible gambling limits, and maintain accurate financial records as required by law.

6.3 Identity Verification & Compliance

KYC data (government-issued ID, proof of address) is processed to verify your identity, confirm your age (21+), and meet our obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks. We are legally required to retain this data for a defined period regardless of account status.

6.4 Responsible Gambling

We monitor account activity — including deposit frequency, wager patterns, session duration, and loss levels — to identify indicators of problem gambling. This data is used to trigger responsible gambling alerts, enforce self-set deposit limits, and support our self-exclusion tools. This processing is in the best interests of our players.

6.5 Fraud Prevention & Security

Technical and behavioural data is used by our automated fraud detection and AML monitoring systems to identify suspicious account activity, potential account compromise, collusion, bonus abuse, and money laundering patterns. Flagged activity may be reviewed by our compliance team and reported to relevant authorities where legally required.

6.6 Platform Improvement

Aggregated, anonymised usage data is used to analyse how players interact with the Platform — which games are most popular, how navigation flows are used, where technical issues arise — to guide product development and improve the overall user experience for Malaysian players.

6.7 Marketing Communications

With your prior consent, we may send promotional emails or in-platform notifications about bonuses, new games, sports betting promotions, and VIP events relevant to you. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting support.

7 Data Sharing & Disclosure

bola888 does not sell your personal data. We share your data only in the following limited circumstances:

7.1 Payment Service Providers

To process your MYR deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners — including operators of Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and participating Malaysian banks (Maybank, CIMB, Public Bank, RHB, Hong Leong). These providers are bound by their own privacy obligations and applicable financial regulation.

7.2 Identity Verification Partners

Your KYC documents (IC/passport, proof of address) are processed by contracted identity verification service providers. These processors operate under data processing agreements that restrict their use of your data exclusively to verification purposes on bola888's behalf.

7.3 Regulatory & Legal Authorities

bola888 may disclose your personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally required to do so — for example, in connection with AML investigations, court orders, or legal proceedings. We will notify you of such disclosures where we are legally permitted to do so.

7.4 Service Providers

We engage third-party service providers for specific operational functions — including cloud hosting, customer support tooling, and analytics. All such providers are engaged under contractual terms that prohibit them from using your data for any purpose other than the specific service they provide to bola888.

8 Your Rights

As a data subject, you hold the following rights in relation to your personal data held by bola888. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all valid requests within 30 calendar days.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences, and collect usage analytics. bola888 uses cookies and similar technologies on the Platform.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. They enable account login sessions, security tokens, and session management. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options to personalise your experience.
• Analytical Cookies: Collect anonymised usage data to help us understand how players interact with the Platform — which pages are visited most, where users drop off, and overall session patterns. This data is used in aggregate only.
• Security Cookies: Support our fraud detection and account security systems by helping identify unusual patterns of access that may indicate account compromise or bot activity.

9.3 Cookie Management

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the Platform. Consult your browser's help documentation for instructions on managing cookie preferences.

10 Data Security

bola888 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Encryption: All data in transit between your device and our servers is encrypted using 256-bit TLS/SSL protocols
• At-Rest Encryption: Sensitive personal and financial data stored on our servers is encrypted at rest using AES-256 encryption
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls and audit logging
• Password Security: User passwords are stored as salted cryptographic hashes — we do not store plaintext passwords
• Intrusion Detection: Real-time intrusion detection and monitoring systems are deployed across our infrastructure
• Vulnerability Management: Regular security assessments and penetration testing are conducted to identify and remediate vulnerabilities
• Staff Training: All bola888 personnel with access to personal data receive regular data protection and security training

While we take extensive measures to protect your data, no system is entirely immune from risk. In the event of a data breach that poses a significant risk to your rights and freedoms, bola888 will notify affected users without undue delay.

11 Data Retention

bola888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

12 International Data Transfers

Some of the third-party service providers engaged by bola888 — including cloud infrastructure providers and KYC verification partners — may process your personal data on servers located outside Malaysia. Where such transfers occur, bola888 takes steps to ensure that adequate safeguards are in place to protect your data to the same standard required by this Policy.

Safeguards for international transfers may include: contractual clauses requiring third-party processors to comply with applicable data protection standards; transfers to jurisdictions that have been assessed as providing an adequate level of data protection; and ongoing due diligence of processor security practices.

13 Children & Minors

bola888's services are strictly restricted to individuals aged 21 and above. We do not knowingly collect or process personal data belonging to persons under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the data subject to applicable legal holds, and take appropriate action.

14 Third-Party Services

The bola888 Platform may contain references or links to third-party services — including payment providers such as Touch 'n Go eWallet, DuitNow, FPX, and participating Malaysian banks. Accessing these third-party services will subject you to their own privacy policies and data practices, which are outside bola888's control and for which bola888 accepts no responsibility.

We encourage you to review the privacy policies of any third-party service you use in connection with your bola888 account — particularly your chosen payment method provider — to understand how they handle your data.

15 Amendments to This Policy

bola888 reserves the right to update this Privacy Policy at any time. Where material changes are made — such as new categories of data being collected or changes in how data is shared — we will notify registered users via email or in-platform notification at least 7 calendar days before the changes take effect.

Minor clarifications or corrections may be published without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

The current version of this Privacy Policy is always available at bola888.cam/privacy-policy.

16 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how bola888 handles your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 via the Platform interface
• Email: [email protected] (response within 4 hours)

Our support team is available in English and serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

If you are not satisfied with our response to a data rights request or privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.