bolaking Privacy Policy

1. Introduction and Scope

bolaking ("bolaking", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how bolaking collects, uses, stores, shares, and otherwise processes personal data in connection with your use of the bolaking website accessible at bolaking.win and all associated services, mobile-optimised interfaces, and features (collectively, the "Platform").

This Privacy Policy applies to all users of the bolaking Platform, including registered players, visitors browsing without an account, and any individual who communicates with bolaking via live chat, email, or any other channel. By accessing or using the bolaking Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of your personal data as described herein.

This Privacy Policy is to be read in conjunction with the bolaking Terms & Conditions. Where the Terms & Conditions and this Privacy Policy overlap, the more specific provision shall apply.

2. Data Controller

For the purposes of applicable data protection legislation, bolaking is the data controller in respect of the personal data it processes about you through the Platform. Questions, requests, or concerns relating to how bolaking handles your personal data should be directed to the bolaking Data Protection contact as specified in Clause 14 of this Privacy Policy.

3. Personal Data We Collect

bolaking may collect and process the following categories of personal data about you:

• Identity Data: Full legal name, date of birth, gender, and copies of government-issued identification documents submitted during KYC verification.
• Contact Data: Email address, residential address, and any other contact details you provide when registering or communicating with bolaking.
• Account Data: Username, account number, account preferences, login history, session timestamps, and communication records.
• Financial Data: Payment method details (including Touch n Go eWallet account references, Boost identifiers, Maybank, CIMB, and Public Bank account details), transaction history, deposit amounts, withdrawal requests, and balance records. bolaking does not store full card numbers.
• Transaction and Gaming Data: Betting history, game participation records, wagering amounts, bonus usage, and win/loss records.
• Technical Data: IP address, browser type and version, operating system, device identifiers, and session data collected automatically when you access the Platform.
• Usage Data: Information about how you navigate and interact with the bolaking Platform, including pages visited, features used, and time spent on each section.
• Responsible Gaming Data: Self-exclusion elections, deposit limits set by you, cooling-off requests, and session limit preferences.
• Communications Data: The content of live chat conversations, emails, and any other communications you send to or receive from bolaking.

4. How We Collect Your Data

bolaking collects personal data through the following methods:

• Direct interactions: Data you provide when registering a bolaking Account, completing KYC, making deposits or withdrawals, participating in promotions, or contacting support.
• Automated technologies: Technical and usage data collected automatically via cookies, server logs, and similar tracking mechanisms when you access the Platform. Please refer to Clause 9 for further information on cookies.
• Third parties: Data received from payment processors (such as eWallet providers and banking partners), identity verification service providers, fraud prevention agencies, and other third parties engaged by bolaking to support Platform operations.

5. Purposes and Legal Basis for Processing

bolaking processes your personal data for the following purposes and on the following legal bases:

• Account registration and management — necessary for the performance of the contract between you and bolaking.
• Identity verification (KYC) — necessary to comply with bolaking's legal obligations under applicable anti-money laundering and gaming regulatory requirements.
• Processing deposits and withdrawals — necessary for the performance of the contract and for compliance with financial reporting obligations.
• Customer support — necessary for the performance of the contract and based on bolaking's legitimate interest in providing effective service.
• Fraud prevention and security monitoring — based on bolaking's legitimate interest in protecting the Platform and its users from criminal activity.
• Responsible gaming compliance — necessary to comply with bolaking's legal and regulatory obligations, including the enforcement of the 21+ age restriction and self-exclusion arrangements.
• Marketing communications — based on your consent, which you may withdraw at any time by updating your communication preferences in your bolaking Account settings or by contacting support.
• Platform analytics and improvement — based on bolaking's legitimate interest in understanding how the Platform is used and improving its features and services.

