boleh88 Privacy Policy

boleh88 ("boleh88", "we", "us", "our") operates the online gaming platform accessible at boleh88.club (the "Platform"). This Privacy Policy applies to all personal data processed by boleh88 in connection with your access to and use of the Platform, including account registration, financial transactions, gaming activity, customer support interactions, and any marketing communications you receive from boleh88.

boleh88 is the data controller responsible for your personal data processed under this Policy. We are committed to handling your personal information with transparency, integrity, and care — consistent with our obligations under applicable data protection legislation and our international gaming licence requirements.

By using the boleh88 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please cease using the Platform and contact boleh88 support to request account closure.

boleh88 collects the following categories of personal data from Players and Platform users:

boleh88 collects personal data through the following means:

• Direct submission: Data you provide when registering a boleh88 account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection: Data collected automatically as you use the Platform, including IP address, device identifiers, session data, and cookies. See Section 9 (Cookies) for further detail.
• Third-party sources: Data received from identity verification providers, payment processors (such as Touch n Go eWallet, Boost, Maybank, and CIMB), fraud detection services, and publicly available sources — used for KYC, anti-money-laundering (AML) checks, and fraud prevention.
• Responsible gaming assessments: Data generated through boleh88's player protection monitoring, including self-reported information about gaming behaviour and any self-exclusion or deposit limit requests you make.

boleh88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to operate your boleh88 account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering laws, KYC regulations, gaming licence conditions, and applicable data retention requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming analytics — where boleh88's interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications, where you have opted in. You may withdraw consent at any time via your account notification settings or by contacting support.

boleh88 uses your personal data for the following purposes:

• Creating and maintaining your boleh88 account, including identity verification and age confirmation (21+ requirement).
• Processing deposits and withdrawals via your chosen payment method (Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and others).
• Providing customer support via live chat and email, including resolving account disputes and technical issues.
• Administering bonuses, promotions, and loyalty rewards in accordance with applicable bonus terms.
• Detecting and preventing fraud, money laundering, and other prohibited activities.
• Conducting responsible gaming monitoring and, where necessary, implementing player protection measures.
• Improving the boleh88 Platform through analysis of aggregated usage patterns and technical performance data.
• Sending marketing communications, where you have provided consent, including information about new games, promotions, and platform updates.
• Complying with boleh88's gaming licence conditions, legal obligations, and regulatory reporting requirements.

boleh88 does not sell your personal data to third parties. boleh88 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: To facilitate deposits and withdrawals. Each payment processor is subject to its own privacy policy and applicable financial data protection obligations.
• Identity verification and KYC providers: To verify your identity and age as required by boleh88's gaming licence.
• Fraud and AML screening services: To screen transactions and account activity against relevant watchlists and fraud databases.
• Game software providers: Certain game providers may receive limited technical data necessary to deliver their games within the boleh88 Platform.
• Regulatory and law enforcement authorities: Where boleh88 is legally required to disclose data, including under AML reporting obligations or pursuant to a lawful order.
• boleh88 group companies: Where boleh88 operates within a corporate group, data may be shared with group entities for internal administrative, compliance, or technical support purposes.

All third-party recipients with whom boleh88 shares personal data are required to maintain appropriate technical and organisational safeguards for that data.

boleh88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, as required by anti-money-laundering regulations applicable to boleh88's gaming licence.
• Transaction records: Retained for a minimum of five (5) years following each transaction.
• Customer support records: Retained for up to three (3) years following the resolution of the relevant support interaction.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever occurs first.

Where boleh88 is legally permitted to do so, data will be deleted or anonymised once the applicable retention period has expired.

boleh88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and boleh88's servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Two-factor authentication requirements for boleh88 administrative system access.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Incident response procedures including notification protocols in the event of a data breach.

Notwithstanding these measures, no data transmission over the internet can be guaranteed to be 100% secure. boleh88 recommends that all Players enable two-factor authentication on their boleh88 accounts as an additional layer of protection.

boleh88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — including session management, boleh88 login authentication tokens, and security cookies. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on the Platform.
• Analytics cookies: Collect aggregated, anonymised data about how Players use the Platform to help boleh88 improve its features and performance.
• Marketing cookies: Used to deliver relevant promotional information about boleh88 products and services, only where you have provided consent.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core boleh88 Platform, though some personalisation features may be affected.

Subject to applicable data protection law and boleh88's legal retention obligations, you have the following rights in respect of your personal data held by boleh88:

• Right of access: Request a copy of the personal data boleh88 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where boleh88 has no legal basis or legitimate need to retain it. Note that boleh88 is required by law to retain certain records for a minimum period regardless of erasure requests.
• Right to restrict processing: Request that boleh88 limits how it processes your data in certain circumstances.
• Right to data portability: Request a machine-readable copy of your personal data to transfer to another service provider.
• Right to object: Object to boleh88 processing your data for direct marketing purposes or on the basis of legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact boleh88's Data Protection Officer (DPO) at the details provided in Section 13. boleh88 will respond to verified requests within 30 calendar days.

The boleh88 Platform is strictly for adults aged 21 and above. boleh88 does not knowingly collect personal data from persons under the age of 21. If boleh88 becomes aware that personal data has been collected from a minor, that account will be immediately closed and all associated data deleted or anonymised in accordance with applicable law.

If you believe a minor has created a boleh88 account or provided personal data to boleh88, please contact support immediately at the details in Section 13.

boleh88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, boleh88 will notify you via the Platform or by email to your registered address before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the boleh88 Platform after the effective date of any change constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your account.

For any queries, concerns, or requests related to this Privacy Policy or boleh88's handling of your personal data, please contact the boleh88 Data Protection Officer:

• Live Chat: Available 24/7 on the boleh88 Platform — fastest response channel.
• Email (DPO): [email protected] — mark the subject line "Privacy / Data Request" for routing to the DPO team.

boleh88 aims to respond to all privacy-related enquiries within five (5) business days and to resolve data subject rights requests within thirty (30) calendar days of identity verification.