Boleh888 Privacy Policy – Your Data Protection is Our Priority

At boleh888, we take our responsibility to protect every member's personal information seriously. This Privacy Policy transparently explains what data we collect, how it is used and your rights as a user of our platform.

Last Updated: January 2026 Bahasa Melayu (ms-MY) Version 2.4
SSL 256
Bit Encryption
PDPA
Malaysia Compliance
0 Sold
Data Not Sold
24/7
Privacy Support
Personal Data Protected
Secure Payment Information
Transparent Cookie Policy
Notification Controls
Right to Data Deletion

Boleh888's Data Protection Commitment

Six core principles that shape how boleh888 handles the privacy and personal data of every Malaysian member.

Bank-Grade Encryption

All data transmitted between your device and boleh888's servers is protected by 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks. Your login credentials, transaction data and personal details cannot be intercepted in transit.

Data Not Sold to Third Parties

Boleh888 has never sold, rented, or exchanged members' personal data to any third party for marketing purposes — and never will. Your information belongs to you; we only use it for purposes you have explicitly consented to.

Compliance with the Malaysian Personal Data Protection Act

Boleh888's Privacy Policy is built on the principles of Malaysia's Personal Data Protection Act (PDPA) 2010. We collect only the data we need, retain it for a reasonable period only, and give you full control over your data.

Full Control in Your Hands

Every boleh888 member can access, update, correct or request deletion of their personal data at any time, either through account settings or by contacting our support team. We believe control over your personal data should rest with you, not us.

Payment Information Secured

Your payment method details — whether Touch 'n Go eWallet, GrabPay, DuitNow or FPX — are never stored in plain text on our systems. We use secure tokens provided by payment processors to prevent exposure of sensitive financial data.

Your Marketing Notification Preferences

You can choose to opt in or out of promotional emails, push notifications and SMS messages from boleh888 at any time. Unsubscribing takes just one click — no questions asked, no waiting period, and your preference takes effect within 24 hours.

1. Introduction

This Privacy Policy ("Policy") explains how boleh888 ("Platform", "we", "us", "company") collects, uses, stores and protects your personal information when you use the services at boleh888.best. We are committed to handling your data transparently, responsibly and securely.

By registering an account or using any boleh888 service, you agree to the collection and use of your information as described in this Policy. This Privacy Policy should be read together with the Terms & Conditions boleh888, which forms part of the overall agreement between you and our platform.

Quick summary: We collect only the data needed to operate the platform, we do not sell it to anyone, we protect it to the highest standards and you can request its deletion at any time. Read the full details below.

2. Personal Data We Collect

Boleh888 only collects data that is necessary to provide a safe, fair and legally compliant service. The following are the categories of data we collect:

Information you provide directly:

  • Full name as shown on your identity card or passport
  • Date of birth for age verification
  • Active email address
  • Malaysian mobile phone number
  • Account password (stored in an unreadable hashed format)
  • Payment method information (e-wallet account holder name or bank account number for withdrawal purposes)
  • Identity verification documents (MyKad or passport) when required for the KYC process

Data collected automatically during use:

  • Your device's IP address
  • Browser type and operating system version
  • Login and logout session records with timestamps
  • Betting history and gaming activity
  • Deposit and withdrawal transaction records
  • Platform feature usage data, such as pages visited and session duration
Data Category Example Mandatory / Optional
Identity Full name, date of birth, MyKad number Mandatory
Contact Email address, phone number Mandatory
Financial E-wallet account name, account number for withdrawals Required for withdrawals
Technical IP address, device type, browser Automatic
Activity Game history, betting records Automatic
Cookies Session cookies, analytics cookies See Section 7

3. How We Use Your Data

Boleh888 uses collected data solely for the following purposes:

  • Account management: Creating and managing your boleh888 account, verifying your identity and ensuring secure login.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX and other Malaysian payment methods, as well as handling withdrawals to your account.
  • Service provision: Gives you access to all games including Live Casino, slots, Sports Betting covering the Malaysia Super League and EPL, e-sports MPL MY, lottery and virtual sports.
  • KYC Verification: Meeting legal compliance requirements including age verification and anti-money laundering obligations.
  • Platform security: Detecting and preventing fraud, multi-account usage, bonus abuse and other security threats.
  • Customer support: Providing support and resolving any issues or enquiries you raise with our team.
  • Platform improvements: Analysing aggregated usage patterns to improve user experience, platform speed and game selection.
  • Promotional communications: Sending you bonus offers, promotions, and service updates — only if you have opted in to receive them.

