Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by Boleh88 (hereinafter "boleh88", "we", "us", or "the Company"), the operator of the online gaming and sports betting platform accessible at boleh88.cam (hereinafter "the Platform"). It governs the collection, use, storage, disclosure, and protection of personal data relating to all registered members, visitors, and prospective users of the Platform (hereinafter "you", "the User", or "the Member").

Boleh88 is committed to handling personal data responsibly and in compliance with applicable data protection legislation. This Policy is designed to provide you with clear, transparent information about your privacy rights and how we exercise our responsibilities as a data controller.

By registering an account on the Platform or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood the practices described herein. This Policy should be read in conjunction with our Terms & Conditions, which form part of your overall agreement with boleh88.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" — Any information that relates to an identified or identifiable natural person, including but not limited to a name, identification number, contact details, location data, or online identifiers.
• "Processing" — Any operation or set of operations performed on personal data, whether by automated or manual means, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, boleh88 is the Data Controller.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under a contractual agreement and in accordance with the Controller's instructions.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data for one or more specific purposes.
• "KYC Data" — Identity verification documentation provided by a Member in fulfilment of Know Your Customer obligations, including government-issued identification documents and proof of address.
• "Cookies" — Small text files placed on your device by the Platform that store information about your browsing session and preferences.

Boleh88 collects the following categories of personal data from Members and Platform visitors:

Boleh88 collects personal data through the following means:

4.1 Direct Collection

Data provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or otherwise interact with the Platform.

4.2 Automated Collection

Technical and usage data collected automatically as you browse and interact with the Platform, through the use of cookies, server logs, pixel tags, and similar tracking technologies. This data is collected without active input on your part and is used primarily to maintain platform security, optimise performance, and detect fraudulent behaviour.

4.3 Third-Party Sources

In limited circumstances, boleh88 may receive personal data from authorised third-party sources, including:

• Identity verification service providers engaged to perform KYC checks;
• Payment processors and financial institutions involved in processing your deposits and withdrawals via FPX, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and cryptocurrency networks;
• Fraud prevention and anti-money laundering screening services;
• Responsible gambling self-exclusion registries, where applicable.

Boleh88 processes your personal data only where a lawful basis for processing exists. The primary legal bases under which we process personal data are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including operating your account, processing bets, and administering withdrawals.
• Legal Obligation: Processing required for compliance with applicable laws and regulations, including anti-money laundering (AML) requirements, counter-terrorist financing (CTF) obligations, age verification mandates, and reporting obligations to competent authorities.
• Legitimate Interests: Processing carried out in furtherance of boleh88's legitimate business interests, including fraud prevention, platform security monitoring, improving our services, and direct marketing to existing members, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed consent, particularly in relation to optional marketing communications and non-essential cookies. You may withdraw consent at any time by contacting support or adjusting your account communication preferences.

Boleh88 uses the personal data we collect for the following purposes:

• Account Administration: Creating and maintaining your member account, verifying your identity at registration and during KYC, and processing your account settings and preferences.
• Transaction Processing: Facilitating deposits and withdrawals through your chosen payment method, whether that is FPX, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency channels.
• Platform Operation: Delivering the core betting and gaming services available on boleh88, including sports betting markets, live casino, slots, and other game categories.
• Fraud Prevention & Security: Monitoring account activity for signs of unauthorised access, fraud, bonus abuse, money laundering, or other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: Meeting our obligations under applicable AML, KYC, and data protection regulations, and responding to lawful requests from competent authorities.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance via live chat and email.
• Responsible Gambling: Monitoring betting patterns for indicators of problem gambling, applying member-requested self-exclusion and deposit limits, and providing targeted responsible gambling communications where appropriate.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or in-platform notification, where you have not opted out of such communications. You may opt out at any time by contacting support.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, user experience, and game offerings.

Boleh88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and proportionate:

7.1 Service Providers and Data Processors

Carefully selected third-party service providers who perform specific functions on our behalf, including payment processing (FPX, DuitNow, e-wallet operators, and cryptocurrency network infrastructure), identity verification and KYC services, fraud detection and AML screening, platform hosting and cloud infrastructure, customer support software, and email communications platforms. All such providers are bound by written data processing agreements that restrict their use of your data to the specific service they provide.

7.2 Regulatory and Law Enforcement Authorities

Where required by applicable law, regulation, court order, or lawful request from a competent authority, boleh88 may disclose personal data to government bodies, financial intelligence units, law enforcement agencies, or other regulatory authorities. We will always assess such requests for legal validity before disclosing data.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of boleh88's business, personal data may be transferred to the relevant acquiring or surviving entity as part of that transaction. We will notify affected members of any such transfer and the terms on which their data will continue to be held.

Boleh88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you access the Platform. They serve several important functions:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred game categories, and display options, to personalise your experience on the Platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how members interact with the Platform — which pages are visited most, which games are played, and how navigation paths flow. This data helps us improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and repeated failed login attempts, protecting the integrity of the Platform and your account.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate securely.

Boleh88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Communications Data: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the communication, unless the record is relevant to an ongoing dispute or regulatory matter.
• Technical and Usage Data: Typically retained for up to thirteen (13) months in identifiable form, after which it may be aggregated and anonymised for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Subject to applicable data protection laws, you have the following rights in respect of your personal data held by boleh88:

• Right of Access: You have the right to request a copy of the personal data boleh88 holds about you, along with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Minor account details may be corrected directly within your account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that this right is subject to limitations where we are required to retain data for legal or regulatory purposes.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in specific circumstances, for example where you contest the accuracy of the data while we verify it.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, including the use of your data for direct marketing purposes. We will honour marketing opt-out requests promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected]. We will respond to verified requests within thirty (30) calendar days. In complex cases, we may extend this period by a further sixty (60) days and will notify you accordingly.

Boleh88 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive data, including financial information and KYC documents, at rest;
• Role-based access controls ensuring that boleh88 staff can only access personal data strictly necessary for their job function;
• Multi-factor authentication requirements for administrative access to Platform systems;
• Regular penetration testing and third-party security audits;
• Real-time intrusion detection and fraud monitoring systems;
• Staff training on data protection obligations and information security practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, boleh88 will notify the relevant supervisory authorities within the timeframe required by applicable law and will communicate the breach directly to affected members where required or appropriate.

Boleh88 is strictly an adult platform. The Platform is not directed at, and must not be used by, persons under the age of 21 years. We do not knowingly collect personal data from individuals under the age of 21.

Where boleh88 becomes aware that personal data has been collected from a person under the age of 21 — whether through self-disclosure, age verification checks, or third-party notification — we will immediately suspend the relevant account, delete all associated personal data, and void any transactions made by that account.

Boleh88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they meaningfully affect how we use your personal data or alter your rights — we will notify registered members via email or a prominent in-platform notice at least five (5) business days before the revised Policy takes effect.

Your continued use of the Platform following publication of a revised Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should cease using the Platform and request account closure in accordance with the procedure set out in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by boleh88, please contact our support team using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the boleh88 Platform, in English, Bahasa Melayu, and Mandarin. Average response time: 3–5 minutes.
• Email: [email protected] — please allow up to 24 hours for responses during peak periods. For data rights requests, please include "Data Rights Request" in the subject line to ensure prompt routing.

For queries specifically related to responsible gambling tools, self-exclusion, or deposit limits, please refer to our dedicated Responsible Gambling page.

For queries related to the Terms & Conditions governing your use of the Platform, please refer to our Terms & Conditions page.