We take your privacy seriously. This policy explains exactly what personal data boda88 collects, why we collect it, how we use it, and the rights you hold as a Member of our platform.
This Privacy Policy (hereinafter "Policy") describes how Boda88 (hereinafter "we", "us", "our", or "the Company") collects, processes, stores, shares, and protects the personal data of individuals (hereinafter "User", "Member", "you", or "your") who access or use the boda88 online gambling platform, including the website at https://boda88.cam and all associated mobile applications, products, and services (collectively, the "Platform").
We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Policy is designed to help you understand what information we hold about you, why we hold it, and what rights you have in relation to it.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which form part of the overall framework governing your use of the Platform.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
We collect different categories of personal data depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect and the primary source of that data:
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number (MyKad, Passport, Driver's License) | Provided by you during registration or KYC |
| Contact Data | Email address, mobile phone number, postal address | Provided by you during registration |
| Financial Data | Bank account name and number, e-wallet identifier, cryptocurrency wallet address, transaction history | Provided by you when making deposits or withdrawals |
| Account Data | Username, password (hashed), account preferences, betting history, bonus usage, session history | Generated by your use of the Platform |
| Technical Data | IP address, device type, browser type and version, operating system, time zone | Collected automatically via cookies and server logs |
| KYC Documentation | Copies of identity documents, selfie photographs, proof of address documents | Provided by you during KYC verification |
| Communications Data | Records of live chat conversations, email correspondence, support ticket content | Generated during customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred language, preferred contact method | Provided by you or inferred from Platform behaviour |
We do not intentionally collect the following categories of special category or sensitive personal data: racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (other than selfie photographs used solely for identity verification), or genetic data. We also do not collect data relating to criminal convictions except where required by applicable anti-money laundering or sanctions screening obligations.
We collect personal data through the following methods:
We process your personal data for the following purposes:
We process your personal data on one or more of the following legal bases:
We do not share your personal data with third parties except in the following circumstances:
We engage carefully selected third-party service providers who process personal data on our behalf under written data processing agreements, strictly limited to the purposes for which the data was shared. These include:
We may disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required or compelled to do so by applicable law, court order, or regulatory directive.
In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your personal data may be transferred to the acquiring entity, subject to the acquirer assuming the same data protection obligations described in this Policy.
We will not share your personal data with any other third party for marketing or commercial purposes without your explicit prior consent.
The Platform uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to enhance your experience, ensure Platform functionality, and gather analytical data. The following categories of cookies are used on the boda88 Platform:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Enable core Platform functionality including login sessions, Account access, and transaction processing. Cannot be disabled without impairing Platform function. | Session / up to 24 hours |
| Functional | Remember your preferences such as preferred language (English/BM/中文), currency display (MYR), and notification settings. | Up to 12 months |
| Analytics | Collect aggregated usage data to understand how Members interact with the Platform, which pages are visited most frequently, and where technical errors occur. | Up to 24 months |
| Security | Detect and prevent fraudulent logins, bot activity, and suspicious session behaviour. | Session / up to 30 days |
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain Platform features. We do not use cookies for the purpose of serving third-party advertising.
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to a specific individual.
Boda88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
While we take all reasonable steps to protect your personal data, no transmission of data over the internet or electronic storage system is entirely immune from risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay as required by applicable law.
Some of our third-party service providers — including cloud infrastructure providers, identity verification services, and fraud detection partners — may be located in countries outside Malaysia. Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.
Such safeguards may include standard contractual clauses, binding corporate rules, or equivalent data protection agreements. By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia.
Subject to applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our Data Protection team at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We will respond within 30 days of receipt.
Request a copy of the personal data we hold about you and information on how it is being processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we restrict the processing of your personal data in certain circumstances, such as when the accuracy of the data is contested.
Receive your personal data in a structured, commonly used, machine-readable format and have it transferred to another controller, where technically feasible.
Object to the processing of your personal data based on legitimate interests, or to the use of your data for direct marketing purposes.
The Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from an individual below the minimum age threshold, we will take immediate steps to delete that data and close the associated Account.
If you have reason to believe that a person under 21 has registered an Account or provided personal data to us, please notify us immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take appropriate action.
The Platform does not contain links to third-party websites for external commercial or advertising purposes. However, where the Platform integrates third-party payment systems or authentication services (such as banking portals for FPX transfers, or e-wallet authentication screens for Touch 'n Go eWallet, Boost, or GrabPay), please be aware that those services are governed by their own privacy policies.
Boda88 is not responsible for the privacy practices of any third-party service provider. When you are redirected to a payment gateway or authentication interface, you are interacting with that third party's system, and we encourage you to review their applicable privacy policies.
We reserve the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify you by email to your registered address and/or by posting a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is indicated at the top of the sidebar and at the bottom of this document.
Your continued use of the Platform following notification of any update to this Policy constitutes your acceptance of the revised terms. If you do not agree to the amended Policy, you should cease using the Platform and contact us to close your Account.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which we handle your personal data, please contact us through the following channels. All contact details below are provided as plain text and are not clickable links.
For matters relating to your Account's Terms & Conditions, please refer to our Terms & Conditions page. For responsible gambling concerns, deposit limits, or self-exclusion requests, please visit our Responsible Gambling page.
Six core commitments that underpin every aspect of how we handle your personal information on the boda88 platform.
All data in transit is protected by TLS 1.2+ encryption. Sensitive personal data and KYC documents at rest are encrypted using AES-256 — the same standard used by major financial institutions.
Your personal information is never sold, rented, or traded to third parties for commercial purposes. Sharing is strictly limited to what is necessary for processing your transactions and meeting compliance obligations.
You have the right to access, correct, delete, or port your personal data. Submit a request to [email protected] (plain text) and we'll respond within 30 days — no unnecessary delays.
We only collect the personal data strictly necessary to deliver our services and meet our legal obligations. We don't collect data speculatively or for purposes that aren't clearly defined in this Policy.
We hold your data only for as long as necessary — typically 5 years post-Account closure for transaction and KYC records as required by AML law. After that, data is securely deleted or anonymised.
In the unlikely event of a data breach that poses a high risk to your rights, we will notify you without undue delay as required by applicable law, and take immediate remedial action.
Our support team is available 24/7 in English, Bahasa Melayu, and Mandarin. Check our FAQ for quick answers, or return to the homepage to explore the platform.
For players aged 21 and above only. Play responsibly.