Boleh888 does not use your data to make automated decisions that could significantly affect you — such as declining a withdrawal — without human review. Every decision involving your account or finances is reviewed by our trained team.

4. Sharing Data with Third Parties

Boleh888 does not sell, rent or share your personal data for third-party marketing purposes. However, there are limited circumstances where sharing data is necessary to keep the platform running smoothly and to remain legally compliant:

  • Payment service providers: Providers such as Touch 'n Go eWallet, GrabPay, DuitNow and FPX receive the transaction information necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and security standards.
  • Game providers: Gaming platforms such as Pragmatic Play and PG Soft receive only the minimum session data required to load games correctly within your account.
  • Analytics services: We use reputable third-party analytics tools to understand platform usage patterns on an aggregated, anonymised basis. Individual data is not shared in this process.
  • Regulatory authorities: We may disclose data to government authorities or law enforcement agencies when required to do so under Malaysian law or the jurisdiction of our licence.
  • Business transfers: In the event of any business restructuring or transfer, user data may be transferred as part of the assets — you will be notified in advance and may request deletion of your data before the transfer takes place.

All third parties that receive your data from boleh888 are bound by data protection agreements requiring them to handle your data to a standard no less stringent than our own Privacy Policy.

5. Data Security

Boleh888 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration or destruction:

  • 256-bit SSL Encryption: All communications between your device and boleh888's servers are encrypted using the latest TLS protocol. This means your data cannot be read even if it is intercepted in transit.
  • Database segregation: Personal data, financial data and activity data are stored in separate databases with distinct access controls to minimise the risk of simultaneous exposure.
  • Internal access controls: Only staff who require access to specific data to carry out their assigned duties are granted permission — the "need-to-know" principle is strictly enforced.
  • Two-factor authentication: boleh888's internal systems containing user data require two-factor authentication for all staff access.
  • Real-time monitoring: An intrusion detection system (IDS) monitors all system activity around the clock and immediately alerts the security team to any unusual behaviour.
  • Secure backups: Data is backed up regularly to a secure, encrypted location to ensure recovery is possible in the event of a serious technical disruption.

While we take all reasonable steps to protect your data, no security system is 100% impenetrable. You also play an important role in keeping your account secure — use a strong password, enable two-factor authentication and never share your login credentials with anyone.

6. Data Retention & Deletion

Boleh888 retains your personal data only for as long as necessary for the purposes stated in this Policy, or as required by applicable law:

  • Active account data: Retained for the duration your account remains active and for 5 years following account closure to meet legal compliance requirements.
  • Financial transaction records: Retained for 7 years from the transaction date in accordance with Malaysian standard financial record-keeping requirements.
  • Security logs: Retained for 2 years for fraud detection and security investigation purposes.
  • Marketing data: Retained until you withdraw consent to receive marketing communications — deletion occurs within 30 days of the withdrawal date.
  • KYC Records: Retained for the duration required by the regulatory requirements of our operating licence.

When data is no longer needed and there is no legal obligation to retain it, boleh888 will securely delete or anonymise it using methods that ensure it cannot be recovered.

