Boleh88 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

This Privacy Policy is issued by Boleh88 ("We", "Platform", or "Boleh88") and applies to all individuals who use the boleh88.click platform, whether as visitors, registered members, or active users of our services. This document transparently explains how Boleh88 collects, processes, stores, and protects your personal data.

By registering a Boleh88 account or continuing to use our platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any provision herein, please stop using the platform and contact us to close your account and delete your data.

This Privacy Policy forms part of Boleh88's Terms & Conditions and should be read alongside that document. Any conflict between these documents will be resolved in favour of the interpretation that best protects the privacy of our members.

Boleh88 collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the types of data we may collect:

Data You Provide Directly:

• Full name as stated on your Malaysian identity card (MyKad) or passport.
• An active email address used for communications.
• An active Malaysian mobile phone number.
• Date of birth for age verification purposes (18 years and above).
• Payment method details, including your Touch 'n Go e-wallet account number, GrabPay, DuitNow, or bank account details required for withdrawals.
• A copy of your identity verification document (MyKad or passport) when required for the KYC process.

Automatically Collected Data:

• The IP address of your device when accessing the Boleh88 platform.
• Device type, phone model, operating system, and web browser version in use.
• Access log records including the date, time, and pages visited within the Boleh88 platform.
• Cookie data and related tracking technologies to enhance the user experience.
• Gaming activity records include bets placed, winnings, and losses, retained for account operations and audit purposes.
• Complete financial transaction records covering all deposits and withdrawals.

Personal data collected by Boleh88 is used solely for the purposes outlined below and will not be used for any other purpose without your explicit consent:

• Account Operations: Creating, managing, and maintaining your Boleh88 account, including registration processing, identity verification, and password management.
• Transaction Processing: Processes all deposits made via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX services such as Maybank2u and CIMB Clicks, as well as all withdrawal requests to your account.
• KYC Verification: Meeting Know Your Customer (KYC) requirements to prevent money laundering and ensure our platform is not misused.
• Customer Service: Enables the Boleh88 support team to assist you with enquiries, complaints, and account-related requests in Bahasa Melayu, Mandarin, and English.
• Platform Security: To detect and prevent fraudulent activity, multi-account usage, and conduct that violates Boleh88's Terms & Conditions.
• Service Communications: To send important account notifications such as deposit confirmations, withdrawal approvals, VIP tier upgrades, and changes to terms.
• Platform Improvements: Analysing aggregated, anonymised usage data to understand user behaviour and improve the overall platform experience.
• Legal Compliance: To fulfil applicable legal and regulatory obligations when required by competent authorities.

Boleh88 takes a highly restricted approach to sharing member data with external parties. As a principle, we do not share your personal data except in the circumstances outlined below:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with authorised payment service providers, including Touch 'n Go, GrabPay, DuitNow, and FPX-linked banking institutions. Such sharing is kept to the minimum necessary and is solely for transaction verification purposes.
• Technology Service Providers: Technical infrastructure partners such as cloud server providers and cybersecurity services may have limited access to data for technical operational purposes only. All such partners are bound by strict confidentiality agreements.
• Game Providers: For Live Casino games, the minimum data required for game session authentication may be shared with internationally licensed game providers such as Evolution Gaming and Pragmatic Play.
• Legal Authorities: Boleh88 will disclose personal data to government authorities or law enforcement agencies when required by a court order, warrant, or other valid legal obligation.

In all data sharing situations described above, Boleh88 ensures that only the minimum necessary data is shared, all partners are bound by confidentiality obligations, and data sharing is carried out with appropriate security safeguards in place.

Boleh88 continually invests in security infrastructure to ensure your personal data is always protected against unauthorised access, loss, or misuse. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and Boleh88's servers is encrypted using 256-bit TLS/SSL protocols, ensuring the data remains unreadable even if intercepted in transit.
• Encrypted Data Storage: Sensitive data stored in Boleh88's databases — including passwords and financial information — is encrypted using strong hashing algorithms.
• Internal Access Controls: Only Boleh88 staff with a legitimate operational need are permitted to access member data. All access is logged and monitored.
• Regular Security Audits: The Boleh88 platform undergoes regular security assessments by independent third parties to identify and address any system vulnerabilities.
• 24/7 Threat Monitoring: An automated monitoring system operates around the clock to detect any suspicious activity or attempted data breaches.
• Two-Factor Authentication: Boleh88 offers two-factor authentication (2FA) for members who wish to add an extra layer of security to their account.

