Privacy Policy Boleh88 – Personal Data Protection for Malaysian Members

To provide a platform that is secure, legally compliant, and fully functional, Boleh88 needs to collect certain types of personal information from its members. We collect only what is genuinely necessary to operate the platform — nothing more.

We do not collect unnecessary sensitive information such as medical details, religious beliefs, or political views. Credit or debit card details are not stored directly on Boleh88's servers — all payment transactions are processed by registered and licensed payment providers.

The data we collect is used solely for legitimate purposes that are necessary to operate the platform properly. Below is a breakdown of how we specifically use Boleh88 members' personal information.

• Verifying your identity during registration and whenever required for account security or regulatory compliance.
• Processing deposits via FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and other supported Malaysian payment methods, as well as processing withdrawals of winnings to your account.
• Sending transaction notifications, security alerts and important account information via SMS or email.
• Providing effective customer support when you reach out to our team — interaction records are retained for reference and quality improvement.
• Detecting and preventing fraud, money laundering, bonus abuse, and other unlawful activity that could compromise the security of the platform and its members.
• Ensuring compliance with responsible gaming requirements — including monitoring gameplay patterns to identify early signs of problem gambling.
• Analyzing aggregated usage data (without identifying individuals) to improve platform design, functionality and user experience.
• Sending promotional communications about bonuses, offers, and new games — subject to the communication preferences you have set in your account.

Boleh88 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, there are specific situations where we need to share information with trusted parties in order for the platform to function properly and to fulfil our legal obligations.

• Payment Providers: Required transaction information is shared with licensed payment providers such as FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow to process deposits and withdrawals. These providers maintain their own privacy policies and security standards.
• Game Providers: Third-party game providers offering their products through the Boleh88 platform may receive the minimum game data required to deliver their services. Full identity data is not shared.
• Legal Authorities: Boleh88 will disclose personal information to relevant authorities — such as the police, financial regulators, or courts — when required by law or a valid court order. We do not disclose any information beyond what is legally required.
• Auditors & Legal Advisors: Independent auditors and legal advisors appointed by Boleh88 may need to access certain records in the course of their duties. All such parties are bound by strict confidentiality agreements.
• Business Transfer: If Boleh88 is involved in a merger, acquisition, or asset sale, member data may be transferred as part of that transaction. In such cases, members will be notified in advance and an updated privacy policy will be published.

In all instances of data sharing outlined above, we ensure that only the minimum necessary information is shared, and all receiving parties are bound by confidentiality obligations equal to or stricter than those we uphold ourselves.

The security of member personal data is Boleh88's top technical priority. We continuously invest in security infrastructure to ensure your data remains protected from online threats at all times.

• 256-bit SSL/TLS encryption for all data transmitted between your device and Boleh88's servers — no data travels in plain text that could be intercepted.
• Data encryption at rest for all personal and financial information stored in our databases.
• Two-factor authentication (2FA) is available for all member accounts — we strongly encourage all members to enable this additional security feature.
• Round-the-clock security monitoring by our technical team to detect and respond to any suspicious activity or unauthorised access attempts.
• Regular independent security audits to identify and address any vulnerabilities in our systems before they can be exploited.
• Role-based access control (RBAC) to ensure staff can only access data relevant to their responsibilities — no staff member has unrestricted full access.

Member personal data is retained for the duration of the active account plus 5 years after account closure, in accordance with applicable financial compliance and legal requirements. Once the retention period ends, data is securely deleted from all our systems.

As a Boleh88 member and as an individual whose data we process, you have certain rights under applicable data protection law. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please submit a written request to support@boleh88.best with the subject line "Privacy Rights Request", along with your account number and details of your request. We will verify your identity before processing the request and will respond within 14 business days.

The Boleh88 website uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage. Below are the types of cookies we use.

• Essential Cookies (Required): Required for core platform functions such as secure login, session verification, and security. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: Saves your preferences such as language, display settings, and login information to speed up access on future visits. Can be disabled, though this may affect ease of use.
• Analytics Cookies: We use aggregated analytics data (with no individual identification) to understand how members use the platform — including the most visited pages, time spent, and navigation paths. This data helps us improve the platform.
• Security Cookies: Detects suspicious login attempts, bot activity, and potential fraud. These cookies are essential for protecting your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Most modern browsers allow you to view, delete or block cookies from specific websites. However, disabling essential cookies may cause certain features of the Boleh88 platform to function incorrectly.

We do not use cross-site tracking cookies or collect your data from other websites you visit. Our tracking activity is limited strictly to the boleh88.best domain.

If you have any questions, concerns or complaints regarding how Boleh88 handles your personal data, we encourage you to reach out to us directly. Our data protection team is ready to assist.

• Privacy Email: support@boleh88.best — please use the subject line "Privacy Enquiry" for the attention of our data protection team.
• Live Chat: Available 24/7 via the Boleh88 platform after logging in to your account.
• Response Time: General privacy enquiries are answered within 3 business days. Formal rights requests (access, deletion, portability) are handled within 14 business days.

This Privacy Policy will be updated from time to time to reflect changes in our practices, technology, or legal requirements. Any material changes will be communicated to members via email or in-platform notification at least 7 days before taking effect. The current version of this Privacy Policy is effective from 1 January 2026.