Privacy Policy

1 Introduction

bolaking88 ("we", "our", "the Platform") operates the website accessible at https://bolaking88.cam. This Privacy Policy ("Policy") describes how bolaking88 collects, uses, stores, shares and protects the personal data of individuals ("User", "you", "your") who access or use the Platform.

bolaking88 is an English-language sports betting and casino information platform designed for adult players in Malaysia. The Platform serves users across the country — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru and Shah Alam — and handles personal data in connection with account registration, payment guidance, KYC verification, customer support and other platform services.

By accessing or using bolaking88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer or deletion.
• "Data Controller" means bolaking88, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of bolaking88 in accordance with this Policy and applicable data protection obligations.
• "KYC" means Know Your Customer — the identity verification process used to confirm a User's personal identity, age, residency and payment ownership.
• "Cookies" means small text files stored on a User's device by the Platform for purposes of session management, analytics and personalisation.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.

3 Data We Collect

bolaking88 collects only the personal data that is reasonably necessary to deliver platform services and meet our legal and regulatory obligations. The categories of data we may collect include:

3.1 Identity and Registration Data

• Full legal name and date of birth
• Malaysian National ID number (MyKad), passport number or driver's licence number for KYC purposes
• Residential address, including city (e.g. Kuala Lumpur, Penang, Johor Bahru)
• Email address and Malaysian mobile telephone number
• Account username and encrypted password credentials

3.2 Financial and Payment Data

• Deposit and withdrawal transaction records, denominated in Malaysian Ringgit (MYR/RM)
• Payment method ownership details (e.g. name registered on Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong accounts)
• Bank account or e-wallet identifiers used for transaction verification

3.3 Technical and Usage Data

• IP address, browser type and version, operating system and device identifiers
• Pages visited, session duration, referral source and navigation behaviour
• Cookie identifiers and similar tracking technology data

3.4 Communication Data

• Support enquiries submitted via live chat, email or messaging platforms
• Records of communication with bolaking88 support staff
• Feedback or complaints submitted through the Platform

3.5 KYC Verification Documents

• Scanned or photographed copies of identity documents (MyKad, passport, driver's licence)
• Proof of address documents (utility bills, bank statements issued within three months)
• Selfie images taken while holding an identity document, as required by the KYC process

4 How We Collect Data

bolaking88 collects personal data through the following channels:

• Direct submission — data provided by Users during account registration, KYC verification, deposit or withdrawal requests, and support communications.
• Automated collection — data collected automatically when a User accesses the Platform, including through cookies, server logs and analytics tools.
• Third-party sources — data obtained from identity verification providers, payment processing partners or fraud prevention services operating on bolaking88's behalf.
• Public records — where permitted by law, bolaking88 may cross-reference publicly available information to support identity verification or fraud prevention activities.

5 Data Processing & Purpose

Personal data collected by bolaking88 is processed only for legitimate, specified purposes. The table below outlines the primary processing activities and the corresponding purpose for each:

6 Legal Basis for Processing

bolaking88 processes personal data on one or more of the following legal grounds, depending on the purpose of the processing activity:

• Contractual necessity — processing required to perform or fulfil the User agreement, including account registration, KYC and payment services.
• Legal obligation — processing required to comply with applicable laws, regulations or court orders.
• Legitimate interests — processing carried out to pursue bolaking88's legitimate business interests, including fraud detection, security and platform improvement, balanced against User privacy interests.
• Consent — processing based on the User's specific, freely given consent, including for promotional communications and optional data uses.

Where processing is based on consent, Users have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Retention

bolaking88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, taking into account applicable legal retention requirements and limitation periods.

7.1 General Retention Periods

• Account and identity data — retained for the duration of the active account and for a minimum of five (5) years following account closure, to support regulatory compliance.
• KYC and verification documents — retained for a minimum of five (5) years following submission, in accordance with anti-money laundering obligations.
• Transaction records — retained for a minimum of seven (7) years to satisfy financial record-keeping requirements.
• Support communications — retained for three (3) years following resolution of the matter, unless a dispute is ongoing.
• Technical and usage data — retained for a period of up to twenty-four (24) months from collection, unless required for ongoing fraud prevention purposes.

Upon expiry of applicable retention periods, personal data is securely deleted, anonymised or archived in a manner that prevents re-identification, subject to any overriding legal or regulatory requirement.

