boleh888 Privacy Policy

This Privacy Policy ("Policy") describes how boleh888 ("the Platform", "we", "us", "our") collects, uses, discloses, retains, and protects personal data provided by or collected about individuals ("Member", "Player", "User", "you") who access or use the boleh888 website and associated services at boleh888.win.

By registering an account with boleh888 or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the boleh888 Terms & Conditions. If you do not consent to the terms of this Policy, you must not use the boleh888 platform.

boleh888 is committed to handling your personal data responsibly and in accordance with internationally recognised data protection principles, including those reflected in applicable data protection legislation relevant to our licensing jurisdiction and the jurisdictions of the players we serve.

1. Data Controller Information

boleh888 is the data controller in respect of personal data processed pursuant to this Policy. boleh888 determines the purposes for which and the means by which personal data is processed in connection with the operation of the boleh888 gaming platform. For data protection enquiries, please contact our support team at [email protected].

2. Categories of Personal Data Collected

boleh888 may collect and process the following categories of personal data about you:

boleh888 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly necessary for responsible gaming obligations (e.g., self-exclusion records) or where required by applicable law.

3. How We Collect Your Personal Data

boleh888 collects personal data through the following means:

• Directly from you — when you complete the boleh888 registration form, submit KYC verification documents, make a deposit or withdrawal request, contact our support team, or update your account settings.
• Automatically — when you access and use the boleh888 platform, our servers and analytics systems automatically log technical data including your IP address, device characteristics, browser information, pages visited, and in-session gaming activity.
• From third parties — including identity verification and KYC service providers, payment processors (such as FPX, DuitNow, and e-wallet operators), fraud prevention services, and where applicable, publicly available sources used for sanctions and PEP (politically exposed person) screening.
• Through cookies — as described in Section 8 of this Policy.

4. Purposes and Legal Basis for Processing

boleh888 processes your personal data for the following purposes and on the following legal bases:

• Account registration and management — necessary for the performance of the contract between you and boleh888. Without this data, boleh888 cannot provide you with access to the platform.
• Identity verification and KYC compliance — necessary for compliance with boleh888's legal obligations under its gaming licence, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• Payment processing — necessary for the performance of the contract, to process deposits and withdrawals in MYR via your chosen Malaysian payment method.
• Fraud prevention and security — necessary for the legitimate interests of boleh888 in preventing fraudulent activity, protecting the security of the platform, and detecting and investigating prohibited conduct.
• Responsible gaming monitoring — necessary for compliance with boleh888's licensing obligations, which require the platform to monitor for indicators of problem gambling and to enforce self-exclusion and other player protection measures.
• Customer support — necessary for the performance of the contract and boleh888's legitimate interest in providing responsive support to its Members.
• Platform analytics and improvement — based on boleh888's legitimate interest in understanding how the platform is used and improving the user experience for Malaysian players.
• Marketing communications — based on your consent, where you have opted in to receive promotional communications from boleh888. You may withdraw consent at any time.
• Legal compliance — to comply with applicable laws, regulations, court orders, and requests from competent regulatory authorities.

5. Disclosure of Personal Data to Third Parties

boleh888 does not sell your personal data to third parties. boleh888 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment service providers — including Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX operators — to process your deposit and withdrawal transactions.
• KYC and identity verification providers — to verify your identity and age and to conduct AML and sanctions screening as required by boleh888's licensing obligations.
• Game content providers — including Pragmatic Play, PG Soft, Evolution Gaming, and other licensed studios — to the extent necessary to facilitate game session delivery and resolve disputes. These providers are independently licensed and operate under their own data protection obligations.
• IT and infrastructure service providers — including cloud hosting and content delivery providers — who process data strictly on boleh888's instructions to maintain platform operations.
• Regulatory and law enforcement authorities — where boleh888 is required to disclose data by applicable law, court order, or the direction of a competent regulatory body.
• Fraud and security services — to detect, prevent, and investigate fraudulent transactions or prohibited conduct on the boleh888 platform.

6. International Data Transfers

boleh888 operates globally and your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, boleh888 ensures that appropriate safeguards are in place — including contractual protections equivalent to recognised data transfer standards — to ensure your data receives an adequate level of protection consistent with this Policy.

