Boleh888 Privacy Policy – Member Personal Data Protection

1Introduction

Boleh888 values the privacy of every individual who interacts with our platform. This Privacy Policy is crafted to give you full clarity on how your personal data is handled – not merely to meet legal requirements, but because we believe transparency is the foundation of trust.

We understand that you entrust your personal information to us when you register as a member. We do not take that trust lightly. Every data-related decision is made with the best interests and security of our members in mind.

This policy applies to all services operated under the boleh888.vin domain, including the main website, mobile apps for Android and iOS, and all our official communication channels including live chat and support email.

2Personal Data We Collect

Boleh888 only collects data that is strictly necessary to provide you with a safe, seamless, and personalised service. We do not collect data excessively or without a clear purpose.

3How We Use Your Data

Collected personal data is used responsibly for the following purposes only:

• Account Management – creating, verifying, and securely maintaining your account.
• Transaction Processing – verifying and processing your deposits and fund withdrawals.
• Identity Verification (KYC) – verifying your identity to prevent fraud and money laundering.
• Customer Support – helping to resolve any issues or enquiries you submit.
• Platform Security – detecting and preventing fraudulent activity, misuse, or security threats.
• Responsible Gaming – monitoring gameplay patterns to identify members who may need assistance.
• Service Communications – sending important notifications related to your account, promotions, and platform updates.
• Legal Compliance – fulfilling reporting obligations to the relevant authorities when required.
• Platform Improvements – analysing aggregated usage patterns to improve the user experience.

We will not use your data for any purpose beyond those listed above without first obtaining your explicit consent.

4Legal Basis for Data Processing

Boleh888 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010. Depending on the context, these grounds include:

• Contract – processing necessary to fulfil the platform usage agreement between you and boleh888.
• Consent – for marketing communications and preference-based purposes that you have explicitly consented to.
• Legal Obligation – compliance with KYC requirements, anti-money laundering (AML) obligations, and legally mandated reporting.
• Legitimate Interest – for platform security, fraud prevention, and service improvement purposes.

5Data Sharing with Third Parties

Boleh888 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, under limited and controlled circumstances, we may share data with:

All third parties we work with are bound by strict data protection agreements and are not permitted to use your data for any purpose other than those specified.

6Data Retention Period

Boleh888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations. The following are our data retention guidelines:

• Active account data – retained for the duration your account is active and for 5 years after account closure.
• Financial transaction records – retained for 7 years in accordance with Malaysia's legal requirements.
• KYC documents – retained for 5 years after the business relationship ends.
• Support communication logs – retained for 2 years for reference and service quality purposes.
• Technical data and server logs – retained for 12 months before being automatically deleted.

When the retention period expires or data is no longer required, it will be securely deleted or anonymised in accordance with our data management procedures.

7Data Security Measures

Protecting your data from unauthorised access, breaches, or misuse is boleh888's absolute priority. We implement multiple comprehensive layers of security:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• At-rest encryption for all stored sensitive information
• Two-factor authentication (2FA) available for all member accounts
• Role-based access control – staff may only access data relevant to their responsibilities
• 24/7 security monitoring by our cybersecurity team
• Regular penetration testing by independent security firms
• A clear incident response procedure to address any security breaches
• Mandatory data protection training for all boleh888 staff

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by boleh888:

To exercise any of the above rights, please contact our data protection team via live chat or support email. We will verify your identity before processing any request to ensure the security of your data.

9Cookies & Tracking Technologies

Boleh888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies – required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
• Functional Cookies – saving your preferences such as language, display settings, and saved login data for your convenience.
• Analytics Cookies – collecting anonymous information about how you use the platform to help us improve our services.
• Security Cookies – helping to identify and prevent fraudulent activity and protect your account.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. Continued use of the platform is considered consent to our use of cookies.

10Children's Privacy

The boleh888 platform is exclusively for individuals who are of age 18 years and above. We do not intentionally collect, store or process personal data from minors.

If we discover that a minor's personal data has been collected inadvertently, we will take immediate steps to delete that information and close the relevant account. Parents or guardians with concerns about their child's use of the platform are encouraged to contact us promptly.

11Cross-Border Data Transfers

In some cases, your personal data may be transferred to and stored on servers located outside Malaysia, specifically for payment processing and the provision of gaming services by international providers.

Every cross-border data transfer we undertake is subject to adequate safeguards, including:

• Data processing agreements compliant with international data protection standards
• Vendor security assessments before any data sharing is approved
• Use of data transfer mechanisms approved under applicable law

12Changes to This Privacy Policy

Boleh888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements.

When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the platform's home page for 30 days
• Sending email notifications to all registered members for significant changes

Continued use of the platform after changes take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

13How to Contact Us

If you have any questions, concerns or wish to exercise your data protection rights, please contact the boleh888 Data Protection Officer (DPO) through the following channels:

We are committed to addressing every privacy-related inquiry with seriousness and transparency. Your satisfaction and trust are our top priorities.