8 Data Sharing & Disclosure

bolaking88 does not sell, rent or trade personal data to third parties. Personal data may be disclosed in the following limited circumstances:

8.1 Service Providers

bolaking88 engages trusted third-party service providers to support platform operations, including KYC verification providers, payment processing partners, fraud detection services, hosting infrastructure providers and customer support platforms. These providers process data solely on bolaking88's instructions and are bound by appropriate data protection obligations.

8.2 Legal and Regulatory Disclosure

bolaking88 may disclose personal data to competent authorities, law enforcement agencies or regulatory bodies where required to do so by applicable law, court order or regulatory obligation. We will not disclose personal data in response to informal or unofficial requests.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring or asset sale, personal data may be transferred to the acquiring entity as part of that transaction, provided that equivalent data protection standards are maintained. Users will be notified of any such change that materially affects their data rights.

9 Cookies & Similar Technologies

bolaking88 uses cookies and similar technologies such as web beacons, pixel tags and local storage objects to support platform functionality and improve User experience.

9.1 Types of Cookies Used

• Strictly necessary cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember User preferences such as language settings and login state to improve convenience.
• Analytical cookies — collect anonymised information about how Users interact with the Platform to support performance optimisation.
• Marketing cookies — used where consent has been obtained to support relevant promotional communications.

9.2 Managing Cookies

Users may manage or disable non-essential cookies through their browser settings. Disabling certain cookies may affect the functionality of the bolaking88 Platform. Instructions for managing cookies are available in the help section of most modern browsers.

10 Data Security

bolaking88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. Security measures include but are not limited to:

• Encrypted transmission of data via HTTPS (TLS) protocols
• Restricted staff access to personal data on a need-to-know basis
• Secure storage of KYC documents with access logging
• Regular review of technical controls and security practices
• Incident response procedures for data breach detection and notification

While bolaking88 takes data security seriously, no online system is entirely immune from risk. Users are encouraged to protect their own accounts by using strong, unique passwords, enabling available security features and not sharing login credentials with any third party.

11 International Data Transfers

The bolaking88 Platform serves users in Malaysia. Some of our service providers and infrastructure partners may be located in or operate from jurisdictions outside Malaysia. Where personal data is transferred internationally, bolaking88 ensures that appropriate safeguards are in place to maintain the standard of protection described in this Policy, including contractual data protection clauses with receiving parties.

bolaking88 will not transfer personal data to a jurisdiction that does not provide an adequate level of data protection without implementing appropriate additional safeguards as required under applicable law.

12 User Rights

Subject to applicable law and regulatory obligations, Users of bolaking88 have the following rights in relation to their personal data:

• Right of access — to request a copy of the personal data bolaking88 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data, subject to legal and regulatory retention requirements.
• Right to restriction — to request that processing of your data be limited in specified circumstances.
• Right to data portability — to receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object — to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, contact bolaking88 using the details in Section 16 of this Policy. Requests will be acknowledged within 5 business days and substantively addressed within 30 calendar days, unless an extension is required and notified to you. Identity verification may be requested before a data subject request is fulfilled.

13 Children & Minors

The bolaking88 Platform is strictly intended for individuals aged 21 years and above. bolaking88 does not knowingly collect, store or process personal data belonging to any person under the age of 21. If bolaking88 becomes aware that personal data of an underage individual has been collected, it will be deleted promptly and the associated account will be closed.

If you have reason to believe that an individual under 21 has provided personal data through the bolaking88 Platform, please contact us immediately using the details in Section 16.

14 Third-Party Links

The bolaking88 Platform may contain references to other websites or services for informational context. bolaking88 is not responsible for the privacy practices or content of any third-party website. This Privacy Policy applies solely to data collected and processed through the bolaking88 Platform at https://bolaking88.cam.

Users who navigate to external websites do so at their own discretion and are advised to review the applicable privacy policy of each site they visit independently.

15 Policy Amendments

bolaking88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in platform operations, legal obligations or regulatory requirements. Material amendments will be communicated to registered Users via email or a prominent notice displayed on the Platform prior to the change taking effect.

The date of the most recent revision is displayed in the Table of Contents. Continued use of the bolaking88 Platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms. Users are encouraged to review this Policy periodically to remain informed of how their data is handled.

16 Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by bolaking88, please contact us through the following channel:

bolaking88 aims to acknowledge all privacy-related correspondence within 2 business days and to provide a substantive written response within 30 calendar days. Identity verification will be required before any personal data is disclosed or deleted.