While Boleh88 takes all reasonable steps to protect your data, no digital system is 100% immune to breaches. Should a security incident affecting your personal data occur, we will notify you promptly and take the appropriate remediation steps.

As a Boleh88 member, you have the following rights regarding your personal data, which may be exercised at any time by contacting us at support@boleh88.click:

• Access Rights: You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 14 business days.
• Right to Rectification: If any information in our records is inaccurate or out of date, you have the right to request a correction promptly.
• Right to Erasure: Under certain circumstances, you have the right to request that your personal data be deleted from Boleh88's systems. This is subject to data retention requirements for legal compliance and legitimate operational needs.
• Right to Restrict Processing: You may ask us to restrict how we use your data in certain circumstances, such as when there is a dispute regarding the accuracy of that data.
• Data Portability Rights: You have the right to receive your personal data in a machine-readable format for transfer to another platform where applicable.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

The Boleh88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

• Essential Cookies: Cookies required for core Boleh88 platform functions such as login sessions and account security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Cookies that save your preferences — such as interface language, display theme, and other personal settings — so your setup carries over to future sessions.
• Analytics Cookies: Cookies that help us understand how members use the platform — which pages are visited most often, how long gaming sessions last, and where users encounter difficulties. This data is used in aggregate form and does not identify any specific individual.
• Security Cookies: Cookies used to detect and prevent fraudulent activity and to maintain the security of user sessions.

You can manage cookie settings through your web browser. Disabling certain cookies may affect your experience on the Boleh88 platform but will not block access entirely. Please refer to your browser's documentation for guidance on managing cookies.

Boleh88 retains your personal data for as long as your account remains active, and for the period required following account closure to meet legal obligations, dispute resolution needs, and legitimate operational requirements.

General guidelines on data retention periods at Boleh88:

• Financial Transaction Records: Retained for a minimum of 7 years following each transaction, in compliance with applicable financial and audit regulatory requirements.
• Registration Data & KYC: Retained for the lifetime of the active account and for up to 5 years following account closure.
• Gaming Activity Records: Retained for 2 years to support dispute resolution and game fairness auditing.
• Support Communication Logs: Retained for 2 years for reference and customer service improvement.
• Cookie & Analytics Data: Purged and reset periodically in line with operational requirements.

When data is no longer needed and there is no legal obligation to retain it, Boleh88 will securely delete or anonymise that data using industry-recognised deletion procedures.

Boleh88 strictly prohibits individuals under the age of 18 from registering or using our platform. This is not merely a policy — it is a moral and legal obligation we uphold with absolute seriousness.

Steps we take to ensure our platform remains free from underage users:

• Date of birth verification during the new account registration process.
• A KYC process requiring official identity documents (MyKad or passport) for age verification before a first withdrawal is processed.
• Ongoing monitoring to detect any account activity that may indicate the account is held by a minor.
• Immediate account termination and data deletion if the account is found to belong to an individual under 18 years of age.

If you become aware that an individual under the age of 18 has registered a Boleh88 account, please notify us immediately at support@boleh88.click. We will act swiftly to close the account and delete all associated data.

Boleh88 reserves the right to update or amend this Privacy Policy from time to time in line with changes in industry practices, legal requirements, or improvements to our services. Members will be notified of any material changes via in-platform notifications or email before the changes take effect.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this document will reflect when changes were last made. Continued use of the Boleh88 platform following any amendments constitutes your acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Boleh88, please reach us through the following channels:

• Privacy Email: support@boleh88.click (use the subject line "Privacy Policy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week within your Boleh88 account
• Support Language: Malay, Mandarin, and English

Our team is committed to responding to all privacy-related enquiries within 2 business days. More complex data deletion or transfer requests may take up to 14 business days to be fully processed.