Privacy Policy bola365 – Protecting Your Personal Data in Malaysia

This Privacy Policy ("Policy") describes how bola365 ("we", "platform") collects, uses, stores, protects, and in certain circumstances shares your personal data when you use the bola365 website and all related services — including Sports Betting, Live Casino, slots, blackjack, roulette, and the VIP Rewards programme.

This Policy applies to all users of the bola365 platform in Malaysia, including registered members and visitors who have not yet created an account. By accessing or using any part of the bola365 platform, you confirm that you have read and understood this Privacy Policy.

This Policy is to be read together with Terms & Conditions and Responsible Gaming Policy which together form the entire agreement between you and bola365. In the event of any conflict between these documents in relation to data protection, this Privacy Policy shall prevail.

Bola365 collects your personal data through several channels — primarily during the account registration process, day-to-day platform use, and financial transactions. Below is a summary of the data we may collect:

Bola365 does not collect sensitive data such as health information, religious beliefs, or political views. We also do not directly collect credit card data — all transactions are processed through secure, certified payment gateways.

All personal data we collect is used solely for legitimate purposes necessary to operate the bola365 platform. The primary purposes are as follows:

• Account Management: Creating, verifying, and maintaining your bola365 account — including identity verification and the required KYC processing.
• Transaction Processing: Processing deposits in MYR via methods such as DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay; and managing your winnings withdrawals.
• Service Provision: Gives you full access to all games and betting options on the platform — from Malaysia Super League and EPL football to blackjack, roulette, slots, and Live Casino.
• Customer Support: Providing support via live chat, email, and other communication channels — including resolving queries related to your account, deposits, or withdrawals.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other security threats to the platform and our members.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the features, design, and performance of the bola365 platform.
• Marketing Communications: With your consent, sending you information about relevant bola365 promotions, bonuses, and special offers via email or SMS. You may unsubscribe at any time.
• Legal Compliance: Fulfilling legal obligations and regulatory requirements applicable to the platform's operations.

Bola365 will not use your personal data for any purpose beyond those stated above without first obtaining your consent.

Bola365 does not sell your personal data to any party for marketing or commercial purposes. However, in operating the platform, we may need to share certain data with a limited number of third-party categories as follows:

• Payment Providers: Financial data required to process transactions is shared with providers such as FPX, e-wallet payment gateways (Touch 'n Go, GrabPay, Boost, ShopeePay), and the DuitNow banking network. Such sharing is kept to a minimum and is strictly for transaction processing purposes.
• Game Providers: Usernames (not real names) and session information may be shared with third-party game providers that supply slots and live casino games on the bola365 platform. These providers are bound by strict confidentiality agreements.
• IT Service Provider: Companies providing technical infrastructure, analytics, and cybersecurity services may process your data as part of the services they deliver to us. They act as data processors operating under bola365's instructions.
• Legal Authority: bola365 may disclose personal data when required by Malaysian law, a court order, or a formal request from a legitimate law enforcement agency.

The bola365 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session, processing transactions securely, and protecting your account from unauthorized access. These cookies cannot be disabled.
• Functional Cookies: Allows the platform to remember your preferences such as interface language, preferred betting settings, and limits you have set — so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand how members use the platform — which pages are visited most often, how long members spend on the platform, and where they encounter difficulties. This data is collected in aggregate form and does not directly identify individuals.
• Performance Cookies: Optimising page load speed and platform stability to ensure a smooth experience whether you are playing Blackjack, watching an EPL match live, or making a deposit via FPX.

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the bola365 platform, and you may be unable to log in or complete transactions properly.

Bola365 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. The measures we have in place include:

• Data Encryption in Transit: All communications between your device and the bola365 platform are secured with 256-bit TLS/SSL encryption — ensuring that data in transit, such as login credentials and transaction details, cannot be intercepted.
• Stored Data Encryption: Sensitive data such as bank account numbers and e-wallet information is stored in encrypted form in our database — meaning that even in the event of an unforeseen breach, the data cannot be read without the appropriate decryption key.
• Two-Factor Authentication (2FA): Our 2FA system via SMS to a registered Malaysian phone number provides an additional layer of security for your account.
• 24/7 Monitoring: The bola365 security team monitors the platform around the clock to detect any suspicious activity or unauthorized access attempts.
• Internal Access Controls: Access to members' personal data within bola365 is limited to staff who require it to carry out their duties, and only with the appropriate authorisation.
• Regular Security Assessments: The bola365 platform undergoes regular penetration testing and security audits by independent experts to identify and address vulnerabilities before they can be exploited.

While we take all reasonable security measures, no online system can guarantee 100% security. We therefore encourage you to take your own precautions — in particular, by using a strong and unique password and never sharing your bola365 account login credentials with anyone.

Bola365 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulatory obligations.

As a general guide, the following are the data retention periods we observe:

• Active Account Data: Retained for as long as your account remains active on the bola365 platform and for a set period after the account becomes inactive.
• Financial Transaction Records: Records of deposits, withdrawals, and winnings are retained for a minimum of 7 years in accordance with Malaysian financial and taxation legal requirements.
• Security Logs: Access logs and security activity records are retained for 12 months for the purposes of fraud investigation and prevention.
• Support Communication Records: Customer support conversations are retained for 2 years for quality control purposes and future reference in the event of a dispute.

When data is no longer needed and there is no legal obligation to retain it, bola365 will delete or anonymise that data in a secure and irreversible manner. You may request early deletion — subject to our legal retention obligations — by contacting our privacy team.

As a bola365 member, you have several rights regarding your personal data. bola365 is committed to facilitating the exercise of these rights:

To exercise any of the rights above, please contact the bola365 privacy team by email at support@bola365.best by stating the right you wish to exercise along with your account details. We will process your request within a reasonable timeframe, typically within 30 days.

The bola365 platform is for users aged 18 and above only. We do not intentionally collect or store personal data from any individual under the age of 18.

If we discover that personal data belonging to a minor has been collected through our platform without proper verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered an account at bola365 are urged to contact us immediately at support@bola365.best.

Bola365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to how we protect member information.

When there are material changes to this Policy, we will:

• Updating the "Updated" date at the top of this page.
• Notifying members via their registered email or an in-platform notice on the bola365 platform at least 7 days before the changes take effect.
• In the event of highly significant changes, we may seek renewed consent from members before they continue using the platform.

It is your responsibility to review this Privacy Policy from time to time. Continued use of the bola365 platform following notification of any changes constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or complaints regarding bola365's Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our privacy team is available to assist in both Bahasa Malaysia and English.

You can reach us through any of the following channels:

• Privacy Email: support@bola365.best (please include "Privacy Inquiry" in the subject line)
• 24/7 Live Chat: Via the live chat button at the bottom-right corner of the bola365 platform
• FAQ Page: Visit Frequently Asked Questions for answers to frequently asked privacy questions

We aim to respond to all privacy-related inquiries within 3 business days. For formal data rights requests (such as access, correction, or deletion), processing may take up to 30 days depending on the complexity of the request.