Bola168 Privacy Policy – Malaysian Player Personal Data Protection Guaranteed

Introduction & Scope of This Privacy Policy

Bola168 is an online Sports Betting and casino platform serving Malaysian players. We understand that privacy is more than just words in a legal document – it is a fundamental right of every user that must be respected and protected.

This Privacy Policy applies to all users of the bola168 platform, including website visitors, registered members, and any individual who interacts with our services — whether through the website, mobile app, live chat, email, or any other communication channel provided by bola168.

As a platform serving Malaysians, bola168 fully complies with the requirements of the Personal Data Protection Act 2010 (PDPA) enforced in Malaysia. The PDPA establishes the fundamental principles governing how the personal data of Malaysians must be handled by business entities, and bola168 takes this responsibility very seriously.

Types of Personal Data We Collect

Bola168 collects your personal information through several means — including when you register an account, when you make transactions, and through your general use of the platform. The following are the categories of data we collect:

2.1 Account Registration Information

• Full name as it appears on your MyKad or Malaysian passport
• MyKad or passport number for identity verification (KYC) purposes
• Date of birth to verify that you meet the minimum age requirement of 18 years old
• Email address that is active for account communications
• Phone number Malaysian mobile number for verification and security purposes
• Residential address latest in Malaysia

2.2 Financial Transaction Information

2.3 Technical & Usage Data

• IP address of the device used to access bola168
• Web browser type and version, as well as operating system
• Mobile device information (model, operating system) when using the app
• Session log data including login time, in-platform activity, and logout time
• Approximate location data based on IP address (country/state) for security purposes
• Cookie and session tracking information (detailed in Section 06)

How We Use Your Personal Data

Bola168 uses your personal data only for legitimate purposes directly related to the operation of our platform. We do not use your data for any other purpose without obtaining your consent first.

• Identity Verification (KYC): To verify that you are a legitimate individual and meet the minimum age requirement as mandated by gambling regulations and PDPA 2010.
• Account Management: To create, manage, and maintain your bola168 account, including processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks.
• Customer Support: To help you resolve issues, answer enquiries, and provide technical assistance via live chat, WhatsApp, and email.
• Platform Security: To detect and prevent fraud, money laundering, multi-account abuse, and other security threats that could compromise the integrity of the bola168 platform.
• Legal Compliance: To fulfil legal obligations under PDPA 2010, the Companies Act, and financial compliance requirements enforced in Malaysia.
• Service Communications: To send important account notifications, bola168 promotions you have opted in to receive, and policy updates that affect your service.
• Platform Improvements: To analyse aggregated (non-individual) usage patterns for the purpose of improving the bola168 user experience.

Data Sharing with Third Parties

Bola168 does not sell, rent, or transfer your personal data to third parties for marketing or commercial gain. However, in the course of operating our platform, we may need to share your data with certain parties under limited and strictly controlled circumstances, as outlined below:

• Payment Processing Providers: Transaction information must be shared with payment processors, including eWallet gateway providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (for DuitNow and FPX), solely for the purpose of processing your financial transactions.
• Identity Verification Providers: During the KYC process, identity information may be verified through approved third-party verification platforms subject to strict confidentiality agreements.
• Malaysian Authorities: bola168 is required to disclose information requested by authorised Malaysian authorities, including the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or courts of competent jurisdiction, where mandated by law or court order.
• Technical Service Providers: Third parties providing technical services to bola168 (such as server hosting and cybersecurity) may need to access data within the limited scope of their duties, and are bound by strict confidentiality agreements.

Bola168 Data Security Measures

The security of your personal data is bola168's highest priority. We invest continuously in our security infrastructure to ensure your data is protected against unauthorised access, loss, or misuse.

• 256-bit SSL Encryption: All communications between your browser and bola168's servers are encrypted using 256-bit TLS/SSL protocol — the same security standard adopted by major Malaysian banking institutions.
• Secure Data Storage: Personal data is stored on servers protected by multi-layered firewalls, intrusion detection systems (IDS), and strict access controls. Only authorised personnel are permitted to access user data.
• Two-Factor Authentication (2FA): bola168 offers two-factor authentication for an added layer of protection on your account. We encourage all members to enable this feature.
• 24/7 Monitoring: bola168's security systems are monitored around the clock to detect any suspicious activity or unauthorised access attempts.
• Regular Security Audits: bola168 undergoes regular security audits conducted by independent third parties to ensure our security standards remain current and effective.

While bola168 takes every reasonable measure to protect your data, it is important to note that no security system can be guaranteed to be 100% secure. You also play a key role in keeping your account safe by using a strong password and never sharing your login credentials with anyone.

Cookie Policy

The bola168 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit the bola168 website.

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect certain features of the bola168 platform. For guidance on managing cookies in your browser, refer to your browser's official documentation.

Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data held by bola168. bola168 respects and facilitates the exercise of these rights.

Data Retention & Deletion Policy

Bola168 retains your personal data for as long as your account is active, or for as long as necessary to fulfil the purposes outlined in this policy. Retention periods are also determined by applicable legal obligations in Malaysia.

• Active Account Data: Retained for as long as your bola168 account is active. Upon account closure, data will be reduced to the minimum records required for legal purposes.
• Financial Records: Retained for 7 years after the date of the last transaction, in accordance with Malaysian tax and financial regulatory requirements.
• Security Logs: Retained for 2 years for fraud detection purposes and to support investigations where required.
• Support Communications: Customer support conversation records are retained for 1 year for training and service improvement purposes.
• After Account Closure: bola168 will delete or encrypt all personal data that is no longer required within 90 days after an account closure request has been processed, subject to legal retention obligations.

Child Protection & Age Restrictions

Bola168 strictly prohibits the use of its platform by individuals under the age of 18. We do not knowingly collect or process personal data from minors.

Should bola168 discover that we have collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered a bola168 account without authorisation are welcome to contact us at privacy@bola168.bio for immediate action.

Changes to This Privacy Policy

Bola168 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or changes to the services we offer.

In the event of any material changes to how we handle your personal data, bola168 will notify you via your registered email or through a prominent notice on the platform. Your continued use of the bola168 platform after any changes are published will be deemed as acceptance of the revised terms.

The date of the most recent update is always displayed at the top of this document. We encourage you to review this Privacy Policy periodically.

Contact bola168's Privacy Officer

If you have any questions, concerns, or complaints regarding how bola168 handles your personal data, or if you wish to exercise any of your rights under PDPA 2010, please contact our Privacy Officer through the following channels:

Last Updated: 1 July 2026  |  Version: 3.1