Bola 228 Privacy Policy – Malaysian User Data Protection

To provide a safe and high-quality Sports Betting, slots, Live Casino and table games experience, Bola 228 needs to collect certain categories of personal information from our members. Below is an overview of what we collect and why:

Information is collected through several means — directly from you during registration or platform use, automatically via tracking technologies when you visit our website, and in certain cases from trusted third parties such as identity verification providers or payment providers like Touch 'n Go eWallet and GrabPay.

Bola 228 uses your personal data solely for legitimate and responsible purposes. Every use of data has a clear legal basis under Malaysia's PDPA 2010.

• Account Management: Create, verify and manage your member account on the Bola 228 platform, including any required KYC processes.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing fund withdrawals to your account.
• Service Delivery: Gives you full access to all platform features, including Sports Betting on the Malaysia Super League and EPL, slots, Live Casino, Table Games, and e-sports.
• Security & Fraud Prevention: Detect, investigate, and prevent suspicious activity, bonus abuse, money laundering, and unauthorised account access.
• Customer Support: Enables our 24/7 support team to assist you with any account or transaction issues and enquiries.
• Responsible Gaming: Monitor gameplay patterns to identify signs of problem gambling and provide appropriate support to members who may need assistance.
• Marketing Communications: Send promotional information, bonuses and special offers — but only if you have agreed to receive them during registration or through your account settings.
• Legal Compliance: Fulfil the legal and regulatory obligations applicable to the operation of the Bola 228 platform in Malaysia.
• Platform Improvements: Analyses aggregated and anonymised usage data to improve the performance, functionality, and user experience of our platform.

The security of your personal data is the highest technical priority for Bola 228. We continuously invest in our security infrastructure to keep your information protected at all times.

• All personal data is stored on servers protected with AES-256 encryption and accessible only via secure SSL/TLS connections.
• Account passwords are never stored in plain text — they are processed using irreversible cryptographic hash functions.
• Enterprise-grade intrusion detection systems (IDS) and firewalls monitor our network traffic 24 hours a day, 7 days a week.
• Financial data related to transactions via Maybank2u, CIMB Clicks or digital wallets is not stored on our servers Bola 228 — it is processed directly by payment providers compliant with PCI-DSS standards.
• Data backups are performed automatically and stored at geographically separate locations to ensure service continuity.
• Active member personal data is retained for as long as the account remains active. Following account closure, data is kept for the minimum period required by Malaysian law, typically 7 years, before being securely deleted.
• All staff with access to members' personal data undergo regular information security training and are bound by confidentiality agreements.

Bola 228 does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share certain information with trusted partners.

• Payment Providers: Transaction information that must be shared with payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX operators in order to process your deposits and withdrawals.
• Identity Verification Providers: The minimum identity data required for KYC is shared with PDPA 2010-compliant identity verification service providers.
• Game Software Providers: Game session data required to run slots, Live Casino, and Sports Betting is shared with audited game software providers.
• Legal Authorities: Bola 228 will disclose information to the relevant authorities when required by a court order or applicable Malaysian law.
• Audit & Compliance: Independent third-party auditors may access certain data within a limited scope during security or compliance audit processes.
• All third parties that receive member data Bola 228 bound by strict data protection agreements and are prohibited from using that data for any other purpose.

Website Bola 228 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Below is an explanation of the cookies we use.

• Essential Cookies: Required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as odds settings, favourite markets, and display options to deliver a more personalised experience.
• Analytics Cookies: Helps us understand how members use the platform — which pages are most visited, time spent, and navigation patterns. All data is anonymised.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.
• You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the platform. Bola 228.
• By continuing to use our platform, you agree to the use of cookies as described. A cookie notice will be displayed on your first visit to our website.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have certain rights regarding your personal data held by Bola 228. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact our privacy team by email at support@bola228.my by clearly stating your request. We will process it within 21 business days in accordance with PDPA 2010 requirements.

Bola 228 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

• The registration process includes an age verification step that every prospective new member must complete.
• Should we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will delete that data immediately.
• Parents or guardians who suspect their child has registered on the platform Bola 228 are encouraged to contact us via official email for prompt action.
• Bola 228 fully supports online child protection initiatives and cooperates with relevant authorities whenever required.

Bola 228 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. Members will be informed of any material changes.

• Whenever the Privacy Policy is updated, the "Last Updated" date at the top of this page will be revised to reflect the latest date.
• For significant changes, notice will be sent via your registered email or through an in-platform notification. Bola 228.
• Continued use of the platform after changes take effect constitutes your acceptance of the updated Privacy Policy.
• You can download or print a copy of the current Privacy Policy at any time from this page.