Privacy Policy — How bonus88 Handles Your Data

This Privacy Policy ("Policy") describes how bonus88 ("bonus88", "we", "us", "our") — the operator of the online casino and sports betting platform located at https://bonus88.cam (the "Platform") — collects, processes, stores, transfers, and protects personal data relating to registered players and visitors ("you", "User", "Player") in connection with their use of our services.

bonus88 is committed to handling personal data responsibly and in accordance with applicable data protection principles, including those governing data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality. This Policy applies to all personal data collected through the Platform, through our customer support channels, and through any associated digital touchpoints operated by bonus88.

By creating an account on the Platform, making a deposit, or using any part of our service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not register an account or use the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" means any information that relates to an identified or identifiable natural person — including, but not limited to, a name, identification number, contact details, location data, IP address, or factors specific to physical, financial, or online identity.
• "Processing" means any operation or set of operations performed on Personal Data, whether automated or manual — including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Controller" means bonus88, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Processor" means a third party that processes Personal Data on behalf of bonus88 under a data processing agreement — for example, a payment gateway, cloud hosting provider, or fraud screening service.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the verification procedures required by bonus88 to confirm a Player's identity, age, and source of funds for regulatory compliance and fraud prevention purposes.
• "Sensitive Data" means a subset of Personal Data that warrants additional protection — including financial account information, government-issued identification numbers, and data related to health or vulnerability where disclosed in the context of responsible gambling tools.

bonus88 collects personal data through several channels: directly from you at account registration and during account use; automatically through technical systems as you interact with the Platform; and in some cases from third-party verification and payment providers.

3.1 Data Provided Directly by You

3.2 Data Collected Automatically

3.3 Data from Third Parties

bonus88 may receive personal data about you from third-party service providers in the following circumstances: (a) identity verification agencies that cross-check KYC documents against official databases; (b) payment processors that confirm transaction status and flag suspicious payment activity; (c) fraud detection services that share risk scores or indicators linked to your device or network. Data received from such third parties is processed only for the purpose for which it was obtained.

bonus88 uses the personal data we collect for the following clearly defined purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your profile, and authenticate your login sessions.
• Service Delivery: To process your deposits via Maybank, CIMB, Touch 'n Go, DuitNow, FPX, and other supported methods; to credit winnings; to process withdrawal requests to your verified payment instruments.
• KYC Compliance: To verify your age (minimum 21 years), identity, and the legitimacy of your payment methods, as required by our licensing obligations and internal compliance policies.
• Fraud and Security: To detect, investigate, and prevent fraudulent transactions, multi-account abuse, money laundering, bonus exploitation, and other prohibited conduct.
• Responsible Gambling: To administer deposit limits, session alerts, and self-exclusion measures you request; to monitor betting patterns that may indicate problem gambling and intervene proactively where appropriate.
• Customer Support: To respond to your queries, complaints, and dispute requests via live chat, email, or WhatsApp; to maintain support records for quality assurance purposes.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve game library curation, site performance, mobile experience, and promotional relevance.
• Legal Compliance: To retain transaction and identity records as required by applicable anti-money laundering regulations and our international gaming license conditions.
• Marketing Communications: To send promotional emails, SMS notifications, and in-platform messages about bonuses, tournaments, and new features — where you have not opted out of such communications. You may unsubscribe at any time via account settings or by contacting support.

bonus88 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and bonus88 — including account registration, deposit processing, withdrawal execution, and game access.
• Legitimate Interests: Processing is necessary for bonus88's legitimate interests in operating a secure, fraud-free platform, maintaining player safety, and improving our services — provided these interests are not overridden by your fundamental privacy rights.
• Legal Obligation: Processing is required to comply with anti-money laundering obligations, age verification requirements under our gaming license, and record-keeping mandates applicable to our operational jurisdiction.
• Consent: For marketing communications and non-essential analytics cookies, processing is based on your explicit consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

6.1 Internal Access

Access to personal data within bonus88 is strictly limited to staff and contractors who require it to perform their specific functions — for example, the KYC team, payment operations, customer support, and fraud monitoring. All personnel with data access are bound by confidentiality obligations.

6.2 Third-Party Processors

bonus88 engages third-party Processors under formal data processing agreements to support specific operational functions. These include:

• Payment gateways and e-wallet operators (Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX) — for transaction processing and settlement;
• Cryptocurrency exchange and custody providers — for BTC and USDT transaction processing;
• Identity verification and KYC service providers — for document authentication and age verification;
• Cloud infrastructure and hosting providers — for secure data storage and platform hosting;
• Fraud detection and risk management service providers — for real-time transaction screening;
• Customer communication platforms — for live chat, email, and WhatsApp support delivery.

All Processors are contractually prohibited from using Player data for any purpose beyond the specific service they provide to bonus88.

6.3 Regulatory and Legal Disclosure

bonus88 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, by a valid legal order, or in connection with the investigation or prosecution of fraud, money laundering, or other criminal conduct. Such disclosures will be limited to the minimum data necessary to satisfy the legal obligation.

6.4 No Sale of Personal Data

bonus88 does not sell, rent, trade, or otherwise transfer your personal data to any third party for that party's own commercial marketing or advertising purposes. This prohibition is unconditional and applies regardless of the commercial value of the data.

