Privacy Policy Bolaking888 — Malaysian User Data Protection

Bolaking888 ("we", "Platform" or "bolaking888") takes the privacy of every user seriously. This Privacy Policy is designed to provide clarity on how we manage the personal information we collect from you when you register, use our services or interact with our platform.

This policy applies to all users of the bolaking888 website, our mobile app, and any platforms associated with bolaking888 services. By continuing to use our platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of our platform and contact our support team for assistance with account closure.

This policy is formulated in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing personal data processing in Malaysia. We are committed to complying with all provisions of this Act in every aspect of our users' data handling.

We collect various categories of information depending on your interactions with our platform. Generally, the information we collect falls into two main categories:

A. Information You Provide Directly

• Registration Information: Full name, identification card number (MyKad/passport), date of birth, email address, mobile phone number, and account password
• KYC (Know Your Customer) Information: Copies of identity documents, identity verification selfies and proof of residential address
• Financial Information: Bank account number, bank name, account holder name, and registered e-wallet details for deposit and withdrawal purposes
• Communication Information: Any messages, complaints or enquiries you submit to our customer support team

B. Information Collected Automatically

• IP address, device type, operating system and browser version
• Device location data (city/region, not precise coordinates)
• Gaming activity records, betting history and transaction logs
• Login data, session times and platform usage patterns
• Cookie information and device identifiers

Bolaking888 collects personal information through several different channels, depending on how you interact with our platform:

• During Account Registration: When you complete the registration form and create a new account at bolaking888, we collect the basic information you voluntarily provide
• During the KYC Process: When you submit identity documents for identity verification and anti-money laundering (AML) compliance purposes
• During Financial Transactions: Every time you make a deposit or request a withdrawal, the relevant transaction details are automatically recorded in our system
• Via Cookies & Tracking Technologies: Our platform uses cookies, web beacons, and similar technologies to collect technical data about your device and usage patterns — further details in Section 7
• From Trusted Third Parties: In certain cases, we may receive verification information from payment service providers or recognised identity verification bodies
• Via Support Communications: When you contact our customer support team via live chat, email or other communication channels

All personal information we collect is used solely for legitimate, pre-defined purposes. The following are the primary purposes for which your data is used:

• Account Management: To create, verify, manage and protect your bolaking888 account
• Transaction Processing: To process deposits, withdrawals and any financial transactions you carry out on our platform securely and accurately
• Legal Compliance: To fulfil our obligations under the PDPA, anti-money laundering laws (AMLA), and any other applicable legal requirements
• Fraud Prevention: To detect, investigate and prevent fraudulent activity, multi-account usage or any breach of our terms of service
• Customer Support: To provide technical assistance, resolve complaints and respond to your enquiries effectively
• Platform Communications: To send important account notifications, security updates and promotional information (only where you have given consent)
• Service Improvement: To analyse aggregated usage patterns in order to improve the user experience and platform performance
• Responsible Gaming: To monitor gaming patterns and identify users who may need assistance or protection through our responsible gaming programme

Bolaking888 does not sell, rent, or disclose your personal information to third parties for commercial gain. However, there are limited situations where we need to share your data with certain parties to enable the platform to operate effectively and remain legally compliant:

• Payment Service Providers: Required transaction information is shared with approved payment processors — such as DuitNow gateway providers, local banks, and e-wallet operators — solely for the purpose of processing your transactions
• Technical Service Providers: Cloud infrastructure providers, hosting services, and analytics tools we use to operate the platform. All these providers are bound by strict data protection agreements
• Game Providers: Usernames and required game data are shared with third-party game providers such as slot providers, Live Casino, and Fish Shooting Games providers to enable game sessions to function
• Law Enforcement Authorities: When required by a court order, writ, regulation or lawful request from the relevant authorities in Malaysia
• Associated Companies: Within the bolaking888 group of companies for internal operational purposes, subject to equivalent privacy protections

The security of your personal data is an absolute priority for bolaking888. We invest in high-grade security infrastructure to ensure your information is always protected against unauthorised access, loss, or misuse.

Key security measures we implement:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept your communications
• Secure Password Storage: Your password is never stored in plain text — we use the robust bcrypt hashing algorithm with a unique salt for every account
• Two-Factor Authentication (2FA): We support 2FA via authenticator app for an additional layer of security on your account
• 24/7 Security Monitoring: Our systems are continuously monitored by our cybersecurity team to detect any suspicious activity or intrusion attempts
• Internal Access Control: Only authorised staff with legitimate business needs may access users' personal data, and every access is logged in detail
• Payment Data Segregation: Bank card details and sensitive payment information are not stored on bolaking888 servers — they are processed directly through PCI-DSS compliant payment channels

The bolaking888 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login sessions, account security and language preferences. These cookies cannot be disabled as they are critical to platform operations
• Performance Cookies: Collects information on how you use our platform — most visited pages, error messages, and load times — to help us improve performance
• Functional Cookies: Stores your preferences such as preferred language, display settings, and platform preferences to deliver a more personalised experience
• Analytics Cookies: Used by our internal analytics tools to understand usage patterns in aggregate and anonymised form

You may manage or delete cookies at any time through your browser settings. Please note that blocking essential cookies may affect platform functionality and your overall user experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our privacy policy, you have certain rights regarding the personal data we hold about you. We are committed to facilitating the exercise of these rights:

Bolaking888 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. The following are our data retention period guidelines:

• Active Account Data: Retained for the duration your account remains active and for any additional period required following account closure
• Financial Transaction Records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's accounting and tax legal requirements
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with Malaysia's AMLA requirements
• Support Communication Logs: Retained for 2 years after a case is closed, for reference and service improvement purposes
• Cookie & Session Data: Session cookies expire automatically when you close your browser; persistent cookies expire within the period specified in the cookie settings
• System Log Data: Technical and security logs are retained for 90 days for troubleshooting and security audit purposes

Once the designated retention period has expired, your data will be securely deleted or anonymised using industry-standard methods, ensuring it cannot be recovered or reused.

Bolaking888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements or platform improvements. The latest version of the Privacy Policy will be published on this page along with the date of update.

For significant amendments that materially affect your privacy rights, we will endeavour to provide advance notice via your registered email or a prominent notification within the platform before the changes take effect.

It is your responsibility to review this Privacy Policy page periodically. Your continued use of the bolaking888 platform after any amendments are posted will be deemed as your acceptance of the updated terms.