7. Data Retention

boleh888 retains your personal data for as long as your account remains active and for such additional periods as are required to comply with boleh888's legal and regulatory obligations. In particular:

• Account and transaction data is retained for a minimum of five (5) years following account closure to comply with AML record-keeping requirements.
• KYC documentation is retained for a minimum of five (5) years following the end of the business relationship.
• Communications records (live chat transcripts, support emails) are retained for three (3) years.
• Responsible gaming records, including self-exclusion records, are retained indefinitely to enable boleh888 to enforce self-exclusion obligations even if a new account is registered under the same identity.
• Technical and analytics data is retained in aggregated or anonymised form and may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, boleh888 will securely delete or anonymise your personal data unless retention is required by a specific legal obligation.

8. Cookies and Tracking Technologies

boleh888 uses cookies and similar tracking technologies on the boleh888.win website. Cookies are small data files stored on your device that help boleh888 deliver a functional and personalised experience. The categories of cookies used by boleh888 include:

• Strictly necessary cookies — required for the platform to function, including session authentication, secure login state, and fraud prevention. These cannot be disabled without impacting platform functionality.
• Analytics cookies — used to understand how players navigate and interact with boleh888, enabling improvements to platform performance and usability.
• Preference cookies — used to remember your settings and preferences across sessions, such as your preferred language or display settings.

You may control cookie settings through your browser settings. Disabling certain categories of cookies may affect the functionality of the boleh888 platform. boleh888 does not use third-party advertising cookies to serve targeted advertising to players.

9. Security of Personal Data

boleh888 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and boleh888 servers.
• Secure credential storage using industry-standard cryptographic hashing algorithms — boleh888 does not store your password in plaintext.
• Two-factor authentication (2FA) available for all Member accounts.
• Access controls restricting boleh888 staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of the platform.
• Incident response procedures to detect, contain, and remediate data security incidents in a timely manner.

While boleh888 takes data security seriously, no system is entirely immune to security risks. You are responsible for maintaining the security of your own account credentials and for notifying boleh888 promptly of any suspected unauthorised access.

10. Your Data Subject Rights

Subject to applicable law and boleh888's legal obligations, you have the following rights in respect of your personal data held by boleh888:

• Right of access — you may request a copy of the personal data boleh888 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data in circumstances where retention is no longer necessary and no overriding legal obligation requires continued retention.
• Right to restrict processing — you may request that boleh888 restrict the processing of your personal data in certain circumstances.
• Right to data portability — where processing is based on your consent or the performance of a contract, you may request your personal data in a structured, commonly used format.
• Right to object — you may object to processing based on boleh888's legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact boleh888 support at [email protected]. boleh888 will respond to data subject requests within 30 days, subject to identity verification. Please note that certain rights are subject to exemptions and boleh888 may decline requests where retention is required by law, including AML record-keeping obligations.

11. Children and Minors

The boleh888 platform is strictly for individuals aged 21 years and above. boleh888 does not knowingly collect or process personal data relating to individuals under the age of 21. If boleh888 becomes aware that personal data has been collected from an individual under 21, it will take immediate steps to delete that data and close the associated account. Deposits will be returned to the source payment method.

If you believe that an individual under 21 has registered an account with boleh888, please contact our support team immediately at [email protected].

12. Marketing Communications

boleh888 may send you promotional communications — including information about bonuses, new games, and seasonal promotions — by SMS or email where you have opted in to receive such communications during registration or through your account communication preferences. boleh888 may run personalised Deepavali, Chinese New Year, Hari Raya, and other seasonal campaigns that are relevant to Malaysian players.

You may opt out of marketing communications at any time by updating your communication preferences in your boleh888 account settings or by contacting support. Opting out of marketing communications will not affect transactional communications necessary for the operation of your account, such as withdrawal confirmations, OTP messages, and security alerts.

13. Changes to This Policy

boleh888 reserves the right to amend this Privacy Policy at any time. The revised Policy will be published at boleh888.win/privacy-policy with an updated "Last Updated" date. Where changes are material, boleh888 will use reasonable efforts to notify registered Members via their registered email or mobile number. Continued use of the boleh888 platform following publication of a revised Policy constitutes your acceptance of the updated terms.

14. Contact and Complaints

For all privacy-related enquiries, data subject rights requests, or complaints, please contact boleh888 via live chat (available 24/7 from your account dashboard) or in writing at [email protected]. Please include your registered username and a clear description of your request to enable prompt handling.

If you are dissatisfied with boleh888's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.