🔒 Data Protection

Privacy Policy
for Bonas88 Platform Users

Bonas88 is committed to protecting the privacy and personal data of every member on our platform. This Privacy Policy sets out precisely what data we collect, why we collect it, how it is used and protected, and the rights available to you as a data subject.

Last Updated: 1 January 2026
1

Introduction

This Privacy Policy ("Policy") is issued by Bonas88 ("we," "us," "our," "the Platform," "bonas88"), the operator of the online gaming and sports betting platform accessible at bonas88.cam and all associated sub-domains, mobile applications, and related digital services.

Bonas88 is committed to the responsible handling of personal data in accordance with applicable international data protection standards. This Policy explains the nature of personal data we collect from users ("you," "Member," "Data Subject"), the purposes for which that data is processed, the legal bases upon which processing is conducted, and the rights you hold as an individual with respect to your personal data.

This Policy applies to all current and prospective members of the bonas88 platform, including individuals who register an account, make deposits, place bets, participate in promotional activities, or interact with our customer support channels. It applies equally to data collected through our website, mobile interfaces, and any written or electronic correspondence you engage in with our team.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By accessing or using the bonas88 platform, you acknowledge that you have read this Policy and consent to the data practices described herein to the extent required by applicable law.

Our Commitment: Bonas88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is used solely to deliver, improve, and secure our services and to meet our legal and regulatory obligations.

2

Definitions

For the purposes of this Policy, the following terms shall carry the meanings set out below:

Term Meaning
Personal Data Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, IP address, financial data, and behavioural data associated with a specific individual.
Data Controller Bonas88, being the entity that determines the purposes and means of processing personal data collected through the platform.
Data Processor Any third party engaged by bonas88 to process personal data on behalf of bonas88 under a binding data processing agreement.
Processing Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, alteration, or destruction.
Consent A freely given, specific, informed, and unambiguous indication by a data subject of their agreement to the processing of their personal data for a stated purpose.
KYC / Verification Data Identity and address documents submitted by a member as part of the Know Your Customer process, including MyKad, driver's licence, passport, and utility bills.
Sensitive Personal Data A subset of personal data warranting enhanced protection, including health information, financial account details, biometric data, and government-issued identification numbers.
3

Personal Data We Collect

Bonas88 collects personal data through several channels — directly from you when you register or interact with the platform, automatically through your use of the platform, and from authorised third-party service providers where permitted. The categories of data we collect are set out below.

3.1 Registration & Identity Data
Data Category Examples
Identity Information Full legal name, date of birth, nationality, gender
Contact Details Email address, mobile phone number, residential address
Verification Documents MyKad (NRIC), driver's licence, passport, utility bills (for KYC)
Account Credentials Username (password stored in hashed, non-reversible form)
Financial Data Bank account details, e-wallet identifiers (Boost, Touch 'n Go eWallet, DuitNow, FPX), transaction history, deposit and withdrawal records
3.2 Technical & Usage Data

When you access the bonas88 platform, our systems automatically record certain technical information, including:

  • IP address and approximate geographic location (country / city level)
  • Device type, operating system, browser type and version
  • Pages visited, session duration, clickstream data, and navigation patterns
  • Game session data including titles played, bet amounts, and session outcomes
  • Login timestamps and authentication events
3.3 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of that correspondence, including the content of your messages and the resolution provided. This is necessary for quality assurance, dispute resolution, and compliance purposes.

3.4 Responsible Gambling Data

If you utilise our responsible gambling tools — such as deposit limits, cooling-off periods, or self-exclusion — we record and process this information to give effect to your instructions and to monitor compliance with applicable gaming safeguards.

