bola228 is committed to protecting your personal data. This Policy explains what we collect, why we collect it, how we use it, and the rights you hold as a Malaysian user under applicable data protection law.
bola228 does not sell, rent, or trade your personal information to third-party marketers under any circumstances.
All personal data is stored with AES-256 encryption and transmitted exclusively over TLS-secured connections.
You have the right to access, correct, and request deletion of your personal data at any time by contacting our team.
This Privacy Policy ("Policy") is issued by bola228 ("bola228", "we", "us", "our"), the operator of the online sports betting and live casino platform available at bola228.cam (the "Platform"). This Policy applies to all personal data collected from users ("you", "your", "User") who access or interact with the Platform, whether through a web browser, mobile device, or any other means.
bola228 recognises the importance of data privacy to our Malaysian user base and is committed to processing personal data in accordance with applicable data protection legislation, including — where relevant to Malaysian-resident users — the Personal Data Protection Act 2010 (PDPA) of Malaysia, as well as any other applicable data protection frameworks under our international gaming licence jurisdiction.
By creating an Account on the Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform and contact us to close your Account.
For the purposes of this Policy, the following terms shall have the meanings assigned below:
bola228 collects the following categories of Personal Data, depending on how you interact with the Platform:
Full legal name, date of birth, nationality, and gender as provided during registration or KYC verification. Copies of Malaysian National Identity Card (MyKad), Driver's Licence, Passport, or equivalent identification documents where submitted for KYC.
Email address, telephone number, and residential address (including city and postcode — for example, addresses in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, or other Malaysian cities as provided).
Payment method details necessary to process deposits and withdrawals, including e-wallet account identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions; bank account information for Maybank, CIMB, Public Bank, and Hong Leong Bank transfers; and cryptocurrency wallet addresses for BTC, ETH, and USDT TRC20 transactions. bola228 does not store full payment card numbers. Financial transaction history, deposit and withdrawal records, and account balance information.
IP address, device type and model, operating system and version, browser type and version, screen resolution, and time zone. Platform session data including login timestamps, session duration, and geographic location data derived from IP address.
Betting and gaming activity records, including sports markets wagered on (e.g. English Premier League, Liga Super Malaysia, UFC), games played, bet amounts, game outcomes, bonus usage, and responsible gambling tool interactions.
Records of your interactions with bola228's customer support team via live chat and email, including enquiry content and resolution notes.
Anti-money-laundering (AML) screening results, sanctions screening outputs, and any information gathered during fraud investigations or compliance reviews.
| Data Category | Examples | Retention Period |
|---|---|---|
| Identity Data | Full name, MyKad copy, date of birth | 5 years post-account closure |
| Contact Data | Email, phone, address | 5 years post-account closure |
| Financial Data | Transaction history, payment method IDs | 7 years (AML obligation) |
| Technical Data | IP address, device ID, session logs | 2 years rolling |
| Usage Data | Betting history, game records | 5 years post-account closure |
| Communications Data | Support chat transcripts, emails | 3 years post-interaction |
bola228 collects Personal Data through the following means:
bola228 processes your Personal Data on the following legal grounds, as applicable under the PDPA and other applicable data protection frameworks:
bola228 uses collected Personal Data for the following specific purposes:
bola228 does not sell, rent, or trade your Personal Data to any third party for marketing purposes. We disclose Personal Data only in the following circumstances:
We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements, including: payment gateway operators (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and banking partners); KYC and identity verification providers; fraud detection and AML screening providers; cloud infrastructure and hosting providers; customer support platform operators; and analytics providers.
All service providers are contractually bound to process Personal Data only for the specified purpose, to maintain appropriate security standards, and to return or delete data upon termination of engagement.
bola228 may disclose Personal Data to governmental authorities, regulators, licensing bodies, financial intelligence units, and law enforcement agencies where required by applicable law or legally binding order, or where bola228 reasonably believes disclosure is necessary to prevent serious harm, fraud, or criminal activity.
In the event of a merger, acquisition, restructuring, or sale of all or part of bola228's business, Personal Data may be transferred to the successor entity as part of the transaction, subject to equivalent data protection obligations.
bola228 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:
You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled through browser settings as they are essential to Platform operation.
bola228 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The indicative retention periods set out in Section 3 apply. In determining retention periods, bola228 considers:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with bola228's data disposal procedures. Anonymised data that cannot be re-linked to an individual may be retained indefinitely for aggregated analytics purposes.
bola228 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Notwithstanding these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. Users are responsible for keeping their Account credentials confidential and for using strong, unique passwords. bola228 will never ask for your password via email, live chat, or any other communication channel.
bola228 may transfer Personal Data to countries outside Malaysia in connection with the use of cloud infrastructure, KYC service providers, or other third-party Data Processors. Where such transfers occur, bola228 ensures that appropriate safeguards are in place, including:
By using the Platform, you consent to the transfer of your Personal Data to servers and processors located outside Malaysia, subject to the safeguards described above.
Subject to applicable law, you have the following rights in respect of your Personal Data held by bola228. To exercise any of these rights, please contact us at [email protected] or via live chat.
bola228 will respond to all rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further sixty (60) days with prior notification. bola228 reserves the right to verify your identity before acting on any rights request.
The Platform is strictly intended for individuals aged 21 years and above. bola228 does not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory component of the KYC process.
If bola228 becomes aware that Personal Data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated Account will be permanently closed. If you are a parent or guardian and believe your child has accessed the Platform or provided personal information, please contact us immediately at [email protected].
The Platform may contain references to third-party payment providers and services for operational purposes. bola228 is not responsible for the privacy practices of any third party. Where you interact with a third-party payment gateway (such as the Touch 'n Go eWallet, Boost, or GrabPay applications), that interaction is governed by the respective third party's own privacy policy.
bola228 does not embed third-party advertising, social media widgets, or tracking pixels on the Platform. We do not share your data with advertising networks.
bola228 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material, bola228 will notify Users via a prominent notice on the Platform or by email to the registered address on file, at least fourteen (14) days before the amended Policy takes effect.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to an amended Policy, you must cease using the Platform and request Account closure.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact bola228's Data Protection team through the following channels:
bola228 is committed to resolving all privacy-related concerns promptly and transparently. If you are unsatisfied with our response, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.
Six pillars of how bola228 handles your personal information responsibly
bola228 has never sold, rented, or traded personal data to any third party for marketing purposes, and we never will. Your information is used solely to operate and improve your Platform experience.
Our data handling practices are designed to align with Malaysia's Personal Data Protection Act 2010. Malaysian users are treated as data subjects with full statutory rights under applicable law.
Identity documents (MyKad, Passport, Driver's Licence) submitted for KYC are stored with AES-256 encryption, accessible only to authorised compliance personnel, and deleted according to our published retention schedule.
bola228 does not embed third-party advertising networks, social media pixels, or retargeting scripts on the Platform. Your browsing behaviour on bola228 is not shared with advertisers.
Access, correction, erasure, portability, and objection requests are handled within 30 days. You can update most Account details yourself via Account Settings — no need to wait for support.
In the unlikely event of a data security incident that materially affects your Personal Data, bola228 will notify affected Users promptly and cooperate with relevant regulatory authorities in accordance with applicable law.
Our support team is available around the clock to answer any data protection questions before or after you play on bola228.
For players aged 21 and above only. Please gamble responsibly.