Privacy Policy Boleh888 —
Your Information Security Is Our Priority

1. Introduction

This Privacy Policy explains how Boleh888 ("we", "Platform") manages personal information collected from users ("you", "player") who access or use our services through the website boleh888.fun and our official mobile app.

As a trusted online gaming platform for Malaysian players, we take our responsibility to protect your personal data seriously. This policy adheres to internationally recognised data protection principles and applicable laws in Malaysia.

By registering an account or using any Boleh888 services, you confirm that you have read and agreed to this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use our platform.

2. Information We Collect

We only collect information necessary to provide a safe, fair, and responsible service to our players. The categories of information collected are as follows:

3. How We Use Your Data

Information collected is used solely for the stated purposes and will not be used for any other purpose without your consent. Our data usage includes:

• Account Management: Creating, verifying, and maintaining your account on the boleh888 platform, including identity verification and the KYC process.
• Transaction Processing: Processing deposits, withdrawals, and any financial transactions related to your account securely and efficiently.
• Platform Security: Detecting and preventing fraud, hacking, account abuse, and any suspicious activity that could compromise the security of the platform or other players.
• Customer Support: Providing technical support and resolving queries, complaints, or disputes raised by players.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and taking proactive steps to protect at-risk players.
• Service Improvements: Analyzing aggregated usage data to improve platform quality, technical performance, and the overall player experience.
• Marketing Communications: Sending promotional offers and relevant information — but only if you have given consent to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and reporting suspicious activity to the relevant authorities.

4. Sharing Information with Third Parties

Boleh888 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited circumstances where we may need to share certain information:

• Payment Service Providers: Financial information required to be shared with payment processors such as FPX, e-wallet providers, and financial institutions to complete your transactions. These providers are bound by strict confidentiality agreements.
• Game Providers: Minimum technical data required by third-party game providers (such as Pragmatic Play, Playtech, and others) to ensure smooth gaming sessions. They do not receive your full personally identifiable information.
• Governing Authority: We will disclose information if required by law, court order, or official request from a law enforcement agency. We will endeavour to notify you in advance where permitted to do so.
• Identity Verification Service: Information required to carry out KYC checks through approved and registered identity verification providers.

5. Data Security

Boleh888 continuously invests in the latest security infrastructure to keep your personal data protected at all times. The security measures we implement include:

• 256-bit SSL Encryption: All communication between your device and our servers is encrypted using TLS 1.3 — the same standard used by leading financial institutions worldwide.
• Encrypted Password Storage: Your account password is never stored in plain text. We use strong hashing algorithms with salting to ensure your password cannot be recovered — even by our own staff.
• Two-Factor Authentication (2FA): An additional security layer that can be enabled to protect your account from unauthorized access, even if your password has been compromised.
• Round-the-Clock Monitoring: An automated monitoring system operates 24 hours a day to detect any unusual activity or intrusion attempts.
• Internal Access Controls: Only specifically authorised personnel may access player personal data, and every access is logged for audit purposes.
• Regular Data Backups: Your data is regularly backed up to a secure, separate location to ensure prompt recovery in the event of a system failure.

6. Data Retention Period

We retain your personal data for as long as your account is active or as long as necessary to provide services to you. However, certain legal requirements oblige us to keep specific records for defined periods:

• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's financial and anti-money laundering legal requirements.
• Identity Verification (KYC) Records: Retained for 5 years after account closure or after the business relationship ends.
• Game History: Retained for 2 years for dispute resolution and internal audit purposes.
• Communication Logs: Customer support communication records are retained for 2 years for service quality purposes.

Once the defined retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

7. Your Rights Over Personal Data

As a boleh888 user, you have the following rights regarding your personal data. To exercise any of these rights, please contact our support team:

8. Cookies & Tracking Technology

Boleh888 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled as they are critical to your account security.
• Preference Cookies: Storing your personal settings such as language preference, display theme, and other configurations to ensure a consistent experience every time you visit.
• Analytics Cookies: Helping us understand how players use our platform as a whole, so we can make meaningful improvements. This data is collected anonymously.
• Security Cookies: Used to identify and prevent fraudulent activity, cyberattacks, and unauthorised access to player accounts.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and your account security.

9. Links to Third-Party Sites

The boleh888 platform may contain links to third-party websites or services such as game providers or payment processors. This Privacy Policy applies solely to the boleh888 platform.

We are not responsible for the privacy practices of third-party websites. When you leave our platform, we recommend reading the privacy policy of that site before providing any personal information.

10. Changes to This Privacy Policy

Boleh888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes occur, we will:

• Displaying clear notices on the main page of our platform.
• Sending notifications via email to the address registered to your account.
• Updating the "Last Updated" date at the top of this document.

Continued use of the boleh888 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.

11. Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the boleh888 platform — the fastest way to get immediate assistance.
• Privacy Email: [email protected] (displayed as text only)
• Response Time: All privacy-related enquiries are answered within 3 business days.