5

Purposes of Data Processing

Bonas88 processes personal data for the following specific and documented purposes:

  • Account Registration & Management: Creating, maintaining, and administering your bonas88 account, including processing your registration details and keeping your profile up to date.
  • Identity Verification (KYC): Verifying your identity and age in compliance with international licensing requirements and anti-money laundering obligations. This process is required before withdrawals above specified thresholds are processed.
  • Payment Processing: Facilitating deposits via Malaysian payment channels (Boost, Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency wallets) and processing withdrawal requests to your designated payment method.
  • Service Delivery: Providing access to our sportsbook, live casino, slots, and other gaming products, including maintaining game session data and transaction histories.
  • Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent, abusive, or unlawful activity on the platform, including the operation of multiple accounts, bonus abuse, and money laundering.
  • Customer Support: Responding to your queries, processing complaints, and resolving disputes through our 24/7 live support and email channels.
  • Responsible Gambling Compliance: Recording and giving effect to responsible gambling instructions including deposit limits, session restrictions, cooling-off periods, and self-exclusion orders.
  • Platform Improvement: Analysing technical and usage data to identify service issues, improve platform performance, optimise game recommendations, and enhance the overall user experience.
  • Legal Compliance & Reporting: Maintaining records required by our licensing authority and fulfilling obligations under applicable law, including reporting requirements related to financial crime.
  • Marketing Communications: Sending promotional communications about relevant offers, tournaments, and platform updates — subject to your marketing preferences and applicable consent requirements.

You may unsubscribe from marketing communications at any time by adjusting your notification preferences within your account settings or by contacting our support team. Opting out of marketing does not affect the processing of data necessary for your account and service obligations.

6

Data Sharing & Disclosure

Bonas88 does not sell or rent your personal data to any third party for commercial purposes. We may share your data only in the following limited and documented circumstances:

Service Providers & Data Processors

We engage authorised third-party service providers to assist in operating the platform — including payment processors, identity verification providers, cloud infrastructure suppliers, and customer support technology vendors. All such providers are bound by data processing agreements that restrict their use of your data to the purposes specified by bonas88 and require appropriate security standards.

Regulatory & Legal Authorities

Bonas88 may be required to disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts where required by applicable law, a court order, or our licensing conditions. We will notify you of any such disclosure where legally permitted to do so.

Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving bonas88, personal data held by us may be transferred to the relevant acquiring or succeeding entity as part of that transaction, subject to the same data protection obligations as set out in this Policy.

Fraud Prevention Networks

Bonas88 may share data with recognised fraud prevention, identity verification, and anti-money laundering networks where it is necessary to protect the platform, its members, and the integrity of the financial system from unlawful activity.

No Sale of Data: Under no circumstances does bonas88 share, sell, or disclose your personal data to third-party advertisers, data brokers, or marketing networks for their independent commercial use.

7

Cookies & Tracking Technologies

The bonas88 platform uses cookies and similar tracking technologies to deliver, optimise, and secure our services. A cookie is a small text file stored on your device by your web browser when you visit our platform. We use the following categories of cookies:

Cookie Type Purpose
Strictly Necessary Essential for the platform to function. These cookies maintain your login session, enable secure payments, and keep your account settings intact. They cannot be disabled without breaking core platform functionality.
Performance & Analytics Collect anonymised data about how users interact with the platform — pages visited, session duration, error events — to help us identify areas for improvement and monitor platform health.
Functional Remember your language preferences, display settings, and other personalisation choices to provide a consistent and tailored experience on return visits.
Security Support fraud detection, bot prevention, and authentication security measures to protect your account and the integrity of the platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. Strictly necessary cookies cannot be disabled through your browser settings without impairing your ability to use the platform. Where we require your consent for non-essential cookies, we will present a clear consent notice at your first visit.

8

Data Retention

Bonas88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or our licensing obligations. The following general retention periods apply:

  • Active Account Data: Retained for the duration of your account relationship with bonas88 and for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
  • KYC & Verification Documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, or longer if required by applicable regulatory obligations.
  • Transaction Records: Financial transaction data is retained for a minimum of five (5) years to support regulatory reporting, dispute resolution, and audit requirements.
  • Customer Support Records: Retained for three (3) years following the closure of the relevant support interaction, unless the matter relates to an ongoing dispute or legal proceedings.
  • Technical & Usage Data: Aggregated and anonymised usage data may be retained indefinitely for analytical purposes. Individually identifiable technical data is deleted or anonymised within twelve (12) months of collection.