The Platform uses cookies and similar tracking technologies (including local storage and session storage) to deliver core functionality, remember your preferences, and collect anonymous analytical data to improve platform performance.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, shopping cart equivalents (active bet slips), and security tokens. These cannot be disabled without impairing core functionality.
• Preference Cookies: Remember your selected language, display preferences, and responsible gambling settings between sessions.
• Performance and Analytics Cookies: Collect anonymised data about how Players navigate the Platform — which pages they visit, which games they play, and how long they spend in sessions. This data is used solely to improve the Platform.
• Marketing Cookies: Track whether you arrived via a specific promotional campaign. Used internally to assess which marketing channels deliver genuine players, not to target you with third-party advertising.

7.2 Managing Cookies

You may configure your browser to refuse all cookies, to alert you when cookies are being set, or to delete existing cookies. However, disabling strictly necessary cookies will prevent you from logging into your Account or using interactive features of the Platform. Browser-level cookie management instructions vary by browser — consult your browser's help documentation for guidance.

bonus88 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations.

• Active Account Data: Retained for the duration of your Account's active status plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements and to defend against any claims or disputes.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later, in accordance with our gaming license conditions.
• Transaction Records: Deposit, withdrawal, and bet history records are retained for a minimum of seven (7) years to comply with financial record-keeping obligations.
• Support Communications: Live chat transcripts, email, and WhatsApp records are retained for two (2) years from the date of the interaction to facilitate quality assurance and dispute resolution.
• Marketing Data: Communication preferences and marketing-related records are retained until you opt out of marketing, at which point they are suppressed from future send lists — not deleted immediately, but retained to honour your opt-out instruction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

bonus88 implements a layered security architecture designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme includes:

• Transport Security: All data transmitted between your browser or mobile device and the Platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Data-at-Rest Encryption: Sensitive data held in our databases — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256.
• Access Controls: Internal access to production data systems is restricted by role-based access control. Multi-factor authentication is required for all administrative access. Access logs are maintained and reviewed regularly.
• Password Handling: User passwords are never stored in plain text. They are hashed using modern cryptographic hashing algorithms with salting to resist brute-force and rainbow-table attacks.
• Fraud Monitoring: Automated systems monitor transactions, login patterns, and gameplay for indicators of fraudulent activity in real time. Anomalous activity triggers manual review.
• Third-Party Security Assessments: Our platform and processes are subject to periodic security assessments conducted by independent parties.

While bonus88 employs industry-standard security measures, no system is entirely impervious to all threats. You are responsible for maintaining the security of your own Account credentials. If you suspect that your Account has been compromised, contact [email protected] immediately.

Subject to applicable law and the legal bases under which bonus88 processes your data, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data bonus88 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. You may also update many details directly through your Account profile.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) the data has been unlawfully processed. Note: we may be unable to comply fully where retention is required by legal obligation or for the defence of legal claims.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity and carried out by automated means, you may request a machine-readable export of your personal data.
• Right to Object: You may object to processing carried out on the basis of legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent to marketing may be exercised via your Account settings or by emailing [email protected].

10.1 How to Exercise Your Rights

To exercise any of the rights described above, submit a written request to [email protected], including your full registered name, your Account username, and a clear description of the right you wish to exercise and the data to which your request relates. We may request additional verification before processing rights requests to confirm that the requester is the Account holder. We aim to respond to all valid rights requests within 30 days.

The Platform is strictly for adults aged 21 and above. bonus88 does not knowingly collect or process personal data relating to individuals under the age of 21. Account registration by persons under 21 is prohibited, and any such account discovered will be suspended immediately, all associated data reviewed, and any funds returned to source in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that your child has registered an Account on the Platform, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, close the account and delete the associated personal data to the extent not required for legal record-keeping purposes.

As an internationally operated platform, bonus88 may transfer your personal data to systems and Processors located in jurisdictions outside Malaysia. This may occur, for example, when data is processed by cloud hosting providers, KYC verification services, or fraud screening tools operating in other countries.

Where personal data is transferred internationally, bonus88 takes steps to ensure an appropriate level of protection is maintained — including by entering into data processing agreements with Processors that incorporate standard contractual protections, and by selecting Processors that operate in jurisdictions recognised as providing adequate data protection standards.

By using the Platform, you acknowledge and consent to the transfer of your personal data to international systems as described in this section, subject to the protections outlined above.

The Platform does not contain links to third-party websites outside of payment processing interfaces necessary to complete transactions. However, where third-party services are integrated into the Platform — such as payment gateways operated by Maybank, CIMB, or Touch 'n Go — those services are governed by their own privacy policies and terms of service.

bonus88 is not responsible for the privacy practices or content of third-party payment processors or verification services. We encourage Players to review the privacy notices of any third-party service they interact with, including their bank or e-wallet provider, when conducting transactions via those platforms.

bonus88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal frameworks. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

Where amendments are material — meaning they significantly alter how we collect, use, or share your personal data — bonus88 will notify registered Players via email to the address on their Account prior to the changes taking effect. For minor clarifications or formatting updates that do not substantively affect your rights, we reserve the right to update this Policy without prior notice.

Continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must close your Account before the effective date by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy, the personal data we hold about you, or the exercise of your data rights, please contact our support team using the details below. All communications are handled confidentially. Support is available 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Mandarin/Cantonese.