7. Cookies & Tracking Technologies

The boleh888 platform uses cookies and similar tracking technologies to ensure a smooth and personalised user experience. Here are the types of cookies we use:

  • Essential Cookies (Required): These cookies are required for core platform functions such as login, session maintenance, and security. The platform will not function properly without them and they cannot be disabled.
  • Preference Cookies: Storing your preferences such as language, display limits and other personal settings so you do not have to reconfigure them each time you visit the platform.
  • Analytics Cookies: Helps us understand, on an aggregate level, how users interact with the platform — which pages are most visited, average session duration, and similar metrics. This data is used solely for platform improvements.
  • Security Cookies: Used to detect suspicious activity, unauthorised login attempts and usage patterns that may pose a security risk.

You can manage cookies through your browser settings. However, disabling essential cookies will affect core platform functions, including the ability to log in and carry out transactions. We recommend only disabling analytics cookies if you object to usage pattern tracking.

8. Your Personal Data Rights

As a boleh888 member and data subject under applicable data protection laws, you have the following rights:

Right to Access Right to Rectification Right to Erasure Right to Restriction Right to Portability Right to Object
  • Right to Access: You may request a copy of all personal data we hold about you. We will provide this in a readable format within 30 days of your request.
  • Right to Rectification: If your data is inaccurate or incomplete, you may request a correction at any time through your account settings or by contacting customer support.
  • Right to Erasure: You may request the deletion of your personal data when it is no longer needed for the purpose for which it was collected — subject to any legal obligations that may require us to retain certain data for a specified period.
  • Right to Restriction of Processing: Under certain circumstances, you may request that we pause processing your data while a query or dispute is being resolved.
  • Data Portability: You may request your data in a structured, machine-readable format for transfer to another service.
  • Right to Object: You may object to the processing of your data for direct marketing purposes at any time without having to provide a reason.

To exercise any of these rights, contact boleh888 customer support via live chat or email at support@boleh888.best stating the right you wish to exercise along with your identifying information for verification.

9. Child Protection

Boleh888 services are strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors.

If you believe we may have inadvertently collected personal data from a minor, please contact us immediately at support@boleh888.best and we will take immediate steps to verify and delete that data upon confirmation.

Parents or guardians who discover that a minor has accessed the boleh888 platform should contact us immediately. boleh888 will close the account in question, delete all associated data and refund any deposited funds, no questions asked.

10. Changes to This Privacy Policy

Boleh888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When material changes occur:

  • We will notify you via the email address registered to your account at least 14 days before any changes take effect.
  • An in-platform notification will be displayed when you log in to your account after an update has been published.
  • The "Updated" date at the top of this page will reflect the date of the most recent revision.
  • Continued use of the platform after the effective date constitutes acceptance of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. If you do not agree with any changes, you may choose to close your account before the date the changes take effect.

11. Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Privacy Email: support@boleh888.best (please state "Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24/7 within the boleh888 platform interface
  • Response Time: We aim to respond to all privacy-related enquiries within 5 business days

For data rights requests (access, correction, deletion), please include your full name, registered email address and the specific right you wish to exercise. We may need to verify your identity before processing the request to ensure the security of your data.

Why boleh888's Privacy Policy Matters to You as a Malaysian Player

For most people, a privacy policy is just a document you scroll past and click "Agree" without reading. We get that. But when it comes to an online betting platform like boleh888 — where you deposit money, share identity information, and carry out financial transactions — understanding how your data is handled is something genuinely worth knowing.

First, let's talk about the types of data that boleh888 need and why. When you register, we ask for your name and date of birth — not for data collection's sake, but because our operating licence requires us to verify that you are genuinely 18 or older. This is a safeguard that protects you, not an inconvenience. Your phone number and email are needed for account verification and so we can reach you immediately should any suspicious activity be detected on your account.

On the topic of payment methods — something that often concerns new players — boleh888 does not store your full e-wallet account number or PIN. When you register Touch 'n Go eWallet or GrabPay for deposits and withdrawals, we only retain a secure token provided by the e-wallet provider itself. This token allows transactions to be processed without us ever holding your sensitive information directly. This is standard practice in the digital payments industry, meaning that even if someone were to access our database, they would not be able to use that information to access your e-wallet.

