Privacy Policy bola168 — Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") is published by bola168 ("we", "platform") and applies to all users who access or use the bola168 platform on bola168.click, the mobile application, and all related services we offer to players in Malaysia.

This bola168 Privacy Policy is drawn up in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection best practices. By using the bola168 platform, you consent to the collection and use of your information as described in this Privacy Policy.

We understand that your trust in bola168 depends greatly on how we handle your personal information. That is why we are committed to being transparent, honest, and accountable in all our data handling practices. If you have any questions about this Privacy Policy, please do not hesitate to contact us.

Bola168 only collects personal data that is strictly necessary to provide our services to you. Below are the categories of data we collect and the purposes for which they are used:

Bola168 does not collect sensitive data such as medical information, religious beliefs, or political views. We also never ask for your password via email or phone — if anyone contacts you on behalf of bola168 requesting your password, please report it to us immediately.

The personal data we collect is used solely for legitimate purposes directly related to providing bola168's services to you. The following are the primary purposes for which your data is used:

• Account Management & Verification: To register your account, verify your identity, process login requests, and manage your bola168 account profile.
• Financial Transaction Processing: To securely process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX in Malaysian Ringgit (MYR).
• Service Provision & Improvement: To ensure that slots, live baccarat, poker, jackpot games, and all other games run smoothly, and to improve the platform based on usage patterns.
• Fraud Prevention & Security: To detect and prevent suspicious activity, money laundering, multi-account usage, and any security threats to the bola168 platform.
• Service Communications: To send you important notifications about your account, transaction confirmations, security updates, and relevant promotional information (where you have consented to receive them).
• Legal Compliance: To comply with applicable Malaysian regulatory and legal requirements, including PDPA 2010 and AML (Anti-Money Laundering) obligations.
• Customer Support: To help you resolve any issues, complaints, or enquiries you raise with the bola168 support team via Live Chat, WhatsApp, or email.

Bola168 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we may need to share certain information with trusted external parties:

• Payment Service Providers: To process your deposit and withdrawal transactions, we share the necessary transaction information with our eWallet and banking partners such as Touch 'n Go, GrabPay, DuitNow, and FPX banks. All such providers are bound by strict confidentiality agreements.
• Game Providers: To provide games such as slots, live baccarat, and poker, certain game session information is shared with our licensed game software providers. They do not receive your full identity information.
• Legal Authorities: We may be required to disclose your information to Malaysian authorities such as the police, courts, or regulatory bodies when mandated by law or a valid court order.
• Technical Services: Cloud, cybersecurity, and analytics service providers that assist us in operating the bola168 platform may access limited data for technical purposes only. They are bound by strict data protection agreements.

Bola168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit bola168.click.

Types of Cookies We Use:

• Essential Cookies (Required): These cookies are essential for the core functions of the bola168 platform, including login sessions, account security, and transaction processing. Without them, the platform cannot function properly and they cannot be disabled.
• Preference Cookies: Saves your preferences such as language, display theme, and game settings so you do not have to reconfigure them every time you log in to bola168.
• Analytics Cookies: Helps us understand how players use the bola168 platform — which pages are most visited, how long gaming sessions last, and more. This data is used to improve the overall user experience.
• Security Cookies: Used to detect suspicious login attempts, identify recognised devices, and protect your account from unauthorised access.

You may manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the bola168 platform and your gaming experience.

Bola168 continually invests in the latest security infrastructure to ensure your personal and financial data remains protected at all times. The following are the key security layers we have in place:

• 256-bit SSL Encryption: All communications between your device and bola168's servers are encrypted using the latest TLS/SSL protocols, ensuring that your data cannot be intercepted in transit.
• Two-Factor Authentication (2FA): bola168 supports two-factor authentication for an added layer of security on your account. We strongly encourage all players to enable this feature.
• 24/7 Monitoring: Our systems are continuously monitored to detect any suspicious activity, intrusion attempts, or security anomalies that could compromise user data.
• Internal Access Controls: Only specifically authorised bola168 staff may access user data, and only to the extent necessary to perform their duties. All access is logged and audited on a regular basis.
• Regular Penetration Testing: bola168 conducts regular security testing and vulnerability audits to identify and address any weaknesses before they can be exploited.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the bola168 Privacy Policy, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving your request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or outdated, you have the right to request a correction promptly. You may also update certain information directly through your bola168 account settings.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data from our systems. Please note that we may need to retain certain data for legal compliance or dispute resolution purposes.
• Right to Withdraw Consent: You may withdraw your consent for certain data processing at any time, including opting out of receiving marketing communications.
• Right to Object to Processing: You may object to the processing of your personal data for direct marketing purposes or in situations where processing is based on our legitimate interests.
• Right to Lodge a Complaint: If you believe that bola168 has violated this Privacy Policy or the PDPA, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the rights above, please contact us at support@bola168.click clearly stating your request. We will process all requests within the timeframe required by law.

Bola168 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under Malaysian law.

• Active Account Data: For as long as your bola168 account remains active, your personal data will be retained to enable us to provide our services to you.
• Upon Account Closure: After your account is closed, we will retain certain data for minimum 7 years for legal compliance purposes, dispute resolution, and financial audit requirements.
• Financial Transaction Records: All transaction records in MYR are retained for a minimum of 7 years in accordance with Malaysian financial legislation.
• Security Log Data: Access and security logs are retained for 12 months for the purpose of security incident investigation where required.

Once the retention period has expired or the data is no longer required, bola168 will destroy or anonymise the relevant data using secure, irreversible methods.

The bola168 platform is strictly for individuals aged 18 years of age and above only. We do not knowingly collect or process personal data from children or individuals under the age of 18.

Should we discover that personal data has been collected from anyone under the age of 18 without proper age verification, we will take immediate steps to:

• Immediately closing the account in question.
• To delete all related personal data from our systems.
• To refund any outstanding balance through an appropriate method.
• To take further action where required under applicable laws.

If you are a parent or guardian and discover that your underage child has registered an account on bola168, please contact us immediately at support@bola168.click so that we can take the appropriate action.

Bola168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or service improvements. Each new version will be published on this page with a clearly stated effective date.

For amendments considered material or significant, we will notify you through:

• In-platform notification on bola168 when you log in.
• Email to the address registered on your account.
• A clear notice on the bola168.click homepage.

Your continued use of the bola168 platform after any changes are posted constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amendments, you may contact us to close your account.

If you have any questions, concerns, or complaints regarding the bola168 Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Email: support@bola168.click
• Live Chat: Available 24/7 via the bola168 platform in Bahasa Malaysia
• WhatsApp: Via the WhatsApp button within the bola168 platform

We aim to respond to all privacy-related enquiries within 7 working days. For more complex matters such as data access or deletion requests, the full response period is up to 21 business days in accordance with PDPA requirements.

You may also refer to Terms & Conditions us for more information about your rights and responsibilities as a bola168 player, or contact Responsible Gaming us for betting control assistance.