6. Disclosure of Personal Data

bolaking does not sell your personal data to third parties. bolaking may share your personal data with the following categories of recipient where necessary and proportionate:

• Payment processors and banking partners: Including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and bank transfer service providers, solely to facilitate your financial transactions.
• Identity verification providers: Third-party KYC and document verification services engaged to fulfil bolaking's regulatory compliance obligations.
• Game and software providers: Certain game-play data may be shared with bolaking's game software licensors for technical and audit purposes.
• Regulatory and law enforcement authorities: Where bolaking is required by law, court order, or regulatory direction to disclose personal data.
• Fraud prevention and security agencies: Where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity.
• Professional advisers: Legal, accounting, and compliance advisers bound by obligations of confidentiality.

All third parties engaged by bolaking who process personal data on bolaking's behalf are contractually required to process such data only in accordance with bolaking's instructions and applicable data protection law.

7. International Data Transfers

bolaking may transfer your personal data to jurisdictions outside Malaysia in connection with the provision of its services, including to server infrastructure, game providers, and support service providers located in other countries. Where such transfers occur, bolaking ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that meet applicable international standards.

8. Data Retention

bolaking retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, accounting, and reporting obligations. As a general principle, bolaking retains account and transaction data for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later, in accordance with anti-money laundering regulatory requirements. Responsible gaming records, including self-exclusion elections, are retained for a minimum of seven (7) years.

Where personal data is no longer required, bolaking will securely delete or anonymise it in accordance with its data retention and disposal procedures.

9. Cookies and Tracking Technologies

The bolaking Platform uses cookies and similar tracking technologies to enhance your experience, analyse Platform usage, and support certain Platform functions. Cookies are small text files stored on your device by your browser. The categories of cookies bolaking uses include:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without impairing core functionality such as bolaking Login session management.
• Analytical cookies: Used to collect aggregated, anonymised data about how users navigate the Platform, enabling bolaking to improve performance and usability.
• Functional cookies: Used to remember your account preferences, such as language settings and responsible gaming tool configurations.

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the bolaking Platform.

10. Security of Your Personal Data

bolaking implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include 256-bit SSL encryption of all data in transit, access controls limiting data access to authorised personnel only, regular independent security audits, and two-factor authentication for bolaking Account access. Notwithstanding these measures, no method of electronic transmission or storage is completely secure, and bolaking cannot guarantee the absolute security of your data.

11. Your Rights as a Data Subject

Subject to applicable data protection law, you may have the following rights in relation to your personal data held by bolaking:

• Right of access: To request a copy of the personal data bolaking holds about you.
• Right of rectification: To request correction of inaccurate or incomplete personal data.
• Right of erasure: To request deletion of your personal data, subject to bolaking's legal and regulatory retention obligations.
• Right to restrict processing: To request that bolaking limits the processing of your personal data in certain circumstances.
• Right to data portability: To request a machine-readable copy of personal data you have provided to bolaking.
• Right to object: To object to processing based on bolaking's legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact bolaking using the details in Clause 14. bolaking will respond to all valid requests within thirty (30) days. bolaking may need to verify your identity before processing a request. Please note that some rights are subject to exceptions and may not apply in all circumstances.

12. Children and Minors

The bolaking Platform is strictly intended for adults aged 21 and above. bolaking does not knowingly collect personal data from individuals under the age of 21. If bolaking becomes aware that personal data has been collected from a person below the age of 21, bolaking will take immediate steps to delete that data and close any associated account. If you believe that a minor may have accessed or registered on the bolaking Platform, please notify bolaking support immediately.

13. Amendments to this Privacy Policy

bolaking reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users by email and/or by prominent notice on the Platform. The date of the most recent revision is stated at the top of this Privacy Policy. Your continued use of the bolaking Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how bolaking has handled your personal data, please contact the bolaking Data Protection team via live chat (available 24/7 on the Platform) or by email at [email protected]. Please mark your email "Privacy Enquiry" for prompt routing to the appropriate team.

If you are not satisfied with bolaking's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.