As for your betting activity records — all gaming history, whether it involves bets placed on Malaysian Super League football, Live Casino baccarat, or slots — this data is retained for several important reasons. It allows you to review your own betting history within your account. It enables us to accurately resolve any disputes relating to game outcomes. It is also used in security audits to detect betting patterns that may indicate fraud attempts or bot activity. This activity data is not shared with third parties for marketing purposes.

About cookies — boleh888 uses cookies to ensure the platform works exactly as you expect. Session cookies keep you logged in during play so you don't have to sign in again every few minutes. Preference cookies save your chosen language and display settings. Analytics cookies help us understand which pages are visited most and where users run into issues — we use this information to continuously improve the platform. You can disable analytics cookies through your browser settings without affecting the platform's core functionality.

One thing we take great pride in is our commitment boleh888 that your data will never be sold to advertisers or third-party marketing companies. This sets us apart from many other internet platforms whose business models rely on selling user data. The business model of boleh888 is straightforward — we provide a quality betting platform and generate revenue from gaming operations. There is no business reason for us to sell your data, and we do not do so.

Your data rights as a member boleh888 is something we take seriously. If you want to know what data we hold about you, send an email to support@boleh888.best and we will provide a full report within 30 days. If any data is inaccurate — for example, if the name on your account differs slightly from the one on your identity card — you can request a correction at any time. And if you decide to close your account and no longer want us to hold your data, you can request deletion, which we will process in accordance with applicable legal requirements.

Legal compliance is another aspect that distinguishes boleh888 from irresponsible platforms. There are circumstances in which we are legally required to share data with authorities — for example, in connection with a money laundering investigation. This is not our choice but a legal obligation that all legitimately operating financial platforms must comply with. Importantly, we do not share data with authorities voluntarily without a valid legal basis.

Finally, we want to emphasise that this Privacy Policy is not a static document. It will continue to evolve in line with technological developments, new legislation, and changes to how we operate the platform boleh888. When material changes are made, we will notify you clearly and give you sufficient time to decide whether you wish to continue using the platform. Your trust is the most valuable asset we have — and we will not jeopardise it by handling your data in a way that is opaque or irresponsible.

FAQ – boleh888 Privacy Policy

No. boleh888 has never and will never sell, rent or share members' personal data with any third party for marketing or advertising purposes. Your data is used solely for platform operations — processing transactions, delivering gaming services, maintaining account security and meeting legal requirements. This is a core commitment we will not compromise for any short-term financial gain.

Yes, you may request deletion of your personal data by contacting support@boleh888.best. Please note, however, that certain data must be retained for a specified period under legal requirements — for example, financial transaction records must be kept for 7 years. Data not subject to legal retention requirements will be deleted within 30 days of a verified request. Account closure is generally required before a full data deletion request can be processed.

When you close your boleh888 account, your personal data is not deleted immediately, as there are legal requirements to retain certain records. Identity data and transaction records are kept for 5–7 years in accordance with compliance requirements. However, your data will not be used for any marketing communications after account closure, and active access to the platform is disabled immediately. You may request a full data report before closing your account if you wish to know what information we hold.

Yes. boleh888 does not store your full e-wallet account number, PIN or e-wallet password in any form. When you register a payment method, we store only a secure token issued by the respective e-wallet provider (Touch 'n Go, GrabPay, Boost, ShopeePay and others). This token can only be used for authorised transactions and cannot be used to access your e-wallet account directly. All connections to payment systems use 256-bit SSL encryption.
Your Privacy, Our Priority

The boleh888 Privacy Policy is designed to give you full clarity and control over your personal data. If you have any questions or privacy concerns not addressed on this page, our support team is available 24 hours a day, 7 days a week.

Read Also Terms & Conditions and Responsible Gaming Guide us for a full overview of boleh888's commitment to Malaysian members.

Play with Peace of Mind at boleh888 – Your Data is Protected

With bank-grade data protection and a full commitment to privacy, you can focus entirely on your gaming experience. Register a free account now and join 500,000+ Malaysian players who trust boleh888.

For users aged 18 and above only. Please gamble responsibly.

Bahasa Melayu