Where data is no longer required for its original processing purpose and no legal retention obligation applies, bonas88 will securely delete or anonymise that data in a manner that prevents any reasonable possibility of re-identification.

9

Data Security

Bonas88 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

Encryption in Transit and at Rest

All data transmitted between your device and the bonas88 platform is protected by 256-bit TLS/SSL encryption. Sensitive personal data stored on our servers — including payment credentials and identity documents — is encrypted at rest using industry-standard cryptographic standards.

Access Controls

Access to personal data within bonas88 is granted strictly on a need-to-know basis. All staff who access personal data are bound by confidentiality obligations and receive regular data protection training. Privileged access to production systems is subject to multi-factor authentication and audit logging.

Password Security

Account passwords are stored in hashed, salted, and non-reversible form. We do not have access to your plaintext password. We strongly recommend enabling two-factor authentication (2FA) on your bonas88 account for enhanced protection.

Incident Response

Bonas88 maintains a documented data breach response plan. In the event of a security incident that poses a material risk to your rights and freedoms, we will notify affected members and, where required, the relevant supervisory authority within the timeframes prescribed by applicable law.

While we take all reasonable steps to protect your data, no security system is completely infallible. You can help protect your own account by using a strong, unique password, enabling 2FA, and never sharing your credentials with third parties.

10

Your Data Protection Rights

As a data subject, you hold a range of rights in respect of the personal data bonas88 holds about you. These rights are outlined below. To exercise any of these rights, please contact our support team via live chat or by email at the address provided in Section 15. We will respond to all valid rights requests within 30 calendar days.

Right of Access

Request a copy of the personal data we hold about you and information about how it is processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data held in your account or records.

Right to Erasure

Request deletion of your personal data where processing is no longer necessary or lawful, subject to applicable retention obligations.

Right to Restrict Processing

Request that we limit the processing of your data in specified circumstances, such as while accuracy is contested.

Right to Data Portability

Where processing is based on consent or contract, request a machine-readable copy of the data you have provided to us.

Right to Object

Object to processing based on legitimate interests, or to the use of your data for direct marketing purposes at any time.

Rights re: Automated Decisions

Request human review of any solely automated decision that significantly affects you, and obtain an explanation of the logic involved.

Right to Withdraw Consent

Withdraw any previously given consent at any time without affecting the lawfulness of prior processing.

11

Protection of Minors

The bonas88 platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain the personal data of individuals under the age of 21. Registration by, or on behalf of, any person under 21 years of age is strictly prohibited.

As part of our KYC verification process, all members are required to provide valid proof of age before their accounts are fully activated and before any withdrawal is processed. Any account found, at any point, to belong to an individual under the age of 21 will be immediately closed, all associated data will be securely deleted in compliance with applicable law, and any deposited funds will be returned to the source payment method.

If you are a parent or guardian and believe your child under 21 has registered on the bonas88 platform or accessed our services, please contact our support team immediately so that we can take appropriate action without delay.

Strict 21+ Policy: Bonas88 enforces a minimum age of 21 for all registered members. This is a non-negotiable condition of platform access. Age verification is conducted during KYC, and we use industry-standard document verification tools to enforce this requirement.

12

International Data Transfers

Bonas88 operates under international online gaming licensing and may store or process personal data on servers located outside of Malaysia. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect that data to a standard equivalent to the protections afforded within the jurisdiction of data collection.

Such safeguards may include the use of standard contractual clauses, data processing agreements with equivalent security requirements, or transfers to jurisdictions that provide an adequate level of data protection. You may request information about the specific safeguards applicable to any international transfer of your data by contacting our support team.

