Privacy Policy

This Policy forms part of the broader legal framework governing your use of Boga88, alongside our Terms & Conditions and Responsible Gambling Policy. By creating an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

We process personal data strictly to the extent necessary for the lawful operation of a regulated online gaming platform. We do not sell personal data to third parties for commercial marketing purposes. Our data handling practices are designed to be transparent, proportionate, and respectful of your rights as a user.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, financial information, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, Boga88 and its operating entity.
• "Data Processor" means any third party that processes Personal Data on behalf of Boga88 pursuant to a contractual arrangement.
• "Cookies" means small text files stored on a User's device by a web browser at the instruction of the Platform, used to retain session information and preferences.
• "KYC" means Know Your Customer — the process of verifying a User's identity through official documentation to comply with applicable anti-money laundering and regulatory requirements.
• "Account" means the registered user account created by a Player on the Boga88 Platform.
• "Platform" refers to the Boga88 website, subdomains, mobile interfaces, and all associated services accessible via boga88.lat.

3.1 Registration Data

When you create a Boga88 Account, we collect the following information:

• Full legal name;
• Date of birth (used to verify you are aged 21or above);
• Valid email address;
• Malaysian mobile phone number;
• Chosen username and encrypted password.

3.2 Identity Verification (KYC) Data

For regulatory compliance, we may request and collect the following documents:

• Government-issued photo identification (MyKad, passport, or equivalent);
• Proof of residential address (recent utility bill, bank statement, or equivalent);
• Proof of payment method ownership (screenshot or confirmation of account holder name matching your registered name).

3.3 Financial Transaction Data

When you make deposits or withdrawals, we collect transaction records including payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank FPX, CIMB, Public Bank, Hong Leong Bank, credit/debit card, or cryptocurrency such as BTC, ETH, USDT, or BNB), transaction amounts in MYR, timestamps, and transaction reference numbers. We do not store full card numbers or full banking credentials.

3.4 Usage and Behavioural Data

We automatically collect technical and behavioural data when you interact with the Platform, including: IP address, browser type and version, device type and operating system, pages visited, session duration, game activity logs, bet history, and in-platform navigation patterns. This data is used to ensure Platform stability, detect fraud, and improve the user experience.

3.5 Communications Data

If you contact Boga88 via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and any attachments provided for the purposes of service delivery, quality assurance, and dispute resolution.

3.6 Voluntary Data

In certain circumstances, you may provide additional voluntary information such as preferred language, responsible gambling self-assessment responses, or promotional opt-in preferences. This data is used solely for the purpose for which it was provided.

Boga88 processes your Personal Data for the following specific purposes:

Boga88 processes Personal Data one or more of the following legal grounds:

• Contractual Necessity: Processing is required to fulfil the agreement between you and Boga88, including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial reporting obligations.
• Legitimate Interest: Processing serves a legitimate business interest of Boga88 (such as fraud prevention, platform security, and responsible gambling monitoring) where such interest is not overridden by your fundamental rights.
• Consent: Where Boga88 relies on your consent (such as for marketing communications), you retain the right to withdraw consent at any time by contacting us or updating your Account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Boga88 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank transfers, and cryptocurrency transaction verification), KYC verification providers, customer support platforms, fraud detection services, and analytics providers. These providers operate as Data Processors and are contractually bound to process data only our instructions and to maintain appropriate security standards.

6.2 Regulatory and Legal Authorities

We may disclose Personal Data to government authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, regulatory direction, court order, or where disclosure is necessary to prevent, investigate, or prosecute financial crime, fraud, or money laundering.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, Personal Data held by Boga88 may be transferred to the acquiring or successor entity, subject to the same protections afforded under this Policy. Users will be notified of any such transfer via the Platform or by email where practicable.

6.4 Aggregate and Anonymised Data

We may share aggregated, anonymised, or pseudonymised data sets with analytics partners or for industry research purposes. Such data does not identify any individual User and is not subject to the protections applicable to Personal Data under this Policy.

Boga88 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of the Account and for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications and support records: Retained for a minimum of two (2) years from the date of the communication.
• Usage and behavioural data: Retained in identifiable form for up to twenty-four (24) months, after which data is anonymised or deleted.
• Marketing preference data: Retained until consent is withdrawn or the Account is closed, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

8.1 What Are Cookies?

Cookies are small data files placed on your device by a website when you visit it. Boga88 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to enable Platform functionality, maintain session continuity, and analyse usage patterns.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly. These include session authentication tokens and security-related cookies. They cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings and responsible gambling limit configurations.
• Analytics Cookies: Used to collect anonymised usage data to help us understand how Users navigate the Platform and identify areas for improvement. Data collected is aggregated and does not identify individual Users.
• Fraud Prevention Cookies: Used to identify unusual behaviour patterns that may indicate fraudulent activity or account compromise.

8.3 Cookie Management

You may manage or disable non-essential cookies via your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential cookies may prevent certain Platform features from functioning correctly. Instructions for managing cookies are available via your browser's help documentation.

Boga88 implements technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive data, including hashed and salted password storage;
• Access controls limiting staff access to Personal Data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication options for Player Accounts;
• Contractual data security obligations imposed on all third-party Data Processors.

While we employ robust security practices, no data transmission or storage system can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, Boga88 will notify affected Users and relevant authorities in accordance with applicable legal requirements.

Subject to applicable law and certain limitations, you have the following rights with respect to your Personal Data held by Boga88. To exercise any of these rights, please contact us at [email protected] with your registered Account email address and description of your request.

Boga88 is strictly anadults-only platform. Registration and use of the Platform is limited to individuals who are 21 years of age or older. We do not knowingly collect or process Personal Data from individuals under the age of 21.

Age verification is a mandatory step in the Account registration process, and Boga88 reserves the right to request supporting KYC documentation (including government-issued photo ID) to confirm a User's age. Any Account found to be registered by an individual under the age of 21 will be immediately terminated, all associated balances forfeited, and all Personal Data securely deleted except where retention is required for regulatory or legal purposes.

If you become aware that an individual under the age of 21 has registered an Account on Boga88, please notify us immediately at [email protected].

Boga88 may transfer Personal Data to third-party service providers or infrastructure systems located outside of Malaysia. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data, including the use of contractual data protection obligations, standard contractual clauses, or transfers to jurisdictions with recognised adequate data protection frameworks.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia for the purposes described in this Policy. We will not transfer your data in a manner that would materially reduce your rights under applicable Malaysian data protection principles.

The Boga88 Platform integrates with a number of third-party services necessary for Platform operation, including payment gateways (supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks), game content providers, KYC verification services, and customer support tools.

These third-party services have their own privacy policies and data handling practices. Boga88 is not responsible for the privacy practices of third-party providers. We recommend reviewing the privacy policies of any third-party service you interact with in connection with your use of the Boga88 Platform. All third-party providers used by Boga88 are contractually bound to comply with data protection obligations consistent with this Policy.

The Boga88 Platform does not contain links to external third-party websites for general browsing. Any external interactions occur solely in the context of payment processing or game content delivery necessary for Platform functionality.

Boga88 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered Users via email notification or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page reflects the most recent revision.

Your continued use of the Platform following notification of any changes constitutes your acceptance of the updated Policy. If you do not agree with any amendments, you must cease use of the Platform and may request Account closure in accordance with the process described in our Terms & Conditions.

Historical versions of this Privacy Policy are available upon request by contacting [email protected].

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the Boga88 data team using the following details:

For responsible gambling support, self-exclusion requests, or questions about deposit limits, please visit our Responsible Gambling page. For general platform information, please visit our About Us page orFAQ.