13

Third-Party Services & Links

The bonas88 platform may integrate with or reference third-party services — including payment processors such as the operators of Boost, Touch 'n Go eWallet, GrabPay, DuitNow, and FPX — to facilitate transactions and deliver services. Each such service operates under its own privacy policy and data handling practices, which are independent of bonas88.

When you interact with a third-party payment processor to fund your bonas88 account or receive a withdrawal, that provider collects and processes your payment credentials under their own privacy terms. Bonas88 does not receive or store your full banking credentials or card numbers — only transaction confirmation references and account identifiers necessary to reconcile payments.

Bonas88 takes care to engage only reputable and security-compliant third-party partners. However, we cannot accept responsibility for the data practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the bonas88 platform.

14

Amendments to This Policy

Bonas88 reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, our data processing practices, or the services we provide. Material changes to this Policy will be communicated to registered members via a notice posted prominently on the platform and, where appropriate, by direct email notification to the address registered on your account.

The effective date of the current version is displayed at the top of this Policy. We recommend that you review this Policy periodically to remain informed of how we handle your personal data. Your continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If any amendment materially reduces your rights under this Policy and you do not accept the amended terms, you have the right to close your account and request deletion of your personal data to the extent permitted by applicable retention obligations. To do so, please contact our support team.

15

Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have concerns about how bonas88 handles your personal data, please contact us through the following channels:

Live Chat Support

Available 24 hours a day, 7 days a week directly on the platform. Live chat is the fastest channel for all enquiries, including data access requests, marketing opt-outs, and account data queries. Average first response is under 90 seconds.

Email — Data Protection Enquiries

For formal data subject access requests, complaints, or written data protection enquiries, contact us by email. Our email address is displayed as plain text only — it is not a clickable link:

[email protected]

We aim to acknowledge all data protection enquiries within 5 business days and to provide a substantive response within 30 calendar days of receipt of a valid, identifiable request.

Complaints

If you are dissatisfied with the manner in which bonas88 has handled your personal data, you have the right to raise a complaint with the competent supervisory authority in the jurisdiction of our licensing. We would, however, encourage you to contact us directly in the first instance so that we have the opportunity to address your concern before a formal regulatory complaint is filed.

How Bonas88 Protects Your Privacy

Privacy is not a checkbox for us — it is an operational standard maintained across every team, system, and process that touches your personal data.

Zero Data Sales

Bonas88 does not sell, rent, or share your personal data with third-party advertisers or data brokers under any circumstances. Your data exists to serve you — not to generate revenue for external parties.

256-Bit Encryption

All data in transit and sensitive data at rest is protected by 256-bit SSL/TLS encryption — the same standard used by global financial institutions. Your personal details, documents, and payment information are secured at every step.

Transparent KYC Process

We collect identity verification documents only for the specific purposes of age verification, anti-money laundering compliance, and fraud prevention. KYC data is handled by trained staff under strict access controls and is never used for commercial profiling.

You Control Your Data

You hold the right to access, correct, delete, restrict, and port your personal data at any time. Our support team processes data subject rights requests within 30 days and without unnecessary barriers or charges.

Proportionate Retention

We retain personal data only for as long as necessary for the documented purpose or as required by our regulatory obligations. Data that is no longer needed is securely deleted or anonymised rather than accumulated indefinitely.

Incident Transparency

In the event of a data security incident that poses a material risk to your rights, bonas88 will notify affected members promptly and report to the relevant supervisory authority within required timeframes. We do not conceal security issues.

Read Our Related Policies

This Privacy Policy operates alongside our Terms & Conditions and Responsible Gambling Policy to provide the complete framework governing your use of bonas88. We encourage every member to read all three documents. For players aged 21 and above only.

Terms & Conditions Responsible Gambling Visit Homepage

For players aged 21 and above only. Please gamble responsibly. Bonas88 operates under international online gaming licensing.